last executing test programs: 4.318512139s ago: executing program 3 (id=1477): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) close_range(r2, 0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x30, r6}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, r6}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @remote}, r6}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r7, 0x1, 0x13, 0x0, &(0x7f0000002400)) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000500)={0x3, 0x0, @pic={0x2, 0xb, 0xf7, 0x1, 0xff, 0xd, 0x3, 0x8, 0x7f, 0x4, 0xbe, 0x9, 0x6, 0x0, 0x2, 0x7}}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x80010, r1, 0x2000) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000100)=""/135, 0x200000, 0x0, 0x4, 0x1}, 0x20) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOC_STREAMS(r10, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"]) openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) 4.177125071s ago: executing program 3 (id=1482): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa40) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8000, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000001c0)={r1, 0x7, {0x0, 0x0, 0x0, 0xcc50, 0x0, 0x0, 0x0, 0x1b, 0x10, "ed480a5f790af15282d8d6fe605d02e0ddc8d8eaff7413be4f43ff98379ff130cc76e75ce1af1a24e7e3bcb63da5c5f21c5af5daad422454ec74aa40b73a2627", "9a8ac3c4a41f3b5582bd832139ac24ab15654aba0b380c0635fb8790a5a19cdba9278d9b087eebe44e8b2622e6f49b50ff7f4d68da689631ef2abb58f08e91ce", "c860f85a0706eb55f0a6e70df3f6b107884e0a3c79b3bf60c940169d9bb1733f", [0xfffffffffffffffe, 0x5]}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0xc000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc04"], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000300)=0x5) r9 = dup2(r5, r8) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4081) r10 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x400, 0x86) futimesat(r10, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x11, r3, 0x147a5000) rt_sigtimedwait(&(0x7f0000000440)={[0x40]}, 0x0, 0xfffffffffffffffe, 0x8) r11 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r11, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 3.644175059s ago: executing program 3 (id=1489): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000180)={0x77c, [0x3, 0x7dffffff], 0x6}, 0x10) r1 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fchdir(r2) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000500)='maps\x00') close_range(r0, 0xffffffffffffffff, 0x0) 3.474932973s ago: executing program 0 (id=1492): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x70bd2c, 0x25dfdbfc, {{@in=@rand_addr=0x64010102, 0x4d3, 0xff}, @in6=@mcast2, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x4e22, 0x80, 0x4e20, 0x3, 0xa, 0x80, 0xb0, 0x37, 0x0, 0xffffffffffffffff}, {{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x6, 0x4e21, 0x200, 0xa, 0x20, 0x20, 0x89}, {0x56, 0x2, 0x4, 0x9, 0x3, 0xfffffffffffff2d6, 0x1, 0x4}, {0x3ff, 0x1, 0x6, 0x7}, 0x7, 0x6e6bb2, 0x2}, 0x3cd07d78, 0x29a9, 0x8000, 0x70bd26}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x4d6, 0x32}, 0xa, @in=@empty, 0x3506, 0x4, 0x1, 0x7, 0x1e, 0x101, 0x9}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40004}, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000011c0)={{r2}, 0x9, 0x80, 0x2}) read(r0, &(0x7f0000000000)=""/175, 0xfffffe14) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)={0x0, 0x7, 0x3a, {0x3a, 0x10, "c21226cd97f13834f9b11266a2c58e710a7c010698a2e7ec5c31f39a3ebfc3253f6bb22282a3feae4c9b56505b9da6cde314d3aeb1657c6b"}}, &(0x7f0000000100)={0x0, 0x3, 0x36, @string={0x36, 0x3, "34527d1bb96d6c7924cb08b7561cd18e59029489640055203d768c2993eb3c8f5631354257c560b51e9589f22678b054e4eea778"}}, &(0x7f0000000140), &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xe5, 0x1, {0x22, 0xa4a}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0x30, 0xb1, "03a369d8a289b9f1623a318af0015504c8f15b5cd1fe837068a6e5c3552d2a8ca4cf477c3cf2cf236547e32f15a116717d6b9a6c137633d42037d34ec290a5d20fe770e49b768b7988e3e66258a7f852dad77f96842e1fded92793c5b85770c4105e1ab8b8852abcdc8e01d8b1793352dd0055dac93c2d5fc4022976643d6b954c15dcd2f7db9f9a93a765d852e58107549c6376df65820be5770709a4ced2a57ce8719e3022767d7ba6d7529d928ab8dd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000340)={0x20, 0x1, 0xc, "21a38bfb09077805726e14ca"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xd}}) 2.545523368s ago: executing program 1 (id=1495): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000080)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={[0x5]}, 0x8}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000002c0)={0x35}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1f808766b420844a}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008000}, 0x40) getsockname(r5, &(0x7f0000000300)=@rc={0x1f, @fixed}, &(0x7f0000000040)=0x80) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x400) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000240)=@arm64={0xc0, 0x7, 0xd, '\x00', 0x400000000000008}) r9 = socket(0x23, 0x3, 0x0) write(r9, &(0x7f0000000000)="1c0000001a005f0015f9f40700090400810000008001400000000000", 0x1c) unshare(0x62040200) syz_open_procfs(0x0, &(0x7f00000003c0)='cpuset\x00') signalfd(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 2.403246661s ago: executing program 1 (id=1496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000380)={0xbc, 0x0, 0x3}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x1000000, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1b0, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x30000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf906}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc45}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x55fe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x31}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40000}, 0x4044810) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x29, 0x3, 0x0, {0x7, @ether_spec={@local, @remote, 0x1ff}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x8000, [0x2, 0x2]}, @udp_ip6_spec={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x4e23, 0x4e22, 0x9c}, {0x0, @broadcast, 0x3, 0x0, [0x3, 0x5]}, 0xfffffffffffffffe, 0x1}}}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') pread64(r6, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) getpeername$unix(r6, &(0x7f0000000680), &(0x7f0000000700)=0x6e) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) mmap(&(0x7f000090c000/0x4000)=nil, 0x4000, 0x200000b, 0x810, r8, 0x7fff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="f4010000e9c541474e300aefdbb47e585afe0a3283deca8dfd1aadeb04427b0f17f9c2b8d6b81e91dbc039e202084593698282cedf9c4c8161a230bbffc70e581f3c511b8ab95ed4be0895303182afd308c6f3fbc28895ebf4d0d374f6693750692f2f4519431c40e8053037e386cf685e13745bc0eeae73a4df7f67a95a22b38ce57a1deb26d546a22f57acae79d85e75a23e48e14b88aaac55bc62b07c74915baa29363b4351c60fcf025632f07c68dae93604348fecf1ab0ac2f86051726a6e613714", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf255200000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) 2.262967243s ago: executing program 1 (id=1497): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{}]}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) 2.262375443s ago: executing program 1 (id=1498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0xffffff88, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.261882713s ago: executing program 1 (id=1499): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x8a200, 0x0) openat(r0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x68) clock_settime(0xcc80f84dcac64fc7, &(0x7f0000000680)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00), 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) syz_clone3(&(0x7f0000000040)={0x5200c100, 0x0, 0x0, 0x0, {0x86c}, 0x0, 0xff7c, 0x0, 0x0, 0xc3}, 0x58) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r5) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="24000000010006", 0x7) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2}], 0xfd, 0x0, &(0x7f00000003c0)="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"}) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\x00\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r\xba\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/468) 2.179244344s ago: executing program 1 (id=1500): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x400400, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x108b, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x70bd2b, 0x255fdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xbcdbd4d3631d4fe1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x80) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100022000004043550000a52009040006040300030009210000008160ca77cd058103100000fe0900"/54], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x400400, 0x1) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x108b, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x70bd2b, 0x255fdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xbcdbd4d3631d4fe1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x80) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100022000004043550000a52009040006040300030009210000008160ca77cd058103100000fe0900"/54], 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) 607.3289ms ago: executing program 3 (id=1501): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x608202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="c4c1c25fcc66f3df47000f01f766b807000f00d0440f20c0350c000000440f22c0b8010000000f01c10f3067660ffc4100f23e0f32ea0b0000002801", 0x3c}], 0x1, 0x48, &(0x7f0000000100)=[@efer={0x2, 0x1000}], 0x1) (async, rerun: 64) keyctl$join(0x1, 0x0) (async, rerun: 64) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000001c0)={0x3, 0x0, 0x80, &(0x7f0000000140)=""/128}) (async) r3 = socket$inet6(0xa, 0x5, 0x9) (async) ioctl$KVM_NMI(r2, 0xae9a) (async) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001f40)={'ip6_vti0\x00', &(0x7f0000001ec0)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x0, 0x5, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7800, 0x6, 0x800}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc0}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000280)="e70f0385de56f4ce045dd1c769c29334e2b6e7837328f819b578875ee8be329cc7185de838859f8cc9e2ee34b353ecd52f802e330f0e565772", 0x39}, {&(0x7f00000002c0)="90c0082d0d417e54e6b25540fc8908ea2b4d43beabf882432dea0f9cc20f601f1b618c", 0x23}, {&(0x7f0000000300)="ea80533629b6457e8f034a9257ccb3fba07921e645155a79635d8ce35e866e99edf65869bcf818c2285f0fd2a8c7b3465323f46f6a1673e5c645bb198141ecf6fd197042d11865cb817d59235b5963c7ef7d86dda6ba7dc952017be37dc47782b886dba14afca2b4fbd81e205cbb27ea74cc7a228ea54750c3877eec3be6d1bf7818cf1b20a6810c2188607e47615a829d2f5ff7343bc5937a6cc93aec83e1f21475e1db7d9c7a7224f28e440870b7c7d06e45793aa8cefb596acb15829df425758f9b69b0a357f9f60fc98d289cd0e127dcf1ef13cf599c83cb9640a63512d8a8269d34cc31df34ab9b51be8fcf5108155b1cf9efab0c85c3ca", 0xfa}, {&(0x7f0000000400)="ee30ff8c2a9fa9f504070b1c19697db4cb9438d7641ba56683e67c1aa3d8e913c23bf195175e1bfba688a04c5346500618355dec3b74b220b5a7e3881eca98a1e91385d59f2e7c23839d2a292a5f2832195dfd34d1c8a9e7d24fa7e4c84ffda25bda6df88f33417ddb113c8daf7a85a3ae2dbda6f5d2bd2f6582e3a4808e1b96e306046db16198506212a617a1d714eb25ccc992fee4d4c72f1b1f87be89bd3b2b13b3b371d21da0c94dab9388db863954053772cb4b30474f92bf7cfb2144ca0c64e13ae8e5565e5798a4ec89dca2516b47cd0a07bf423510de4d9d195720134efc0d32340a", 0xe6}], 0x4, &(0x7f0000000540)=[@dstopts_2292={{0xf8, 0x29, 0x4, {0x3b, 0x1b, '\x00', [@pad1, @generic={0x6, 0xd7, "5aafaddfb5f776de558ef4b210c7f309de4d2c8c181bc8a41882ff5398c3ab7c8e6a04d79b197be4f1200fe9bb312f65d5b1cdf6c4be42436924a526b4736d6583c4dc144f7e145ab4b2d3edcaf31d3eb0ceb36c0e564de296c802893d18e692fd4a448beb205914487e8707f2602c50dfaa2e5aa6ca55567be61a757956d755749a1a93d80c11481ab4fe5e8eb64827aa42b45237e24a2a5a276120ccafc348d8ecd2ba5956d71bcae20340b6ec2cfb9c9de1e1e5169ff20330394f78d71d929fad0f6b584bb1d7bdbd4d6d962cea048e989b1b7d00f2"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x33, 0x7, '\x00', [@generic={0x1, 0x22, "e0e8b61d00d5fd989f816ed0993c912c3e941eb3f09f52b5244a57444c4650f7e43c"}, @ra={0x5, 0x2, 0x200}, @hao={0xc9, 0x10, @empty}]}}}, @hopopts={{0x1f0, 0x29, 0x36, {0x3a, 0x3a, '\x00', [@hao={0xc9, 0x10, @mcast2}, @generic={0x8, 0x1e, "69033b1aa4739d3392ff37ea5d0ccd11fffd8a8acbe8a0480e9cf9d11beb"}, @generic={0x1, 0xa2, "101e169aa31ed01c7010ceccdd7500a3027a539b52fd874c6fc067ab7f4120f1ae16b3c240b7b492ecac9a2c6e7546a96a8282186d690546ec9345367120de78a1c8e16b99f0426f355529b17f445e2cb0c90d4cf420f5cffff955de444f4cee71024bfbed73b4d54f9babad27883bd3df65eddf8340f10ceb93647acc54e95a204f27950e06786e7db38f0b9dfbafcda90e27b6b26107f6648b104e5ad60d4cbffe"}, @padn={0x1, 0x1, [0x0]}, @generic={0x6, 0xca, "aeea1004d6a5be5fbbd4ca9521830b0faecc08e1ca46797bd9ee79508eb61892813f33ce23c9f76d82bcf48b907897a92acb44513adbec25bb947afdddf82167609f131968428cf553a64e34f79041d86a581d00bd5563d80f83ee32a28907f762c2ccbead51bdfdcb921afd25ab64c2df93d07fdff02f066cb61aa29fcf6f13006e2abeae5bb3ee4edbbc9ba6b3fc96555d9eda1c5a377846d7b0ac6f6b92b9faaade85613c7edd30eaae4af7210843f3a59c830efa63351ba342038b97018293f72ae14a38b68e371c"}, @enc_lim={0x4, 0x1, 0x62}, @calipso={0x7, 0x28, {0x2, 0x8, 0x7, 0x6, [0xfffffffffffffff7, 0xfffffffffffffffd, 0x3, 0x1]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x1, 0x2, 0x0, [@empty]}}}], 0x398}}, {{&(0x7f0000000900)={0xa, 0x4e23, 0x2, @empty, 0x794}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000940)="28ae29385dbb6413eb83afeb643e2da21d2571ebae6546623d44b7a6bdc4d244474955311a3d402594d5141ecd33226d16fe77d0f15da718fc5ada327fe9daffdb9e2519bafa8fb0e4f14158ace97fd2af982abfe22809721522c608bc47edd8173b89cf324c8f46ee86c61aa873c5fb94e0e86ac3bda2461540a8cb98ff2d6cace1fe8196", 0x85}, {&(0x7f0000000a00)="814fbacbbb07f0d42069a53f85884dfe87182a8f724cffad01", 0x19}], 0x2}}, {{&(0x7f0000000a80)={0xa, 0x4e23, 0x7, @private2, 0x10001}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="1c4b26d7a67cf0e49084e74c2d91622011d4221daa567f8fcb8b5a74a4f02b490c90e9848da7cf8b0ea8bb7a6e2608d6eaea0660652384c480a92cb63727dc6f44bbd09eeaf3da9c0ecdc1da1022245df6e16ce31bc54c8aa54ff04f7bfcf433beabac68c6c37b9aa3657c8f802e574e2cd6d99cfcf95f6b35a2d942d0391fe041176ad8800675aa68e9977c5b3e0e6d48e3b168126cd97cd1d14392a99df3ea649ace4ec4069020a400ddae4e772a", 0xaf}, {&(0x7f0000000b80)="be42e3ec3cbabdaae94b2f54b1e0a6bf2795", 0x12}, {&(0x7f0000000bc0)="724b559f", 0x4}, {&(0x7f0000000c00)="789fabd2547d1eab9b4ce0761fc9cf68f0e8842fb58fb9b5a2baca5ee260ff1c2c94c576434f3a538b8a778d703f", 0x2e}], 0x4, &(0x7f0000000c80)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x0, 0x7, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x81, [0x8001, 0x7, 0x64a308f, 0xa, 0x6]}}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x3}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x70}}, {{&(0x7f0000000d00)={0xa, 0x4e22, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000000d40)="d8ebc4159b2b781a131af73d66c49dfbd3ba72277a0f1a4563efa05c79e1ce6c1c05875f34ca5724b961b96d4faca4a6c5b8b4ee1ca5096747ca0448c553951cc4e110fee5afcf0fdf98cae1308c09bd37de69d222f697cd5c6f3052e3d7b8005b88f0cc56622ecb82d204663f920ca436f134309fd12d54925aa661046210ecf4f9c9f5f1786792afcaad3827a5dc7caa76114cba773aa6fbc61205893dc01aa633ea526bd3234a1ab12dfac02b88a6a8411db8826514e6da1b91ace285574bf5", 0xc1}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="e24267ae82b52dadabe14ba635de24f1c39162f17740f70ce83315debc52ff990d537c93b0b32060", 0x28}], 0x3, &(0x7f0000001f80)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r5}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffd}}, @dstopts={{0xe0, 0x29, 0x37, {0x2f, 0x18, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x7, 0x23, "894e93dd68669fc84a2e82db6dee3e56dc6029d8d626402251e7b5020c2ddb5f557060"}, @ra={0x5, 0x2, 0x4515}, @calipso={0x7, 0x58, {0x1, 0x14, 0x0, 0x9, [0x0, 0x43, 0x828, 0x6, 0x8132, 0x0, 0x6, 0x3, 0x537, 0x4]}}, @ra, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0xfffffffd}, @hao={0xc9, 0x10, @empty}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x88, 0x0, '\x00', [@ra={0x5, 0x2, 0xe}]}}}], 0x140}}], 0x4, 0x40040) (async) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000025c0)={0x0, &(0x7f00000021c0)=[@uexit={0x0, 0x18, 0xc}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0x2, 0xa97}}, @code={0x1, 0x72, {"0f3248b87675d749000000000f23d80f21f835c00000400f23f8b9d4020000b87fab0000ba000000000f3066470f388215a200000066baf80cb8e6b77082ef66bafc0cb023eef044292f66b8c0000f00d0c4c1f45816f30f01780ec402f9412c06"}}, @code={0x1, 0x66, {"660f38802ab9800000c00f3235008000000f3048b800800000000000000f23c00f21f835000002000f23f8f20f0058003641d132d89540fd0000f30f5d59f90fc798330200003e66440f3a624000a666460f388107"}}, @cpuid={0x2, 0x18, {0x657, 0x9}}, @code={0x1, 0x4d, {"c401755da4b67633000066ba6100edb9800000c00f3235000400000f30460f01ef650fc71d00900000430f060fc6ce006765660fd00bf4f23e478f07"}}, @uexit={0x0, 0x18, 0xa1}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0xd8e, 0x7}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x3c, {"2ed9fec482250b6578f3aff464460f30f30f0941def8663e66470f3882b609000000c46289b709450f01cf"}}, @cpuid={0x2, 0x18, {0x7, 0x6}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x80000, 0x4}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x948}, @code={0x1, 0x4f, {"0f3566b8b7000f00d06666f3440f7eba05000000660f3882b3bdffffff0fc7be08000000c483410fb6002800000366b8fc000f00d0460f01c20f01c5d2fc"}}, @cpuid={0x2, 0x18, {0x0, 0x6}}, @code={0x1, 0x4f, {"66b809000f00d0c422b929bc9fc21d000066460f1c47fe66410f5ce566ba610066b89a0066ef430f01c5f2f0315e00f30f09f20f4c0df2cc00000f015873"}}, @cpuid={0x2, 0x18, {0x2, 0xfffffff0}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0xdf}, @cpuid={0x2, 0x18, {0x7, 0x6189}}], 0x3c7}) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002680)=[@text32={0x20, &(0x7f0000002600)="b977090000b858d4b858ba000000000f30ea000000003a00f30fc7769866baf80cb876f76f80ef66bafc0c66ed66b853000f00d00f01c3f20f09b9900d0000b806000000ba000000000f300f01cb66bad004ec", 0x53}], 0x1, 0x24, &(0x7f00000026c0), 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000002740), r4) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000002780)={@mcast1, 0x0}, &(0x7f00000027c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000002fc0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002880)={0x6fc, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1ff, 0x9f, 0x7, 0x4}, {0xa2, 0x61, 0x1, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff9, 0x1, 0x10}, {0x7, 0x3, 0x8}]}}}]}}, {{0x8, 0x1, r5}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x2, 0xd, 0xb}, {0x401, 0x6, 0x6, 0x3}, {0x1ff, 0x8, 0x63, 0x4dcf}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r5}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x6fc}, 0x1, 0x0, 0x0, 0x8000}, 0xe6e7b6de84f95fb2) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r11 = add_key$fscrypt_v1(&(0x7f0000003080), &(0x7f00000030c0)={'fscrypt:', @desc1}, &(0x7f0000003100)={0x0, "7715dec54a1369801e0e17d35706bfd625d2e928d332f4f31342760fe1ae82b811bb64354db5243f66a42dd1ba39c20b5f769a00a2e1e3221311a55d0943e5dd", 0x24}, 0x48, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000003000), &(0x7f0000003040)={'syz', 0x3}, 0x0, 0x0, r11) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000003180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0xfffb, 0x81, 0x1, {0x22, 0xaf3}}, {{{0x9, 0x5, 0x81, 0x3, 0x228, 0x6, 0xb, 0xe4}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x9, 0x5, 0x80}}]}}}]}}]}}, &(0x7f0000003300)={0xa, &(0x7f00000031c0)={0xa, 0x6, 0x300, 0x4, 0x81, 0x65, 0x20, 0x6}, 0x21, &(0x7f0000003200)={0x5, 0xf, 0x21, 0x3, [@wireless={0xb, 0x10, 0x1, 0x6, 0x4, 0x6, 0xf9, 0xff01, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x8, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0x0, 0x412}]}, 0x3, [{0x39, &(0x7f0000003240)=@string={0x39, 0x3, "1e3605e3f9588f2565f137f1842c5b16bb2cbca55e1aa848c84322241338870a65fea61a71ddcc2600a013319265e8d7f5077d8f6cac80"}}, {0x4, &(0x7f0000003280)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0xf0ff}}]}) (async, rerun: 64) sendmsg$xdp(r4, &(0x7f00000035c0)={&(0x7f0000003340)={0x2c, 0x2, r10, 0x21}, 0x10, &(0x7f0000003580)=[{&(0x7f0000003380)="bd7297a4a0704feebdcd409f2fd4c6202b4517688c75dfdfa819732450d7e68c24aee2646246c497e342d13de88815f22fb60bb364d75e7ce1dc9c68fe17b3e14a5116c220b030f100c693f828b03c7c15fd3d699b856691f1823b26ef67592a047d6373bcc0230f7a4ba4b79c5fe93e400d0c3510e6b374b8b9755e64228d8e472d0247a738e9f470594b4614c4e574a568df2dbf321e2dff971c1a8b0ed45a44499e8561e09eb34351fac65cb99c10dfb870c006510b280088af31a1db63cab7b1e1a39f70c90641d1fce0fbe8ec122874d1a41d8b6621bb4afeb7574b6235ba698176a53620f7e701c23f426166e6d93dae49", 0xf4}, {&(0x7f0000003480)="fd8806c19cb08bc82943aa8943da40d382db0c361433be4058c09130c1bfc4034f047a05b3324963d32b8cee77e4cdf67581e9f615998f710ffdc4e4b6b5dd6af8e482a13ddaabe235c44bf14f4a923e7a8ebed0865d7758aa7279ed561bd012eece91a41f3d66223643ec825966c7cca90cb3df078f405ab3a21aad639ddf93c3917fde80f2184366190d38c1ec7c498e713522963ac62f51a16e6051d67f4bf1aff5951de88acb6be518f095d1ce324d9525cdfba1c5335267ab76894056e08a2c26d13024ec28f69ef4", 0xcb}], 0x2, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000003600)='./file0\x00', 0x12000, 0x4a) r12 = fcntl$getown(r4, 0x9) sendmsg$nl_generic(r4, &(0x7f0000003900)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003680)={0x214, 0x10, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@typed={0x8, 0x147, 0x0, 0x0, @pid=r12}, @generic, @generic="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", @typed={0x8, 0x10b, 0x0, 0x0, @fd=r4}, @nested={0xce, 0x67, 0x0, 0x1, [@generic="bac24ac2c2631d57d6b2da6bd338dcc4bb275fb89471bf5086ca42463b33ed145a5cf9a7a09772eb3dcfbf0e740a30d7c587e93b94fc9906991af38f0e4c5014f53fdd5d632b25f05c4bcdea7be853e7e16cd7afd8dbfdbdaf92527d2ebc12dd27f8dab451d086d47343763d6c171cb9d3df5728941952d98af659ff1105ab45637870ede8ce5c7de3d4589b24deb287808af7529b2ef200fd4e410656d7b1670476d734a6fea5ba8e1df3533e45e5b16aeee39f479df64ad637d1193e4bea2c0b013494ffb56a9138fc"]}, @typed={0x14, 0xcb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x123, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x8, 0xbb, 0x0, 0x1, [@nested={0x4, 0x120}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000081}, 0xc004) (async, rerun: 64) socket(0x1e, 0x80003, 0x6) (rerun: 64) 542.887672ms ago: executing program 3 (id=1502): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000080)=0x4, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 541.556632ms ago: executing program 3 (id=1503): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r0, 0x0) r1 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d"], 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/mnt\x00') 460.597413ms ago: executing program 0 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x1c, &(0x7f0000000040)="88d0a4332ca430eb314853fe5cef77c890ddaf6e26", 0x15) pread64(r2, &(0x7f0000000000)=""/157, 0x9d, 0x7fffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="10002dbd7000fddbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000"], 0x58}}, 0x4050) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde9809c8814618e976832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada133b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631def9f126c25ba4f37caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d3130180613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd60200c1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 442.604513ms ago: executing program 2 (id=1505): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x82880) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="3f073b5a40a741e33bf3126412a0d032bbfdd47fe4975375bbce1175f4c9b2bbd53d5af4e8d0f985da6af32a258397f158455b2a2d7d", 0x36}], 0x1, 0x0, 0x0, 0x8000}}], 0x1, 0x8810) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x67, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80100001000130726bd70000000000000000000000000000000ffffe0000002ac14141b0000000000000000000000004e23000100000003020000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1414330000000000000000000000000000000400000000000000000000000008000000000000000a00000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffbfffffffffffffcffffffffffffff0c000000040000000200000028bd7000000000000200040000ebff0000000000d60001"], 0x1c8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x37}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 302.820166ms ago: executing program 0 (id=1506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x47, 0x0, &(0x7f0000000680)) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) recvfrom(r6, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004b80)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x2a}]}, 0x24}], 0x1}, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000073000040"]) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close_range(r0, 0xffffffffffffffff, 0x0) 301.950396ms ago: executing program 2 (id=1507): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) socket(0x1d, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0xfffffffc, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x4000) ioctl$SIOCSIFMTU(r2, 0x8931, &(0x7f0000000080)={'pimreg1\x00', 0x8}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x80}, 0x1, 0x7}, 0x20048011) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 265.748886ms ago: executing program 2 (id=1508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0xfffffff5, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x0) 255.114116ms ago: executing program 2 (id=1509): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0)=0xc, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/126, 0x7e, 0x2, 0x21}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 196.304097ms ago: executing program 0 (id=1510): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000080)=0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000040)=0x1ff, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000014c0)={0x2020}, 0x2020) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x14b441, 0x10) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) fchdir(r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast2, 0xfff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 186.605948ms ago: executing program 0 (id=1511): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff7, 0x4) 95.019349ms ago: executing program 2 (id=1512): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000040)="daffc3fa80002cd21721a4af36a4a2ab00000000000000025a91f64b007f0c6a680f6c787f76d51f", 0x28}], 0x1}, 0x4b00) r3 = add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @desc1}, &(0x7f0000000d00)={0x0, "48d9b143d759ffb3f552d1a76aff34ea3f993cd19533b125c0ba765e09a17f12ee64ff88607b4da09951186d873e08c84e0a6fffed857db421e5bfa6fc52fca3", 0x10}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000bc0)='user\x00', &(0x7f0000000c00)={'syz', 0x0}, &(0x7f0000000c40)='\x00', r3) r4 = fcntl$getown(r1, 0x9) getpriority(0x2, r4) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="650ace8e1525e167f6dd3a584d55d884e6b770ebee1098bbd26ac445c8b59db5722a8364fedbfaad5805e4bc468bf5d1b13b97e642d46c06bdb02243cd0e87b1a5306ffa4fa36a018b72a4cc7866e477fc5c8ae6576a4b1d15c827278795ef024511043a62516f604b0671ab5dc6e6c251a95c43e3d763b3e5d753a7a258d66b81ada1f819dbb967c4d6003f96917fce223c5141f20ef3fe0f08decfcc5bc80014c24b235a", 0xa5, 0xfffffffffffffffd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) pread64(r1, &(0x7f00000001c0)=""/58, 0x3a, 0x2) write$khugepaged_scan(r6, &(0x7f0000000000), 0x8) inotify_init() mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 455.271µs ago: executing program 0 (id=1513): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendmmsg$inet(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000f80)="8c4bec0ebfefb01a3b26c938cdec576d920905939dffc66214c441907b87325dd5a689656934ea4c26056f13940f0145eb78a695047812f64b8bac9ecc855238aefafb83e615afb811f357866d44f612d4dab58853cd88c8f98c11be81f3fef61c88824093632dd29267e70d0dda6fe4912795c8409c25dbf0ba49c4cbc86105256695daa4b6571543e637fa4d4fe93cb3d68c5a2bfe914f363242bbec131bf606349aed09ff7c09a9473835810957803d89df82b44f20557235d21b163a09e5fedf0c49ca38d4a2514a64ff0827379ee153b2140c7e776719265c0a3e6810a102157fe82bd6178edf8d1aecb6429985371087", 0xf3}, {&(0x7f0000001080)="35e4a98a674768ec077e0be35fb3670b1814d48e6a486ac352b0ac2255191d87a0361c0576aade4c169db8835fad33b49ee917a1f99ec84eed6f06b9821475fa5134a58d50dbf8b89bbb96139eec21033eeed385ec0d1d1b5a0a37f636d999c21afb017409ea7fcf3635f707f8e2645a0ec7b96c490011f60ddd3300a58c1063c92c14e219236fea6b4db793de9dca8e0d6f8cef901b63200e366752b8328b6cf515dcbb100fd90e549ce090d2b20270e52f700d504906847e808c896efcabad495e1bbbfbd55bf8ef30d67c45a6763bf5a2e4f94f7cdec2f4a553a57138e7a067820158c28bcfcd5687ba85af02de803a3ed5cb04e10359ebba9bd3f9cde35146616827ffbf0f709965ea677e49da7f2854c3bdd0ef7e108bad79f7df172c41150150de995c19e3d24dca4cc490b275814207fb9cc27a4f62d7019ce2c7e308ce30dc837d2dd9bd093accd520e0fa59a745606ea79a1fcb2a4cb56243779c976d2077952d80b6ca0ee7552305f5c94add5622cbacd6d7d73cc93ffd9a96e12abd238bfafcc5874353e384bd660ec0faafef3283f5ad33713056c65e29e316dd8459fb388d5da0b559bd3163d59e483b25060834417d53cf202976951826808a38dfbc81cbd23d057a9a080ec90260d97fdbc502c909afcadd80576c4486429b17e65c2dbe1b4440c7190be87f16ee3eb5ab68385210dab9090a5e47dfdb016fcf70701887f0f51f50f1ee35c002cd5f5af0a9a15d80c867f1d7eec9ea3399fbd49a8996d8e62988f58a8d8641a94f01e3674cb5dda1835081b3a07c61d00f2add9b696405db2a8af065ed81850e9efa96adbef66f336f7242404b533cfc43303e51cfc8b51087264a35301516ab83b5ac42aee1de9844087abb09ab3d227d6981fa5b99768b22ed74f44d9eaacd4a8014d5c48599c51374b35a9c06d2db09122e557c825fee66ce2cc66a654b4be754cb57dee746ab78fbc090b3673c6e616237267b111ec14c8a0518306f777c808f51f14b0682ddc84be2ae9bae9bd9662a0593bedf2638f41b18951436090f14500ba3d5ed48223c52772f6cc31b0b82e454916679472c1e2f55ea9a30fae14be69f407ec1618d74739fdc7a5d316caf16bd76aca576b879b797c7533470616e8e9db894d912b7a81e2e492fffbe2849b783e4bf0e40ad6fdad83c38507e40514a68b2676e46093516448b38e64f685fe55cfed5bdb67fa409d82ca8c99d177b6b84020ea0b7342013d3c42d0f2c42ec99b6fc20473ef77b16564508cd3bef97ffac88f5f85bf0db84c5769130668dd618b1f05842b273821cae7f30bde6cc34b1578fc3241d7eb9911be129addde7e2547543ed0c68fd7687e216b4b85d05b93eb959f128e8f59889534415cb0559a63eb2dcec47cb09201c2e666b01bd5bd4161a3717b48c59a92472dff43e1a1fec98aa07db634ae9d79510a89341626346a7eb5cc5a7f69bfb3f58cc7fb2567a6c84c65cc14a939e92ef0ea8eb446091452ff2827975ae25835638ee3497bab3fd8574f9e652f457f870383932ae15ad67ff62ec1c121e1b6678e43683182b80b020bbd8caee5e3b28850733c1f8e91cc7bad5059f323e7ee696e0c6f693fd36124f050e98e787e1bc169d604a6eb97c44d00003b2fee9c248fdc9f7c1699e4b1a759b16edfad4867acbeab2f8163e05876cc66fe7c77622e6c45dfad36cb92afc730227577935a4a403c64bf73f59609c8e9723", 0x4d2}], 0x2}}], 0x1, 0x4000004) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000000)='@\x81\\\x00', 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x101) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setreuid(0xee00, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x5, 0x7ff, 0x0, {0x2, 0x8000000, 0x6, 0x0, 0xffffffff, 0x3, 0x201, 0x2, 0x42, 0xc000, 0x0, 0x0, r6, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) setresuid(r1, r1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, '.'}}, {@default_permissions}], [{@uid_gt={'uid>', r1}}, {@uid_lt={'uid<', r1}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@measure}]}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x160e) 0s ago: executing program 2 (id=1514): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x4, 0xc3, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x66, 0x0, 0xb, 0x29, 0x0, @remote, @remote}}}}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)) ftruncate(r3, 0xffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000000)='veth0\x00') fcntl$addseals(r3, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x12, r9}) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sysvipc/shm\x00', 0x0, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r12, &(0x7f0000000140)={0x1f, @any, 0x7}, 0xfffffffffffffec4) connect$bt_rfcomm(r12, &(0x7f0000000100)={0x1f, @any, 0x2}, 0xa) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 77.979085][ T36] audit: type=1400 audit(1751195113.817:354): avc: denied { setopt } for pid=2265 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.001666][ T1401] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.016194][ T36] audit: type=1400 audit(1751195113.847:355): avc: denied { write } for pid=2268 comm="syz.3.671" path="socket:[16320]" dev="sockfs" ino=16320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.040092][ T36] audit: type=1400 audit(1751195113.847:356): avc: denied { create } for pid=2268 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.040725][ T1401] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 78.067286][ T36] audit: type=1400 audit(1751195113.897:357): avc: denied { read } for pid=2268 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.073098][ T1401] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.098186][ T1401] usb 3-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 78.109183][ T1401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.118544][ T1401] usb 3-1: config 0 descriptor?? [ 78.124463][ T2232] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.182442][ T2279] 9pnet_fd: Insufficient options for proto=fd [ 78.348649][ T470] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 78.474588][ T2291] tipc: Enabling of bearer rejected, failed to enable media [ 78.483764][ T2290] tipc: Enabling of bearer rejected, failed to enable media [ 78.508638][ T470] usb 4-1: Using ep0 maxpacket: 32 [ 78.518674][ T470] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 78.526834][ T470] usb 4-1: config 0 has no interface number 0 [ 78.550155][ T470] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 78.559482][ T470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.568388][ T470] usb 4-1: Product: syz [ 78.588623][ T470] usb 4-1: Manufacturer: syz [ 78.593311][ T470] usb 4-1: SerialNumber: syz [ 78.599073][ T470] usb 4-1: config 0 descriptor?? [ 78.619156][ T470] smsc95xx v2.0.0 [ 78.733923][ T2230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 79.211348][ T470] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 79.222358][ T470] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 79.301323][ T2325] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 79.301351][ T2325] rust_binder: Read failure Err(EFAULT) in pid:456 [ 79.433219][ T2273] binder: Bad value for 'stats' [ 79.469793][ T470] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 79.480693][ T470] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 79.490184][ T470] usb 4-1: USB disconnect, device number 24 [ 80.148813][ T2335] overlayfs: missing 'lowerdir' [ 80.170202][ T2338] rust_binder: Failed copying remainder into alloc: EFAULT [ 80.170233][ T2338] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 80.177590][ T2338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 80.186003][ T2338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:461 [ 80.258693][ T470] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 80.415420][ T1401] usbhid 3-1:0.0: can't add hid device: -71 [ 80.420109][ T470] usb 4-1: Using ep0 maxpacket: 16 [ 80.422204][ T1401] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 80.434320][ T470] usb 4-1: config 0 has no interfaces? [ 80.437119][ T1401] usb 3-1: USB disconnect, device number 17 [ 80.446413][ T470] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.459480][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 80.468056][ T470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.476245][ T470] usb 4-1: Product: syz [ 80.480504][ T470] usb 4-1: Manufacturer: syz [ 80.485315][ T470] usb 4-1: SerialNumber: syz [ 80.491200][ T470] usb 4-1: config 0 descriptor?? [ 80.629415][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 80.638981][ T9] usb 1-1: config 0 has an invalid interface number: 155 but max is 0 [ 80.647401][ T9] usb 1-1: config 0 has no interface number 0 [ 80.653661][ T9] usb 1-1: config 0 interface 155 has no altsetting 0 [ 80.662067][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice=32.14 [ 80.671719][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.679816][ T9] usb 1-1: Product: syz [ 80.684080][ T9] usb 1-1: Manufacturer: syz [ 80.688748][ T9] usb 1-1: SerialNumber: syz [ 80.694380][ T9] usb 1-1: config 0 descriptor?? [ 80.700005][ T1401] usb 4-1: USB disconnect, device number 25 [ 80.904420][ T9] usb-storage 1-1:0.155: USB Mass Storage device detected [ 81.488653][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 81.601576][ T36] audit: type=1400 audit(1751195117.437:358): avc: denied { execmem } for pid=2366 comm="syz.2.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.628804][ T9] usb 4-1: device descriptor read/64, error -71 [ 81.646114][ T2371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:508 [ 81.697078][ T2372] rust_binder: Write failure EINVAL in pid:508 [ 81.706537][ T36] audit: type=1400 audit(1751195117.537:359): avc: denied { execute } for pid=2370 comm="syz.2.707" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.709580][ T2372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.713390][ T2373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:508 [ 81.868672][ T9] usb 4-1: device descriptor read/64, error -71 [ 82.118641][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 82.248665][ T9] usb 4-1: device descriptor read/64, error -71 [ 82.488673][ T9] usb 4-1: device descriptor read/64, error -71 [ 82.598763][ T9] usb usb4-port1: attempt power cycle [ 82.834567][ T36] audit: type=1400 audit(1751195118.667:360): avc: denied { read } for pid=2395 comm="syz.1.716" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.938651][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 82.959856][ T9] usb 4-1: device descriptor read/8, error -71 [ 83.089717][ T9] usb 4-1: device descriptor read/8, error -71 [ 83.236263][ T1401] usb 1-1: USB disconnect, device number 23 [ 83.250029][ T2403] loop8: detected capacity change from 0 to 16384 [ 83.328622][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 83.369668][ T9] usb 4-1: device descriptor read/8, error -71 [ 83.421757][ T2404] loop8: detected capacity change from 16384 to 0 [ 83.509683][ T9] usb 4-1: device descriptor read/8, error -71 [ 83.584326][ T36] audit: type=1400 audit(1751195119.417:361): avc: denied { append } for pid=2416 comm="syz.0.724" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.618746][ T9] usb usb4-port1: unable to enumerate USB device [ 83.725823][ T36] audit: type=1400 audit(1751195119.557:362): avc: denied { map } for pid=2422 comm="syz.0.726" path="socket:[17662]" dev="sockfs" ino=17662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.749113][ T36] audit: type=1400 audit(1751195119.557:363): avc: denied { read } for pid=2422 comm="syz.0.726" path="socket:[17662]" dev="sockfs" ino=17662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.940327][ T2435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 83.985377][ T2443] 9pnet_fd: Insufficient options for proto=fd [ 84.583665][ T2478] rust_binder: Write failure EFAULT in pid:528 [ 84.616382][ T2482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 84.702858][ T2487] tipc: Started in network mode [ 84.707789][ T2487] tipc: Node identity 8af3ce116ba7, cluster identity 4711 [ 84.715488][ T2487] tipc: Enabled bearer , priority 0 [ 84.724271][ T2485] tipc: Disabling bearer [ 84.789943][ T2493] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 84.838638][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 84.999765][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.009904][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 85.019009][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.028078][ T9] usb 3-1: config 0 descriptor?? [ 85.038678][ T45] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 85.189800][ T45] usb 1-1: No LPM exit latency info found, disabling LPM. [ 85.199013][ T45] usb 1-1: config 1 has an invalid interface number: 8 but max is 1 [ 85.207053][ T45] usb 1-1: config 1 has an invalid interface number: 152 but max is 1 [ 85.215875][ T45] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 85.224999][ T45] usb 1-1: config 1 has no interface number 0 [ 85.231831][ T45] usb 1-1: config 1 has no interface number 2 [ 85.238637][ T45] usb 1-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 85.249816][ T45] usb 1-1: config 1 interface 8 altsetting 7 endpoint 0x7 has invalid maxpacket 32, setting to 8 [ 85.260707][ T45] usb 1-1: config 1 interface 8 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 8 [ 85.271908][ T45] usb 1-1: config 1 interface 1 altsetting 8 endpoint 0xE has invalid maxpacket 511, setting to 8 [ 85.282740][ T45] usb 1-1: config 1 interface 1 altsetting 8 endpoint 0xC has invalid maxpacket 32, setting to 8 [ 85.293348][ T45] usb 1-1: config 1 interface 1 altsetting 8 endpoint 0x8 has invalid maxpacket 64, setting to 8 [ 85.304244][ T45] usb 1-1: config 1 interface 1 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 85.315173][ T45] usb 1-1: config 1 interface 1 altsetting 8 endpoint 0x3 has invalid maxpacket 1552, setting to 8 [ 85.325870][ T36] audit: type=1400 audit(1751195121.147:364): avc: denied { associate } for pid=2500 comm="syz.1.756" name="fuse" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 85.347378][ T45] usb 1-1: config 1 interface 1 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 85.358509][ T45] usb 1-1: config 1 interface 1 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 85.372462][ T45] usb 1-1: too many endpoints for config 1 interface 152 altsetting 38: 84, using maximum allowed: 30 [ 85.383576][ T45] usb 1-1: config 1 interface 152 altsetting 38 has an invalid descriptor for endpoint zero, skipping [ 85.394595][ T45] usb 1-1: config 1 interface 152 altsetting 38 has a duplicate endpoint with address 0x9, skipping [ 85.405424][ T45] usb 1-1: config 1 interface 152 altsetting 38 has a duplicate endpoint with address 0x2, skipping [ 85.416725][ T45] usb 1-1: config 1 interface 152 altsetting 38 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 85.428009][ T45] usb 1-1: config 1 interface 152 altsetting 38 endpoint 0x4 has invalid maxpacket 1024, setting to 0 [ 85.439053][ T45] usb 1-1: config 1 interface 152 altsetting 38 has a duplicate endpoint with address 0x2, skipping [ 85.441505][ T9] kye 0003:0458:5012.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 85.449898][ T45] usb 1-1: config 1 interface 152 altsetting 38 has 7 endpoint descriptors, different from the interface descriptor's value: 84 [ 85.468864][ T9] kye 0003:0458:5012.000C: hidraw0: USB HID v0.00 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 85.485836][ T9] kye 0003:0458:5012.000C: tablet-enabling feature report not found [ 85.494189][ T9] kye 0003:0458:5012.000C: tablet enabling failed [ 85.495386][ T45] usb 1-1: config 1 interface 8 has no altsetting 0 [ 85.508089][ T45] usb 1-1: config 1 interface 1 has no altsetting 0 [ 85.514819][ T45] usb 1-1: config 1 interface 152 has no altsetting 0 [ 86.200605][ T2520] cgroup: Unknown subsys name 'rdma' [ 86.206887][ T2520] overlayfs: missing 'lowerdir' [ 86.212047][ T36] audit: type=1400 audit(1751195121.997:365): avc: denied { create } for pid=2517 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.748362][ T2526] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 86.760287][ T36] audit: type=1400 audit(1751195122.597:366): avc: denied { relabelto } for pid=2525 comm="syz.3.766" name="137" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 86.789602][ T2526] overlayfs: missing 'workdir' [ 86.847358][ T36] audit: type=1400 audit(1751195122.617:367): avc: denied { associate } for pid=2525 comm="syz.3.766" name="137" dev="tmpfs" ino=772 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 86.914128][ T36] audit: type=1400 audit(1751195122.617:368): avc: denied { write } for pid=2525 comm="syz.3.766" name="137" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 86.954836][ T36] audit: type=1400 audit(1751195122.617:369): avc: denied { add_name } for pid=2525 comm="syz.3.766" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 86.988975][ T2534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:392 [ 86.989035][ T2534] rust_binder: Read failure Err(EFAULT) in pid:392 [ 86.998605][ T36] audit: type=1400 audit(1751195122.617:370): avc: denied { create } for pid=2525 comm="syz.3.766" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.491401][ T2544] 9pnet_fd: Insufficient options for proto=fd [ 87.570439][ T2547] mmap: syz.1.773 (2547) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.681392][ T9] usb 3-1: USB disconnect, device number 18 [ 87.721526][ T2556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 87.731382][ T2556] netlink: 'syz.2.776': attribute type 16 has an invalid length. [ 87.739374][ T2556] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.776'. [ 87.798209][ T45] usb 1-1: New USB device found, idVendor=12d1, idProduct=b8e2, bcdDevice=b0.12 [ 87.806988][ T2564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.779'. [ 87.808080][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.829345][ T45] usb 1-1: can't set config #1, error -71 [ 87.837560][ T45] usb 1-1: USB disconnect, device number 24 [ 88.128701][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 88.279831][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.290900][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.300687][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.313791][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.322899][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.332417][ T45] usb 1-1: config 0 descriptor?? [ 88.338960][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 88.469368][ T9] usb 3-1: device descriptor read/64, error -71 [ 88.503926][ T2599] tipc: Enabled bearer , priority 0 [ 88.512198][ T2599] tipc: Disabling bearer [ 88.554011][ T2602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.792'. [ 88.708638][ T9] usb 3-1: device descriptor read/64, error -71 [ 88.740364][ T45] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 88.747944][ T45] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 88.755406][ T45] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 88.762881][ T45] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 88.770357][ T45] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 88.777766][ T45] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 88.785430][ T45] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 88.794510][ T45] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 88.948689][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 89.078643][ T9] usb 3-1: device descriptor read/64, error -71 [ 89.150360][ T2566] overlayfs: missing 'lowerdir' [ 89.318709][ T9] usb 3-1: device descriptor read/64, error -71 [ 89.428750][ T9] usb usb3-port1: attempt power cycle [ 89.768635][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 89.789739][ T9] usb 3-1: device descriptor read/8, error -71 [ 89.919718][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.002144][ T2622] mmap: syz.1.799 (2622): VmData 29069312 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 90.158645][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 90.179793][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.310042][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.418724][ T9] usb usb3-port1: unable to enumerate USB device [ 91.028685][ T470] usb 1-1: reset high-speed USB device number 25 using dummy_hcd [ 91.090111][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 91.090130][ T36] audit: type=1400 audit(1751195126.927:380): avc: denied { watch_reads } for pid=2641 comm="syz.1.806" path="/300" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.144514][ T2650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:559 [ 91.145221][ T2650] rust_binder: Error while translating object. [ 91.154484][ T2650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.160872][ T2650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:559 [ 91.189006][ T470] usb 1-1: device firmware changed [ 91.203684][ T45] usb 1-1: USB disconnect, device number 25 [ 91.338656][ T45] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 91.491279][ T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 91.500564][ T45] usb 1-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 91.508741][ T45] usb 1-1: Product: syz [ 91.512962][ T45] usb 1-1: Manufacturer: syz [ 91.517579][ T45] usb 1-1: SerialNumber: syz [ 91.522951][ T45] usb 1-1: config 0 descriptor?? [ 91.695541][ T2663] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.703558][ T2662] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.713022][ T2663] kvm: pic: level sensitive irq not supported [ 91.713138][ T2663] kvm: pic: non byte read [ 91.762206][ T2663] rust_binder: Error in use_page_slow: ESRCH [ 91.762214][ T2662] rust_binder: Error in use_page_slow: ESRCH [ 91.762229][ T2663] rust_binder: use_range failure ESRCH [ 91.762245][ T2663] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 91.769729][ T2662] rust_binder: use_range failure ESRCH [ 91.776488][ T2663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 91.789847][ T2662] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 91.796945][ T2663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:562 [ 91.805233][ T2662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 91.821702][ T2662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:562 [ 91.858643][ T346] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 91.930544][ T45] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 91.940712][ T45] asix 1-1:0.0: probe with driver asix failed with error -71 [ 91.949445][ T45] usb 1-1: USB disconnect, device number 26 [ 91.968444][ T2670] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 92.029907][ T346] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.041235][ T346] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 92.052334][ T346] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.059249][ T346] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 92.068964][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.077527][ T346] usb 4-1: config 0 descriptor?? [ 92.082879][ T2653] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.231088][ T1401] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 92.345206][ T2688] netlink: 100 bytes leftover after parsing attributes in process `syz.1.820'. [ 92.371834][ T2691] overlayfs: failed to clone upperpath [ 92.389929][ T1401] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.401691][ T1401] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 92.412891][ T1401] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 92.426324][ T1401] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.433213][ T1401] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 92.443328][ T1401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.452459][ T1401] usb 3-1: config 0 descriptor?? [ 92.458457][ T2672] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.492802][ T346] logitech 0003:046D:C286.000E: unknown main item tag 0x6 [ 92.500672][ T36] audit: type=1326 audit(1751195128.337:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2697 comm="syz.0.824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f727ab8e929 code=0x0 [ 92.525086][ T346] logitech 0003:046D:C286.000E: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 92.538452][ T346] logitech 0003:046D:C286.000E: no inputs found [ 92.693255][ T346] usb 4-1: USB disconnect, device number 30 [ 92.871952][ T1401] input: HID 28bd:1903 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:1903.000F/input/input12 [ 92.884853][ T1401] uclogic 0003:28BD:1903.000F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.2-1/input0 [ 93.079162][ T9] usb 3-1: USB disconnect, device number 23 [ 93.243121][ T36] audit: type=1326 audit(1751195129.077:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.3.832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb837b8e929 code=0x0 [ 93.447937][ T36] audit: type=1400 audit(1751195129.277:383): avc: granted { setsecparam } for pid=2734 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 93.468671][ T2735] 9pnet_fd: Insufficient options for proto=fd [ 93.682208][ T2754] netlink: 80 bytes leftover after parsing attributes in process `syz.1.842'. [ 93.756694][ T36] audit: type=1400 audit(1751195129.587:384): avc: denied { mounton } for pid=2751 comm="syz.0.841" path="/183/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 93.819082][ T36] audit: type=1400 audit(1751195129.657:385): avc: denied { ioctl } for pid=2760 comm="syz.2.844" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.948629][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 94.028033][ T36] audit: type=1400 audit(1751195129.857:386): avc: denied { read write } for pid=2793 comm="syz.0.853" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.075283][ T36] audit: type=1400 audit(1751195129.857:387): avc: denied { open } for pid=2793 comm="syz.0.853" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.138606][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 94.149347][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 94.157534][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0021, bcdDevice= 0.40 [ 94.166816][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.175396][ T9] usb 3-1: Product: syz [ 94.179698][ T9] usb 3-1: Manufacturer: syz [ 94.184492][ T9] usb 3-1: SerialNumber: syz [ 94.258660][ T65] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 94.395502][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 94.401826][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 94.409913][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 94.416345][ T65] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 94.425651][ T65] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 94.435148][ T9] usb 3-1: USB disconnect, device number 24 [ 94.447763][ T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 94.460833][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 94.470714][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 94.480567][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.493710][ T65] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 94.502925][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.518985][ T65] usb 1-1: config 0 descriptor?? [ 94.738725][ T65] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 94.935820][ T346] usb 1-1: USB disconnect, device number 27 [ 94.954195][ T346] usblp0: removed [ 95.026062][ T36] audit: type=1400 audit(1751195130.857:388): avc: denied { ioctl } for pid=2811 comm="syz.1.859" path="socket:[18333]" dev="sockfs" ino=18333 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.196328][ T2822] overlayfs: failed to clone upperpath [ 95.203363][ T2822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2822 comm=syz.1.864 [ 95.233313][ T2825] tipc: Enabling of bearer rejected, failed to enable media [ 95.258657][ T36] audit: type=1400 audit(1751195131.087:389): avc: denied { create } for pid=2826 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 95.740164][ T2841] rust_binder: Error while translating object. [ 95.740214][ T2841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 95.746467][ T2841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:558 [ 96.232597][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 96.232618][ T36] audit: type=1400 audit(1751195132.067:392): avc: denied { setopt } for pid=2875 comm="syz.1.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.283399][ T36] audit: type=1400 audit(1751195132.117:393): avc: denied { append } for pid=2880 comm="syz.2.886" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.319806][ T2882] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 96.330005][ T2882] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 96.402690][ T2884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 96.636782][ T2893] lo: entered promiscuous mode [ 96.642024][ T2893] lo: left promiscuous mode [ 97.235065][ T2901] overlayfs: failed to resolve './file1': -2 [ 97.254850][ T36] audit: type=1400 audit(1751195133.087:394): avc: denied { map } for pid=2904 comm="syz.3.892" path="socket:[20039]" dev="sockfs" ino=20039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.378403][ T2908] netlink: 72 bytes leftover after parsing attributes in process `syz.0.893'. [ 97.502205][ T36] audit: type=1400 audit(1751195133.337:395): avc: denied { map } for pid=2911 comm="syz.1.895" path="pipe:[2827]" dev="pipefs" ino=2827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 97.598638][ T346] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 97.628691][ T1401] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 97.750288][ T346] usb 4-1: config 1 interface 0 altsetting 37 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.763294][ T1401] usb 1-1: device descriptor read/64, error -71 [ 97.769836][ T346] usb 4-1: config 1 interface 0 has no altsetting 0 [ 97.778078][ T346] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.40 [ 97.787160][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.795303][ T346] usb 4-1: Product: ф [ 97.799454][ T346] usb 4-1: Manufacturer: 섞礽䘶鸔櫪⯹ꗟ䲛雕ƾ䈂罟狋ᩪᚔ苇ꉙ詥龅䖘㳺ꠑ瑀紲撰ᴶ⺜卋륱䒱檮牨ɷ⏋㗞鋢욕퉋坅⤛ዖ厚殾蹕扵✭㎀䂫褴⽙峃蒪㼠⫐扝ㄧ꥕趉἟ﰞ讖⯥ࡷ瘱5ﲃ漮ﺨអ䶪拄ꅘ켣ᅰ완铓䐙﷔핿ﴪ欤ᅮ猛᜷윲➘ፔ屇 [ 97.827908][ T346] usb 4-1: SerialNumber: 鳟鹷ꢀጂ某⒥୦厹熇桊ꄑ큽藹溕ᠥ岯፛㩡࠴ꝧ㷶標唄픦݌濥쨞긷웧茊봫疔ꋦ㹈዆柸鰸菜쒣㮌࿘곶䵙ጛ㈖犳敮抌鬤抁冢襝㐻⫨퓱邦ည扁冿რ讑ڼଙ잴휽둮㥸虊ძ﻾㋶ȟ姤䕯㶸婉v꠫ކ䦾⾚ꒊꥬ牨鄽圙ᴋ餏䌆ヌጪ꽵ϭ곉쾥냗ㄷ喽ؤ [ 98.008634][ T1401] usb 1-1: device descriptor read/64, error -71 [ 98.248614][ T1401] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 98.326334][ T2924] binder: Unknown parameter '0x0000000000000000' [ 98.378657][ T1401] usb 1-1: device descriptor read/64, error -71 [ 98.461782][ T2933] tipc: Enabling of bearer rejected, failed to enable media [ 98.500647][ T36] audit: type=1400 audit(1751195134.337:396): avc: denied { mount } for pid=2937 comm="syz.1.906" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 98.530447][ T36] audit: type=1400 audit(1751195134.367:397): avc: denied { ioctl } for pid=2927 comm="syz.2.902" path="socket:[20771]" dev="sockfs" ino=20771 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.607007][ T2950] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 98.618620][ T1401] usb 1-1: device descriptor read/64, error -71 [ 98.739217][ T1401] usb usb1-port1: attempt power cycle [ 99.078640][ T1401] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 99.099592][ T1401] usb 1-1: device descriptor read/8, error -71 [ 99.239110][ T1401] usb 1-1: device descriptor read/8, error -71 [ 99.315635][ T2990] binder: Unknown parameter 'C\f(3iᦝ/;Ry95H™is a6' [ 99.381651][ T2997] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 99.478666][ T1401] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 99.499659][ T1401] usb 1-1: device descriptor read/8, error -71 [ 99.629591][ T1401] usb 1-1: device descriptor read/8, error -71 [ 99.738763][ T1401] usb usb1-port1: unable to enumerate USB device [ 100.011391][ T3015] fuse: Unknown parameter 'f' [ 100.268868][ T346] usbhid 4-1:1.0: can't add hid device: -71 [ 100.274884][ T346] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 100.284169][ T346] usb 4-1: USB disconnect, device number 31 [ 100.393884][ T36] audit: type=1400 audit(1751195136.227:398): avc: denied { map } for pid=3023 comm="syz.0.935" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.452195][ T3027] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.487484][ T36] audit: type=1400 audit(1751195136.317:399): avc: denied { read } for pid=3018 comm="syz.3.934" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 100.489031][ T3019] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 100.539783][ T36] audit: type=1400 audit(1751195136.377:400): avc: denied { shutdown } for pid=3035 comm="syz.2.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.791389][ T3058] rust_binder: Error while translating object. [ 100.791440][ T3058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.797699][ T3058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:657 [ 100.958798][ T680] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 101.119835][ T680] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.133285][ T680] usb 1-1: config 0 has no interfaces? [ 101.142297][ T680] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.151450][ T680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.159518][ T680] usb 1-1: Product: syz [ 101.163867][ T680] usb 1-1: Manufacturer: syz [ 101.168507][ T680] usb 1-1: SerialNumber: syz [ 101.173973][ T680] usb 1-1: config 0 descriptor?? [ 101.381111][ T3051] overlayfs: failed to resolve '/ ': -2 [ 101.417841][ T3051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.428945][ T3051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.488641][ T680] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 101.570822][ T9] usb 1-1: USB disconnect, device number 32 [ 101.638666][ T680] usb 3-1: Using ep0 maxpacket: 8 [ 101.645547][ T680] usb 3-1: config 3 has an invalid interface number: 254 but max is 0 [ 101.654155][ T680] usb 3-1: config 3 has no interface number 0 [ 101.660345][ T680] usb 3-1: config 3 interface 254 has no altsetting 0 [ 101.669404][ T680] usb 3-1: New USB device found, idVendor=0cde, idProduct=0012, bcdDevice=f9.a1 [ 101.678673][ T680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.686683][ T680] usb 3-1: Product: syz [ 101.690984][ T680] usb 3-1: Manufacturer: syz [ 101.695644][ T680] usb 3-1: SerialNumber: syz [ 101.907196][ T3083] rust_binder: Write failure EFAULT in pid:684 [ 101.963793][ T680] usb 3-1: USB disconnect, device number 25 [ 101.974768][ T36] audit: type=1400 audit(1751195137.807:401): avc: denied { mounton } for pid=3097 comm="syz.0.957" path="/proc/582/cgroup" dev="proc" ino=21676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 102.030011][ T36] audit: type=1400 audit(1751195137.867:402): avc: denied { append } for pid=3099 comm="syz.0.958" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 102.311182][ T36] audit: type=1400 audit(1751195138.147:403): avc: denied { nlmsg_write } for pid=3117 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 102.458628][ T680] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 102.559701][ T3142] overlayfs: failed to clone upperpath [ 102.624642][ T680] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 102.645934][ T680] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.668791][ T680] usb 1-1: config 1 interface 0 has no altsetting 0 [ 102.680260][ T680] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.40 [ 102.689415][ T680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.697441][ T680] usb 1-1: Product: І [ 102.708682][ T680] usb 1-1: Manufacturer: 獗䐛ꎮꃐ썈ʪ㷑㵻턵ꤚ硂䱦굩適㐚搜랓⪸딧⌍餜諓ľᇡ䬤잶ᾙ荝驄扩䧞滛㷶썷뙛ὈȦ莆⇟봛안ㄬ뎰ﰷ乐슩罢칢압႖냃記핅ꚜ昛緯韐쒥戴耽畡۔∙僮 [ 102.732229][ T680] usb 1-1: SerialNumber: ࠔ [ 102.739122][ T3108] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.949815][ T3108] rust_binder: Error while translating object. [ 102.949867][ T3108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 102.956119][ T3108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:592 [ 102.995848][ T36] audit: type=1400 audit(1751195138.827:404): avc: denied { getopt } for pid=3166 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.029751][ T680] usbhid 1-1:1.0: can't add hid device: -71 [ 103.035771][ T680] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 103.062452][ T680] usb 1-1: USB disconnect, device number 33 [ 103.440029][ T3196] tipc: Enabled bearer , priority 0 [ 103.447572][ T3196] tipc: Disabling bearer [ 104.493028][ T3209] rust_binder: Write failure EFAULT in pid:690 [ 104.669538][ T3198] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.702167][ T3230] rust_binder: Write failure EINVAL in pid:695 [ 104.739576][ T3233] raw_sendmsg: syz.1.1006 forgot to set AF_INET. Fix it! [ 104.753026][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 104.908672][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 104.918881][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.929268][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 104.941373][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.951171][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.963659][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.972820][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.981052][ T9] usb 1-1: Product: syz [ 104.985213][ T9] usb 1-1: Manufacturer: syz [ 104.989860][ T9] usb 1-1: SerialNumber: syz [ 105.217527][ T3256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1013'. [ 105.292879][ T3259] fuse: Unknown parameter 'fd0x0000000000000003' [ 105.538839][ T346] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 105.628843][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 105.639251][ T9] usb 1-1: USB disconnect, device number 34 [ 105.654702][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.700281][ T346] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.709305][ T346] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 105.720381][ T346] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x82 is Bulk; changing to Interrupt [ 105.730579][ T346] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.740455][ T346] usb 4-1: config 1 interface 0 has no altsetting 0 [ 105.749207][ T346] usb 4-1: string descriptor 0 read error: -22 [ 105.755527][ T346] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.764613][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.773665][ T3259] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 105.780985][ T3259] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 105.789031][ T346] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 106.153990][ T3283] can: request_module (can-proto-6) failed. [ 106.218641][ T346] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 106.369866][ T346] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 106.378899][ T346] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.389204][ T346] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.398223][ T346] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 106.407423][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.416912][ T346] usb 3-1: config 0 descriptor?? [ 106.503857][ T9] usb 4-1: USB disconnect, device number 32 [ 106.558652][ T45] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 106.710138][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 106.718782][ T45] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x1 has invalid maxpacket 2031, setting to 64 [ 106.734582][ T45] usb 1-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.747730][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 106.754796][ T36] audit: type=1400 audit(1751195142.587:405): avc: denied { name_bind } for pid=3311 comm="syz.1.1030" src=2176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 106.756724][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 106.786161][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.794487][ T45] usb 1-1: Product: 얐抽㻃⋊谳雵诪佛돌ത軉射烷錪⾍儯맲턁࿕沣至顂䱝揄螃Ꭶ텗㈔ꘛ㘹刎 [ 106.807795][ T45] usb 1-1: SerialNumber: 宗䙡籺ꭋ는ン埻⠠䜲ꈱ຃裬麈먹ւ馿첾쎤䷎⦚堳䮢ᵳ䧖龴俍ґ㨝튐砦괈믍ᵇⵅ碫載瓥ꄎﯕ늂了㧒ļ᠐滥唹䪉梞躊禍뷼뤹㤞昐䉈L쬵䌛 [ 106.831718][ T3299] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 106.839260][ T3299] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 106.878643][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 106.892564][ T3321] overlayfs: failed to clone upperpath [ 107.038679][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 107.045209][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 107.054299][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 107.063564][ T9] usb 4-1: config 1 has no interface number 1 [ 107.069912][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 107.084342][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.093457][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.101525][ T9] usb 4-1: Product: syz [ 107.105762][ T9] usb 4-1: Manufacturer: syz [ 107.110404][ T9] usb 4-1: SerialNumber: syz [ 107.260121][ T3299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.268865][ T3299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.322265][ T9] usb 4-1: 2:1 : unsupported format bits 0x80 [ 107.331858][ T9] usb 4-1: USB disconnect, device number 33 [ 107.340982][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.929957][ T3330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:462 [ 108.024064][ T3335] syzkaller0: refused to change device tx_queue_len [ 108.278608][ T346] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 108.429745][ T346] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.440836][ T346] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 108.451548][ T346] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.458203][ T346] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 108.467972][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.477148][ T346] usb 4-1: config 0 descriptor?? [ 108.482539][ T3335] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.893327][ T346] logitech 0003:046D:C286.0010: unknown main item tag 0x0 [ 108.900626][ T346] logitech 0003:046D:C286.0010: unknown main item tag 0x0 [ 108.907786][ T346] logitech 0003:046D:C286.0010: unknown main item tag 0x0 [ 108.914968][ T346] logitech 0003:046D:C286.0010: unknown main item tag 0x0 [ 108.922157][ T346] logitech 0003:046D:C286.0010: unknown main item tag 0x0 [ 108.929537][ T346] logitech 0003:046D:C286.0010: unknown main item tag 0x4 [ 108.936727][ T346] logitech 0003:046D:C286.0010: item fetching failed at offset 6/8 [ 108.942574][ T9] usb 3-1: USB disconnect, device number 26 [ 108.944945][ T346] logitech 0003:046D:C286.0010: parse failed [ 108.957062][ T346] logitech 0003:046D:C286.0010: probe with driver logitech failed with error -22 [ 109.071521][ T3338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3338 comm=syz.2.1039 [ 109.089619][ T36] audit: type=1326 audit(1751195144.927:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.2.1039" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd2f18e929 code=0x0 [ 109.285074][ T45] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 15 proto 1 vid 0x0525 pid 0xA4A8 [ 109.300390][ T3347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:723 [ 109.300821][ T3347] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 109.307525][ T45] usb 1-1: USB disconnect, device number 35 [ 109.329128][ T3349] rust_binder: Write failure EFAULT in pid:618 [ 109.334325][ T45] usblp0: removed [ 109.346890][ T3354] /dev/rnullb0: Can't open blockdev [ 109.400182][ T3366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 109.486858][ T3371] __vm_enough_memory: pid: 3371, comm: syz.2.1050, bytes: 70373039144960 not enough memory for the allocation [ 109.758644][ T346] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 109.798698][ T45] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 109.908619][ T346] usb 3-1: Using ep0 maxpacket: 8 [ 109.915768][ T346] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.922888][ T346] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 109.932558][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.941419][ T346] usb 3-1: config 0 descriptor?? [ 109.959685][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.969589][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 109.978698][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.987621][ T45] usb 1-1: config 0 descriptor?? [ 110.350394][ T346] a4tech 0003:09DA:001A.0011: hidraw0: USB HID v0.00 Device [HID 09da:001a] on usb-dummy_hcd.2-1/input0 [ 110.461576][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 110.468754][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 110.478139][ T45] usb 1-1: USB disconnect, device number 36 [ 110.549206][ T3373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.557956][ T3373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.566546][ T346] usb 3-1: USB disconnect, device number 27 [ 110.818784][ T45] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 110.932815][ T346] usb 4-1: USB disconnect, device number 34 [ 110.948735][ T45] usb 1-1: device descriptor read/64, error -71 [ 111.121086][ T3392] binder: Bad value for 'stats' [ 111.188649][ T45] usb 1-1: device descriptor read/64, error -71 [ 111.348663][ T346] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 111.358741][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 111.428658][ T45] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 111.498720][ T346] usb 4-1: Using ep0 maxpacket: 32 [ 111.505129][ T346] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 111.513741][ T346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.518670][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 111.523902][ T346] usb 4-1: config 0 has no interface number 0 [ 111.530665][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 111.535152][ T346] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 111.543832][ T9] usb 3-1: config 0 has no interface number 0 [ 111.553611][ T346] usb 4-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 111.560406][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 111.574054][ T45] usb 1-1: device descriptor read/64, error -71 [ 111.582772][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 111.588625][ T346] usb 4-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 111.596653][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.610906][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.619493][ T9] usb 3-1: Product: syz [ 111.623420][ T346] usb 4-1: Product: syz [ 111.625812][ T9] usb 3-1: Manufacturer: syz [ 111.630794][ T346] usb 4-1: Manufacturer: syz [ 111.634965][ T9] usb 3-1: SerialNumber: syz [ 111.639160][ T346] usb 4-1: SerialNumber: syz [ 111.647847][ T36] audit: type=1400 audit(1751195147.477:407): avc: denied { listen } for pid=3393 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.654206][ T346] usb 4-1: config 0 descriptor?? [ 111.668647][ T9] usb 3-1: config 0 descriptor?? [ 111.674009][ T3386] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 111.679474][ T9] smsc75xx v1.0.0 [ 111.686102][ T346] usb-storage 4-1:0.231: USB Mass Storage device detected [ 111.796592][ T3406] overlayfs: failed to clone upperpath [ 111.820692][ T45] usb 1-1: device descriptor read/64, error -71 [ 111.928752][ T45] usb usb1-port1: attempt power cycle [ 112.015797][ T346] usb 4-1: USB disconnect, device number 35 [ 112.268671][ T45] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 112.289846][ T45] usb 1-1: device descriptor read/8, error -71 [ 112.310844][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 112.321773][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 112.331281][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 112.342151][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 112.352071][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 112.362956][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 112.372690][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 112.384725][ T9] usb 3-1: USB disconnect, device number 28 [ 112.419884][ T45] usb 1-1: device descriptor read/8, error -71 [ 112.658674][ T45] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 112.679693][ T45] usb 1-1: device descriptor read/8, error -71 [ 112.738119][ T3439] tmpfs: Unknown parameter 'fo' [ 112.748823][ T3439] overlayfs: failed to resolve './bus/file0': -2 [ 112.820087][ T45] usb 1-1: device descriptor read/8, error -71 [ 112.928756][ T45] usb usb1-port1: unable to enumerate USB device [ 112.938652][ T3467] rust_binder: Write failure EINVAL in pid:759 [ 112.998604][ T36] audit: type=1400 audit(1751195148.827:408): avc: denied { getattr } for pid=3468 comm="syz.2.1081" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.078693][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 113.228676][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 113.235002][ T9] usb 4-1: config 0 has no interfaces? [ 113.242060][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.251183][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.259292][ T9] usb 4-1: Product: syz [ 113.263483][ T9] usb 4-1: Manufacturer: syz [ 113.268096][ T9] usb 4-1: SerialNumber: syz [ 113.273486][ T9] usb 4-1: config 0 descriptor?? [ 113.480724][ T45] usb 4-1: USB disconnect, device number 36 [ 113.519063][ T36] audit: type=1400 audit(1751195149.357:409): avc: denied { ioctl } for pid=3470 comm="syz.0.1082" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.566698][ T3477] binder: Bad value for 'stats' [ 113.659340][ T36] audit: type=1326 audit(1751195149.497:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.1.1091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d36d8e929 code=0x0 [ 113.766244][ T36] audit: type=1400 audit(1751195149.597:411): avc: denied { module_load } for pid=3504 comm="syz.2.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 113.766258][ T3505] Invalid ELF header type: 2 != 1 [ 113.812937][ T3505] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 113.812959][ T3505] rust_binder: Error while translating object. [ 113.823452][ T3505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.829684][ T3505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:768 [ 113.865333][ T3512] SELinux: security_context_str_to_sid () failed with errno=-22 [ 113.883415][ T3512] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 113.892352][ T3512] rust_binder: Write failure EINVAL in pid:772 [ 114.301844][ T3545] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 114.318155][ T3545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 114.328220][ T3545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:664 [ 114.368726][ T3547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 114.384151][ T3547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:666 [ 114.478638][ T65] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 114.512485][ T13] tipc: Subscription rejected, illegal request [ 114.564166][ T3558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=3558 comm=syz.1.1112 [ 114.648611][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 114.654969][ T65] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 114.666498][ T65] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.668638][ T346] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 114.679468][ T65] usb 4-1: config 1 interface 0 has no altsetting 0 [ 114.694944][ T65] usb 4-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.40 [ 114.704044][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.712142][ T65] usb 4-1: Product: Ћ [ 114.716244][ T65] usb 4-1: Manufacturer: К [ 114.720801][ T65] usb 4-1: SerialNumber: 〉 [ 114.768637][ T45] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 114.828646][ T346] usb 1-1: Using ep0 maxpacket: 16 [ 114.835084][ T346] usb 1-1: config 0 has no interfaces? [ 114.842482][ T346] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.851602][ T346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.859658][ T346] usb 1-1: Product: syz [ 114.863853][ T346] usb 1-1: Manufacturer: syz [ 114.868773][ T346] usb 1-1: SerialNumber: syz [ 114.874254][ T346] usb 1-1: config 0 descriptor?? [ 114.919748][ T45] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.930861][ T45] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 114.941793][ T45] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 114.954729][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 114.961447][ T45] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 114.970719][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.979569][ T45] usb 3-1: config 0 descriptor?? [ 114.984884][ T3557] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 115.083360][ T1401] usb 1-1: USB disconnect, device number 41 [ 115.154473][ T65] usbhid 4-1:1.0: can't add hid device: -71 [ 115.160552][ T65] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 115.170712][ T65] usb 4-1: USB disconnect, device number 37 [ 115.373084][ T36] audit: type=1326 audit(1751195151.207:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3563 comm="syz.1.1115" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d36d8e929 code=0x0 [ 115.398857][ T45] input: HID 28bd:1903 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:1903.0012/input/input16 [ 115.416273][ T45] uclogic 0003:28BD:1903.0012: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.2-1/input0 [ 115.599233][ T3557] rust_binder: Error while translating object. [ 115.599287][ T3557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 115.605568][ T3557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:787 [ 115.618803][ T65] usb 3-1: USB disconnect, device number 29 [ 115.619288][ T3569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 115.666483][ T3573] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1118'. [ 115.675679][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 115.684709][ T3573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 115.938950][ T45] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 116.099803][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 116.109680][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 116.119674][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 116.129520][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 116.141260][ T45] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 116.150401][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.158517][ T45] usb 1-1: Product: syz [ 116.162760][ T45] usb 1-1: Manufacturer: syz [ 116.168036][ T45] usb 1-1: SerialNumber: syz [ 116.173492][ T45] usb 1-1: config 0 descriptor?? [ 116.179398][ T45] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 116.382099][ T45] scsi host1: usb-storage 1-1:0.0 [ 116.389960][ T45] usb 1-1: USB disconnect, device number 42 [ 116.758592][ T36] audit: type=1400 audit(1751195152.587:413): avc: denied { accept } for pid=3608 comm="syz.3.1128" path="socket:[24847]" dev="sockfs" ino=24847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.012549][ T3632] kvm: pic: non byte write [ 117.338608][ T346] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 117.378498][ T3646] 9pnet: Could not find request transport: fd= [ 117.460602][ T3654] overlayfs: failed to clone upperpath [ 117.499659][ T346] usb 1-1: Using ep0 maxpacket: 16 [ 117.507098][ T346] usb 1-1: config 0 has no interfaces? [ 117.514372][ T346] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.526931][ T346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.540690][ T346] usb 1-1: Product: syz [ 117.548217][ T346] usb 1-1: Manufacturer: syz [ 117.555299][ T346] usb 1-1: SerialNumber: syz [ 117.565527][ T346] usb 1-1: config 0 descriptor?? [ 117.683185][ T3661] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1145'. [ 117.779014][ T346] usb 1-1: USB disconnect, device number 43 [ 117.860543][ T3670] binder: Bad value for 'max' [ 117.954845][ T3674] kvm: pic: non byte write [ 118.141731][ T3679] 9pnet_fd: Insufficient options for proto=fd [ 118.308646][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 118.385542][ T3684] rust_binder: Write failure EFAULT in pid:686 [ 118.458617][ T9] usb 4-1: device descriptor read/64, error -71 [ 118.658799][ T65] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 118.718609][ T9] usb 4-1: device descriptor read/64, error -71 [ 118.819646][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 118.840645][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 118.861461][ T65] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 118.872917][ T65] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 118.898610][ T65] usb 1-1: Product: syz [ 118.902832][ T65] usb 1-1: Manufacturer: syz [ 118.907702][ T65] usb 1-1: SerialNumber: syz [ 118.913492][ T65] usb 1-1: config 0 descriptor?? [ 118.918746][ T3687] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 118.958621][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 119.023434][ T36] audit: type=1400 audit(1751195154.857:414): avc: denied { setattr } for pid=3689 comm="syz.1.1154" name="CAN_RAW" dev="sockfs" ino=24465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.088637][ T9] usb 4-1: device descriptor read/64, error -71 [ 119.199759][ T65] usb 1-1: USB disconnect, device number 44 [ 119.328729][ T9] usb 4-1: device descriptor read/64, error -71 [ 119.408679][ T346] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 119.438830][ T9] usb usb4-port1: attempt power cycle [ 119.538635][ T346] usb 3-1: device descriptor read/64, error -71 [ 119.778654][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 119.788662][ T346] usb 3-1: device descriptor read/64, error -71 [ 119.799786][ T9] usb 4-1: device descriptor read/8, error -71 [ 119.929851][ T9] usb 4-1: device descriptor read/8, error -71 [ 120.028725][ T346] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 120.128654][ T45] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 120.158605][ T346] usb 3-1: device descriptor read/64, error -71 [ 120.168781][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 120.189782][ T9] usb 4-1: device descriptor read/8, error -71 [ 120.199711][ T3722] tmpfs: Bad value for 'uid' [ 120.204322][ T3722] tmpfs: Bad value for 'uid' [ 120.279822][ T45] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.288925][ T45] usb 1-1: config 1 has no interface number 1 [ 120.295035][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 120.307926][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 30, changing to 4 [ 120.318958][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 120.329918][ T9] usb 4-1: device descriptor read/8, error -71 [ 120.332145][ T45] usb 1-1: string descriptor 0 read error: -22 [ 120.342440][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.351628][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.361896][ T45] usb 1-1: low speed audio streaming not supported [ 120.408688][ T346] usb 3-1: device descriptor read/64, error -71 [ 120.438758][ T9] usb usb4-port1: unable to enumerate USB device [ 120.518811][ T346] usb usb3-port1: attempt power cycle [ 120.562792][ T3711] tmpfs: Unknown parameter 'indo64' [ 120.569006][ T3711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.577548][ T3711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.586270][ T45] usb 1-1: USB disconnect, device number 45 [ 120.858676][ T346] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 120.879768][ T346] usb 3-1: device descriptor read/8, error -71 [ 121.009709][ T346] usb 3-1: device descriptor read/8, error -71 [ 121.117636][ T36] audit: type=1400 audit(1751195156.947:415): avc: denied { mounton } for pid=3738 comm="syz.3.1174" path="/186/file0" dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 121.139850][ T3739] kvm: pic: non byte write [ 121.264807][ T3749] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 121.273621][ T3749] rust_binder: Write failure EINVAL in pid:547 [ 121.273972][ T3751] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.278658][ T346] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 121.320529][ T346] usb 3-1: device descriptor read/8, error -71 [ 121.351633][ T3762] rust_binder: Error while translating object. [ 121.351661][ T3762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 121.358222][ T3762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:559 [ 121.449675][ T346] usb 3-1: device descriptor read/8, error -71 [ 121.481334][ T3772] SELinux: security_context_str_to_sid () failed with errno=-22 [ 121.510707][ T3777] 9pnet_fd: p9_fd_create_unix (3777): problem connecting socket: ./bus: -111 [ 121.520388][ T3777] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 121.538037][ T36] audit: type=1400 audit(1751195157.367:416): avc: denied { connect } for pid=3778 comm="syz.0.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.576504][ T346] usb usb3-port1: unable to enumerate USB device [ 121.689687][ T3792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'. [ 121.698811][ T3792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 121.721447][ T36] audit: type=1400 audit(1751195157.557:417): avc: denied { map } for pid=3793 comm="syz.3.1192" path="socket:[26627]" dev="sockfs" ino=26627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.898652][ T45] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 122.058704][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 122.065067][ T45] usb 1-1: config 0 has no interfaces? [ 122.072196][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.081394][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.089461][ T45] usb 1-1: Product: syz [ 122.093663][ T45] usb 1-1: Manufacturer: syz [ 122.098447][ T45] usb 1-1: SerialNumber: syz [ 122.107022][ T45] usb 1-1: config 0 descriptor?? [ 122.183239][ T3813] Unsupported ieee802154 address type: 0 [ 122.214608][ T3819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 122.317124][ T9] usb 1-1: USB disconnect, device number 46 [ 122.320373][ T36] audit: type=1400 audit(1751195158.157:418): avc: denied { load_policy } for pid=3831 comm="syz.2.1203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.327219][ T3832] SELinux: ebitmap start bit (3808428352) is beyond the end of the bitmap (1472) [ 122.356060][ T3832] SELinux: failed to load policy [ 122.363350][ T3832] /dev/rnullb0: Can't open blockdev [ 122.511616][ T3840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=3840 comm=syz.1.1206 [ 122.562136][ T36] audit: type=1400 audit(1751195158.397:419): avc: denied { create } for pid=3843 comm="syz.1.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 122.587761][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 122.618619][ T346] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 122.622787][ T36] audit: type=1400 audit(1751195158.457:420): avc: denied { connect } for pid=3849 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.670264][ T3852] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1212'. [ 122.705649][ T3858] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1214'. [ 122.716235][ T3858] overlayfs: failed to clone upperpath [ 122.789164][ T346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.797243][ T346] usb 3-1: not running at top speed; connect to a high speed hub [ 122.808268][ T346] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 122.814616][ T3858] overlayfs: failed to resolve './file0': -2 [ 122.823542][ T3863] netlink: 'syz.3.1216': attribute type 11 has an invalid length. [ 122.826214][ T3859] overlayfs: failed to resolve './file0': -2 [ 122.835053][ T346] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.849170][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.858734][ T346] usb 3-1: Product: syz [ 122.862941][ T346] usb 3-1: Manufacturer: syz [ 122.867660][ T346] usb 3-1: SerialNumber: syz [ 123.058723][ T3876] 9pnet: Could not find request transport: xen [ 123.078712][ T3877] 9pnet: Could not find request transport: xen [ 123.088178][ T346] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 123.107535][ T346] usb 3-1: USB disconnect, device number 34 [ 123.260908][ T3884] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 123.268768][ T3884] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.697002][ T3893] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 255) [ 123.697035][ T3893] rust_binder: Error while translating object. [ 123.748132][ T3893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 123.768183][ T3893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:815 [ 123.869298][ T3895] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1228'. [ 123.923688][ T3895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'. [ 123.938716][ T3895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1228'. [ 124.038074][ T3900] binder: Bad value for 'max' [ 124.328610][ T45] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 124.498586][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 124.506802][ T45] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.538584][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.555382][ T45] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 124.575491][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.605721][ T45] usb 3-1: config 0 descriptor?? [ 124.698605][ T346] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 124.858652][ T346] usb 1-1: device descriptor read/64, error -71 [ 125.014919][ T45] uclogic 0003:5543:0042.0013: unbalanced delimiter at end of report description [ 125.024441][ T45] uclogic 0003:5543:0042.0013: parse failed [ 125.030572][ T45] uclogic 0003:5543:0042.0013: probe with driver uclogic failed with error -22 [ 125.108664][ T346] usb 1-1: device descriptor read/64, error -71 [ 125.198702][ T31] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 125.217785][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.224279][ T3904] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.230899][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.348652][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 125.353853][ T346] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 125.363030][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 125.373736][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.387396][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.396509][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.404567][ T31] usb 4-1: SerialNumber: syz [ 125.410588][ T3928] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 125.488624][ T346] usb 1-1: device descriptor read/64, error -71 [ 125.544151][ T3939] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1244'. [ 125.621066][ T31] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 125.630719][ T31] usb 4-1: USB disconnect, device number 42 [ 125.728677][ T346] usb 1-1: device descriptor read/64, error -71 [ 125.838752][ T346] usb usb1-port1: attempt power cycle [ 126.092156][ T3949] /dev/loop0: Can't lookup blockdev [ 126.092176][ T3948] /dev/loop0: Can't lookup blockdev [ 126.178717][ T346] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 126.199834][ T346] usb 1-1: device descriptor read/8, error -71 [ 126.329844][ T346] usb 1-1: device descriptor read/8, error -71 [ 126.568711][ T346] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 126.589776][ T346] usb 1-1: device descriptor read/8, error -71 [ 126.671695][ T3958] overlayfs: failed to clone upperpath [ 126.706612][ T3956] fuse: Invalid gid '00000000000037777777777' [ 126.719768][ T346] usb 1-1: device descriptor read/8, error -71 [ 126.828892][ T346] usb usb1-port1: unable to enumerate USB device [ 127.218657][ T1071] Bluetooth: hci0: command 0x1003 tx timeout [ 127.224878][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.233587][ T9] usb 3-1: USB disconnect, device number 35 [ 127.578785][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 127.598072][ T36] audit: type=1326 audit(1751195163.427:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.3.1263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb837b8e929 code=0x0 [ 127.654906][ T36] audit: type=1326 audit(1751195163.487:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.3.1263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb837b8e929 code=0x0 [ 127.665541][ T4005] xfrm0: mtu less than device minimum [ 127.683861][ T4006] xfrm0: mtu less than device minimum [ 127.684940][ T4011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=4011 comm=syz.1.1267 [ 127.709783][ T36] audit: type=1400 audit(1751195163.547:423): avc: denied { append } for pid=3998 comm="syz.3.1263" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.741608][ T9] usb 3-1: device descriptor read/64, error -71 [ 127.978624][ T9] usb 3-1: device descriptor read/64, error -71 [ 128.198617][ T680] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 128.228617][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 128.350104][ T680] usb 1-1: not running at top speed; connect to a high speed hub [ 128.358672][ T9] usb 3-1: device descriptor read/64, error -71 [ 128.365036][ T680] usb 1-1: config 1 interface 0 has no altsetting 0 [ 128.373273][ T680] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.40 [ 128.382537][ T680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.390581][ T680] usb 1-1: Product: ㈓㒣ㇴ䖅ᅒ䀴휹ハ쐝疱콬嬤擊묔䃣褈㈎㐆ƙ瓩绋ⵔ詑晞竨⹱檛ﺥ氷女ז埒ᆼ恓 [ 128.404622][ T680] usb 1-1: Manufacturer: ⬟ꀇ祆周俚䈺㸶甖湖鲎ᕮ䂔滘畉봾 [ 128.413125][ T680] usb 1-1: SerialNumber: ☡벐힎砃撃輴ꊫ氻驿퇱䗁㋌㉾賳搰킳涉涨瞷픝Ữ䫝令ᇴ憲䘤数荷Ⳕ佳랎⼴ퟷ䈍 [ 128.618614][ T9] usb 3-1: device descriptor read/64, error -71 [ 128.659495][ T680] usbhid 1-1:1.0: can't add hid device: -71 [ 128.665596][ T680] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 128.674370][ T680] usb 1-1: USB disconnect, device number 51 [ 128.728704][ T9] usb usb3-port1: attempt power cycle [ 128.748615][ T346] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 128.888620][ T346] usb 4-1: device descriptor read/64, error -71 [ 128.909978][ T36] audit: type=1400 audit(1751195164.747:424): avc: denied { create } for pid=4060 comm="syz.1.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.971336][ T36] audit: type=1326 audit(1751195164.807:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.1.1291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d36d8e929 code=0x0 [ 129.078624][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 129.099697][ T9] usb 3-1: device descriptor read/8, error -71 [ 129.128625][ T346] usb 4-1: device descriptor read/64, error -71 [ 129.188086][ T4077] rust_binder: Error while translating object. [ 129.188121][ T4077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.194448][ T4077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:772 [ 129.231228][ T9] usb 3-1: device descriptor read/8, error -71 [ 129.354471][ T4089] tipc: Enabled bearer , priority 0 [ 129.368660][ T346] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 129.443069][ T36] audit: type=1400 audit(1751195165.277:427): avc: denied { create } for pid=4092 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 129.463951][ T36] audit: type=1400 audit(1751195165.277:426): avc: denied { create } for pid=4092 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 129.478668][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 129.485079][ T36] audit: type=1400 audit(1751195165.277:428): avc: denied { create } for pid=4092 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.509707][ T9] usb 3-1: device descriptor read/8, error -71 [ 129.512390][ T346] usb 4-1: device descriptor read/64, error -71 [ 129.639707][ T9] usb 3-1: device descriptor read/8, error -71 [ 129.748727][ T9] usb usb3-port1: unable to enumerate USB device [ 129.758783][ T346] usb 4-1: device descriptor read/64, error -71 [ 129.831078][ T4106] overlayfs: failed to clone upperpath [ 129.868721][ T346] usb usb4-port1: attempt power cycle [ 130.208669][ T346] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 130.229788][ T346] usb 4-1: device descriptor read/8, error -71 [ 130.359686][ T346] usb 4-1: device descriptor read/8, error -71 [ 130.418686][ T31] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 130.569759][ T31] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 130.577883][ T31] usb 1-1: config 0 has no interface number 0 [ 130.584058][ T31] usb 1-1: config 0 interface 41 has no altsetting 0 [ 130.592178][ T31] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 130.601388][ T346] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 130.609016][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.617035][ T31] usb 1-1: Product: syz [ 130.621295][ T31] usb 1-1: Manufacturer: syz [ 130.625962][ T31] usb 1-1: SerialNumber: syz [ 130.631918][ T31] usb 1-1: config 0 descriptor?? [ 130.639597][ T346] usb 4-1: device descriptor read/8, error -71 [ 130.668630][ T65] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 130.769652][ T346] usb 4-1: device descriptor read/8, error -71 [ 130.818633][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 130.824935][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.835270][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.845942][ T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.855075][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.863241][ T65] usb 3-1: Product: syz [ 130.867437][ T65] usb 3-1: Manufacturer: syz [ 130.872075][ T65] usb 3-1: SerialNumber: syz [ 130.878713][ T346] usb usb4-port1: unable to enumerate USB device [ 131.046813][ T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 131.056532][ T31] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 131.065989][ T31] usb 1-1: USB disconnect, device number 52 [ 131.078824][ T4112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.087386][ T4112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.100307][ T65] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 131.111535][ T65] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 131.121638][ T65] usb 3-1: USB disconnect, device number 40 [ 131.128210][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.520962][ T4136] netlink: 'syz.3.1318': attribute type 12 has an invalid length. [ 131.757779][ T4152] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1323'. [ 131.778405][ T304] tipc: Subscription rejected, illegal request [ 131.798605][ T471] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 131.949840][ T471] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.960940][ T471] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 131.973918][ T471] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.980576][ T471] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 131.989701][ T471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.998595][ T65] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 131.998793][ T471] usb 1-1: config 0 descriptor?? [ 132.138634][ T65] usb 4-1: device descriptor read/64, error -71 [ 132.378625][ T65] usb 4-1: device descriptor read/64, error -71 [ 132.614983][ T4138] overlayfs: workdir and upperdir must be separate subtrees [ 132.622416][ T65] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 132.632617][ T36] audit: type=1326 audit(1751195168.467:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f18e929 code=0x7ffc0000 [ 132.632693][ T471] usb 1-1: string descriptor 0 read error: -71 [ 132.660562][ T36] audit: type=1326 audit(1751195168.467:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f18e929 code=0x7ffc0000 [ 132.670379][ T471] uclogic 0003:5543:3031.0014: failed retrieving string descriptor #200: -71 [ 132.686424][ T36] audit: type=1326 audit(1751195168.467:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd2f18e929 code=0x7ffc0000 [ 132.709619][ T471] uclogic 0003:5543:3031.0014: failed retrieving pen parameters: -71 [ 132.727023][ T471] uclogic 0003:5543:3031.0014: failed probing pen v2 parameters: -71 [ 132.733836][ T36] audit: type=1326 audit(1751195168.467:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f18e929 code=0x7ffc0000 [ 132.735709][ T471] uclogic 0003:5543:3031.0014: failed probing parameters: -71 [ 132.762181][ T36] audit: type=1326 audit(1751195168.467:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd2f18e929 code=0x7ffc0000 [ 132.768003][ T471] uclogic 0003:5543:3031.0014: probe with driver uclogic failed with error -71 [ 132.790220][ T36] audit: type=1326 audit(1751195168.467:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f18e929 code=0x7ffc0000 [ 132.806653][ T471] usb 1-1: USB disconnect, device number 53 [ 132.824183][ T36] audit: type=1326 audit(1751195168.467:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdd2f18e929 code=0x7ffc0000 [ 132.833115][ T4182] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1334'. [ 132.858682][ T65] usb 4-1: device descriptor read/64, error -71 [ 132.862576][ T4184] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1334'. [ 132.873081][ T36] audit: type=1326 audit(1751195168.467:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f18e929 code=0x7ffc0000 [ 132.898082][ T4186] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1335'. [ 132.899953][ T36] audit: type=1326 audit(1751195168.467:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd2f18e929 code=0x7ffc0000 [ 132.931550][ T36] audit: type=1326 audit(1751195168.467:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.2.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f18e929 code=0x7ffc0000 [ 133.098639][ T65] usb 4-1: device descriptor read/64, error -71 [ 133.197515][ T4210] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 133.206759][ T4210] overlayfs: missing 'workdir' [ 133.207526][ T4214] 9pnet: Unknown protocol version 9p20M0.L [ 133.217573][ T65] usb usb4-port1: attempt power cycle [ 133.235046][ T4216] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 133.244822][ T4216] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 133.498649][ T680] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 133.558648][ T471] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 133.558648][ T65] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 133.579736][ T65] usb 4-1: device descriptor read/8, error -71 [ 133.659760][ T680] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.662581][ T4236] netlink: 'syz.1.1353': attribute type 4 has an invalid length. [ 133.671395][ T680] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 133.679611][ T4236] netlink: 'syz.1.1353': attribute type 6 has an invalid length. [ 133.690409][ T680] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.698701][ T4236] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1353'. [ 133.705287][ T680] usb 3-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 133.723463][ T680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.728614][ T471] usb 1-1: Using ep0 maxpacket: 8 [ 133.733061][ T680] usb 3-1: config 0 descriptor?? [ 133.739713][ T471] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.742897][ T4221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.753869][ T471] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 133.766195][ T65] usb 4-1: device descriptor read/8, error -71 [ 133.770303][ T471] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.782968][ T471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.791439][ T471] usb 1-1: Product: syz [ 133.795876][ T471] usb 1-1: Manufacturer: syz [ 133.800754][ T471] usb 1-1: SerialNumber: syz [ 134.008643][ T65] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 134.013256][ T471] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 134.023199][ T471] cdc_ncm 1-1:1.0: bind() failure [ 134.029437][ T471] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 134.029696][ T65] usb 4-1: device descriptor read/8, error -71 [ 134.036330][ T471] cdc_ncm 1-1:1.1: bind() failure [ 134.040187][ T471] usb 1-1: USB disconnect, device number 54 [ 134.169650][ T65] usb 4-1: device descriptor read/8, error -71 [ 134.278724][ T65] usb usb4-port1: unable to enumerate USB device [ 134.360854][ T4221] netlink: 265 bytes leftover after parsing attributes in process `syz.2.1346'. [ 134.415584][ T680] usbhid 3-1:0.0: can't add hid device: -71 [ 134.422439][ T680] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 134.436498][ T680] usb 3-1: USB disconnect, device number 41 [ 134.750856][ T4271] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1365'. [ 134.778648][ T4271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'. [ 135.088667][ T346] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 135.158629][ T680] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 135.228650][ T346] usb 1-1: device descriptor read/64, error -71 [ 135.318678][ T680] usb 4-1: Using ep0 maxpacket: 16 [ 135.325027][ T680] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.335263][ T680] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 135.349057][ T680] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.358147][ T680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 135.366375][ T680] usb 4-1: SerialNumber: syz [ 135.373431][ T680] cdc_acm 4-1:1.0: Zero length descriptor references [ 135.380674][ T680] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 135.478691][ T346] usb 1-1: device descriptor read/64, error -71 [ 135.574328][ T4274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.583155][ T4274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.596636][ T680] usb 4-1: USB disconnect, device number 51 [ 135.718646][ T346] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 135.858623][ T346] usb 1-1: device descriptor read/64, error -71 [ 136.078638][ T471] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 136.098638][ T346] usb 1-1: device descriptor read/64, error -71 [ 136.208790][ T346] usb usb1-port1: attempt power cycle [ 136.228604][ T471] usb 3-1: Using ep0 maxpacket: 8 [ 136.234834][ T471] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2015, setting to 1024 [ 136.246159][ T471] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 136.256047][ T471] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 136.267105][ T471] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.276249][ T471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.284388][ T471] usb 3-1: Product: ᰊ [ 136.288886][ T471] usb 3-1: Manufacturer: ⠥躘⋷䃰帩턼⣘㮟耇톏ಇ믂∯೧竢짩觞乮읣麓볦랟牛姹㽐梭댉䈹ᅚ⚷ꔬ緬꾴旙ᚥ悯ꅚ睪ᳯ慘퇻鴁榰㥏艵‏筎蓲祤竓ὍϘ맣쫗㞇蠭粝抍珕넨䡅禺갚鍍䫶숴す蕢輼 [ 136.312513][ T471] usb 3-1: SerialNumber: syz [ 136.318211][ T4314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.399177][ T4323] overlayfs: failed to clone upperpath [ 136.421630][ T4327] overlayfs: failed to clone upperpath [ 136.558675][ T346] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 136.579704][ T346] usb 1-1: device descriptor read/8, error -71 [ 136.709683][ T346] usb 1-1: device descriptor read/8, error -71 [ 136.728077][ T4315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.736708][ T4315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.738252][ T4314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.753768][ T4314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.764060][ T471] cdc_ncm 3-1:1.0: bind() failure [ 136.770132][ T471] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 136.777147][ T471] cdc_ncm 3-1:1.1: bind() failure [ 136.783362][ T471] usb 3-1: USB disconnect, device number 42 [ 136.828656][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 136.962002][ T31] usb 4-1: device descriptor read/64, error -71 [ 136.968350][ T346] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 136.990800][ T346] usb 1-1: device descriptor read/8, error -71 [ 137.119681][ T346] usb 1-1: device descriptor read/8, error -71 [ 137.198701][ T31] usb 4-1: device descriptor read/64, error -71 [ 137.228693][ T346] usb usb1-port1: unable to enumerate USB device [ 137.277309][ T4343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.278794][ T4343] rust_binder: Error while translating object. [ 137.285384][ T4343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 137.291762][ T4343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:872 [ 137.323744][ T4347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1392'. [ 137.342572][ T4347] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 137.352018][ T4349] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 137.438645][ T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 137.568623][ T31] usb 4-1: device descriptor read/64, error -71 [ 137.749936][ T4373] binder: Unknown parameter 'seclabelF' [ 137.770159][ T36] kauditd_printk_skb: 113 callbacks suppressed [ 137.770179][ T36] audit: type=1400 audit(1751195173.607:552): avc: denied { write } for pid=4372 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.796099][ T36] audit: type=1400 audit(1751195173.607:553): avc: denied { bind } for pid=4372 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.818642][ T31] usb 4-1: device descriptor read/64, error -71 [ 137.928687][ T31] usb usb4-port1: attempt power cycle [ 138.238671][ T471] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 138.278645][ T31] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 138.299628][ T31] usb 4-1: device descriptor read/8, error -71 [ 138.368647][ T471] usb 1-1: device descriptor read/64, error -71 [ 138.429694][ T31] usb 4-1: device descriptor read/8, error -71 [ 138.608800][ T471] usb 1-1: device descriptor read/64, error -71 [ 138.619252][ T4427] sock: sock_timestamping_bind_phc: sock not bind to device [ 138.668616][ T31] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 138.699626][ T31] usb 4-1: device descriptor read/8, error -71 [ 138.782893][ T36] audit: type=1400 audit(1751195174.617:554): avc: denied { mounton } for pid=4436 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 138.839627][ T31] usb 4-1: device descriptor read/8, error -71 [ 138.851377][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.858976][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.866127][ T4436] bridge_slave_0: entered allmulticast mode [ 138.872150][ T471] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 138.872911][ T4436] bridge_slave_0: entered promiscuous mode [ 138.886612][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.893698][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.900957][ T4436] bridge_slave_1: entered allmulticast mode [ 138.907368][ T4436] bridge_slave_1: entered promiscuous mode [ 138.958709][ T31] usb usb4-port1: unable to enumerate USB device [ 138.978156][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.985261][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.992598][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.999692][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.008607][ T471] usb 1-1: device descriptor read/64, error -71 [ 139.024625][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.032230][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.248669][ T471] usb 1-1: device descriptor read/64, error -71 [ 139.269290][ T304] vlan0: left allmulticast mode [ 139.274220][ T304] veth0_vlan: left allmulticast mode [ 139.279584][ T304] vlan0: left promiscuous mode [ 139.284656][ T304] bridge0: port 3(vlan0) entered disabled state [ 139.291397][ T304] bridge_slave_1: left allmulticast mode [ 139.297050][ T304] bridge_slave_1: left promiscuous mode [ 139.302798][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.310356][ T304] bridge_slave_0: left allmulticast mode [ 139.316008][ T304] bridge_slave_0: left promiscuous mode [ 139.321833][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.358783][ T471] usb usb1-port1: attempt power cycle [ 139.381948][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.389088][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.398273][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.405468][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.431466][ T4436] veth0_vlan: entered promiscuous mode [ 139.438306][ T304] veth1_macvtap: left promiscuous mode [ 139.443929][ T304] veth0_vlan: left promiscuous mode [ 139.489557][ T4436] veth1_macvtap: entered promiscuous mode [ 139.509779][ T36] audit: type=1400 audit(1751195175.347:555): avc: denied { mounton } for pid=4436 comm="syz-executor" path="/root/syzkaller.VeN98U/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 139.708622][ T471] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 139.729644][ T471] usb 1-1: device descriptor read/8, error -71 [ 139.860291][ T471] usb 1-1: device descriptor read/8, error -71 [ 139.958620][ T680] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 139.998674][ T65] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 140.108675][ T680] usb 2-1: Using ep0 maxpacket: 32 [ 140.108680][ T471] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 140.122851][ T680] usb 2-1: config index 0 descriptor too short (expected 50204, got 796) [ 140.131468][ T680] usb 2-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 140.140057][ T471] usb 1-1: device descriptor read/8, error -71 [ 140.140427][ T680] usb 2-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 140.156770][ T680] usb 2-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 140.166093][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 140.172540][ T65] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 140.181034][ T65] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 140.189932][ T680] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 140.199144][ T65] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 140.208292][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.218815][ T680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.226836][ T680] usb 2-1: Product: syz [ 140.231042][ T680] usb 2-1: Manufacturer: syz [ 140.235821][ T680] usb 2-1: SerialNumber: syz [ 140.240498][ T65] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.250507][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.263940][ T65] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 140.273111][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.279768][ T471] usb 1-1: device descriptor read/8, error -71 [ 140.286949][ T65] usb 4-1: config 0 descriptor?? [ 140.388798][ T471] usb usb1-port1: unable to enumerate USB device [ 140.489412][ T680] usb 2-1: USB disconnect, device number 12 [ 140.498168][ T65] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 140.511522][ T65] usb 4-1: USB disconnect, device number 56 [ 140.518325][ T65] usblp0: removed [ 140.938705][ T471] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 141.088729][ T471] usb 4-1: Using ep0 maxpacket: 32 [ 141.095024][ T471] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 141.103591][ T471] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 141.112406][ T471] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 141.122203][ T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.131896][ T471] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 141.141756][ T471] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.154834][ T471] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 141.164006][ T471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.173025][ T471] usb 4-1: config 0 descriptor?? [ 141.318663][ T680] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 141.379847][ T471] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 141.470408][ T680] usb 2-1: config 0 has an invalid interface number: 252 but max is 0 [ 141.478778][ T680] usb 2-1: config 0 has no interface number 0 [ 141.484879][ T680] usb 2-1: config 0 interface 252 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.498319][ T680] usb 2-1: config 0 interface 252 has no altsetting 0 [ 141.505439][ T680] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 141.514640][ T680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.523368][ T680] usb 2-1: config 0 descriptor?? [ 141.557600][ T4465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 141.557630][ T4465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:839 [ 141.567262][ T4465] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 141.576688][ T4465] rust_binder: Read failure Err(EFAULT) in pid:839 [ 141.608770][ T346] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 141.633261][ C1] usblp0: nonzero read bulk status received: -71 [ 141.633450][ T680] usb 4-1: USB disconnect, device number 57 [ 141.646633][ T4445] usblp0: error -71 reading from printer [ 141.748738][ T346] usb 3-1: device descriptor read/64, error -71 [ 141.848894][ T4445] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 141.857948][ T4444] usblp0: removed [ 141.932158][ T4485] rust_binder: Error while translating object. [ 141.932190][ T4485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.938411][ T4485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:858 [ 141.960281][ T4487] netlink: 'syz.0.1439': attribute type 3 has an invalid length. [ 141.977497][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 141.987625][ T4487] rust_binder: Error while translating object. [ 141.987674][ T4487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.993977][ T4487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:860 [ 141.998671][ T346] usb 3-1: device descriptor read/64, error -71 [ 142.238640][ T680] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 142.258708][ T346] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 142.388606][ T680] usb 1-1: Using ep0 maxpacket: 32 [ 142.390883][ T4492] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1441'. [ 142.393860][ T36] audit: type=1400 audit(1751195178.227:556): avc: denied { nlmsg_read } for pid=4491 comm="syz.3.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.403064][ T346] usb 3-1: device descriptor read/64, error -71 [ 142.427602][ T680] usb 1-1: config 1 interface 0 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.443335][ T680] usb 1-1: config 1 interface 0 has no altsetting 0 [ 142.451852][ T680] usb 1-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.40 [ 142.460998][ T680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.469043][ T680] usb 1-1: Product: 㭽뼹⸿歊騗玻ʾႬ㑲ः劔胾뀣좿솿뤁ĵ䕏ᒔ懆⥾괎馸㌿彀읔拦᜵厅唐ᘚ绂ฦ鉬龌﯒샽麀䶺诈͡䏶渭괺뫩㇞嫬钵뽖鍮蘽튨其ѥ맻냖걪Ჾ혬⩊잁찞冁Đ扢☐ڼ䲟車莣ꭐꅗ瘘蒭᫁㌲䎮 [ 142.495633][ T680] usb 1-1: Manufacturer: 憘潧喻衖磜憖࿋微ℼං湤訒ᔦ炾鈋澓⬃粮焖聆츊墘ꁹℾ㛒鬣齕姜홤봖箜靥䂥畼욵埨눀䧦ꐟ⼵嫶쎐阀⤚ẗ鯶㚰콉⇸숊꺉虨䬇訍᪷淄൬▼圼ᱷ팇濐笲썓弃荾㳭䏦⑆먔㴈팴̩꘮笞뜁䜷硗lj᠓⦞譑 [ 142.524271][ T680] usb 1-1: SerialNumber: 墻跽⯫ࡄྫྷ륢瓤珁釁㛪껉䑪㽠䈇ࡎ죕쑌逪鎥뀏弡漱喰废戾罉鑼啩缲㛅齨摬ꙕ炭뉳ᑞ㷋㑢⏉ᦹ搿뜥浏⨗룏脦≬⡅ꭙ崭围ረ⸨ཌྷ⁒縣娲存곯훯颢┾墂裮෸啃蠌鶕卭옦貑鋛₊ [ 142.688668][ T346] usb 3-1: device descriptor read/64, error -71 [ 142.785702][ T4496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.794391][ T4496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.803546][ T4496] rust_binder: Write failure EINVAL in pid:12 [ 142.808711][ T346] usb usb3-port1: attempt power cycle [ 143.158666][ T346] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 143.179701][ T346] usb 3-1: device descriptor read/8, error -71 [ 143.309721][ T346] usb 3-1: device descriptor read/8, error -71 [ 143.361960][ T4522] kvm: Disabled LAPIC found during irq injection [ 143.407714][ T4524] /dev/rnullb0: Can't open blockdev [ 143.426973][ T36] audit: type=1400 audit(1751195179.257:557): avc: denied { write } for pid=4528 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.462987][ T680] usbhid 1-1:1.0: can't add hid device: -71 [ 143.469166][ T680] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 143.479360][ T680] usb 1-1: USB disconnect, device number 63 [ 143.548762][ T346] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 143.569717][ T346] usb 3-1: device descriptor read/8, error -71 [ 143.699736][ T346] usb 3-1: device descriptor read/8, error -71 [ 143.757035][ T4546] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 143.770036][ T4548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.778105][ T4546] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 143.808773][ T346] usb usb3-port1: unable to enumerate USB device [ 144.048641][ T680] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 144.093218][ T470] usb 2-1: USB disconnect, device number 13 [ 144.198636][ T680] usb 4-1: Using ep0 maxpacket: 32 [ 144.199016][ T4556] loop8: detected capacity change from 0 to 16384 [ 144.205505][ T680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.222038][ T680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.232033][ T680] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 144.245165][ T680] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 144.254308][ T680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.273778][ T680] usb 4-1: config 0 descriptor?? [ 144.398511][ T4567] rust_binder: Error while translating object. [ 144.398612][ T4567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 144.404941][ T4567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:939 [ 144.414896][ T4568] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.474237][ T4575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.474632][ T4575] rust_binder: Failed to allocate buffer. len:4144, is_oneway:true [ 144.518660][ T346] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 144.568623][ T470] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 144.678642][ T346] usb 2-1: Using ep0 maxpacket: 16 [ 144.685034][ T346] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 8 [ 144.695048][ T346] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 144.704877][ T346] usb 2-1: config 1 interface 0 has no altsetting 0 [ 144.711008][ T680] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0015/input/input18 [ 144.724119][ T346] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 144.724647][ T680] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0015/input/input19 [ 144.739509][ T346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.748640][ T307] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 144.753600][ T346] usb 2-1: Product: ࠒ [ 144.765777][ T346] usb 2-1: Manufacturer: ࠓ [ 144.765792][ T470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.771198][ T346] usb 2-1: SerialNumber: 㠁 [ 144.783923][ T680] kye 0003:0458:5011.0015: input,hiddev96,hidraw0: USB HID v9.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 144.806646][ T470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.816783][ T470] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.817676][ T4560] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.834649][ T470] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.846217][ T4560] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.853448][ T470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.868806][ T470] usb 1-1: config 0 descriptor?? [ 144.909853][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.920891][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.930906][ T307] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.943876][ T307] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.953002][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.962604][ T307] usb 3-1: config 0 descriptor?? [ 144.968438][ T307] hub 3-1:0.0: USB hub found [ 145.027862][ T4581] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 145.046007][ T36] audit: type=1400 audit(2000000000.930:558): avc: denied { append } for pid=4551 comm="syz.3.1460" name="pfkey" dev="proc" ino=4026532462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 145.063324][ T346] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 9 proto 2 vid 0x0525 pid 0xA4A8 [ 145.081994][ T346] usb 2-1: USB disconnect, device number 14 [ 145.093335][ T346] usblp0: removed [ 145.179912][ T4579] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 145.190378][ T307] hub 3-1:0.0: 14 ports detected [ 145.195825][ T307] hub 3-1:0.0: insufficient power available to use all downstream ports [ 145.283732][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.291306][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.300333][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.307792][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.315255][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.322808][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.330302][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.337750][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.345243][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.352745][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.360235][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.367684][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.375170][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.382744][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.390268][ T470] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 145.397980][ T470] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 145.407848][ T470] plantronics 0003:047F:FFFF.0016: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 145.479684][ T307] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 145.486715][ T307] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 145.509031][ T307] usb 3-1: USB disconnect, device number 47 [ 145.587357][ T470] usb 1-1: USB disconnect, device number 64 [ 145.621984][ T36] audit: type=1400 audit(2000000001.500:559): avc: denied { execute } for pid=4588 comm="syz.1.1472" path="/selinux/enforce" dev="selinuxfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 145.748656][ C0] kye 0003:0458:5011.0015: usb_submit_urb(ctrl) failed: -1 [ 145.858637][ T346] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 145.878665][ T307] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 146.004973][ T4594] loop8: detected capacity change from 0 to 16384 [ 146.011661][ T346] usb 2-1: Using ep0 maxpacket: 16 [ 146.017307][ T346] usb 2-1: no configurations [ 146.019792][ T307] usb 4-1: device descriptor read/64, error -32 [ 146.022658][ T346] usb 2-1: can't read configurations, error -22 [ 146.151139][ T4595] loop8: detected capacity change from 16384 to 0 [ 146.158628][ T346] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 146.258630][ T307] usb 4-1: device descriptor read/64, error -32 [ 146.318616][ T346] usb 2-1: Using ep0 maxpacket: 16 [ 146.324208][ T346] usb 2-1: no configurations [ 146.328881][ T346] usb 2-1: can't read configurations, error -22 [ 146.336075][ T346] usb usb2-port1: attempt power cycle [ 146.498622][ T307] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 146.588622][ T470] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 146.628603][ T307] usb 4-1: device descriptor read/64, error -32 [ 146.678625][ T346] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 146.698969][ T346] usb 2-1: Using ep0 maxpacket: 16 [ 146.704599][ T346] usb 2-1: no configurations [ 146.709298][ T346] usb 2-1: can't read configurations, error -22 [ 146.739804][ T470] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.750102][ T470] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.759865][ T470] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.768995][ T470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.777040][ T470] usb 1-1: SerialNumber: syz [ 146.851114][ T346] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 146.868945][ T307] usb 4-1: device descriptor read/64, error -32 [ 146.892119][ T346] usb 2-1: Using ep0 maxpacket: 16 [ 146.900786][ T346] usb 2-1: no configurations [ 146.905520][ T346] usb 2-1: can't read configurations, error -22 [ 146.913750][ T346] usb usb2-port1: unable to enumerate USB device [ 146.947834][ T4608] tipc: Can't bind to reserved service type 0 [ 146.990488][ T470] usb 1-1: 0:2 : does not exist [ 146.995826][ T470] usb 1-1: unit 5: unexpected type 0x0a [ 147.005407][ T470] usb 1-1: USB disconnect, device number 65 [ 147.027349][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 147.938691][ T470] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 147.978669][ T65] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 148.018682][ T307] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 148.039971][ T307] usb 4-1: device descriptor read/8, error -71 [ 148.089698][ T470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.100639][ T470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.110443][ T65] usb 3-1: device descriptor read/64, error -71 [ 148.116723][ T470] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.129779][ T470] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.138954][ T470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.147553][ T470] usb 1-1: config 0 descriptor?? [ 148.169906][ T307] usb 4-1: device descriptor read/8, error -71 [ 148.348626][ T65] usb 3-1: device descriptor read/64, error -71 [ 148.408626][ T307] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 148.429611][ T307] usb 4-1: device descriptor read/8, error -71 [ 148.556219][ T470] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 148.564005][ T470] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 148.571485][ T470] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 148.578975][ T470] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 148.586387][ T470] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 148.593864][ T65] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 148.601553][ T470] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 148.609656][ T307] usb 4-1: device descriptor read/8, error -71 [ 148.615962][ T470] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 148.625156][ T470] plantronics 0003:047F:FFFF.0017: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 148.718967][ T680] usb 4-1: USB disconnect, device number 58 [ 148.748776][ T65] usb 3-1: device descriptor read/64, error -71 [ 148.948641][ T680] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 148.988588][ T65] usb 3-1: device descriptor read/64, error -71 [ 149.078613][ T680] usb 4-1: device descriptor read/64, error -71 [ 149.098768][ T65] usb usb3-port1: attempt power cycle [ 149.308648][ T470] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 149.318750][ T680] usb 4-1: device descriptor read/64, error -71 [ 149.438645][ T65] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 149.461346][ T65] usb 3-1: device descriptor read/8, error -71 [ 149.467997][ T470] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 149.475660][ T470] usb 2-1: can't read configurations, error -61 [ 149.558673][ T680] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 149.589728][ T65] usb 3-1: device descriptor read/8, error -71 [ 149.608623][ T470] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 149.688642][ T680] usb 4-1: device descriptor read/64, error -71 [ 149.760330][ T470] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 149.768155][ T470] usb 2-1: can't read configurations, error -61 [ 149.775391][ T470] usb usb2-port1: attempt power cycle [ 149.838598][ T65] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 149.859665][ T65] usb 3-1: device descriptor read/8, error -71 [ 149.928621][ T680] usb 4-1: device descriptor read/64, error -71 [ 149.989675][ T65] usb 3-1: device descriptor read/8, error -71 [ 150.038776][ T680] usb usb4-port1: attempt power cycle [ 150.098975][ T65] usb usb3-port1: unable to enumerate USB device [ 150.118603][ T470] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 150.140536][ T470] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 150.148169][ T470] usb 2-1: can't read configurations, error -61 [ 150.278624][ T470] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 150.300524][ T470] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 150.308175][ T470] usb 2-1: can't read configurations, error -61 [ 150.314752][ T470] usb usb2-port1: unable to enumerate USB device [ 150.378614][ T680] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 150.399800][ T680] usb 4-1: device descriptor read/8, error -71 [ 150.529799][ T680] usb 4-1: device descriptor read/8, error -71 [ 150.694384][ T346] usb 1-1: USB disconnect, device number 66 [ 150.754312][ T4685] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3290916003 (26327328024 ns) > initial count (15247863992 ns). Using initial count to start timer. [ 150.885879][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 150.962306][ T4702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.962581][ T4699] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 126) [ 150.969167][ T4699] rust_binder: Error while translating object. [ 150.979798][ T680] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 150.980379][ T4699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.993950][ T4699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:996 [ 151.008941][ T680] usb 4-1: Using ep0 maxpacket: 16 [ 151.028641][ T680] usb 4-1: no configurations [ 151.033297][ T680] usb 4-1: can't read configurations, error -22 [ 151.039843][ T680] usb usb4-port1: unable to enumerate USB device [ 151.147952][ T4711] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 151.147952][ T4711] null pointer dereference occurred [ 151.148627][ T36] audit: type=1400 audit(2000000007.030:560): avc: denied { write } for pid=4710 comm="syz.2.1514" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 151.160617][ T4711] ------------[ cut here ]------------ [ 151.186622][ T36] audit: type=1400 audit(2000000007.070:561): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 151.189530][ T4711] kernel BUG at rust/helpers/bug.c:7! [ 151.212297][ T36] audit: type=1400 audit(2000000007.070:562): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.219357][ T4711] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 151.238967][ T36] audit: type=1400 audit(2000000007.070:563): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.245026][ T4711] CPU: 1 UID: 0 PID: 4711 Comm: syz.2.1514 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 151.266645][ T36] audit: type=1400 audit(2000000007.070:564): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.279657][ T4711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.279677][ T4711] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 151.279709][ T4711] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 b2 93 e4 8e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 f8 57 ad 02 90 90 90 90 90 90 90 90 90 [ 151.300999][ T36] audit: type=1400 audit(2000000007.070:565): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.310445][ T4711] RSP: 0018:ffffc9000f3bf1b0 EFLAGS: 00010246 [ 151.310474][ T4711] RAX: 000000000000005a RBX: 1ffff92001e77e38 RCX: faf7c50ca44d7000 [ 151.310493][ T4711] RDX: ffffc900021b4000 RSI: 0000000000002c2d RDI: 0000000000002c2e [ 151.316341][ T36] audit: type=1400 audit(2000000007.070:566): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.335388][ T4711] RBP: ffffc9000f3bf1b0 R08: ffffc9000f3beea7 R09: 1ffff92001e77dd4 [ 151.335415][ T4711] R10: dffffc0000000000 R11: fffff52001e77dd5 R12: 0000000000000000 [ 151.335433][ T4711] R13: dffffc0000000000 R14: ffffc9000f3bf1e0 R15: ffffc9000f3bf210 [ 151.335452][ T4711] FS: 00007fdd2ff766c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 151.335474][ T4711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.335492][ T4711] CR2: 00007fdd2ff55d58 CR3: 00000001193ec000 CR4: 00000000003526b0 [ 151.356584][ T36] audit: type=1400 audit(2000000007.070:567): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.362070][ T4711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.362093][ T4711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.362111][ T4711] Call Trace: [ 151.362118][ T4711] [ 151.362130][ T4711] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 151.371366][ T36] audit: type=1400 audit(2000000007.260:568): avc: denied { read } for pid=4710 comm="syz.2.1514" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.378111][ T4711] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 151.403116][ T36] audit: type=1400 audit(2000000007.290:569): avc: denied { open } for pid=4710 comm="syz.2.1514" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.408950][ T4711] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 151.409006][ T4711] ? p9pdu_vwritef+0x2720/0x2720 [ 151.573438][ T4711] ? radix_tree_node_alloc+0x1af/0x400 [ 151.578929][ T4711] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 151.587219][ T4711] ? __asan_memcpy+0x5a/0x80 [ 151.591853][ T4711] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 151.599953][ T4711] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 151.608760][ T4711] ? p9pdu_writef+0xdb/0x130 [ 151.613384][ T4711] ? p9pdu_vwritef+0x2720/0x2720 [ 151.618350][ T4711] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 151.627480][ T4711] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 151.636346][ T4711] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 151.644179][ T4711] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 151.651847][ T4711] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 151.657762][ T4711] ? p9_client_prepare_req+0x732/0xa10 [ 151.663249][ T4711] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 151.671534][ T4711] ? __kasan_check_write+0x18/0x20 [ 151.676661][ T4711] ? _raw_spin_lock+0x8c/0x120 [ 151.681451][ T4711] ? __cfi__raw_spin_lock+0x10/0x10 [ 151.686676][ T4711] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 151.692486][ T4711] ? mon_bin_poll+0x122/0x170 [ 151.697173][ T4711] ? p9_fd_request+0x374/0x500 [ 151.701941][ T4711] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 151.710213][ T4711] p9_fd_request+0x440/0x500 [ 151.714813][ T4711] p9_client_rpc+0x2f9/0xb40 [ 151.719512][ T4711] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 151.727774][ T4711] ? p9_fid_create+0x3d0/0x3d0 [ 151.732549][ T4711] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 151.740820][ T4711] ? p9_conn_create+0x4c9/0x570 [ 151.745819][ T4711] ? p9_fd_create+0x2f3/0x4c0 [ 151.750516][ T4711] p9_client_create+0x96a/0x1190 [ 151.755472][ T4711] ? __cfi_p9_client_create+0x10/0x10 [ 151.760904][ T4711] ? kasan_save_alloc_info+0x40/0x50 [ 151.766224][ T4711] ? __kasan_kmalloc+0x96/0xb0 [ 151.771017][ T4711] ? kstrdup+0x7b/0x140 [ 151.775212][ T4711] ? __kasan_check_write+0x18/0x20 [ 151.780340][ T4711] v9fs_session_init+0x1e1/0x1820 [ 151.785489][ T4711] ? __cfi_v9fs_session_init+0x10/0x10 [ 151.790964][ T4711] ? kasan_save_alloc_info+0x40/0x50 [ 151.796260][ T4711] ? __kasan_kmalloc+0x96/0xb0 [ 151.801042][ T4711] ? v9fs_mount+0xbd/0xa00 [ 151.805471][ T4711] v9fs_mount+0xd7/0xa00 [ 151.809737][ T4711] ? __cfi_v9fs_mount+0x10/0x10 [ 151.814606][ T4711] ? selinux_capable+0x38/0x50 [ 151.819414][ T4711] legacy_get_tree+0x106/0x1b0 [ 151.824188][ T4711] ? __cfi_v9fs_mount+0x10/0x10 [ 151.829069][ T4711] vfs_get_tree+0x9e/0x290 [ 151.833499][ T4711] do_new_mount+0x251/0xb40 [ 151.838020][ T4711] ? security_capable+0xcf/0xf0 [ 151.842932][ T4711] path_mount+0x688/0x1050 [ 151.847386][ T4711] ? putname+0x113/0x150 [ 151.851644][ T4711] __se_sys_mount+0x2bd/0x480 [ 151.856332][ T4711] ? __x64_sys_mount+0xf0/0xf0 [ 151.861107][ T4711] ? __kasan_check_write+0x18/0x20 [ 151.866229][ T4711] ? fpregs_restore_userregs+0x11d/0x260 [ 151.871873][ T4711] __x64_sys_mount+0xc3/0xf0 [ 151.876490][ T4711] x64_sys_call+0x2021/0x2ee0 [ 151.881220][ T4711] do_syscall_64+0x58/0xf0 [ 151.885649][ T4711] ? clear_bhb_loop+0x50/0xa0 [ 151.890347][ T4711] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.896251][ T4711] RIP: 0033:0x7fdd2f18e929 [ 151.900821][ T4711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.920445][ T4711] RSP: 002b:00007fdd2ff76038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.928964][ T4711] RAX: ffffffffffffffda RBX: 00007fdd2f3b5fa0 RCX: 00007fdd2f18e929 [ 151.936949][ T4711] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 0000000000000000 [ 151.944974][ T4711] RBP: 00007fdd2f210b39 R08: 0000200000000040 R09: 0000000000000000 [ 151.952963][ T4711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.960950][ T4711] R13: 0000000000000000 R14: 00007fdd2f3b5fa0 R15: 00007ffc73db3da8 [ 151.968960][ T4711] [ 151.971984][ T4711] Modules linked in: [ 151.976374][ T4711] ---[ end trace 0000000000000000 ]--- [ 151.983231][ T4711] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 151.988623][ T4711] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 b2 93 e4 8e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 f8 57 ad 02 90 90 90 90 90 90 90 90 90 [ 152.008367][ T4711] RSP: 0018:ffffc9000f3bf1b0 EFLAGS: 00010246 [ 152.015462][ T4715] kernel profiling enabled (shift: 63) [ 152.018420][ T4711] RAX: 000000000000005a RBX: 1ffff92001e77e38 RCX: faf7c50ca44d7000 [ 152.027710][ T4715] profiling shift: 63 too large [ 152.034246][ T4711] RDX: ffffc900021b4000 RSI: 0000000000002c2d RDI: 0000000000002c2e [ 152.045257][ T4711] RBP: ffffc9000f3bf1b0 R08: ffffc9000f3beea7 R09: 1ffff92001e77dd4 [ 152.053451][ T4711] R10: dffffc0000000000 R11: fffff52001e77dd5 R12: 0000000000000000 [ 152.061913][ T4711] R13: dffffc0000000000 R14: ffffc9000f3bf1e0 R15: ffffc9000f3bf210 [ 152.072245][ T4711] FS: 00007fdd2ff766c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 152.081298][ T4711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.087991][ T4711] CR2: 00007f727b8e7d60 CR3: 00000001193ec000 CR4: 00000000003526b0 [ 152.096127][ T4711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.104224][ T4711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.112357][ T4711] Kernel panic - not syncing: Fatal exception [ 152.118754][ T4711] Kernel Offset: disabled [ 152.123106][ T4711] Rebooting in 86400 seconds..