last executing test programs: 4m30.939911203s ago: executing program 3 (id=1161): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) write$FUSE_DIRENT(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x200001d0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'pim6reg0\x00', @ifru_addrs=@sco}}) 4m30.916838893s ago: executing program 3 (id=1162): mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8) write$P9_RGETLOCK(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000003000e7ef8b000000a100c7b1ee57", 0x12, 0x2404c810, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close(r4) r5 = socket$inet6(0xa, 0x1, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x7ffffffd}, 0x14) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r6 = syz_open_pts(r2, 0x0) fcntl$setstatus(r6, 0x4, 0x400) 4m30.845113265s ago: executing program 3 (id=1163): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0xc}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) fstat(r4, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x414201) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x200500, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$packet_int(r6, 0x107, 0x3, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, 0x0) writev(r5, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, 0x0) fsetxattr$security_ima(r3, 0x0, 0x0, 0x0, 0x3) syz_genetlink_get_family_id$ipvs(0x0, r4) write$P9_RREAD(r4, &(0x7f0000002780)={0x573, 0x75, 0x1, {0x568, "0e75a6cfdae4b2f02c9d6bd752272d339c37ef66a75e641a5b0ebc9731d71ec1a923e5b29028300c291da1acf8f1aae4ca35d10bf198dd2bcea9b9313440cbee942be4e17f29f6b325cff4b4031af7a347838d3b93e33f4f99c0f807bb9f6d9c944d117fa43b6509f96d968c0fe11c132540f9dd8433608f64d31759c42c75c690aa701e6327dbc53def1d3e60e214eddd255a079c08a4c1230f110fe0a07aac484bb4d559dc1a21113fb34535497b91a473d89051ff65418b223ebdb8977b283f88ffea5cf20086f408bc55f71f22692e5aaac212b05c6a1e1f8521f0b4b459d5d9f1b76e4e4b5530e32b4c8424fd371f51c60f45454d14544deb91ec185e0d5f8ca5678057c71aad8fff34791e9f32fd458e351a109011cb365ed4b4dcbe35103372e73c9fda11186a1317174059163da7eb2f5ed71e1bb9e4bc30f49bb5ffaf8aee82480cd4bfbeb0c83e7061d5128681ca0f4943908bd1095ea16297357aa46cf180e5a62f4c163a1474960686caff3a080396ea14b7ac66d62e54840ae6b9d28442a83bd45a108484575beb53135b6d8e244f5f1f5f04471e534b53f6bcfb9e3cf7b97a5021ad331332a026a57e62ae422a0324ef9d2f4748e9f9d8994f1f31a8f6f0d8f4fc242354541532d1bb078b43053f136f9aeebfd041ab4644a416762b961c06e526b92c9cc0e7857accd5a5c1b830af410c95d0450454f71e44a2999efb91ed2e9519daa93d1cdadd241b3f7509980aeac01c037df9a2cba2ec4e78805357a999e81913968ee732f06c1fc5f31cf6a8638f0521bfc9097c6da8b40717621ab12044a039a46e17108792271813d686d6c2617e3b0144379cd8e3882d50a5f3fb34bd293de1b1c98fcbd1b294d398df4ac08b5bd2d2464cb4c72feee5ed982cc7f63dd44e13cf20ff69d51c8add76da8567a303c9b6b89827d9e83f404e0e4d4612442ff8fc216d42f63e3f88d9d0daf9c9e9e2a63bced20ec23acc732ee766682ee90ac6d457ca16ebbe8f180f2d2a506858d03b7d19818af8616577aaa72d1bd8ac890cfd3023c03322ca717ec79ec1c70936ca3c7d616231c318897a1a944ad1534c48157a4dd089c3b77b29f0faf62eb9b7579862d597031dad1b29d2fb9990dec9d9587419c435d146f83a9203b313b7089e3586429c8cc546107d616b41fe9473316e44ed06b48cf97b165ca768c575918bca9086761ee61ecc7f932e4ef170f17e6f7a63d6ced62817626bb5840dfff48711958d87c5db05247c0f38b95cd9f66eeae986a5cb05d7d9144c704be2b022917e086ad5fe195f0a0d2682ae452553cc07261a6d3a6069094f9852ded2e44e8e9a5eb9a3bd9baa3009bf770945e023f61ad1d558d8c275d477c5d17a20db50e1f529dcd5fca591145ab768feaa78dd5493d904d49d54cff49bfa064c7addf3a85f49841a7c2fc007683841eee3753c49fddda307e093725bb47d3f84e8019a94320e53e620a8f4607119c8eef353dd0bacad94a6530aa8f12169e56a347f9d991b04ba5e694b48728e5799e9dacde4a45f1c0cbd69626b07c9ad11ad4e9464b835c23c0c4b57259876a849d5fddf4f3bc8e76b649a3a2594d5189e180f0e736e78124505c31c4ea96bba144f6d26138a15f9c87df4e4a1f94072b89b4961fab637f366f34e800cee3b2ffd918f83e9c6ff9519f168253173e194fd4510c46154103ec3f250c28db9af4393869bfb212f3f63ee85756f307dc9e8093895a0b2f63c66869c88c6a8626da38cc8b8f52963b0152845aa18306e8a353dd0a1ae41930d2b00ddbcdd951e02e9401891a9d5f0cacd8b7a59bcb899d742310bd7c51c7817cfeb6641ac06a0421be66e6df3c76fecfc243fa5b0c1048d9b693047c38e5b252d378d08b88152984e84bd17bd8b9bca3fc4ee8033bdc6392d1961f210972121c17e3e8081ece5225df8e2009a"}}, 0x573) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0xaece, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 4m30.814489975s ago: executing program 3 (id=1164): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x89eb, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=""/25, 0x19) syz_usb_connect(0x3, 0x2d, &(0x7f0000002d00)={{0x12, 0x1, 0x250, 0x29, 0x9, 0x8f, 0x40, 0xb57, 0xb2eb, 0x36b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0x18, 0x4, 0x1, 0x3, 0x1, 0x2, 0x7, [], [{{0x9, 0x5, 0x9, 0x10, 0x400, 0x8, 0x7, 0x7b}}]}}]}}]}}, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002480), 0x40000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000024c0)={0x10001, 0x99, 0x1, 0x81, 0x2, "36f4f67709075ab4ef0d05000000000000001d"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000000)=""/112, 0x70, 0x2) sendfile(r0, r0, 0x0, 0xa121) 4m29.566385734s ago: executing program 3 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}}], 0x1, 0x24000094) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="26010086525c3bf6425f28dcac455473acc18d73ac0cba0e45cc2f5fa70da3232c6e0e645a3494eb5bc23b46ecdb46925b4ebe1f72a3fe9da5d665413f691f904a6e", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x6, 0x7fffffffffffffff, 0x6}}, 0x30) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x100) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, &(0x7f0000000080), 0x40000000, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0xd, &(0x7f0000000000)={0x16, 0xfffff324, 0x2}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}}, 0x14}}, 0x8800) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x8, 0x2, 0x19}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 4m29.360053807s ago: executing program 3 (id=1195): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xc2, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4335e434c6d8f42f75fc75d10d6f7da01da140ffd57cf696187efc0c35cecfeb6839374632c99b76479234ca7fc472792e6349a7e2f275a2361681d4d69881cd41da136fa1a5dba9f2451520d18d715554dd1a1a075f67f215a498e39ed80"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x88, r2, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x60, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1000, @mcast1, 0xb}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)}) 4m14.200478223s ago: executing program 32 (id=1195): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xc2, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4335e434c6d8f42f75fc75d10d6f7da01da140ffd57cf696187efc0c35cecfeb6839374632c99b76479234ca7fc472792e6349a7e2f275a2361681d4d69881cd41da136fa1a5dba9f2451520d18d715554dd1a1a075f67f215a498e39ed80"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x88, r2, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x60, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1000, @mcast1, 0xb}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)}) 1m36.0249597s ago: executing program 0 (id=2812): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1m36.02374914s ago: executing program 0 (id=2813): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000340)={'\x00', 0xd479, 0x7, 0x1, 0x0, 0x5, 0x4000, 0x5000, '\x00', 0x2}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000380)={0x0, 0x0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sigaltstack(&(0x7f0000000100)={&(0x7f00000001c0)=""/185, 0x0, 0xb9}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) 1m36.023030159s ago: executing program 0 (id=2814): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='\x00_q\xc4\x12O\xe1E$Y]\x18F\"@TLH\xeb\'b%\xebc\x8c\xd77]\xf7\x1cY&\xa8\rD\x7fn!0w\xa5T\xf57\x99\xf5zY]N\xd3\b\xfcT$\xecb\x801\xbc\xc3z\xc3\x9cB\xcf\rj\xa1r\xfc\x9f}\x04\r\x00d\x96\x05~S\xc9\xd8E\xc8\x87\xb1\x83\x88\x02x\xce\xea\xc9\xfa\x05\xb6~\x0e\xe3(\xe3\xc1.\xcdP\xb2D\x98\xe3\x15\x15\xc3\x85H\xc1G\xcc\xb2r\x06\x80\x826>w&w\x89\xd3p\xda\x1b\x0f\x96\x16\xb7W\x06\x1b\x01\x00\x97\xd4\xb4e\xf70.\x93V\xa3O\x059\xc7\ri\x00\x00\x00\x00\x00\x00\x00\xc6\xd4\xf0H\x80J27dq\xd9yM\xb0\x06/\x17\x96\xe7\x1e\xa65.[\xf4R\x8ei\xaaI\xd2!\x82;RY\xf7U\x05zb\xc0W\x109z6H\xd0\x8f\xbc\xec!\x8c\xebo\xc8$x\xd0\xf5\x04\xb4\x03\x9e\x1c\xbcZ\xa8\xdef^/f\xde\xb0\xaejV\xfb\f@T\x8b\xe3\xe2\xebz\xdf^A\xff#1\x00\x00\x00\x00\x00\x00\x00*\x90\xfa\xd1\v\xa4\xc8E\n\x83\x9b$\x86E\xd1\xf8d\xcf{~\xd1|:\xc37*o=\xecKJf\x9c\xd9\xcc\xc5&\x9b&t\xfb\xa9\x0f\x11Ba\xb7\x018\xb0\xabN\x8f;\xbc\xe3\xbd\x9a\x98\x1c\x8f\xffy\xf0\v\xd8_\x00\xcf)\x00\x024|L\xf2\xb7\xbb\xaa\x11\xae\x8f\x85=\xb0\xd3i\xbdV\xd9\n\xcbM\xb8\xaf\xbb\x7f\xcc\x9d<\xfa\x17\xb4\x11\xcf\x89\xbeq\x16\xfc\xd9\xd24i\x87\x80\x89\xc8C\xb8\xee\x1dc\xe9\x05\x01\x96W\xe0\x85ny\x85H\x95\xfc\xce}\xfc\xb00\xd6\r\xc1\x9d\xc9\x90mp|\xe0\x81\xc9\xee\x00\x90{\x879wo\xd5\x1apr\xf3\xaer\x9a\xb3\xf6,\xe5\a\xcaXs\x13\x97y\x99=\xd7#@\xc1,\x1b\xd4\x0e\xa3\xf0\\\x8c;\x82G\x11M\xafW\xa9\xa9\xd8,\xcd\x13\xd6\x05I\xa5\xab\x8c*\xcbz\xb9\x9a%12\xdf\xd1\xaf\xe9\xa9P\x8f\x97\xe6D\xe3\xa80~~J\xaeQJ\\\x86W<\xf5(%)\xfa\x97PY\xf5\xb70/wZ\x18\x9d\x10\xec\xfb\xc0\x1b\xba\xdb\xc7W{EU|\xbb\xf7cU\xa8\xacx\x8bS\xf1gg\xc0\xc2\x81\xd9\t\x9cN\xfb\xe8%\x96\xa9\x00\x00\x00\x00\x00\x00') (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 1m35.99849852s ago: executing program 0 (id=2815): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)=@random={'user.', '\x00'}, &(0x7f00000001c0)='overlay\x00', 0x8, 0x1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff00", 0x5}]) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x110, 0x110, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast1, 0x8, 0x1}}}, {{@arp={@multicast2, @empty, 0xffffffff, 0xffffff00, 0x3, 0xe, {@empty, {[0x0, 0xcf86c9463727fde3, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0x0, 0x80]}}, 0x5, 0xfffe, 0x7, 0xfffa, 0x8, 0xa, 'veth1_macvtap\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x260}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x400, 'syz0\x00', {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) 1m35.921883481s ago: executing program 0 (id=2816): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x2) 1m35.864956532s ago: executing program 0 (id=2817): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000012c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fcntl$setlease(r0, 0x400, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f00000000c0), 0x1000000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x168030, &(0x7f0000000100)=ANY=[@ANYBLOB="646566636f6e746578747667b3d0aef665ba80e06ccd78083d139d7011e9666b3dbdb6070800f654627174e3936c457fb6fad56d5f7656cf4bbf63308ae736db255f0074189584ed24e8140408960e7d086dd4ebd304d6f4b14a8f2b048b880717d834ad5996a4ef8cfbb7330438864a96934a40f9503d01d5a7c62235bf6ebd3b", @ANYRESOCT=0x0]) timer_create(0x6, &(0x7f00000011c0)={0x0, 0x10c, 0x2, @thr={&(0x7f00000017c0)="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", &(0x7f0000001380)="ce718c1656810748e55171a5cf62dfced9858dc60724359e37e9edd6240b346ace561142fa49ac91f4dd527c5abdf830de8b016c3ad1fe9d6ecda6a4cefd0eb61c8218f730299a81cbe6d805aa6862c6d6072fb538ac0e1e608c274a51bbd6c55d69be51a79211aa5d0afb39ac8cae4accfbb983517156d2f2abf3e227a0b74edfa64d9f7e6f3dd761bbae2fbbac7802ed55f5ebaab8210e190390015266bde45f2ec3dc9b7d30de326a2c03a4d2000145950409a441c029177244d479c091d3eef24bdaa0fa60921be073b5e0"}}, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000001300)) tee(r1, r3, 0xf3a, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x18c6) pipe(&(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0), 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x107) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="150d000065ffff0010000008003950323030302ef5"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x803}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) newfstatat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x0, 0x800) socket$unix(0x1, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200c0840}, 0x64) 1m20.804614816s ago: executing program 33 (id=2817): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000012c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fcntl$setlease(r0, 0x400, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f00000000c0), 0x1000000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x168030, &(0x7f0000000100)=ANY=[@ANYBLOB="646566636f6e746578747667b3d0aef665ba80e06ccd78083d139d7011e9666b3dbdb6070800f654627174e3936c457fb6fad56d5f7656cf4bbf63308ae736db255f0074189584ed24e8140408960e7d086dd4ebd304d6f4b14a8f2b048b880717d834ad5996a4ef8cfbb7330438864a96934a40f9503d01d5a7c62235bf6ebd3b", @ANYRESOCT=0x0]) timer_create(0x6, &(0x7f00000011c0)={0x0, 0x10c, 0x2, @thr={&(0x7f00000017c0)="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", &(0x7f0000001380)="ce718c1656810748e55171a5cf62dfced9858dc60724359e37e9edd6240b346ace561142fa49ac91f4dd527c5abdf830de8b016c3ad1fe9d6ecda6a4cefd0eb61c8218f730299a81cbe6d805aa6862c6d6072fb538ac0e1e608c274a51bbd6c55d69be51a79211aa5d0afb39ac8cae4accfbb983517156d2f2abf3e227a0b74edfa64d9f7e6f3dd761bbae2fbbac7802ed55f5ebaab8210e190390015266bde45f2ec3dc9b7d30de326a2c03a4d2000145950409a441c029177244d479c091d3eef24bdaa0fa60921be073b5e0"}}, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000001300)) tee(r1, r3, 0xf3a, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x18c6) pipe(&(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0), 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x107) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="150d000065ffff0010000008003950323030302ef5"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x803}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) newfstatat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x0, 0x800) socket$unix(0x1, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200c0840}, 0x64) 5.110700064s ago: executing program 5 (id=3806): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)='++\x00', r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r1, &(0x7f0000011b80)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xd) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r2) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.045305595s ago: executing program 5 (id=3807): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0xc840) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x1, 0x96, "61a7657daf707ab8868830b634dc6c88733080878d87d91d91625c9423a51d13609c643733a4bb3801e8ee6a442c5934027a1743387b067e34962660b280f8f0611fa2fdf753fc6201e18ef0c0c259608ff35fb8a9caf101e7e167a8ab699abda7651ed0e0cb409942b9ee234a641fb423756cbec22b73054d39046b64fbe300c93411288038b9249140d4911154013c1977e3e45552"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xe1}}) 3.292973672s ago: executing program 5 (id=3828): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xb6) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/101, 0x65}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f00000035c0)=""/76, 0x4c}], 0x8}, 0xd}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'wlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) write$uinput_user_dev(r4, &(0x7f0000000940)={'syz0\x00', {0x508, 0x7, 0x87, 0x1}, 0x47, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xffffe605, 0x3, 0x0, 0x4, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x9, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0xfffffffd, 0x1, 0x1, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x9, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x4000000, 0x1ab9, 0x6, 0x2, 0x0, 0xff, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x35, 0x10001, 0x75, 0xfffffffe, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0xfffff303, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0xa, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x10002, 0x9, 0x441238c7, 0x0, 0x3, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x20, 0xc70, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0xdb, 0x40, 0x0, 0x21, 0x24000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x200000, 0x200, 0xcc0, 0x3fd, 0x6, 0x6, 0x4, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0xfffffffd, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0xfffffffe, 0x4, 0x0, 0x206574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x8, 0xffffffff, 0x80000001, 0x5, 0x0, 0x400, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x10800, 0x4005, 0x5, 0x0, 0x40000000, 0x0, 0x4, 0x6, 0x7b, 0xfffffffe, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) sync() mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) umount2(&(0x7f0000000200)='./file2\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) 3.135362684s ago: executing program 5 (id=3829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r4) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa0028000}) r7 = eventfd(0x4) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000005180)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x2}}, 0x2e) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x68, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x0, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x11}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f00000000c0), 0x10) close_range(r10, 0xffffffffffffffff, 0x0) 1.035703045s ago: executing program 2 (id=3838): r0 = socket(0x1e, 0x4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, 0x0, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000040), 0x1) setsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0) (async) mmap$binder(&(0x7f0000fec000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x4000000048) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0xfe1, 0x81, 0x9, 0x7, 0x1f, 0x5, 0x3}, 0xc) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) (async) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r8 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r8, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r7, &(0x7f0000000180)=""/52, 0x34, 0x10122, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "cf021868911e1276", "3f29d6e7dcec155db6af5503099ee30f", "17b84a70", '\t\x00\x00\x00\a\x00@\x00'}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r7) syz_genetlink_get_family_id$tipc(0x0, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 912.878327ms ago: executing program 2 (id=3839): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0xced03000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x40000000) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x40000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 776.746909ms ago: executing program 2 (id=3842): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x73}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x2, 0x2, 0x2bc1, 0x8, 0x81, 0x2, 0xffff, 0x1000, 0x4]}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x8800) (async) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, 0x2e, 0x1, 0x70bd2d, 0x25dfdbfd, {0x1a}, [@typed={0x6, 0x71, 0x0, 0x0, @str='#\x00'}, @typed={0x4, 0xfc}, @generic="917ff24783bf2276400cb0e27ef792af4f76dd007c49bdd986d3254d3327b2554e1f65ecf18ac5b6c92addbaee4d79ef2b2a97553a3e95c7", @nested={0x93, 0x73, 0x0, 0x1, [@generic="eaf6a70cfbe8d21f4dffd1ed959c19b603bfd89b61d038f99d1fca1fda5b0ee31e011d07a3febe0ae4a787b1e3c522e9217c56d8ebd3fde1c6013f737f6cc86d10a26e82b531559748eb8ccb636f76edfd14b235bbf7e4366d36f55a23dee617b1561d6d64403b0970182d49727dc2baea35f7ba6c9b45f3fef382ea4b018d3865827c85d50b8b3acad0ec", @nested={0x4, 0x31}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0xc2400) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000380), 0x10) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x88481, 0x0) (async) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) read(r4, &(0x7f0000000440)=""/15, 0xf) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r7, 0x4068aea3, &(0x7f0000000500)) (async, rerun: 32) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=0x4) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000640)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000600)=0x1d}) (async) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xd) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000740)={0x1, 0xa, 0xffff, 0xff03, 0xb1, 0x3, &(0x7f0000000680)="41f5c6b20c186476923b4e52bf7ef2dc154889e12065b7a60fccb08ba3ed7e4ff6572ace27d052df2b061e3e3485eaaa125d7753ba289c7703e34afddbd10228189dc9ac87e3ea7341e515a018f89ed12861a5258e65b551ef675b771cde8ac2dea8969fb43f3c1977b632be08838f5e59b42e159973d853d92ed42f080313d07b31948128c296bc6f6ba54b1ccee1ec27da9746a8ef3caf4c68ce36e82d388e105bd837c993c9bf91d61bcacb221f23a8"}) syz_usb_connect(0x3, 0x342, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x61, 0xcf, 0x6, 0x40, 0x2c7c, 0x123, 0x9abe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x330, 0x2, 0x2, 0xc, 0xc0, 0xfd, [{{0x9, 0x4, 0x7a, 0x0, 0x1, 0xff, 0xff, 0x40, 0x2, [], [{{0x9, 0x5, 0x14, 0x2, 0x200, 0x7, 0x7f, 0x8, [@generic={0x1f, 0x0, "4a28c2d0ab542e098b0c155083d076582549a9bb80f147c9d883b23c04"}]}}]}}, {{0x9, 0x4, 0x4d, 0x3, 0x10, 0xff, 0xff, 0xff, 0xd, [@uac_control={{0xa, 0x24, 0x1, 0x1ff, 0x4}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x3, 0x1, [0x2]}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x3, 0x1, 0x1}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "cc00"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x789, 0x6, 0x6}, [@obex={0x5, 0x24, 0x15, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x3}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0xdd, 0x24, 0x13, 0x1, "99fbf196b13db5d9bae315ba3086c09a1970d3e70dfbac703cddf7e8f2d1848e6036dac97b3b84135aefaad45da2b2c7104e1809da99dd3159f9991ed32c493dd6b37ccd093da57b07e7a07f48334b4ed182a5dccb0765dd0cc804bd320f0aa84b0e30f1695343a2583037e9cf18bc73340a4e7bfe1bb6ac6a40fb45d5de951bb1efe645ae989549468cf86c28604b0cfb44d493f26fa47a7c8b9cbefb00ec94af3f1ebc6f080a147e1fdae7e1f233deb001c23b77fb199a76f4d96f0d3eae246df899d1a55a1daf46737a063f5d239165630d7b0f6cc0114e"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7f, 0xa6, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3, 0x9}]}], [{{0x9, 0x5, 0x5, 0x1, 0x10, 0x1, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x1}]}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0x4, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xb33a}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x8, 0x86, 0x0, [@generic={0x7, 0x0, "b4fec2cfe7"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x2f92}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x3, 0x10, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7}, @generic={0x36, 0x11, "55d4b3d3db190fabd5f5eca7438b8cf1e28d02cfe47644a90d358b59fe6629b0f6c73f2d2f05d053cba35eba6bf1f6cc407c5206"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x33, 0xfe, 0x4}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x40, 0xff}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x1, 0xc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x60, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x7, 0x2, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x6, 0x8, 0xb, [@generic={0xb1, 0x7, "7f2f874e722988f70b8a5110d9b49bcafa783be6899b543714c461ac9f72c6aa462ca69f849649ae22e01ac73418cd8ebe4c9ea83b375608090e4299d50e714306696b273aff080a52f2cdaa3ef5ca83d629d6b804b63076e7e05cfa1d6fe3f6cfed9288587f5f670aed62c2fc75eb4dc9bd593d3799f7b4b48c206f747ee8693b311e6e2d2d348b022295370438f79d6511948f8a28b8e898e6ec771bccc54a525f84a3573ec3e1dbd0e63eca4525"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x9, 0xf7, 0x5}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x6, 0x0, 0x5}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x6f, 0x4, 0x7f}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x4, 0x1, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x1, 0xfa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7}]}}, {{0x9, 0x5, 0x7, 0x13, 0x200, 0x6, 0x8, 0x20}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x110, 0x2, 0xff, 0x8, 0x10, 0xbd}, 0x8a, &(0x7f0000000b40)={0x5, 0xf, 0x8a, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0xfd, 0x3, 0x1, 0xf000, 0xa5, [0x7ec0, 0x0, 0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x9a, 0xf00, 0x4, [0xcf, 0xc03f, 0xff3f00, 0xffc0, 0x3f, 0x6f]}, @ssp_cap={0x24, 0x10, 0xa, 0xd9, 0x6, 0xd259, 0x0, 0x10, [0x3f0f, 0xffc0cf, 0xffe0bf, 0xc00f, 0xcf, 0xc7]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x9, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "fe122a8bdfcc1c0b53fcf5d8f5b632da"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x5, 0xf94}]}, 0x7, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44d}}, {0x81, &(0x7f0000000c40)=@string={0x81, 0x3, "42598688afe351e9d7ab6d9e91e392b8491a2c647f216ac3ef9e91e16355f72492c479acaafa047ca210aad37dc1e6daf81a001cf1c04ae8ff0b66e7f39dd543f3de6ec429ed1ac83e593293ebb925d27bae0ba382a6a95483af5bebd556bd74ff6ed64fec82fe2fd39c48c10cebec2b1b055a358c5bb71b12a0e21e7ad2fe"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x100a}}, {0x9a, &(0x7f0000000d40)=@string={0x9a, 0x3, "a874fe72c2033e49e1619c16a10b5d7e72470872ad58b36faab2ecca208d0d0b683eab36fc2cae872fd245202870bf841d2ba77f081ea8b0cb031443ba01683fbd1b28d59d4041f1e9179269573e1637cd6286099029ef99332f655fd64d94f96904845aa982ef1c1a375281b09f5070379b42837cd3c2a965712240f236e9b5d4e64fec9654fee8579f6957f34d30ce7d30391322427e6f"}}, {0x56, &(0x7f0000000e00)=@string={0x56, 0x3, "16ea66b72ded91a74e487928bc45058973a858d8616b6b032b78f9a0fba3ade3d2f02aae53a16f139b290b92f8047b109586a33ba9a9b96324368e499eb09bd04c4b6b23195abe4e220f2c2e41e71b881d3e4e7a"}}, {0x3c, &(0x7f0000000e80)=@string={0x3c, 0x3, "b9732807bb9ce358d041ead3b6a2614108f2eba8d082e6e3e3128cf06959bce9de945c3e4dcd3c078c7d5da1448df524255844867792a20e791d"}}, {0xb2, &(0x7f0000000ec0)=@string={0xb2, 0x3, "692c6edcb78476fef59c2b60fd3bb497089b0b5003a14219eb0986667c00ffe1b4df7f91f321ac64421f09f6f5ef19203a3a78b434d24863a04d314bd19bbc9ccff7b96f525b1aaa81b3241056d45ab16ec320ab42de1359f8c7a95f1ecc59f9d596cd5e3bf61445284b42f9080f05302e957a652cef25a58f35c6dffde687b793c59307b9926ee56b219a0c56a53767909ff34792ac94294ee192c7cc6d957956f5b09441db5565e740f342cc8d3b72"}}]}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001000)) (async) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000001040)) (async, rerun: 32) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0x0) (async, rerun: 32) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000014}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001180), 0x709201, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r8, 0x40087705, &(0x7f00000011c0)={0x5}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 774.742519ms ago: executing program 2 (id=3845): timer_create(0x7, &(0x7f0000000180)={0x0, 0x2a, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x1c, 0x1}, &(0x7f00000002c0)=0x0) timer_gettime(r2, &(0x7f0000000300)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0xcc43d85f719fce58, r6, 0x0) ftruncate(r6, 0x51a9497) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r7, 0x407, 0x2000000) lsm_get_self_attr(0x67, &(0x7f0000000440)={0x0, 0x0, 0xdb, 0xbb, ""/187}, &(0x7f0000000000)=0xdb, 0xf8ae2b0ed6615057) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="0f20d835200000000f22d836f90f0866b878000f00d0c4233d06ba07000000000f01c22e460f01cbc744240003000000c744240228a80000c7442406000000000f011424b8010000000f01c1c744240000100000c74424021b640000c7442406000000000f011c24", 0x68}], 0x1, 0x21, 0x0, 0x0) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000000340)=0xfffffffc, &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011412012918000e3580009f000114000000040600ac141430e0000001808a8972bd0b72e4108296a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f00000005c0)={0xbe, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 648.570841ms ago: executing program 2 (id=3849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x44) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x2d0102, 0x0) fcntl$getflags(r3, 0x3) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x15b, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0]}) 176.107528ms ago: executing program 4 (id=3862): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x06') r1 = syz_io_uring_setup(0x498b, &(0x7f0000000040)={0x0, 0x9529, 0x10, 0x3, 0x87}, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x810, r1, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x06') (async) syz_io_uring_setup(0x498b, &(0x7f0000000040)={0x0, 0x9529, 0x10, 0x3, 0x87}, &(0x7f00000000c0), &(0x7f0000000100)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x810, r1, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) 164.949378ms ago: executing program 4 (id=3863): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x5, 0x51}, 0x100, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) r3 = memfd_secret(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xdf}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x44005) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000440)=0x1) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000480)) r9 = socket$inet6(0xa, 0x80005, 0xd5e00000) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f00000004c0)={{r9}, "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"}) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x822800}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r10, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x40000) fchmodat(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x82) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000001640)=0x7c75) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x58, r11, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x20, r11, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000001980)={{{@in=@remote, @in=@private}}, {{@in=@multicast1}}}, &(0x7f0000001a80)=0xe8) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b00), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x54, r14, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9d}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc0000000}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcc4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}]]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20008011) 149.938168ms ago: executing program 2 (id=3865): r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9fce}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x4) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x23a, 0x8000) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0xcbb9867656cd69a0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000772904202404019957c20102030109022400010000100009044300028687"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x5420, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x7000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000100)={0x6, 0x7, 0x7, 0x0, 0x8}) sendmsg$key(r4, 0x0, 0x20000850) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x541000, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r5, 0x4d75d000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r6, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6, 0x0, 0x7}, 0x80, 0x0}}], 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) 136.946328ms ago: executing program 4 (id=3866): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x20, 0x1, 0x70bd26, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffc1) (async) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f000062b000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) (rerun: 32) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r5, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r5, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x7, {0x7, 0x32, "f0662c67fb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 94.246129ms ago: executing program 1 (id=3867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x3ff, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x40000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$inet(0x2, 0x4, 0x3) chdir(&(0x7f0000000480)='./cgroup\x00') setgroups(0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x4000) write$evdev(r3, &(0x7f0000000040), 0x0) readv(r3, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000280)=""/163, 0xc0}], 0x2b) pwrite64(r1, 0x0, 0x0, 0x7) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000100)='-,/-%\\)*\x00', &(0x7f0000000180)='/dev/kvm\x00', &(0x7f00000001c0)='$-]+\x00']}, &(0x7f0000000240), 0x1000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0xfffffffffffffeff) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000126000/0x1000)=nil, 0x1000, 0x1, 0x100010, r4, 0x3000) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x6, 0x4) inotify_init1(0x585235b1ab9d1ab) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x10000000) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100007b37e7a98ba614a9c000"/24]) 92.582809ms ago: executing program 4 (id=3868): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) getpgrp(0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x23) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9050000005345204c696e7578fa8fcc9071b49bf1e8a0c49590d8c0bcc5e9f851dc5db30d13d38395f5f280dd14762d23d523008c96891214f122f6973774f53706e539695bb4b69ba06cb1c862588b6d06b768a68338c94aca7ca710a79fd2d700567b3075c1485ca3ceb88288821345592a003ba4c4e08fa2ee3ef2fc516c120e1942df22939984102589c0da73"], 0x99) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 90.492819ms ago: executing program 1 (id=3869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="89e7eb2c7cdad9b4b47380c98035", 0xe}], 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 90.145779ms ago: executing program 1 (id=3870): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="c95448ca4c90fbcc42bb22f3c433ec7bfb3e155949370d4eb545941db8d75e01b6c6c8", 0x23, 0xffffffffffffffff) 62.934969ms ago: executing program 1 (id=3871): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setuid(0xee00) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(0x0, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @empty}, &(0x7f0000000140)=0xc) sendto$packet(r2, &(0x7f00000000c0)="821dc7a4d8fd928e92c20362550f67defb5b77916da27aa1bd529dd01ec766e2d463b5c8e8ba3ecf5e1c5d4eebf4b7e94316bf4c84a24ac90535c00f361268da638e477315e065917beec0c76e0d90e610c0b8f1d7b79768e09560370ff69c86a879d661ded881d9674b466bacce6c34a95186", 0x73, 0x4000840, &(0x7f0000000180)={0x11, 0xe5, r5, 0x1, 0x80, 0x6, @multicast}, 0x14) (async) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x8) mknodat$null(r2, &(0x7f0000000080)='./file0\x00', 0x1, 0x103) (async) splice(r0, 0x0, r2, 0x0, 0xaf4, 0xd) 61.839539ms ago: executing program 5 (id=3872): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x313000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') 56.00894ms ago: executing program 4 (id=3873): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000400)=0x800006, 0x4) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x208, 0x408002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x8, 0x46, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x38, 0x0, "42f80ce6987e09"}, @sadb_lifetime={0x4, 0x2, 0x9, 0x7, 0xf, 0x5}]}, 0x40}}, 0xd01c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff881ff00001d00000000000000080009000d000000", 0x24) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) (async) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x5}, 0x1c) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81004e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r4, &(0x7f00000002c0)="3f031c000302140006001e00895a054ab82e6a9386ac4a858000a762dea6a20eb00000004a09", 0x26, 0x2004c8d5, &(0x7f0000000100)={0xc9, 0x88a8, r5, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x84}}, 0x14) (async) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0x1b, 0x2000c000, 0x0, 0x0) (async) recvfrom$inet6(r8, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="c582765d2d8915ee8d11ccf38e61a546c6c134475d15a70b648b104ec74f5a3a88cc67ebc0f04fc9bc9bfe05000000b6e3991af7", 0x34}, {&(0x7f00000000c0)="4fac8531bf31f0de8d68881290942c4b59a3c71ff635eabb35aede95897434256f8a77c6f76026f54671a68acd7392ecb3c796fd0fe93b45587ea1ade0840acbd969f2d78f7c88b15cf9da16f5477253c6b721baac2104bee25f8c5f45bf49dbf515687247e68d2b0f56f289736aa9a7373425ee82b0b5b2", 0x78}, {&(0x7f0000000300)="56da0164a88998ab532da5bf6f900d8162ca28a9fcaa44a8e09f7c86555e437fddae6d23b3fde64a3602f92a5204386564b6d3233dab8fc41849f3150b7979dcdfccd64767cdb244ae0abbf9b1c64205c45aee8fd986b9398d2236b369339270579be8d4542ea475cbbbcdd45f58731b440b0e21d913f2501b06e99fbbe2693a39cf737c95f45b34465fcb0837ab0f29e81eff559cfc01cc1d3a58e1224d406b3e556018af63ad15d80608e1d7d4fe81557e8f3747dfa1", 0xb7}], 0x3) r9 = socket$inet6(0x10, 0x9, 0xfffffffd) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r10, 0x45809000) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0xe, 0x0, &(0x7f0000000080)) 48.37567ms ago: executing program 1 (id=3874): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000011c0)={{r1}, 0x9, 0x80, 0x2}) r2 = socket(0x10, 0x2, 0x0) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00000003c0)=""/31, &(0x7f0000000400)=0x1f) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='efivarfs\x00', 0x200000, 0x0) 1.1086ms ago: executing program 5 (id=3875): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4f2, 0x1236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x8000, 0x4, 0x1, {0x22, 0x72e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd9, 0x9b}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x57, 0x6, 0x9, 0x8, 0x74}, 0x44, &(0x7f0000000200)={0x5, 0xf, 0x44, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x9, 0x6}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x6, 0x6, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "792104f8fe30180404e089f4d402fe86"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "29a7d7a94e289a30b455ab24fb1b219e"}]}, 0x6, [{0xa0, &(0x7f0000000280)=@string={0xa0, 0x3, "2da2141b0513e0ccfe0f1a50295bc25729a6a84b13f1a7207c73d80d5c139a2ee2d7bcdb3a7704557197cd48ce1bf5e4b08d4e2a1c8c474b89cb22092bde9ababd2461ce49a06ea77c16edb5cfda796e6151a6d811ba0d88f18e1be9037c3bdbf60b027a125a40877b60230dabeba06b2cc0e0f1e702081a6e4e3f785842029718eb901f366bcc7e302624206096a1275672b55d4430e2421acbbf0f8d7c"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x438}}, {0x8a, &(0x7f0000000380)=@string={0x8a, 0x3, "a930f05edb602b5cd64a5844b3bd0034c23ffbde35bf0932bebd1538e9b77aa2d4efa63887de7d760a2b872d104b27ca314ad58776027cee3df5756842607363453493c4e94c2eadabec5ce85d73aaba19502bb7bc3625cb454d413603613d2ac5a87f016f131b136581f1acd35f3809c42fa51b0eb8fab6272df7a135224cf5df04e51d169093fd"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42c}}, {0x26, &(0x7f0000000480)=@string={0x26, 0x3, "cf644f811ba273948c4d528c0e7057d14fea2280ff2625f353e157c3dac47ebdd86e97cb"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42f}}]}) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) lsm_set_self_attr(0x65, &(0x7f0000001580)=ANY=[@ANYRES16, @ANYBLOB="a0c2d6fd10ef35bc72ab4d5867289f"], 0x20, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x4068aea3, &(0x7f0000000080)={[{0x80, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) r4 = open(&(0x7f0000000580)='./file0\x00', 0x84800, 0x60) sendfile(r1, r4, &(0x7f00000005c0), 0x93e) dup3(r0, r3, 0x80000) lsm_get_self_attr(0x68, &(0x7f00000015c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000040)=0x1020, 0x1) 237.85µs ago: executing program 1 (id=3876): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) writev(r2, &(0x7f00000003c0), 0x0) setsockopt$inet_buf(r1, 0x0, 0x29, 0x0, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) fchdir(r0) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/time_for_children\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) read$FUSE(r4, &(0x7f0000002f40)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000f00)={0x2020}, 0x2020) 0s ago: executing program 4 (id=3877): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000009e44a4009b8759a280bca143fc3e060054c20e1ee73f8556999eec746182818bfe1dc0fc488ecf7fc9042eacd2819ce80481fe3e4e904499bb9e5a991e14156f99471dc7db80531d7705"]) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r6, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/67, 0x43}, {&(0x7f0000000480)=""/243, 0xf3}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40002023) kernel console output (not intermixed with test programs): .400796][ T9628] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 324.408203][ T9628] rust_binder: Write failure EINVAL in pid:103 [ 324.656365][ T6341] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 324.817011][ T6341] usb 6-1: Using ep0 maxpacket: 16 [ 324.823314][ T6341] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.834374][ T6341] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.844260][ T6341] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 324.857270][ T6341] usb 6-1: config 0 interface 0 has no altsetting 0 [ 324.863920][ T6341] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 324.873006][ T6341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.881768][ T6341] usb 6-1: config 0 descriptor?? [ 324.900439][ T6340] usbhid 3-1:0.0: can't add hid device: -71 [ 324.906535][ T6340] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 324.915531][ T6340] usb 3-1: USB disconnect, device number 84 [ 325.423128][ T12] tipc: Subscription rejected, illegal request [ 325.515190][ T9643] overlayfs: missing 'workdir' [ 325.696265][ T9649] netlink: 'syz.1.3056': attribute type 58 has an invalid length. [ 325.720376][ T36] audit: type=1400 audit(2000000082.704:39302): avc: denied { write } for pid=9653 comm="syz.1.3057" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 325.721627][ T9654] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 325.741348][ T36] audit: type=1400 audit(2000000082.704:39303): avc: denied { open } for pid=9653 comm="syz.1.3057" path="/197/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 325.741724][ T9654] rust_binder: Error while translating object. [ 325.774593][ T9654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 325.780797][ T9654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:605 [ 325.901777][ T6341] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 326.062487][ T6341] usb 5-1: Using ep0 maxpacket: 32 [ 326.068772][ T6341] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 326.076977][ T6341] usb 5-1: config 0 has no interface number 0 [ 326.084563][ T6341] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 326.093726][ T6341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.101753][ T6341] usb 5-1: Product: syz [ 326.105983][ T6341] usb 5-1: Manufacturer: syz [ 326.110604][ T6341] usb 5-1: SerialNumber: syz [ 326.116023][ T6341] usb 5-1: config 0 descriptor?? [ 326.121836][ T6341] smsc95xx v2.0.0 [ 326.277198][ T36] audit: type=1400 audit(2000000083.262:39304): avc: denied { setattr } for pid=9659 comm="syz.2.3059" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 326.524266][ T6341] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 326.535097][ T6341] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 326.544708][ T6338] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 326.696357][ T6338] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.707642][ T6338] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 326.718578][ T6338] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 326.729713][ T6338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 326.736779][ T6338] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 326.746401][ T6341] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 326.758836][ T6338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.768769][ T6341] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 326.778076][ T6338] usb 3-1: config 0 descriptor?? [ 326.783391][ T9660] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 326.790743][ T9660] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 327.202733][ T6338] hid-generic 0003:1B1C:1C0D.0040: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 327.326483][ T9667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.335260][ T9667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.454906][ T36] audit: type=1400 audit(2000000084.437:39305): avc: denied { mounton } for pid=9659 comm="syz.2.3059" path="/222/file0" dev="tmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 327.480151][ T6338] usb 6-1: USB disconnect, device number 2 [ 327.583511][ T9675] rust_binder: Write failure EINVAL in pid:112 [ 327.583660][ T9675] rust_binder: Read failure Err(EAGAIN) in pid:112 [ 327.590130][ T9675] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 327.604967][ T9675] rust_binder: Write failure EINVAL in pid:112 [ 327.950542][ T6338] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 328.111183][ T6338] usb 6-1: Using ep0 maxpacket: 8 [ 328.117396][ T6338] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 328.124357][ T9680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.126552][ T6338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.141715][ T6338] usb 6-1: config 0 descriptor?? [ 328.334906][ T9680] rust_binder: Error while translating object. [ 328.334938][ T9680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 328.341273][ T9680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:615 [ 328.673849][ T304] usb 5-1: USB disconnect, device number 77 [ 328.692932][ T9684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1011 [ 328.753878][ T6338] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 328.773191][ T6338] asix 6-1:0.0: probe with driver asix failed with error -61 [ 329.208312][ T36] audit: type=1326 audit(2000000086.189:39306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.3072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f58e929 code=0x0 [ 329.294366][ T6338] usb 3-1: USB disconnect, device number 85 [ 329.315339][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.324110][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.660996][ T9711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 329.707814][ T6338] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 329.869541][ T6338] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.880729][ T6338] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 329.891752][ T6338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.898673][ T6338] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 329.907733][ T6338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.916503][ T6338] usb 3-1: config 0 descriptor?? [ 329.921843][ T9707] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 330.333163][ T6338] logitech-djreceiver 0003:046D:C71F.0041: unknown main item tag 0x0 [ 330.341453][ T6338] logitech-djreceiver 0003:046D:C71F.0041: unknown main item tag 0x0 [ 330.350523][ T6338] logitech-djreceiver 0003:046D:C71F.0041: hidraw0: USB HID vff.fe Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 330.534601][ T6338] usb 3-1: USB disconnect, device number 86 [ 330.683785][ T6341] usb 6-1: USB disconnect, device number 3 [ 330.692242][ T6429] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 330.852623][ T6429] usb 5-1: Using ep0 maxpacket: 32 [ 330.859131][ T6429] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 330.867315][ T6429] usb 5-1: config 0 has no interface number 0 [ 330.874890][ T6429] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 330.884016][ T6429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.892025][ T6429] usb 5-1: Product: syz [ 330.896226][ T6429] usb 5-1: Manufacturer: syz [ 330.900850][ T6429] usb 5-1: SerialNumber: syz [ 330.906220][ T6429] usb 5-1: config 0 descriptor?? [ 330.911987][ T6429] smsc95xx v2.0.0 [ 331.133587][ T6341] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 331.285742][ T6341] usb 6-1: unable to get BOS descriptor or descriptor too short [ 331.294080][ T6341] usb 6-1: not running at top speed; connect to a high speed hub [ 331.302696][ T6341] usb 6-1: config 1 interface 0 altsetting 166 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.315811][ T6341] usb 6-1: config 1 interface 0 has no altsetting 0 [ 331.316020][ T6429] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 331.323989][ T6341] usb 6-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40 [ 331.333431][ T6429] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 331.342677][ T6341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.359454][ T6341] usb 6-1: Product: syz [ 331.363630][ T6341] usb 6-1: Manufacturer: syz [ 331.368270][ T6341] usb 6-1: SerialNumber: syz [ 331.553903][ T6429] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 331.564834][ T6429] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 331.580058][ T6341] usbhid 6-1:1.0: can't add hid device: -71 [ 331.586246][ T6341] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 331.595604][ T6341] usb 6-1: USB disconnect, device number 4 [ 331.711046][ T9734] netlink: 'syz.2.3084': attribute type 4 has an invalid length. [ 331.721385][ T9734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 331.721416][ T9734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:670 [ 331.743784][ T9736] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3085'. [ 331.819846][ T9740] netlink: 'syz.2.3087': attribute type 3 has an invalid length. [ 332.077298][ T6429] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 332.229034][ T6429] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 332.241142][ T6429] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.250455][ T6429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 332.258553][ T6429] usb 3-1: SerialNumber: syz [ 332.268074][ T9742] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 332.338362][ T6341] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 332.499210][ T6341] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 332.510428][ T6341] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 332.521593][ T6341] usb 6-1: config 0 interface 0 has no altsetting 0 [ 332.528330][ T6341] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 332.538387][ T6341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.547903][ T6341] usb 6-1: config 0 descriptor?? [ 332.553386][ T9745] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 332.942525][ T9757] fuseblk: Unknown parameter 'Md' [ 332.965988][ T6341] logitech-djreceiver 0003:046D:C71F.0042: unknown main item tag 0x0 [ 332.967091][ T9761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.975981][ T6341] logitech-djreceiver 0003:046D:C71F.0042: unknown main item tag 0x0 [ 332.993111][ T6341] logitech-djreceiver 0003:046D:C71F.0042: hidraw0: USB HID vff.fe Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 333.106439][ T6429] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 333.115898][ T6429] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 333.125524][ T6429] usb 3-1: USB disconnect, device number 87 [ 333.158042][ T9776] rust_binder: Error while translating object. [ 333.158086][ T9776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 333.164591][ T9776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:687 [ 333.166835][ T304] usb 6-1: USB disconnect, device number 5 [ 333.295638][ T9787] rust_binder: Error while translating object. [ 333.295674][ T9787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 333.301946][ T9787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:651 [ 333.380951][ T9790] overlayfs: statfs failed on './file0' [ 333.458397][ T9793] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 333.481827][ T36] audit: type=1400 audit(2000000090.432:39307): avc: denied { setopt } for pid=9794 comm="syz.1.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 333.496248][ T6341] usb 5-1: USB disconnect, device number 78 [ 333.513160][ T36] audit: type=1400 audit(2000000090.472:39308): avc: denied { accept } for pid=9796 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 333.609420][ T9810] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 333.609452][ T9810] rust_binder: Read failure Err(EFAULT) in pid:1029 [ 333.622620][ T9812] SELinux: policydb string length 5 does not match expected length 8 [ 333.637572][ T9812] SELinux: failed to load policy [ 333.643280][ T9812] netlink: 'syz.1.3110': attribute type 27 has an invalid length. [ 333.661125][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.668503][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.722080][ T9817] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1011 sclass=netlink_tcpdiag_socket pid=9817 comm=syz.1.3112 [ 333.845682][ T9831] rust_binder: Write failure EFAULT in pid:681 [ 333.902630][ T9840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.917898][ T9840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.984757][ T304] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 334.024861][ T6429] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 334.135254][ T304] usb 6-1: Using ep0 maxpacket: 32 [ 334.141511][ T304] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 334.149819][ T304] usb 6-1: config 0 has no interface number 0 [ 334.157344][ T304] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 334.166440][ T304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.174436][ T304] usb 6-1: Product: syz [ 334.178693][ T304] usb 6-1: Manufacturer: syz [ 334.183350][ T304] usb 6-1: SerialNumber: syz [ 334.189246][ T6429] usb 5-1: unable to get BOS descriptor or descriptor too short [ 334.197070][ T304] usb 6-1: config 0 descriptor?? [ 334.202479][ T6429] usb 5-1: not running at top speed; connect to a high speed hub [ 334.210833][ T304] smsc95xx v2.0.0 [ 334.215207][ T6429] usb 5-1: config 1 has an invalid interface number: 2 but max is 1 [ 334.223290][ T6429] usb 5-1: config 1 has an invalid interface number: 57 but max is 1 [ 334.231429][ T6429] usb 5-1: config 1 has no interface number 0 [ 334.237564][ T6429] usb 5-1: config 1 has no interface number 1 [ 334.243679][ T6429] usb 5-1: config 1 interface 2 altsetting 8 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 334.254510][ T6429] usb 5-1: config 1 interface 2 has no altsetting 0 [ 334.261168][ T6429] usb 5-1: config 1 interface 57 has no altsetting 0 [ 334.269402][ T6429] usb 5-1: New USB device found, idVendor=1514, idProduct=2008, bcdDevice=57.90 [ 334.278523][ T6429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.286565][ T6429] usb 5-1: Product: syz [ 334.290760][ T6429] usb 5-1: Manufacturer: syz [ 334.295382][ T6429] usb 5-1: SerialNumber: syz [ 334.489960][ T9847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.490984][ T36] audit: type=1400 audit(2000000091.449:39309): avc: denied { write } for pid=9846 comm="syz.1.3125" name="/" dev="configfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 334.524270][ T6429] ftdi_sio 5-1:1.2: FTDI USB Serial Device converter detected [ 334.532696][ T6429] ftdi_sio ttyUSB0: unknown device type: 0x5790 [ 334.544849][ T6429] usb 5-1: USB disconnect, device number 79 [ 334.552186][ T6429] ftdi_sio 5-1:1.2: device disconnected [ 334.560470][ T9851] bridge0: entered promiscuous mode [ 334.569479][ T9852] bridge0: left promiscuous mode [ 334.575451][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.584159][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.584204][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.600643][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.608694][ T304] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 334.619569][ T304] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 334.830257][ T304] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 334.841145][ T304] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 335.028765][ T6341] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 335.108491][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'. [ 335.179247][ T6341] usb 3-1: Using ep0 maxpacket: 16 [ 335.186239][ T6341] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 335.197171][ T6341] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 335.209942][ T6341] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.219119][ T6341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.227173][ T6341] usb 3-1: Product: syz [ 335.231401][ T6341] usb 3-1: Manufacturer: syz [ 335.236011][ T6341] usb 3-1: SerialNumber: syz [ 335.540560][ T6340] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 335.691133][ T6340] usb 5-1: Using ep0 maxpacket: 16 [ 335.697320][ T6340] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 335.705507][ T6340] usb 5-1: config 8 has an invalid descriptor of length 97, skipping remainder of the config [ 335.715768][ T6340] usb 5-1: config 8 has no interface number 0 [ 335.721927][ T6340] usb 5-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 335.734923][ T6340] usb 5-1: config 8 interface 39 has no altsetting 0 [ 335.743059][ T6340] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 335.752187][ T6340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.760193][ T6340] usb 5-1: Product: syz [ 335.764389][ T6340] usb 5-1: Manufacturer: syz [ 335.769020][ T6340] usb 5-1: SerialNumber: syz [ 335.848819][ T6341] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 335.855207][ T6341] usb 3-1: unit 4 not found! [ 335.864560][ T6341] usb 3-1: USB disconnect, device number 88 [ 335.872641][ T7893] udevd[7893]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 335.977614][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.986255][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.998418][ T6340] ipheth 5-1:8.39: Unable to find endpoints [ 336.005370][ T6340] usb 5-1: USB disconnect, device number 80 [ 336.287461][ T9894] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 336.348905][ T9900] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3141'. [ 336.553453][ T9909] syz.4.3145: attempt to access beyond end of device [ 336.553453][ T9909] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 336.567537][ T9909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1060 [ 336.604504][ T6340] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 336.605846][ T9911] kvm: pic: non byte write [ 336.765124][ T6340] usb 3-1: Using ep0 maxpacket: 16 [ 336.771654][ T6340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.779197][ T6429] usb 6-1: USB disconnect, device number 6 [ 336.783100][ T6340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.799351][ T6340] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 336.808708][ T6340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.820826][ T6340] usb 3-1: config 0 descriptor?? [ 336.827170][ T9921] input: syz1 as /devices/virtual/input/input31 [ 336.839614][ T9921] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 336.890644][ T9927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 336.890677][ T9927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:140 [ 336.900248][ T9927] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 336.909601][ T9927] rust_binder: Read failure Err(EFAULT) in pid:140 [ 336.965448][ T9935] rust_binder: Error in use_page_slow: ESRCH [ 336.975711][ T9935] rust_binder: use_range failure ESRCH [ 336.981992][ T9935] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 336.988124][ T9935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 336.996353][ T9935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:724 [ 337.004822][ T36] audit: type=1326 audit(2000000093.949:39310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.5.3154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f439c18e929 code=0x0 [ 337.106315][ T304] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 337.241457][ T6340] playstation 0003:054C:05C4.0043: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 337.263287][ T304] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 337.272481][ T304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.281294][ T304] usb 5-1: Product: syz [ 337.285510][ T304] usb 5-1: Manufacturer: syz [ 337.290157][ T304] usb 5-1: SerialNumber: syz [ 337.440982][ T6340] playstation 0003:054C:05C4.0043: Invalid reportID received, expected 18 got 97 [ 337.450212][ T6340] playstation 0003:054C:05C4.0043: Failed to retrieve DualShock4 pairing info: -22 [ 337.459552][ T6340] playstation 0003:054C:05C4.0043: Failed to get MAC address from DualShock4 [ 337.468363][ T6340] playstation 0003:054C:05C4.0043: Failed to create dualshock4. [ 337.476614][ T6340] playstation 0003:054C:05C4.0043: probe with driver playstation failed with error -22 [ 337.643815][ T6340] usb 3-1: USB disconnect, device number 89 [ 338.150669][ T36] audit: type=1326 audit(2000000095.095:39311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.1.3161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f58e929 code=0x0 [ 338.234305][ T9971] rust_binder: Write failure EFAULT in pid:710 [ 338.456936][ T9975] SELinux: policydb string length 5 does not match expected length 8 [ 338.471425][ T9975] SELinux: failed to load policy [ 338.521822][ T9981] overlay: ./file0 is not a directory [ 338.580239][ T9982] 9pnet_fd: Insufficient options for proto=fd [ 338.998964][ T9984] random: crng reseeded on system resumption [ 339.038354][ T36] audit: type=1400 audit(2000000095.972:39312): avc: granted { setsecparam } for pid=9986 comm="syz.2.3169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 339.047694][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 339.314212][ T304] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 339.437324][T10000] SELinux: policydb string length 5 does not match expected length 8 [ 339.445721][T10000] SELinux: failed to load policy [ 339.464727][ T304] usb 3-1: Using ep0 maxpacket: 16 [ 339.471111][ T304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.482355][ T304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.495286][ T304] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 339.504387][ T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.515183][ T304] usb 3-1: config 0 descriptor?? [ 339.686764][T10016] tmpfs: Unknown parameter 'hTij()*ge' [ 339.851209][ T6429] usb 5-1: USB disconnect, device number 81 [ 339.919672][T10032] SELinux: policydb string length 5 does not match expected length 8 [ 339.928199][T10032] SELinux: failed to load policy [ 339.932510][ T304] playstation 0003:054C:05C4.0044: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 339.934182][T10032] netlink: 'syz.1.3184': attribute type 27 has an invalid length. [ 340.015748][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.024355][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.078738][T10044] kvm: pic: non byte write [ 340.129223][ T304] playstation 0003:054C:05C4.0044: Invalid reportID received, expected 18 got 97 [ 340.138435][ T304] playstation 0003:054C:05C4.0044: Failed to retrieve DualShock4 pairing info: -22 [ 340.147802][ T304] playstation 0003:054C:05C4.0044: Failed to get MAC address from DualShock4 [ 340.156685][ T304] playstation 0003:054C:05C4.0044: Failed to create dualshock4. [ 340.164982][ T304] playstation 0003:054C:05C4.0044: probe with driver playstation failed with error -22 [ 340.317738][ T6429] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 340.332682][ T304] usb 3-1: USB disconnect, device number 90 [ 340.448208][ T6429] usb 5-1: device descriptor read/64, error -71 [ 340.635076][T10052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.643930][T10052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.698949][ T6429] usb 5-1: device descriptor read/64, error -71 [ 340.948935][ T6429] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 341.078984][ T6341] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 341.078984][ T6429] usb 5-1: device descriptor read/64, error -71 [ 341.168001][T10057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.176772][T10057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.197922][T10061] SELinux: policydb string length 5 does not match expected length 8 [ 341.206326][T10061] SELinux: failed to load policy [ 341.212401][T10061] netlink: 'syz.1.3194': attribute type 27 has an invalid length. [ 341.231555][ T6341] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 341.242538][ T6341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.254153][ T6341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.264134][ T6341] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 341.278635][ T6341] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 341.287946][ T6341] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 341.296394][ T6341] usb 3-1: Manufacturer: syz [ 341.302076][ T6341] usb 3-1: config 0 descriptor?? [ 341.328962][ T6429] usb 5-1: device descriptor read/64, error -71 [ 341.439048][ T6429] usb usb5-port1: attempt power cycle [ 341.710214][ T6341] appleir 0003:05AC:8243.0045: unknown main item tag 0x0 [ 341.717718][ T6341] appleir 0003:05AC:8243.0045: No inputs registered, leaving [ 341.726382][ T6341] appleir 0003:05AC:8243.0045: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 341.779314][ T6429] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 341.799881][ T6429] usb 5-1: device descriptor read/8, error -71 [ 341.896988][T10071] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 341.906103][T10071] kvm: pic: single mode not supported [ 341.906117][T10071] kvm: pic: level sensitive irq not supported [ 341.911695][T10071] kvm: pic: non byte read [ 341.922373][T10071] kvm: pic: single mode not supported [ 341.922385][T10071] kvm: pic: level sensitive irq not supported [ 341.927886][T10071] kvm: pic: non byte read [ 341.940000][ T6429] usb 5-1: device descriptor read/8, error -71 [ 341.948436][T10071] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.948890][T10071] rust_binder: Error while translating object. [ 341.955498][T10071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 341.961836][T10071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:785 [ 342.052054][T10078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.070058][T10078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.079708][T10078] 9p: Unknown Cache mode or invalid value 딊 [ 342.091059][T10080] fuse: Unknown parameter '' [ 342.180179][ T6429] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 342.200042][ T6429] usb 5-1: device descriptor read/8, error -71 [ 342.286369][T10093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.287433][T10093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.302535][T10093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.330299][ T6429] usb 5-1: device descriptor read/8, error -71 [ 342.439026][ T6429] usb usb5-port1: unable to enumerate USB device [ 342.511691][T10092] rust_binder: Error while translating object. [ 342.511751][T10092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 342.518052][T10092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:803 [ 342.716622][T10095] SELinux: policydb string length 5 does not match expected length 8 [ 342.734272][T10095] SELinux: failed to load policy [ 342.740052][T10095] netlink: 'syz.5.3203': attribute type 27 has an invalid length. [ 342.758843][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.766132][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.156506][ T36] audit: type=1400 audit(2000000100.084:39313): avc: denied { setattr } for pid=10116 comm="syz.5.3212" name="TIPC" dev="sockfs" ino=78782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.160004][T10117] vlan0: entered allmulticast mode [ 343.184783][T10117] veth0_vlan: entered allmulticast mode [ 343.214073][T10121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.215530][T10121] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 343.224610][T10121] rust_binder: Error while translating object. [ 343.241047][T10121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 343.247421][T10121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:810 [ 343.279895][T10129] SELinux: policydb string length 5 does not match expected length 8 [ 343.297952][T10129] SELinux: failed to load policy [ 343.303572][T10131] SELinux: policydb string does not match my string SE Linux [ 343.304160][T10129] netlink: 'syz.5.3216': attribute type 27 has an invalid length. [ 343.311354][T10131] SELinux: failed to load policy [ 343.319736][T10129] vlan0: left allmulticast mode [ 343.330845][T10129] veth0_vlan: left allmulticast mode [ 343.355267][T10135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.369223][T10135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.384234][T10135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.393631][T10135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.614446][T10154] rust_binder: Write failure EINVAL in pid:727 [ 343.638990][ T304] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 343.772197][T10160] rust_binder: Write failure EINVAL in pid:733 [ 343.779374][ T6338] usb 3-1: USB disconnect, device number 91 [ 343.804145][ T36] audit: type=1400 audit(2000000100.734:39314): avc: denied { setattr } for pid=10162 comm="syz.2.3227" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 343.840594][ T304] usb 6-1: Using ep0 maxpacket: 32 [ 343.847380][ T304] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 343.854089][T10168] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 343.855728][ T304] usb 6-1: config 0 has no interface number 0 [ 343.865215][T10168] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 343.872299][ T304] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 343.878297][T10168] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 343.887220][ T304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.903173][ T304] usb 6-1: Product: syz [ 343.907436][ T304] usb 6-1: Manufacturer: syz [ 343.910403][T10168] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 343.912254][ T304] usb 6-1: SerialNumber: syz [ 343.931113][ T304] usb 6-1: config 0 descriptor?? [ 343.937129][ T304] smsc95xx v2.0.0 [ 343.943114][T10172] SELinux: policydb string length 5 does not match expected length 8 [ 343.951609][T10172] SELinux: failed to load policy [ 343.957117][T10172] netlink: 'syz.2.3229': attribute type 27 has an invalid length. [ 343.977407][T10172] tipc: Resetting bearer [ 343.983383][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.990660][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.059562][T10174] SELinux: security_context_str_to_sid () failed with errno=-22 [ 344.120947][T10131] overlayfs: statfs failed on './file0' [ 344.163783][T10182] netlink: 580 bytes leftover after parsing attributes in process `syz.2.3234'. [ 344.337679][ T304] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 344.348625][ T304] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 344.488950][ T10] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 344.510059][T10205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 344.510947][T10205] input: syz0 as /devices/virtual/input/input32 [ 344.577465][T10205] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 344.577488][T10205] rust_binder: Error while translating object. [ 344.588100][T10205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 344.594373][T10205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:822 [ 344.640156][ T10] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.660652][ T10] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 344.671915][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 344.678621][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 344.689238][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.702247][ T10] usb 5-1: config 0 descriptor?? [ 344.707602][T10193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 344.984607][T10217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.118138][ T10] logitech-djreceiver 0003:046D:C71F.0046: unknown main item tag 0x0 [ 345.132882][ T10] logitech-djreceiver 0003:046D:C71F.0046: unknown main item tag 0x0 [ 345.141987][ T10] logitech-djreceiver 0003:046D:C71F.0046: hidraw0: USB HID vff.fe Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 345.324475][ T10] usb 5-1: USB disconnect, device number 86 [ 345.567602][ T304] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 345.578504][ T304] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 345.718949][ T304] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 345.829728][ T6429] usb 6-1: USB disconnect, device number 7 [ 345.869739][ T304] usb 3-1: not running at top speed; connect to a high speed hub [ 345.878339][ T304] usb 3-1: config 24 has too many interfaces: 129, using maximum allowed: 32 [ 345.887514][ T304] usb 3-1: config 24 has an invalid descriptor of length 6, skipping remainder of the config [ 345.898021][ T304] usb 3-1: config 24 has 1 interface, different from the descriptor's value: 129 [ 345.914262][ T304] usb 3-1: config 24 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.932532][ T304] usb 3-1: config 24 interface 0 has no altsetting 0 [ 345.941054][ T304] usb 3-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.40 [ 345.951462][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.967852][ T304] usb 3-1: Product: syz [ 345.972236][ T304] usb 3-1: Manufacturer: 䝟垅㛄ߊ蠠ꐇ㹱Ѫ戰䳞穢婩⸫ᦶ輴詖ꮡ쫑㻩帆ٯ䲴塎聭縪垵ᅜບ⻽⍎ș苅﷊⤕঎꒝㯶렌맜㺈糯䤃䱌Ⳍꩊ〨邼쀽댵푯⟹Ű뛼ᴷ [ 345.991861][ T304] usb 3-1: SerialNumber: syz [ 345.994153][T10262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.005154][T10262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.204190][ T304] usbhid 3-1:24.0: couldn't find an input interrupt endpoint [ 346.212581][ T304] usb 3-1: USB disconnect, device number 92 [ 346.298994][ T6338] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 346.448912][ T6338] usb 5-1: Using ep0 maxpacket: 8 [ 346.455629][ T6338] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.466822][ T6338] usb 5-1: config 0 interface 0 has no altsetting 0 [ 346.473522][ T6338] usb 5-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 346.482669][ T6338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.491401][ T6338] usb 5-1: config 0 descriptor?? [ 346.542259][T10274] netlink: 'syz.1.3266': attribute type 27 has an invalid length. [ 346.576679][ T36] audit: type=1326 audit(2000000103.504:39315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10277 comm="syz.1.3268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f58e929 code=0x0 [ 346.678241][T10279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:850 [ 346.678286][T10279] rust_binder: Read failure Err(EFAULT) in pid:850 [ 346.708929][ T304] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 346.870030][ T304] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.881129][ T304] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 346.892023][ T304] usb 6-1: config 0 interface 0 has no altsetting 0 [ 346.898685][ T304] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 346.903463][ T6338] nintendo 0003:057E:201E.0047: unknown main item tag 0x0 [ 346.909729][ T304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.915588][ T6338] nintendo 0003:057E:201E.0047: unknown main item tag 0x0 [ 346.927518][ T304] usb 6-1: config 0 descriptor?? [ 346.930156][ T6338] nintendo 0003:057E:201E.0047: unknown main item tag 0x0 [ 346.936003][T10272] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 346.942281][ T6338] nintendo 0003:057E:201E.0047: unknown main item tag 0x0 [ 346.956538][ T6338] nintendo 0003:057E:201E.0047: unknown main item tag 0x0 [ 346.963736][ T6338] nintendo 0003:057E:201E.0047: unknown main item tag 0x0 [ 346.970961][ T6338] nintendo 0003:057E:201E.0047: unknown main item tag 0x0 [ 346.978118][ T6338] nintendo 0003:057E:201E.0047: unknown main item tag 0x0 [ 346.986269][ T6338] nintendo 0003:057E:201E.0047: hidraw0: USB HID v80.00 Device [HID 057e:201e] on usb-dummy_hcd.4-1/input0 [ 347.048986][ T6338] nintendo 0003:057E:201E.0047: Failed to get joycon info; ret=-38 [ 347.057000][ T6338] nintendo 0003:057E:201E.0047: Failed to retrieve controller info; ret=-38 [ 347.065771][ T6338] nintendo 0003:057E:201E.0047: Failed to initialize controller; ret=-38 [ 347.075227][ T6338] nintendo 0003:057E:201E.0047: probe - fail = -38 [ 347.081871][ T6338] nintendo 0003:057E:201E.0047: probe with driver nintendo failed with error -38 [ 347.104339][ T10] usb 5-1: USB disconnect, device number 87 [ 347.154962][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.163631][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.372813][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.381444][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.576923][T10290] bpf: Bad value for 'mode' [ 347.582433][T10290] netlink: 57 bytes leftover after parsing attributes in process `syz.2.3272'. [ 347.597223][ T304] usbhid 6-1:0.0: can't add hid device: -71 [ 347.611290][ T304] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 347.634679][ T304] usb 6-1: USB disconnect, device number 8 [ 347.686883][T10297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:795 [ 348.164856][ T12] tipc: Subscription rejected, illegal request [ 348.166869][T10303] kvm: kvm [10301]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 348.176113][ T36] audit: type=1400 audit(2000000105.094:39316): avc: denied { map } for pid=10300 comm="syz.4.3276" path="socket:[81460]" dev="sockfs" ino=81460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 348.226117][T10305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1116 [ 348.278422][T10306] rust_binder: Write failure EINVAL in pid:1116 [ 348.548930][ T304] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 348.557773][T10316] SELinux: security_context_str_to_sid () failed with errno=-22 [ 348.582825][T10321] virtio-fs: tag not found [ 348.593366][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.602045][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.709946][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.720973][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.730751][ T304] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.743729][ T304] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.752821][ T304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.761537][ T304] usb 6-1: config 0 descriptor?? [ 349.085777][ T36] audit: type=1400 audit(2000000106.014:39317): avc: denied { getattr } for pid=10336 comm="syz.2.3291" path="cgroup:[4026532370]" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 349.108240][T10339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:814 [ 349.170015][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.186617][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.194097][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.201737][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.209191][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.216600][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.224038][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.231532][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.238971][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.246418][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.254132][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.261625][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.269155][ T304] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 349.276690][ T304] plantronics 0003:047F:FFFF.0048: No inputs registered, leaving [ 349.285793][ T304] plantronics 0003:047F:FFFF.0048: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 349.317826][T10353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.326535][T10353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.335946][T10353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.368965][ T6338] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 349.388936][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 349.429250][T10310] tipc: Started in network mode [ 349.434148][T10310] tipc: Node identity 96c1c6990818, cluster identity 4711 [ 349.441466][T10310] tipc: Enabled bearer , priority 0 [ 349.448710][ T304] usb 6-1: USB disconnect, device number 9 [ 349.490662][T10310] tipc: Disabling bearer [ 349.538999][ T6338] usb 5-1: Using ep0 maxpacket: 32 [ 349.545332][ T6338] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 349.553548][ T6338] usb 5-1: config 0 has no interface number 0 [ 349.558936][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 349.561277][ T6338] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 349.566020][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 349.573859][ T6338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.582609][ T10] usb 3-1: config 0 has no interface number 0 [ 349.589969][ T6338] usb 5-1: Product: syz [ 349.598061][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 349.600246][ T6338] usb 5-1: Manufacturer: syz [ 349.609697][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.613963][ T6338] usb 5-1: SerialNumber: syz [ 349.622624][ T10] usb 3-1: Product: syz [ 349.629259][ T6338] usb 5-1: config 0 descriptor?? [ 349.630921][ T10] usb 3-1: Manufacturer: syz [ 349.637020][ T6338] smsc95xx v2.0.0 [ 349.640578][ T10] usb 3-1: SerialNumber: syz [ 349.649421][ T10] usb 3-1: config 0 descriptor?? [ 349.655306][ T10] smsc95xx v2.0.0 [ 349.876603][T10358] SELinux: security_context_str_to_sid () failed with errno=-22 [ 349.899486][T10360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.908181][T10360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.031259][T10362] random: crng reseeded on system resumption [ 350.038559][ T6338] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 350.049530][ T6338] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 350.059264][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 350.073199][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 350.081215][T10362] binder: Unknown parameter 'context' [ 350.209330][T10369] netlink: 'syz.5.3304': attribute type 27 has an invalid length. [ 350.484508][T10382] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.488975][ T6341] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 350.489283][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.495857][T10382] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 350.505592][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.511835][T10382] rust_binder: Error while translating object. [ 350.530022][T10382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 350.536354][T10382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:882 [ 350.680015][ T6341] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.700599][ T6341] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 350.711361][ T6341] usb 6-1: config 0 interface 0 has no altsetting 0 [ 350.718009][ T6341] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 350.727105][ T6341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.736005][ T6341] usb 6-1: config 0 descriptor?? [ 350.741343][T10375] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.860524][ T6338] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 350.871490][ T6338] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 351.154904][ T6341] logitech 0003:046D:C286.0049: unknown main item tag 0x6 [ 351.172561][ T6341] logitech 0003:046D:C286.0049: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.5-1/input0 [ 351.194467][ T6341] logitech 0003:046D:C286.0049: no inputs found [ 351.343275][T10403] netlink: 'syz.1.3314': attribute type 27 has an invalid length. [ 351.353959][ T36] audit: type=1326 audit(2000000108.284:39318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10374 comm="syz.5.3306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f439c18e929 code=0x0 [ 351.736693][T10425] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3320'. [ 351.763528][T10429] tmpfs: Unknown parameter 'fsgontext' [ 351.772407][T10430] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 351.772602][T10429] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.853352][T10434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.868473][T10434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.493377][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 352.504349][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 352.515671][ T10] usb 3-1: USB disconnect, device number 93 [ 352.794412][ T6341] usb 5-1: USB disconnect, device number 88 [ 352.860661][T10450] cgroup: Unknown subsys name 'measure' [ 353.248930][ T6338] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 353.256572][ T6341] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 353.259917][ T304] usb 6-1: USB disconnect, device number 10 [ 353.409927][ T6341] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 353.421032][ T6338] usb 3-1: Using ep0 maxpacket: 32 [ 353.426207][ T6341] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 353.438305][ T6341] usb 5-1: config 0 interface 0 has no altsetting 0 [ 353.445457][ T6341] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 353.455227][ T6338] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 353.463589][ T6341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.471834][ T6338] usb 3-1: config 0 has no interface number 0 [ 353.477922][ T6338] usb 3-1: config 0 interface 184 has no altsetting 0 [ 353.485617][ T6341] usb 5-1: config 0 descriptor?? [ 353.490962][T10452] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 353.491790][ T6338] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 353.507413][ T6338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.516893][ T6338] usb 3-1: Product: syz [ 353.521169][ T6338] usb 3-1: Manufacturer: syz [ 353.525797][ T6338] usb 3-1: SerialNumber: syz [ 353.531498][ T6338] usb 3-1: config 0 descriptor?? [ 353.539225][ T6338] smsc75xx v1.0.0 [ 353.668934][ T304] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 353.791236][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.800008][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.820367][ T304] usb 6-1: unable to get BOS descriptor or descriptor too short [ 353.828552][ T304] usb 6-1: not running at top speed; connect to a high speed hub [ 353.837105][ T304] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.847273][ T304] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.857778][ T304] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.866893][ T304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.874935][ T304] usb 6-1: Product: syz [ 353.879161][ T304] usb 6-1: Manufacturer: syz [ 353.883769][ T304] usb 6-1: SerialNumber: syz [ 353.909986][ T6341] logitech-djreceiver 0003:046D:C71F.004A: unknown main item tag 0x0 [ 353.918340][ T6341] logitech-djreceiver 0003:046D:C71F.004A: unknown main item tag 0x0 [ 353.927464][ T6341] logitech-djreceiver 0003:046D:C71F.004A: hidraw0: USB HID vff.fe Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 354.008781][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.017469][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.093718][ T304] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 354.104360][ T304] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 354.116274][ T6341] usb 5-1: USB disconnect, device number 89 [ 354.116463][ T304] usb 6-1: USB disconnect, device number 11 [ 354.135528][ T8103] udevd[8103]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 354.541583][ T6338] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 354.783696][ T6338] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 354.804816][ T6338] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 354.816323][ T6338] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 354.826920][ T6338] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 354.836640][ T6338] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 354.849265][ T6338] usb 3-1: USB disconnect, device number 94 [ 354.867683][T10511] TCP: out of memory -- consider tuning tcp_mem [ 355.093082][T10534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.101675][T10534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.218927][ T304] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 355.309889][T10536] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 355.317363][T10536] rust_binder: Write failure EINVAL in pid:825 [ 355.370004][ T304] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 355.387241][ T304] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 355.397920][ T304] usb 6-1: config 0 interface 0 has no altsetting 0 [ 355.404621][ T304] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 355.413711][ T304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.422653][ T304] usb 6-1: config 0 descriptor?? [ 355.427987][T10525] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 355.548905][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 355.691569][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3357'. [ 355.700629][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 355.702869][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.707607][ T10] usb 3-1: config 1 interface 0 altsetting 12 endpoint 0x2 has an invalid bInterval 243, changing to 11 [ 355.715043][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.726725][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 355.741721][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.40 [ 355.750965][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.759203][ T10] usb 3-1: Product: 㐁 [ 355.763572][ T10] usb 3-1: Manufacturer: ≼䦜캔寚鍲⃺༫誨ⓞ㯪ꕁ뫰ꗂΐꁳ覻㕑魝뢊㦽䡡萏覸軧ﰏ∠ᏺ깪쪌竛Ꞓ瀕䳋꫓淜鑭쨓䢐曢瑍㷬町㋪폫君뀶Ӊ헩ᆧ갅᧝ [ 355.782064][ T10] usb 3-1: SerialNumber: 딙ᅯൕ鐪⍓脱ᄯꮜࣼﲣ敚编 [ 355.837106][ T304] logitech 0003:046D:C286.004B: unknown main item tag 0x6 [ 355.845196][ T304] logitech 0003:046D:C286.004B: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.5-1/input0 [ 355.857564][ T304] logitech 0003:046D:C286.004B: no inputs found [ 355.993392][T10537] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 356.000676][T10537] rust_binder: Write failure EINVAL in pid:825 [ 356.048925][ T6338] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 356.197157][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 356.203329][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 356.212521][ T10] usb 3-1: USB disconnect, device number 95 [ 356.219368][ T6338] usb 5-1: Using ep0 maxpacket: 16 [ 356.225934][ T6338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.237007][ T6338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.248901][ T6338] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 356.258243][ T6338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.268587][ T6338] usb 5-1: config 0 descriptor?? [ 356.364694][ T36] audit: type=1400 audit(2000000000.720:39319): avc: denied { accept } for pid=10566 comm="syz.1.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 356.400468][T10569] binder: Unknown parameter 'm_8ƒ000000017777777777' [ 356.676974][ T6338] playstation 0003:054C:05C4.004C: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 356.875629][ T6338] playstation 0003:054C:05C4.004C: Invalid reportID received, expected 18 got 97 [ 356.884967][ T6338] playstation 0003:054C:05C4.004C: Failed to retrieve DualShock4 pairing info: -22 [ 356.894376][ T6338] playstation 0003:054C:05C4.004C: Failed to get MAC address from DualShock4 [ 356.903255][ T6338] playstation 0003:054C:05C4.004C: Failed to create dualshock4. [ 356.911531][ T6338] playstation 0003:054C:05C4.004C: probe with driver playstation failed with error -22 [ 356.948935][ T10] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 357.077295][ T6338] usb 5-1: USB disconnect, device number 90 [ 357.100314][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 357.109031][ T10] usb 3-1: config 254 has an invalid interface number: 100 but max is 0 [ 357.117410][ T10] usb 3-1: config 254 has no interface number 0 [ 357.123735][ T10] usb 3-1: config 254 interface 100 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 357.135540][ T10] usb 3-1: config 254 interface 100 altsetting 0 endpoint 0xE has an invalid bInterval 230, changing to 4 [ 357.146895][ T10] usb 3-1: config 254 interface 100 altsetting 0 endpoint 0xE has invalid maxpacket 48461, setting to 1023 [ 357.158317][ T10] usb 3-1: config 254 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 357.169501][ T10] usb 3-1: config 254 interface 100 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 357.180604][ T10] usb 3-1: config 254 interface 100 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 357.191519][ T10] usb 3-1: config 254 interface 100 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 357.202706][ T10] usb 3-1: config 254 interface 100 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 357.213881][ T10] usb 3-1: config 254 interface 100 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 357.228503][ T10] usb 3-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=1c.84 [ 357.237601][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.245624][ T10] usb 3-1: Product: щ [ 357.249732][ T10] usb 3-1: Manufacturer: ᐁ [ 357.254357][ T10] usb 3-1: SerialNumber: Ⲱ [ 357.466716][ T10] usb 3-1: USB disconnect, device number 96 [ 357.838916][ T304] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 357.884226][ T6338] usb 6-1: USB disconnect, device number 12 [ 357.978912][ T304] usb 5-1: device descriptor read/64, error -71 [ 358.006925][T10598] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1056 sclass=netlink_xfrm_socket pid=10598 comm=syz.2.3372 [ 358.218934][ T304] usb 5-1: device descriptor read/64, error -71 [ 358.278907][ T6338] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 358.293734][T10603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.302365][T10603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.409767][ T6338] usb 6-1: device descriptor read/64, error -71 [ 358.458926][ T304] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 358.588923][ T304] usb 5-1: device descriptor read/64, error -71 [ 358.648932][ T6338] usb 6-1: device descriptor read/64, error -71 [ 358.828936][ T304] usb 5-1: device descriptor read/64, error -71 [ 358.889039][ T6338] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 358.939045][ T304] usb usb5-port1: attempt power cycle [ 359.028986][ T6338] usb 6-1: device descriptor read/64, error -71 [ 359.047444][T10616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.056094][T10616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.140973][T10620] binder: Binderfs stats mode cannot be changed during a remount [ 359.185765][T10628] rust_binder: Write failure EINVAL in pid:854 [ 359.186149][T10628] rust_binder: Error while translating object. [ 359.192508][T10628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 359.198811][T10628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:854 [ 359.222478][T10630] binder: Unknown parameter 'defcontext01777777777777777777777' [ 359.268972][ T6338] usb 6-1: device descriptor read/64, error -71 [ 359.278468][T10632] SELinux: policydb string length 5 does not match expected length 8 [ 359.286802][T10632] SELinux: failed to load policy [ 359.288951][ T304] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 359.292354][T10632] netlink: 'syz.2.3385': attribute type 27 has an invalid length. [ 359.320074][ T304] usb 5-1: device descriptor read/8, error -71 [ 359.378992][ T6338] usb usb6-port1: attempt power cycle [ 359.450209][ T304] usb 5-1: device descriptor read/8, error -71 [ 359.608967][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 359.688933][ T304] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 359.713138][ T304] usb 5-1: device descriptor read/8, error -71 [ 359.718925][ T6338] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 359.738990][ T10] usb 3-1: device descriptor read/64, error -71 [ 359.742497][ T6338] usb 6-1: device descriptor read/8, error -71 [ 359.759256][T10641] binder: Bad value for 'max' [ 359.850139][ T304] usb 5-1: device descriptor read/8, error -71 [ 359.860529][T10650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.869155][T10650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.878710][T10650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.880773][ T6338] usb 6-1: device descriptor read/8, error -71 [ 359.888277][T10650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.959062][ T304] usb usb5-port1: unable to enumerate USB device [ 359.978953][ T10] usb 3-1: device descriptor read/64, error -71 [ 360.118962][ T6338] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 360.140158][ T6338] usb 6-1: device descriptor read/8, error -71 [ 360.218911][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 360.270042][ T6338] usb 6-1: device descriptor read/8, error -71 [ 360.348996][ T10] usb 3-1: device descriptor read/64, error -71 [ 360.379122][ T6338] usb usb6-port1: unable to enumerate USB device [ 360.439949][T10655] binder: Binderfs stats mode cannot be changed during a remount [ 360.598943][ T10] usb 3-1: device descriptor read/64, error -71 [ 360.631079][ T36] audit: type=1400 audit(2000000004.991:39320): avc: denied { shutdown } for pid=10667 comm="syz.1.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 360.689215][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.697768][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.719028][ T10] usb usb3-port1: attempt power cycle [ 361.058906][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 361.079954][ T10] usb 3-1: device descriptor read/8, error -71 [ 361.209943][ T10] usb 3-1: device descriptor read/8, error -71 [ 361.358920][ T304] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 361.448931][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 361.469450][T10687] SELinux: policydb string length 5 does not match expected length 8 [ 361.470013][ T10] usb 3-1: device descriptor read/8, error -71 [ 361.477831][T10687] SELinux: failed to load policy [ 361.489876][T10687] netlink: 'syz.4.3405': attribute type 27 has an invalid length. [ 361.497746][T10687] ip_vti0: left allmulticast mode [ 361.510373][ T304] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.518987][T10690] veth0_to_bond: entered promiscuous mode [ 361.521554][ T304] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.536259][ T304] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 361.545863][ T304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 361.553964][ T304] usb 6-1: SerialNumber: syz [ 361.593288][T10701] SELinux: syz.1.3409 (10701) set checkreqprot to 1. This is no longer supported. [ 361.595145][ T36] audit: type=1400 audit(2000000005.951:39321): avc: denied { setcheckreqprot } for pid=10699 comm="syz.1.3409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 361.624960][ T10] usb 3-1: device descriptor read/8, error -71 [ 361.684960][T10710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1182 [ 361.725228][T10709] netlink: 7360 bytes leftover after parsing attributes in process `syz.1.3412'. [ 361.743796][ T10] usb usb3-port1: unable to enumerate USB device [ 361.764898][T10685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.773578][T10685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.840966][ T304] usb 6-1: 0:2 : does not exist [ 361.850624][ T304] usb 6-1: USB disconnect, device number 17 [ 361.859038][ T7893] udevd[7893]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 361.874158][T10718] SELinux: policydb string length 5 does not match expected length 8 [ 361.883697][T10718] SELinux: failed to load policy [ 361.889547][T10718] netlink: 'syz.5.3414': attribute type 27 has an invalid length. [ 362.404294][T10729] tmpfs: Bad value for 'nr_blocks' [ 362.410771][ T36] audit: type=1400 audit(2000000006.771:39322): avc: denied { map } for pid=10728 comm="syz.2.3418" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 362.517609][ T36] audit: type=1400 audit(2000000006.871:39323): avc: denied { setattr } for pid=10742 comm="syz.2.3423" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 362.518793][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'. [ 362.688974][T10754] can0: slcan on ptm1. [ 362.701936][T10754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.716731][T10754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.764357][T10753] can0 (unregistered): slcan off ptm1. [ 362.829126][T10776] kvm: pic: non byte write [ 363.211136][ T36] audit: type=1400 audit(2000000007.571:39324): avc: denied { nlmsg_read } for pid=10807 comm="syz.2.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 363.211328][T10809] binder: Unknown parameter '000000000000000000000030x0000000000000003' [ 363.232197][ T36] audit: type=1400 audit(2000000007.571:39325): avc: denied { nlmsg_read } for pid=10807 comm="syz.2.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 363.310265][ T2790] Bluetooth: hci0: Frame reassembly failed (-84) [ 363.319399][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 363.340925][ T304] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 363.369116][T10825] overlayfs: failed to resolve './file1': -2 [ 363.375988][T10827] overlay: Unknown parameter './binderfs/binder1' [ 363.498900][ T304] usb 6-1: Using ep0 maxpacket: 8 [ 363.505467][ T304] usb 6-1: unable to get BOS descriptor or descriptor too short [ 363.514787][ T304] usb 6-1: config 7 has an invalid interface number: 241 but max is 8 [ 363.523128][ T304] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 9 [ 363.532202][ T304] usb 6-1: config 7 has no interface number 0 [ 363.536773][T10834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.538914][ T304] usb 6-1: config 7 interface 241 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 363.548030][T10834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.557700][ T304] usb 6-1: config 7 interface 241 altsetting 6 bulk endpoint 0x9 has invalid maxpacket 8 [ 363.578888][ T304] usb 6-1: config 7 interface 241 altsetting 6 endpoint 0x86 has an invalid bInterval 144, changing to 11 [ 363.592333][ T304] usb 6-1: config 7 interface 241 altsetting 6 endpoint 0x86 has invalid maxpacket 58007, setting to 1024 [ 363.603716][ T304] usb 6-1: config 7 interface 241 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.612703][T10842] fuseblk: Unknown parameter 'aZ' [ 363.617043][ T304] usb 6-1: config 7 interface 241 has no altsetting 0 [ 363.625127][T10844] fuseblk: Unknown parameter 'aZ' [ 363.630996][ T304] usb 6-1: New USB device found, idVendor=0403, idProduct=e0f7, bcdDevice=9c.4a [ 363.645129][T10840] overlayfs: failed to resolve './file0': -2 [ 363.651258][ T304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.659619][ T304] usb 6-1: Product: syz [ 363.664087][ T304] usb 6-1: Manufacturer: syz [ 363.668938][T10852] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 363.669058][T10852] rust_binder: Error while translating object. [ 363.669124][ T304] usb 6-1: SerialNumber: syz [ 363.680025][T10852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 363.690531][T10852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1218 [ 363.692073][T10800] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 363.870792][T10840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.880685][T10840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.920747][T10797] x_tables: duplicate underflow at hook 1 [ 363.967740][T10867] FAT-fs (rnullb0): bogus number of reserved sectors [ 363.974558][T10867] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 364.023285][T10877] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 364.055639][ T304] ftdi_sio 6-1:7.241: FTDI USB Serial Device converter detected [ 364.072587][ T304] ftdi_sio ttyUSB0: unknown device type: 0x9c4a [ 364.086293][ T304] usb 6-1: USB disconnect, device number 18 [ 364.094256][ T304] ftdi_sio 6-1:7.241: device disconnected [ 364.484864][T10884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.495255][T10884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.879967][ T36] audit: type=1400 audit(2000000009.241:39326): avc: denied { setattr } for pid=10904 comm="syz.5.3465" name="PINGv6" dev="sockfs" ino=85959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 364.956373][T10912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:342 [ 364.973062][T10914] SELinux: policydb string length 5 does not match expected length 8 [ 364.990805][T10914] SELinux: failed to load policy [ 364.996368][T10914] netlink: 'syz.5.3468': attribute type 27 has an invalid length. [ 365.001870][T10916] futex_wake_op: syz.4.3469 tries to shift op by 144; fix this program [ 365.368914][ T8327] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 365.375078][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 365.381467][ T646] Bluetooth: hci1: command 0x1003 tx timeout [ 365.381763][ T647] Bluetooth: hci0: command 0x1003 tx timeout [ 365.443824][T10944] SELinux: policydb string length 5 does not match expected length 8 [ 365.452183][T10944] SELinux: failed to load policy [ 365.457599][T10944] netlink: 'syz.1.3478': attribute type 27 has an invalid length. [ 365.518427][T10953] rust_binder: Failed copying remainder into alloc: EFAULT [ 365.518458][T10953] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 365.526078][T10953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 365.536176][T10953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:901 [ 365.558899][ T6341] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 365.584938][T10959] input: syz0 as /devices/virtual/input/input33 [ 365.675546][T10970] SELinux: policydb string length 5 does not match expected length 8 [ 365.683872][T10970] SELinux: failed to load policy [ 365.689534][T10970] netlink: 'syz.2.3487': attribute type 27 has an invalid length. [ 365.690038][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.707058][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.720054][ T6341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.731168][ T6341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.741006][ T6341] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.754085][ T6341] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.763441][ T6341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.772391][ T6341] usb 6-1: config 0 descriptor?? [ 365.790130][T10974] SELinux: security_context_str_to_sid () failed with errno=-22 [ 366.180244][ T6341] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 366.189544][ T6341] plantronics 0003:047F:FFFF.004D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 366.229890][ T10] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 366.237989][ T10] hid-generic 0000:0000:0000.004E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 366.259723][T10991] fido_id[10991]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.291028][T10997] SELinux: policydb string length 5 does not match expected length 8 [ 366.299411][T10997] SELinux: failed to load policy [ 366.304808][T10997] netlink: 'syz.1.3497': attribute type 27 has an invalid length. [ 366.328716][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.337536][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.346103][T10999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.354659][T10999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.118962][T11027] rust_binder: Write failure EFAULT in pid:927 [ 367.418431][T11029] SELinux: policydb string length 5 does not match expected length 8 [ 367.432949][T11029] SELinux: failed to load policy [ 367.438504][T11029] netlink: 'syz.4.3506': attribute type 27 has an invalid length. [ 367.446469][T11029] veth0_to_bond: left promiscuous mode [ 367.561164][T11049] netlink: 'syz.1.3515': attribute type 27 has an invalid length. [ 367.865582][T11081] netlink: 'syz.1.3524': attribute type 27 has an invalid length. [ 367.874868][T11083] binder: Bad value for 'max' [ 367.893503][T11085] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 367.965945][T11089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 367.973902][T11089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:937 [ 367.983511][T11089] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 367.995493][T11089] rust_binder: Read failure Err(EFAULT) in pid:937 [ 368.137386][T11102] tipc: Enabled bearer , priority 0 [ 368.151531][T11102] tipc: Disabling bearer [ 368.189892][T11104] overlay: filesystem on ./bus not supported as upperdir [ 368.229438][ T6338] usb 6-1: USB disconnect, device number 19 [ 368.258927][ T304] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 368.348912][ T10] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 368.410070][ T304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.421336][ T304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.431354][ T304] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 368.440591][ T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.454832][ T304] usb 3-1: config 0 descriptor?? [ 368.498893][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 368.508925][ T10] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 368.517341][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.527761][ T10] usb 5-1: config 1 has no interface number 0 [ 368.533991][ T10] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.547749][ T10] usb 5-1: config 1 interface 105 has no altsetting 0 [ 368.556377][ T10] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 368.565999][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.574416][ T10] usb 5-1: Product: syz [ 368.578807][ T10] usb 5-1: Manufacturer: syz [ 368.583890][ T10] usb 5-1: SerialNumber: syz [ 368.793850][ T10] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 368.996338][T11100] rust_binder: Error while translating object. [ 368.996392][T11100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.003044][T11100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1284 [ 369.013714][ T10] usb 5-1: USB disconnect, device number 95 [ 369.063433][ T304] usbhid 3-1:0.0: can't add hid device: -71 [ 369.069583][ T304] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 369.078287][ T304] usb 3-1: USB disconnect, device number 101 [ 369.565817][T11136] SELinux: policydb string length 5 does not match expected length 8 [ 369.574166][T11136] SELinux: failed to load policy [ 369.582843][T11136] netlink: 'syz.5.3545': attribute type 27 has an invalid length. [ 369.795377][T11175] fuse: Bad value for 'fd' [ 370.208927][ T304] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 370.362120][ T304] usb 5-1: Using ep0 maxpacket: 32 [ 370.379471][ T304] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.387695][ T304] usb 5-1: config 0 has no interface number 0 [ 370.394124][ T304] usb 5-1: config 0 interface 2 has no altsetting 0 [ 370.402216][T11204] fuse: Bad value for 'fd' [ 370.402685][ T304] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 370.428888][ T304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.436952][ T304] usb 5-1: Product: syz [ 370.439489][T11208] netlink: 412 bytes leftover after parsing attributes in process `syz.1.3574'. [ 370.448894][ T304] usb 5-1: Manufacturer: syz [ 370.454821][ T304] usb 5-1: SerialNumber: syz [ 370.474326][ T304] usb 5-1: config 0 descriptor?? [ 370.690612][T11189] binder: Unknown parameter 'defcontext01777777777777777777777' [ 370.770367][T11227] fuse: Bad value for 'fd' [ 370.793424][ T36] audit: type=1400 audit(2000000015.151:39327): avc: denied { setattr } for pid=11228 comm="syz.5.3582" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 371.068909][ T6338] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 371.218928][ T6338] usb 6-1: Using ep0 maxpacket: 32 [ 371.225279][ T6338] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 371.233592][ T6338] usb 6-1: config 0 has no interface number 0 [ 371.241222][ T6338] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 371.250351][ T6338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.258361][ T6338] usb 6-1: Product: syz [ 371.262584][ T6338] usb 6-1: Manufacturer: syz [ 371.267205][ T6338] usb 6-1: SerialNumber: syz [ 371.272633][ T6338] usb 6-1: config 0 descriptor?? [ 371.278469][ T6338] smsc95xx v2.0.0 [ 371.679777][ T6338] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 371.688914][ T647] Bluetooth: hci0: command 0x1003 tx timeout [ 371.696748][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 371.701534][ T6338] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 371.717693][ T36] audit: type=1400 audit(2000000016.071:39328): avc: denied { create } for pid=11244 comm="syz.1.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 371.723328][T11247] 9pnet_fd: Insufficient options for proto=fd [ 371.944470][ T6338] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 371.955894][ T6338] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 372.018964][ T6342] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 372.168981][ T6342] usb 3-1: Using ep0 maxpacket: 16 [ 372.176275][ T6342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.187465][ T6342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.197682][ T6342] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 372.206926][ T6342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.218985][ T6342] usb 3-1: config 0 descriptor?? [ 372.630370][ T6342] playstation 0003:054C:05C4.004F: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 372.828744][ T6342] playstation 0003:054C:05C4.004F: Failed to retrieve feature with reportID 18: -71 [ 372.838308][ T6342] playstation 0003:054C:05C4.004F: Failed to retrieve DualShock4 pairing info: -71 [ 372.847682][ T6342] playstation 0003:054C:05C4.004F: Failed to get MAC address from DualShock4 [ 372.856545][ T6342] playstation 0003:054C:05C4.004F: Failed to create dualshock4. [ 372.864888][ T6342] playstation 0003:054C:05C4.004F: probe with driver playstation failed with error -71 [ 372.875998][ T6342] usb 3-1: USB disconnect, device number 102 [ 372.927064][ T304] usb 5-1: invalid MIDI in EP 0 [ 372.942353][ T304] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 372.952942][ T304] usb 5-1: USB disconnect, device number 96 [ 372.955247][ T8103] udevd[8103]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 372.989869][T11265] netlink: 'syz.4.3595': attribute type 12 has an invalid length. [ 373.238549][T11272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.247763][T11272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.616846][ T36] audit: type=1400 audit(2000000017.971:39329): avc: denied { getattr } for pid=11292 comm="syz.2.3604" name="/" dev="incremental-fs" ino=1816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 373.758117][T11300] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3606'. [ 373.831235][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3609'. [ 373.831677][T11310] kvm: emulating exchange as write [ 373.849149][T11313] incfs: Backing dir is not set, filesystem can't be mounted. [ 373.857254][T11312] 9p: Unknown Cache mode or invalid value 딊 [ 373.863624][T11313] incfs: mount failed -2 [ 373.875279][ T6342] usb 6-1: USB disconnect, device number 20 [ 373.888137][ T36] audit: type=1400 audit(2000000018.244:39330): avc: denied { nlmsg_tty_audit } for pid=11317 comm="syz.5.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 373.982559][T11322] kvm: pic: non byte write [ 374.077991][T11329] fuse: Bad value for 'rootmode' [ 374.099231][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.105769][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.112166][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.118624][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.124992][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.131368][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.138057][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.144635][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.151023][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.157409][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.163807][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.170187][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.176544][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.183201][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.189670][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.196004][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.202455][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.208782][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.215137][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.221488][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.227830][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.234181][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.240549][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.246850][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.253200][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.259615][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.265938][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.272567][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.279004][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.285311][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.291666][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.298399][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.304590][ T36] audit: type=1400 audit(2000000018.654:39331): avc: denied { create } for pid=11334 comm="syz.5.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 374.325250][T11332] 9pnet_fd: Insufficient options for proto=fd [ 374.347095][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3617'. [ 374.641850][T11367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11367 comm=syz.2.3626 [ 374.654902][T11367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=11367 comm=syz.2.3626 [ 374.674502][T11367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=11367 comm=syz.2.3626 [ 374.801518][ T36] audit: type=1400 audit(2000000019.164:39332): avc: denied { nlmsg_write } for pid=11379 comm="syz.4.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 374.928904][ T304] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 375.068934][ T304] usb 3-1: device descriptor read/64, error -71 [ 375.201929][ T36] audit: type=1400 audit(2000000019.564:39333): avc: denied { mounton } for pid=11413 comm="syz.5.3642" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 375.291406][ T36] audit: type=1400 audit(2000000019.654:39334): avc: denied { connect } for pid=11425 comm="syz.5.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 375.311934][ T36] audit: type=1400 audit(2000000019.654:39335): avc: denied { write } for pid=11425 comm="syz.5.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 375.332212][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 375.339837][ T304] usb 3-1: device descriptor read/64, error -71 [ 375.488898][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 375.495062][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 375.505093][ T9] usb 5-1: config 0 has no interface number 0 [ 375.512907][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 375.522402][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.530534][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 375.538266][ T9] usb 5-1: Product: syz [ 375.542525][ T9] usb 5-1: Manufacturer: syz [ 375.547180][ T9] usb 5-1: SerialNumber: syz [ 375.553025][ T9] usb 5-1: config 0 descriptor?? [ 375.559319][ T9] smsc95xx v2.0.0 [ 375.578934][ T304] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 375.699938][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.710981][ T304] usb 3-1: device descriptor read/64, error -71 [ 375.717301][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.727135][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.744988][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.754098][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.763390][ T10] usb 6-1: config 0 descriptor?? [ 375.948891][ T304] usb 3-1: device descriptor read/64, error -71 [ 375.968753][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 375.979642][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 376.059046][ T304] usb usb3-port1: attempt power cycle [ 376.181400][ T10] plantronics 0003:047F:FFFF.0050: No inputs registered, leaving [ 376.189632][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 376.201075][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 376.209545][ T10] plantronics 0003:047F:FFFF.0050: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 376.398931][ T304] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 376.419928][ T304] usb 3-1: device descriptor read/8, error -71 [ 376.492423][ T9] usb 6-1: USB disconnect, device number 21 [ 376.550005][ T304] usb 3-1: device descriptor read/8, error -71 [ 376.788903][ T304] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 376.809957][ T304] usb 3-1: device descriptor read/8, error -71 [ 376.940021][ T304] usb 3-1: device descriptor read/8, error -71 [ 377.049012][ T304] usb usb3-port1: unable to enumerate USB device [ 377.238957][ T6342] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 377.315986][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3656'. [ 377.350027][T11459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11459 comm=syz.1.3658 [ 377.389955][ T6342] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.401133][ T6342] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 377.412338][ T6342] usb 6-1: config 0 interface 0 has no altsetting 0 [ 377.419198][ T6342] usb 6-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.00 [ 377.428337][ T6342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.438305][ T6342] usb 6-1: config 0 descriptor?? [ 377.443683][T11451] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 377.565784][T11476] netlink: 'syz.1.3665': attribute type 27 has an invalid length. [ 377.659225][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3666'. [ 377.854874][ T6342] wacom 0003:056A:0019.0051: unknown main item tag 0x0 [ 377.861840][ T6342] wacom 0003:056A:0019.0051: unknown main item tag 0x0 [ 377.868717][ T6342] wacom 0003:056A:0019.0051: unknown main item tag 0x0 [ 377.875651][ T6342] wacom 0003:056A:0019.0051: unknown main item tag 0x0 [ 377.882570][ T6342] wacom 0003:056A:0019.0051: unknown main item tag 0x0 [ 377.889473][ T6342] wacom 0003:056A:0019.0051: unknown main item tag 0x0 [ 377.896364][ T6342] wacom 0003:056A:0019.0051: unknown main item tag 0x0 [ 377.903272][ T6342] wacom 0003:056A:0019.0051: unknown main item tag 0x0 [ 377.910387][ T6342] wacom 0003:056A:0019.0051: Unknown device_type for 'HID 056a:0019'. Assuming pen. [ 377.920624][ T6342] wacom 0003:056A:0019.0051: hidraw0: USB HID v0.00 Device [HID 056a:0019] on usb-dummy_hcd.5-1/input0 [ 377.939106][ T6342] input: Wacom Bamboo1 Medium Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0019.0051/input/input35 [ 378.054706][ T6342] usb 6-1: USB disconnect, device number 22 [ 378.099759][ T6338] usb 5-1: USB disconnect, device number 97 [ 378.257640][T11495] rust_binder: Error in use_page_slow: ESRCH [ 378.257668][T11495] rust_binder: use_range failure ESRCH [ 378.263844][T11495] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 378.269363][T11495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 378.277307][T11495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:977 [ 378.312525][T11497] input: syz1 as /devices/virtual/input/input38 [ 378.330130][T11497] rust_binder: Write failure EFAULT in pid:1408 [ 378.507908][ T36] audit: type=1326 audit(2000000022.864:39336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11515 comm="syz.2.3681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb03df8e929 code=0x0 [ 378.588925][ T6342] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 378.728458][T11537] SELinux: policydb string length 5 does not match expected length 8 [ 378.737997][T11537] SELinux: failed to load policy [ 378.738905][ T6342] usb 5-1: Using ep0 maxpacket: 32 [ 378.748934][T11537] netlink: 'syz.5.3686': attribute type 27 has an invalid length. [ 378.759597][ T6342] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 378.767803][ T6342] usb 5-1: config 0 has no interface number 0 [ 378.775732][ T6342] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 378.785153][ T6342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.793471][ T6342] usb 5-1: Product: syz [ 378.797758][ T6342] usb 5-1: Manufacturer: syz [ 378.802689][ T6342] usb 5-1: SerialNumber: syz [ 378.808605][ T6342] usb 5-1: config 0 descriptor?? [ 378.815030][ T6342] smsc95xx v2.0.0 [ 379.216062][ T6342] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 379.226918][ T6342] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 379.360876][T11541] rust_binder: Error while translating object. [ 379.360910][T11541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 379.367191][T11541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:990 [ 379.438920][ T6342] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 379.458815][ T6342] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 379.524647][ T36] audit: type=1400 audit(2000000023.884:39337): avc: denied { create } for pid=11548 comm="syz.5.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 379.570326][T11556] overlay: ./file0 is not a directory [ 379.592404][T11558] fuse: Unknown parameter 'fd}r~Yp+X4G aǣ' [ 379.610179][T11558] cgroup: Invalid name [ 379.610257][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 379.708961][ T9] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 379.860344][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 379.868470][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 379.877125][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 379.889547][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.898600][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.906631][ T9] usb 3-1: Product: syz [ 379.910856][ T9] usb 3-1: Manufacturer: syz [ 379.915463][ T9] usb 3-1: SerialNumber: syz [ 380.456668][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 380.468012][ T9] usb 3-1: USB disconnect, device number 107 [ 380.475416][ T7893] udevd[7893]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 380.982118][ T36] audit: type=1400 audit(2000000025.344:39338): avc: denied { mount } for pid=11565 comm="syz.2.3697" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 380.986073][T11566] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 381.004646][ T36] audit: type=1400 audit(2000000025.344:39339): avc: denied { getopt } for pid=11565 comm="syz.2.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 381.032688][ T36] audit: type=1400 audit(2000000025.394:39340): avc: denied { unmount } for pid=6348 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 381.361445][ T6342] usb 5-1: USB disconnect, device number 98 [ 381.439644][T11578] SELinux: policydb string length 5 does not match expected length 8 [ 381.448183][T11578] SELinux: failed to load policy [ 381.453883][T11578] netlink: 'syz.4.3700': attribute type 27 has an invalid length. [ 381.688996][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 381.689199][ T647] Bluetooth: hci0: command 0x1003 tx timeout [ 381.829014][ T6342] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 381.869715][T11595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 381.869744][T11595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:496 [ 381.989632][ T6342] usb 3-1: not running at top speed; connect to a high speed hub [ 382.007293][ T6342] usb 3-1: config 12 has an invalid interface number: 102 but max is 1 [ 382.015788][ T6342] usb 3-1: config 12 has an invalid interface number: 101 but max is 1 [ 382.024107][ T6342] usb 3-1: config 12 has no interface number 0 [ 382.030324][ T6342] usb 3-1: config 12 has no interface number 1 [ 382.036535][ T6342] usb 3-1: config 12 interface 101 altsetting 14 endpoint 0xC has invalid wMaxPacketSize 0 [ 382.046566][ T6342] usb 3-1: config 12 interface 101 altsetting 14 has a duplicate endpoint with address 0xD, skipping [ 382.057506][ T6342] usb 3-1: config 12 interface 101 altsetting 14 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 382.068588][ T6342] usb 3-1: config 12 interface 101 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 382.079670][ T6342] usb 3-1: config 12 interface 102 has no altsetting 0 [ 382.086528][ T6342] usb 3-1: config 12 interface 101 has no altsetting 0 [ 382.094919][ T6342] usb 3-1: New USB device found, idVendor=0a47, idProduct=9601, bcdDevice=86.d9 [ 382.104017][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.112052][ T6342] usb 3-1: Product: syz [ 382.116237][ T6342] usb 3-1: Manufacturer: syz [ 382.120949][ T6342] usb 3-1: SerialNumber: syz [ 382.138941][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 382.246273][T11611] netlink: 'syz.1.3712': attribute type 4 has an invalid length. [ 382.256970][T11611] netlink: 'syz.1.3712': attribute type 4 has an invalid length. [ 382.288918][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 382.303397][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 382.311822][ T9] usb 6-1: config 0 has no interface number 0 [ 382.328899][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 382.338225][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.349463][T11629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1434 [ 382.350605][ T9] usb 6-1: Product: syz [ 382.358233][T11629] 9pnet_fd: Insufficient options for proto=fd [ 382.360445][ T9] usb 6-1: Manufacturer: syz [ 382.374848][ T9] usb 6-1: SerialNumber: syz [ 382.380242][ T9] usb 6-1: config 0 descriptor?? [ 382.386100][ T9] smsc95xx v2.0.0 [ 382.421426][T11632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3719'. [ 382.425988][T11633] netlink: 'syz.1.3720': attribute type 27 has an invalid length. [ 382.529828][T11580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.538467][T11580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.548581][ T6342] dm9601 3-1:12.102: probe with driver dm9601 failed with error -22 [ 382.558021][ T6342] dm9601 3-1:12.101: probe with driver dm9601 failed with error -22 [ 382.568250][ T6342] usb 3-1: USB disconnect, device number 108 [ 382.787253][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 382.798087][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 383.008049][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 383.018921][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 383.065029][ T36] audit: type=1400 audit(2000000027.424:39341): avc: denied { listen } for pid=11635 comm="syz.2.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 383.276973][T11640] binder: Unknown parameter 'defcontext01777777777777777777777' [ 383.305525][T11646] netlink: 'syz.1.3726': attribute type 27 has an invalid length. [ 383.318905][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 383.365889][T11654] overlayfs: failed to clone upperpath [ 383.463353][T11669] SELinux: policydb string length 5 does not match expected length 8 [ 383.471648][T11669] SELinux: failed to load policy [ 383.476972][T11669] netlink: 'syz.4.3733': attribute type 27 has an invalid length. [ 383.484844][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 383.491531][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.502531][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.512859][T11666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11666 comm=syz.1.3736 [ 383.512901][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 383.534792][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.544232][ T9] usb 3-1: config 0 descriptor?? [ 383.549300][ T36] audit: type=1400 audit(2000000027.904:39342): avc: denied { lock } for pid=11671 comm="syz.1.3737" path="socket:[92415]" dev="sockfs" ino=92415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 383.574635][ T9] hub 3-1:0.0: USB hub found [ 383.779268][ T9] hub 3-1:0.0: 1 port detected [ 384.258199][ T36] audit: type=1400 audit(2000000028.614:39343): avc: denied { audit_write } for pid=11683 comm="syz.4.3741" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 384.498887][ T10] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 384.650320][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 384.658903][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.669081][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.679444][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.688612][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.696689][ T10] usb 5-1: Product: э [ 384.700837][ T10] usb 5-1: Manufacturer: 䰊 [ 384.705456][ T10] usb 5-1: SerialNumber: syz [ 384.809735][ T9] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 384.816250][ T9] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 384.825176][ T9] usbhid 3-1:0.0: can't add hid device: -32 [ 384.831209][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 384.859602][ T9] usb 3-1: USB disconnect, device number 109 [ 384.904556][ T304] usb 6-1: USB disconnect, device number 23 [ 384.918547][ T10] usb 5-1: 0:2 : does not exist [ 384.939093][ T10] usb 5-1: USB disconnect, device number 99 [ 384.950382][ T7893] udevd[7893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 385.277463][T11703] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 385.277494][T11703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 385.286135][T11703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:516 [ 385.436329][T11710] SELinux: policydb string length 5 does not match expected length 8 [ 385.455911][T11710] SELinux: failed to load policy [ 385.461649][T11710] netlink: 'syz.2.3749': attribute type 27 has an invalid length. [ 385.545987][T11718] rust_binder: Error while translating object. [ 385.546024][T11718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 385.565227][T11718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1453 [ 385.616753][T11724] incfs: Backing dir is not set, filesystem can't be mounted. [ 385.658894][T11724] incfs: mount failed -2 [ 385.738000][T11730] fuse: Unknown parameter '0x0000000000000006' [ 385.789064][T11740] overlayfs: failed to clone upperpath [ 385.897477][T11747] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1312600406 (21001606496 ns) > initial count (15862642304 ns). Using initial count to start timer. [ 385.971371][T11767] binder: Unknown parameter 'c_s؆-' [ 386.066880][T11774] binder: Bad value for 'stats' [ 386.338969][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 386.490069][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.501209][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.511401][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 386.520679][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.529486][ T10] usb 6-1: config 0 descriptor?? [ 386.708910][ T304] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 386.741488][T11802] rust_binder: Error while translating object. [ 386.741537][T11802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 386.747839][T11802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1470 [ 386.778398][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 386.797579][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 386.849780][T11808] netlink: 'syz.1.3784': attribute type 27 has an invalid length. [ 386.860010][ T304] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.870267][ T304] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.883273][ T304] usb 3-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.00 [ 386.892475][ T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.901300][ T304] usb 3-1: config 0 descriptor?? [ 386.907317][ T304] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 386.936648][ T10] arvo 0003:1E7D:30D4.0052: unknown main item tag 0x0 [ 386.944377][ T10] arvo 0003:1E7D:30D4.0052: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 387.038882][ T6429] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 387.188888][ T6429] usb 5-1: Using ep0 maxpacket: 16 [ 387.195152][ T6429] usb 5-1: config 0 has no interfaces? [ 387.202171][ T6429] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.211321][ T6429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.219354][ T6429] usb 5-1: Product: syz [ 387.223561][ T6429] usb 5-1: Manufacturer: syz [ 387.228176][ T6429] usb 5-1: SerialNumber: syz [ 387.233807][ T6429] usb 5-1: config 0 descriptor?? [ 387.339444][ T6429] usb 6-1: USB disconnect, device number 24 [ 387.577077][ T6429] usb 5-1: USB disconnect, device number 100 [ 387.732159][T11830] overlayfs: failed to clone upperpath [ 388.014502][T11838] SELinux: policydb string length 5 does not match expected length 8 [ 388.022819][T11838] SELinux: failed to load policy [ 388.028274][T11838] netlink: 'syz.5.3794': attribute type 27 has an invalid length. [ 388.598418][T11849] syz.4.3797: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 388.616577][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.4.3797 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 388.616618][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.616633][T11849] Call Trace: [ 388.616642][T11849] [ 388.616652][T11849] __dump_stack+0x21/0x30 [ 388.616687][T11849] dump_stack_lvl+0x10c/0x190 [ 388.616716][T11849] ? __cfi_dump_stack_lvl+0x10/0x10 [ 388.616746][T11849] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 388.616772][T11849] dump_stack+0x19/0x20 [ 388.616799][T11849] warn_alloc+0x1bc/0x2a0 [ 388.616824][T11849] ? x64_sys_call+0x2adc/0x2ee0 [ 388.616856][T11849] ? __cfi_warn_alloc+0x10/0x10 [ 388.616882][T11849] ? __get_vm_area_node+0x1dc/0x3a0 [ 388.616908][T11849] ? xt_alloc_entry_offsets+0x56/0xe0 [ 388.616933][T11849] __vmalloc_node_range_noprof+0x68e/0x1420 [ 388.616961][T11849] ? __kernel_text_address+0x11/0x40 [ 388.616986][T11849] ? unwind_get_return_address+0x51/0x90 [ 388.617014][T11849] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 388.617042][T11849] ? __kmalloc_large_node_noprof+0x1e/0xe0 [ 388.617072][T11849] ? __kmalloc_node_noprof+0x2a5/0x450 [ 388.617101][T11849] ? nf_setsockopt+0x28d/0x2b0 [ 388.617130][T11849] __kvmalloc_node_noprof+0xfc/0x300 [ 388.617158][T11849] ? xt_alloc_entry_offsets+0x56/0xe0 [ 388.617180][T11849] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 388.617211][T11849] xt_alloc_entry_offsets+0x56/0xe0 [ 388.617233][T11849] translate_table+0x1a9/0x1f90 [ 388.617265][T11849] ? cred_has_capability+0x281/0x380 [ 388.617300][T11849] ? kasan_save_alloc_info+0x40/0x50 [ 388.617326][T11849] ? __kasan_kmalloc+0x96/0xb0 [ 388.617360][T11849] ? arpt_register_table+0x930/0x930 [ 388.617390][T11849] ? __kvmalloc_node_noprof+0x168/0x300 [ 388.617418][T11849] ? check_stack_object+0x82/0x140 [ 388.617455][T11849] ? __kasan_check_write+0x18/0x20 [ 388.617483][T11849] ? _copy_from_user+0x8b/0xb0 [ 388.617519][T11849] ? copy_from_sockptr_offset+0x77/0xb0 [ 388.617550][T11849] do_arpt_set_ctl+0x712/0xa00 [ 388.617580][T11849] ? __asan_memcpy+0x5a/0x80 [ 388.617607][T11849] ? release_sock+0x171/0x1f0 [ 388.617641][T11849] ? __cfi_do_arpt_set_ctl+0x10/0x10 [ 388.617670][T11849] ? sockopt_release_sock+0x5c/0x70 [ 388.617692][T11849] ? do_ip_setsockopt+0x1bb2/0x29e0 [ 388.617718][T11849] ? __cfi_avc_has_perm+0x10/0x10 [ 388.617744][T11849] ? futex_wake+0x63a/0x900 [ 388.617768][T11849] ? selinux_socket_setsockopt+0x2ea/0x390 [ 388.617799][T11849] nf_setsockopt+0x28d/0x2b0 [ 388.617828][T11849] ip_setsockopt+0xf6/0x100 [ 388.617854][T11849] udp_setsockopt+0xa3/0xc0 [ 388.617878][T11849] sock_common_setsockopt+0xb8/0xd0 [ 388.617909][T11849] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 388.617941][T11849] do_sock_setsockopt+0x26a/0x400 [ 388.617967][T11849] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 388.617995][T11849] __x64_sys_setsockopt+0x1b8/0x250 [ 388.618021][T11849] x64_sys_call+0x2adc/0x2ee0 [ 388.618052][T11849] do_syscall_64+0x58/0xf0 [ 388.618072][T11849] ? clear_bhb_loop+0x50/0xa0 [ 388.618100][T11849] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 388.618125][T11849] RIP: 0033:0x7f524d38e929 [ 388.618146][T11849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.618167][T11849] RSP: 002b:00007f524e1a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 388.618193][T11849] RAX: ffffffffffffffda RBX: 00007f524d5b6080 RCX: 00007f524d38e929 [ 388.618212][T11849] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 000000000000000c [ 388.618228][T11849] RBP: 00007f524d410b39 R08: 0000000000000438 R09: 0000000000000000 [ 388.618245][T11849] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.618261][T11849] R13: 0000000000000000 R14: 00007f524d5b6080 R15: 00007ffe795da0d8 [ 388.618281][T11849] [ 388.618327][T11849] Mem-Info: [ 388.994548][T11849] active_anon:9238 inactive_anon:226 isolated_anon:0 [ 388.994548][T11849] active_file:10125 inactive_file:19116 isolated_file:0 [ 388.994548][T11849] unevictable:1536 dirty:26 writeback:0 [ 388.994548][T11849] slab_reclaimable:6459 slab_unreclaimable:75144 [ 388.994548][T11849] mapped:30036 shmem:475 pagetables:1505 [ 388.994548][T11849] sec_pagetables:3 bounce:0 [ 388.994548][T11849] kernel_misc_reclaimable:0 [ 388.994548][T11849] free:1475762 free_pcp:5742 free_cma:0 [ 389.040104][T11849] Node 0 active_anon:36952kB inactive_anon:904kB active_file:40500kB inactive_file:76464kB unevictable:6144kB isolated(anon):0kB isolated(file):0kB mapped:120144kB dirty:104kB writeback:0kB shmem:1900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:6272kB pagetables:6020kB sec_pagetables:12kB all_unreclaimable? no [ 389.072989][T11849] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:68kB free_cma:0kB [ 389.102983][T11849] lowmem_reserve[]: 0 3921 3921 [ 389.107937][T11849] Normal free:2942836kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36952kB inactive_anon:904kB active_file:40500kB inactive_file:76464kB unevictable:6144kB writepending:104kB present:5242880kB managed:4016120kB mlocked:6144kB bounce:0kB free_pcp:22704kB local_pcp:16172kB free_cma:0kB [ 389.140401][T11849] lowmem_reserve[]: 0 0 0 [ 389.144817][T11849] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 389.160323][T11849] Normal: 42*4kB (UME) 60*8kB (UE) 313*16kB (UME) 488*32kB (UME) 374*64kB (UME) 87*128kB (UME) 48*256kB (UME) 21*512kB (UME) 14*1024kB (UME) 5*2048kB (UE) 697*4096kB (UM) = 2958872kB [ 389.178635][T11849] 30003 total pagecache pages [ 389.183741][T11849] 290 pages in swap cache [ 389.188166][T11849] Free swap = 123168kB [ 389.192538][T11849] Total swap = 124996kB [ 389.196857][T11849] 2097051 pages RAM [ 389.200906][T11849] 0 pages HighMem/MovableOnly [ 389.205745][T11849] 351517 pages reserved [ 389.210211][T11849] 0 pages cma reserved [ 389.217218][T11849] Memory allocations: [ 389.221646][T11849] 0 B 0 init/main.c:1370 func:do_initcalls [ 389.229092][T11849] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 389.237364][T11849] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 389.245132][T11849] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 389.253186][T11849] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 389.261187][T11849] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 389.269859][T11849] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 389.277783][T11849] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 389.285893][T11849] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 389.286004][T11873] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 389.294220][T11849] 0 B 0 init/initramfs.c:101 func:find_link [ 389.537416][T11884] kvm: pic: non byte write [ 389.544009][ T6342] usb 3-1: USB disconnect, device number 110 [ 389.608261][ T6429] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 389.670633][T11894] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 389.758875][ T6429] usb 6-1: Using ep0 maxpacket: 16 [ 389.773578][ T6429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.785009][ T6429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.795144][ T6429] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 389.804708][ T6429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.813785][ T6429] usb 6-1: config 0 descriptor?? [ 389.928989][ T10] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 389.991799][T11904] binder: Unknown parameter '' [ 390.052627][T11909] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3819'. [ 390.078885][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 390.085369][ T10] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 390.094155][ T10] usb 5-1: config 0 has no interface number 0 [ 390.100555][ T10] usb 5-1: config 0 interface 228 has no altsetting 0 [ 390.109560][ T10] usb 5-1: New USB device found, idVendor=07aa, idProduct=0056, bcdDevice=81.38 [ 390.118787][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.121489][T11909] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 390.127041][ T10] usb 5-1: Product: syz [ 390.127065][ T10] usb 5-1: Manufacturer: syz [ 390.145129][ T10] usb 5-1: SerialNumber: syz [ 390.150529][ T10] usb 5-1: config 0 descriptor?? [ 390.225208][ T6429] playstation 0003:054C:05C4.0053: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 390.322496][T11918] rust_binder: Error while translating object. [ 390.322522][T11918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 390.328811][T11918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1060 [ 390.423335][ T6429] playstation 0003:054C:05C4.0053: Invalid reportID received, expected 18 got 97 [ 390.441751][ T6429] playstation 0003:054C:05C4.0053: Failed to retrieve DualShock4 pairing info: -22 [ 390.451097][ T6429] playstation 0003:054C:05C4.0053: Failed to get MAC address from DualShock4 [ 390.459908][ T6429] playstation 0003:054C:05C4.0053: Failed to create dualshock4. [ 390.468075][ T6429] playstation 0003:054C:05C4.0053: probe with driver playstation failed with error -22 [ 390.618929][ T6342] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 390.628490][ T6429] usb 6-1: USB disconnect, device number 25 [ 390.778883][ T6342] usb 3-1: Using ep0 maxpacket: 32 [ 390.785187][ T6342] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 390.793510][ T6342] usb 3-1: config 0 has no interface number 0 [ 390.801046][ T6342] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 390.810158][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.818302][ T6342] usb 3-1: Product: syz [ 390.822681][ T6342] usb 3-1: Manufacturer: syz [ 390.827304][ T6342] usb 3-1: SerialNumber: syz [ 390.832822][ T6342] usb 3-1: config 0 descriptor?? [ 390.838617][ T6342] smsc95xx v2.0.0 [ 391.153239][ T36] audit: type=1400 audit(2000000035.514:39344): avc: denied { attach_queue } for pid=11936 comm="syz.5.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 391.241966][ T6342] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 391.252868][ T6342] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 391.368166][ T6429] kernel write not supported for file [eventfd] (pid: 6429 comm: kworker/0:5) [ 391.463109][ T6342] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 391.474109][ T6342] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 391.765533][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.774282][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.491392][ T12] tipc: Subscription rejected, illegal request [ 392.670345][T11955] tmpfs: Unknown parameter 'usrquota' [ 392.699386][T11961] 9pnet_fd: Insufficient options for proto=fd [ 392.719961][ T12] tipc: Subscription rejected, illegal request [ 392.737970][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'. [ 392.811610][T11971] netlink: 'syz.1.3837': attribute type 27 has an invalid length. [ 393.391189][ T10] usb 3-1: USB disconnect, device number 111 [ 393.481762][T11980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 393.570399][T11979] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 393.570844][ T6342] usb 5-1: USB disconnect, device number 101 [ 393.641078][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3844'. [ 393.687524][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3846'. [ 393.697492][T11999] fuse: Bad value for 'fd' [ 393.708280][T11996] rust_binder: Write failure EINVAL in pid:1084 [ 393.708364][T11996] rust_binder: Read failure Err(EAGAIN) in pid:1084 [ 393.745700][T12009] @: renamed from vlan0 [ 393.805876][T12014] SELinux: policydb string length 5 does not match expected length 8 [ 393.814307][T12014] SELinux: failed to load policy [ 393.819805][T12014] netlink: 'syz.4.3850': attribute type 27 has an invalid length. [ 393.941771][T12025] rust_binder: Write failure EINVAL in pid:1527 [ 394.041359][T12031] tipc: Enabling of bearer rejected, failed to enable media [ 394.172709][T12039] SELinux: policydb string length 5 does not match expected length 8 [ 394.181132][T12039] SELinux: failed to load policy [ 394.186527][T12039] netlink: 'syz.4.3859': attribute type 27 has an invalid length. [ 394.239189][ T36] audit: type=1400 audit(2000000038.604:39345): avc: denied { execute } for pid=12046 comm="syz.4.3862" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 394.333071][T12069] SELinux: policydb string length 5 does not match expected length 8 [ 394.342184][T12069] SELinux: failed to load policy [ 394.347523][T12069] netlink: 'syz.4.3868': attribute type 27 has an invalid length. [ 394.420816][T12089] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 394.420816][T12089] null pointer dereference occurred [ 394.433429][T12089] ------------[ cut here ]------------ [ 394.438963][T12089] kernel BUG at rust/helpers/bug.c:7! [ 394.440380][ T36] audit: type=1400 audit(2000000038.804:39346): avc: denied { read } for pid=90 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 394.445166][T12089] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 394.473235][T12089] CPU: 0 UID: 0 PID: 12089 Comm: syz.4.3877 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 394.486698][ T36] audit: type=1400 audit(2000000038.804:39347): avc: denied { search } for pid=90 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.486813][T12089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.518340][T12089] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 394.519132][ T36] audit: type=1400 audit(2000000038.804:39348): avc: denied { write } for pid=90 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.523811][T12089] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 70 0b ea 2f 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 3a cf a3 a3 90 90 90 90 90 90 90 90 90 [ 394.523840][T12089] RSP: 0018:ffffc90000e8f1b0 EFLAGS: 00010246 [ 394.548967][ T6342] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 394.564818][T12089] RAX: 000000000000005a RBX: 1ffff920001d1e38 RCX: b3132d3809969b00 [ 394.564847][T12089] RDX: ffffc90010296000 RSI: 00000000000028bd RDI: 00000000000028be [ 394.564863][T12089] RBP: ffffc90000e8f1b0 R08: ffffc90000e8eea7 R09: 1ffff920001d1dd4 [ 394.564883][T12089] R10: dffffc0000000000 R11: fffff520001d1dd5 R12: 0000000000000000 [ 394.581251][ T36] audit: type=1400 audit(2000000038.804:39349): avc: denied { add_name } for pid=90 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.586583][T12089] R13: dffffc0000000000 R14: ffffc90000e8f1e0 R15: ffffc90000e8f210 [ 394.604865][ T36] audit: type=1400 audit(2000000038.804:39350): avc: denied { create } for pid=90 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 394.610611][T12089] FS: 00007f524e1c46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 394.610638][T12089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.610657][T12089] CR2: 0000200000001000 CR3: 0000000116084000 CR4: 00000000003526b0 [ 394.610682][T12089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 394.638899][ T36] audit: type=1400 audit(2000000038.804:39351): avc: denied { append open } for pid=90 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 394.639319][T12089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 394.660071][ T6341] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 394.668830][T12089] Call Trace: [ 394.668844][T12089] [ 394.668855][T12089] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 394.678908][ T36] audit: type=1400 audit(2000000038.804:39352): avc: denied { getattr } for pid=90 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 394.683444][T12089] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 394.748890][ T6342] usb 3-1: Using ep0 maxpacket: 32 [ 394.766404][T12089] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 394.766464][T12089] ? p9pdu_vwritef+0x2720/0x2720 [ 394.793594][ T6342] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 394.798063][T12089] ? radix_tree_node_alloc+0x1af/0x400 [ 394.798102][T12089] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 394.806973][ T6342] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.811631][T12089] ? __asan_memcpy+0x5a/0x80 [ 394.811669][T12089] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 394.811712][T12089] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 394.821151][ T6341] usb 6-1: Using ep0 maxpacket: 32 [ 394.830067][T12089] ? p9pdu_writef+0xdb/0x130 [ 394.830117][T12089] ? p9pdu_vwritef+0x2720/0x2720 [ 394.830152][T12089] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 394.837395][ T6341] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 217, changing to 11 [ 394.842879][T12089] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 394.842939][T12089] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 394.853412][ T6341] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.856844][T12089] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 394.865926][ T6342] usb 3-1: config 0 has no interface number 0 [ 394.866405][T12089] ? p9_client_prepare_req+0x732/0xa10 [ 394.881114][ T6341] usb 6-1: config 1 interface 0 has no altsetting 0 [ 394.886623][T12089] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 394.904500][ T6342] usb 3-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 394.916070][T12089] ? __kasan_check_write+0x18/0x20 [ 394.916111][T12089] ? _raw_spin_lock+0x8c/0x120 [ 394.916147][T12089] ? __cfi__raw_spin_lock+0x10/0x10 [ 394.925993][ T6341] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.40 [ 394.929881][T12089] ? __kasan_check_write+0x18/0x20 [ 394.929920][T12089] ? _raw_spin_lock+0x8c/0x120 [ 394.935790][ T6342] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 394.941993][T12089] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 394.950537][ T6341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.963198][T12089] p9_fd_request+0x38d/0x500 [ 394.963233][T12089] p9_client_rpc+0x2f9/0xb40 [ 394.963263][T12089] ? bt_sock_poll+0x2e2/0x7b0 [ 395.036332][T12089] ? p9_fid_create+0x3d0/0x3d0 [ 395.041123][T12089] ? __cfi_sock_poll+0x10/0x10 [ 395.045910][T12089] ? p9_conn_create+0x4c9/0x570 [ 395.050778][T12089] ? p9_fd_create+0x2f3/0x4c0 [ 395.055468][T12089] p9_client_create+0x96a/0x1190 [ 395.060421][T12089] ? __cfi_p9_client_create+0x10/0x10 [ 395.065812][T12089] ? kasan_save_alloc_info+0x40/0x50 [ 395.071109][T12089] ? __kasan_kmalloc+0x96/0xb0 [ 395.075899][T12089] ? kstrdup+0x7b/0x140 [ 395.080074][T12089] ? __kasan_check_write+0x18/0x20 [ 395.085198][T12089] v9fs_session_init+0x1e1/0x1820 [ 395.090240][T12089] ? __cfi_v9fs_session_init+0x10/0x10 [ 395.095711][T12089] ? kasan_save_alloc_info+0x40/0x50 [ 395.101024][T12089] ? __kasan_kmalloc+0x96/0xb0 [ 395.105809][T12089] ? v9fs_mount+0xbd/0xa00 [ 395.110246][T12089] v9fs_mount+0xd7/0xa00 [ 395.114507][T12089] ? __cfi_v9fs_mount+0x10/0x10 [ 395.119375][T12089] ? selinux_capable+0x38/0x50 [ 395.124246][T12089] legacy_get_tree+0x106/0x1b0 [ 395.129021][T12089] ? __cfi_v9fs_mount+0x10/0x10 [ 395.133892][T12089] vfs_get_tree+0x9e/0x290 [ 395.138327][T12089] do_new_mount+0x251/0xb40 [ 395.142849][T12089] ? security_capable+0xcf/0xf0 [ 395.147714][T12089] path_mount+0x688/0x1050 [ 395.152145][T12089] ? putname+0x113/0x150 [ 395.156407][T12089] __se_sys_mount+0x2bd/0x480 [ 395.161105][T12089] ? __x64_sys_mount+0xf0/0xf0 [ 395.165886][T12089] ? __kasan_check_write+0x18/0x20 [ 395.171013][T12089] ? fpregs_restore_userregs+0x11d/0x260 [ 395.176657][T12089] __x64_sys_mount+0xc3/0xf0 [ 395.181270][T12089] x64_sys_call+0x2021/0x2ee0 [ 395.185965][T12089] do_syscall_64+0x58/0xf0 [ 395.190395][T12089] ? clear_bhb_loop+0x50/0xa0 [ 395.195088][T12089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 395.200992][T12089] RIP: 0033:0x7f524d38e929 [ 395.205417][T12089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.225035][T12089] RSP: 002b:00007f524e1c4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 395.233485][T12089] RAX: ffffffffffffffda RBX: 00007f524d5b5fa0 RCX: 00007f524d38e929 [ 395.241466][T12089] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 395.249458][T12089] RBP: 00007f524d410b39 R08: 0000200000000440 R09: 0000000000000000 [ 395.257438][T12089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.265419][T12089] R13: 0000000000000000 R14: 00007f524d5b5fa0 R15: 00007ffe795da0d8 [ 395.273408][T12089] [ 395.276520][T12089] Modules linked in: [ 395.280621][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.280761][T12089] ---[ end trace 0000000000000000 ]--- [ 395.288671][ T6341] usb 6-1: Product: ォ廰惛尫䫖䑘붳㐀㿂뼵㈉붾㠕럩ꉺ㢦白⬊ⶇ䬐쨧䨱蟕ɶ桵恂捳㑅쒓䳩괮獝몪候뜫㚼쬥䵅㙁愃⨽ꣅſ፯ጛ腥곱忓स⿄ᮥ렎뛺ⴧꇷ∵ӟᷥ逖ﶓ [ 395.315199][ T6342] usb 3-1: Product: syz [ 395.319428][ T6342] usb 3-1: Manufacturer: syz [ 395.324057][ T6342] usb 3-1: SerialNumber: syz [ 395.329152][ T6341] usb 6-1: Manufacturer: и [ 395.330452][T12089] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 395.334044][ T6341] usb 6-1: SerialNumber: Ь [ 395.341206][ T6342] usb 3-1: config 0 descriptor?? [ 395.348085][T12089] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 70 0b ea 2f 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 3a cf a3 a3 90 90 90 90 90 90 90 90 90 [ 395.353312][ T6342] smsc95xx v2.0.0 [ 395.373941][ T6342] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 395.377955][T12089] RSP: 0018:ffffc90000e8f1b0 EFLAGS: 00010246 [ 395.384367][ T6342] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 395.398791][T12089] RAX: 000000000000005a RBX: 1ffff920001d1e38 RCX: b3132d3809969b00 [ 395.406915][T12089] RDX: ffffc90010296000 RSI: 00000000000028bd RDI: 00000000000028be [ 395.414963][T12089] RBP: ffffc90000e8f1b0 R08: ffffc90000e8eea7 R09: 1ffff920001d1dd4 [ 395.423008][T12089] R10: dffffc0000000000 R11: fffff520001d1dd5 R12: 0000000000000000 [ 395.431268][T12089] R13: dffffc0000000000 R14: ffffc90000e8f1e0 R15: ffffc90000e8f210 [ 395.439709][T12089] FS: 00007f524e1c46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 395.448755][T12089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.455436][T12089] CR2: 00007f524e161d58 CR3: 0000000116084000 CR4: 00000000003526b0 [ 395.463527][T12089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.471585][T12089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.480367][T12089] Kernel panic - not syncing: Fatal exception [ 395.488754][T12089] Kernel Offset: disabled [ 395.493089][T12089] Rebooting in 86400 seconds..