last executing test programs: 1m13.498402782s ago: executing program 1 (id=1051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000) 1m13.481347834s ago: executing program 1 (id=1055): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410102240001000010000904b8070296d1ca000905060240020d000609058202005c000000000000000000000000dfffffff0000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)={0x40, 0xe, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$incfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001020, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000540)='freezer.state\x00', 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)=ANY=[@ANYBLOB="201405"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], &(0x7f0000000000)={0x0, 0xa, 0x1, 0x8a}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x4, 0xeb8}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0xb, 0x6a, {0x6a, 0xf, "49e778e8cd78ed343298939063e7e555276ee91a5187f0a9400b49122f2a073f1f8da4963d4ac90e077958b90b724d169d4c7ca839d681c7722ea43cb7d6cfc4795e9192315a4e6af02f6237e41f027907a02ba1095944e0301e9e448a03d2833fbea267089f337c"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000380)={0x0, 0x15, 0xd2, "7a5f6ad5961fb5ceed1b6bc53018e91cb29aab75c28100f256665ca8f99e7470a433f3a0d0761ba6b12ae48a585937dc0a3dd9e830f3a5633649d4b1041c350823c683cf969ec4790de2f9f327158f8b1202cf42da733f17b66d72ca7e13018fb822899d73044f1fbe0d518a8ddadf55a16a4f7a2064eb626d4494e67e8144827c95434bf71ad7a1a9bba9543ecc2c1068c4b20eedd299994382411c3c69627a6d9d83c3e269b7390a06b7c0b57cbdc4c0961abce3e0eb34679c2c3f7a81fe1a71d5941857f5d63db75579974a0f2a5caa41"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x81}}) 1m10.405551641s ago: executing program 1 (id=1103): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="1e6a4b619b", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="c62333dc5f", 0x5}], 0x1}}], 0x3, 0x931766f6319eed40) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x250, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "470b350ccfd6cca0dd595c9afaf283dfca4be44bd56af3f3e55aba1329e2cc561362885b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ID={0xd4, 0x3, "34f62261005130772d56382f41e397bb234d20c0429982e0fe6dd5c6504724e3a9a457ee351e14ae4319f85609625a3d62fae6717e2d8e8e6623da8534274631bc9cef05ae8cd6095185fa42f621f01f6ac546a10a72bfd2c50747bfbf1587bdb9d409fdfa0a2563e435b6606723870aab83756addfaba991e5a1ecac8d76eb4fa53329d48e5dd940b7e22533d75800cd62a745bc473edf81e87a1e37c0f09a2a02e9d4b2eef46ef360b25b0908cf2688ee89f7a13ed049e056cd12dc7f09797273df533633df91149f13ba8f66cc949"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf86, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x200, @loopback, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1673}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @private2, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000000)={0x55}) chdir(&(0x7f00000000c0)='./bus\x00') r6 = fcntl$getown(r1, 0x9) capset(&(0x7f0000000100)={0x20080522, r6}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd, 0x0, 0x8, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16a) 1m10.401082011s ago: executing program 1 (id=1104): syz_usb_connect(0x0, 0x56, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x56, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) flistxattr(r10, 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000f40)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(r6, &(0x7f0000000f40)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setreuid(0xffffffffffffffff, r8) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e80)={&(0x7f0000000300)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x3, 0x0, 0xf, 0x1, 0x6, 0x6, 0x0, 0x0, 0x80, 0x6}}, &(0x7f0000000200)={0x18, 0x0, 0x7, {0x4}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0xff}}, &(0x7f00000003c0)={0x18, 0xb, 0x5, {0x4}}, &(0x7f0000000400)={0x18, 0x0, 0x8, {0x3}}, &(0x7f0000000440)={0x28, 0x0, 0xffffffff, {{0x3, 0x269, 0x2, r5}}}, &(0x7f00000004c0)={0x60, 0xfffffffffffffff5, 0x800, {{0x8001, 0xffff, 0x2, 0xfffffffffffffff2, 0x1, 0xec8, 0x1000, 0x8001}}}, &(0x7f00000005c0)={0x18, 0xfffffffffffffff5, 0xc26c, {0x800}}, &(0x7f0000000600)=ANY=[@ANYBLOB="33000000daffffff1000000000000000791035fbf77583253a72c2b9788b71c1ea5f8c5a37cd619b11580ea1cf1a985337c900"], &(0x7f0000000640)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, &(0x7f0000000680)={0x78, 0xfffffffffffffffe, 0x3d0, {0x10000, 0x6e, 0x0, {0x2, 0xff, 0x8, 0xb, 0x8, 0xab, 0xc, 0x8000, 0x2, 0x1000, 0x5, r3, r4, 0xe3, 0x5}}}, &(0x7f0000000700)={0x90, 0x0, 0x3, {0x4, 0x3, 0x9, 0x40000000, 0xf, 0xffffffff, {0x5, 0x9, 0x2, 0x80, 0x0, 0x8000, 0x2, 0x400, 0x1, 0x4000, 0x6, r3, r4, 0x800, 0x580}}}, &(0x7f00000007c0)={0x178, 0x0, 0x4000000040, [{0x3, 0x7, 0xa, 0x7, '/dev/fuse\x00'}, {0x1, 0xace, 0xa, 0xb9a9, '/dev/fuse\x00'}, {0x2, 0xffffffff7fffffff, 0xa, 0x5, '2(&/)&$@*:'}, {0x4, 0x6, 0x3, 0x80000000, '\xb1\','}, {0x2, 0x0, 0x5, 0x2, '@^./#'}, {0x0, 0x3, 0x4, 0x3807, '$/@\n'}, {0x3, 0x401, 0xa, 0x7ad, '/dev/fuse\x00'}, {0x6, 0x800, 0x5, 0x48000, 'fuse\x00'}, {0x5, 0x5, 0xb, 0x6, '\x99\\0&)\x1a//,,['}, {0x4, 0x3, 0x1, 0x6, '\x00'}]}, &(0x7f0000000940)={0x298, 0xfffffffffffffffe, 0x6, [{{0x3, 0x3, 0x5, 0x10000, 0xcc, 0x7, {0x6, 0xa5ff, 0xffffffff, 0x4477, 0x8000, 0x7, 0x4d, 0x7ff, 0x4, 0x8000, 0x10, r3, r4, 0x1, 0x1ff}}, {0x3, 0x0, 0x9, 0xf9, '\xe4^L\'\\(\x11+0'}}, {{0x5, 0x3, 0x8000000000, 0x7, 0x80, 0x1, {0x6, 0x4, 0x7, 0x8000, 0x9, 0x1, 0xe22, 0x3b8, 0x2, 0x6000, 0x247, r3, r4, 0x1, 0x4}}, {0x80000001, 0x800, 0x1, 0x6, '\x00'}}, {{0x1, 0x2, 0x5, 0xe2a1, 0x5, 0x400, {0x5, 0x8cf, 0x2, 0x4a, 0x7, 0x5, 0x5, 0x79f, 0xf, 0x6000, 0xfffffff9, r3, r4, 0x9, 0x3}}, {0x6, 0xfffffffffffffa5b, 0x1, 0x9, '('}}, {{0x1, 0x1, 0x1, 0x2, 0x1, 0x6, {0x4, 0x2, 0x8, 0x3, 0x7, 0x3, 0x9, 0x77a, 0xa, 0x6000, 0xfffffffc, r3, r4, 0x4, 0x5f}}, {0x0, 0x8001, 0x1, 0x1ff, '\x00'}}]}, &(0x7f0000000c00)={0xa0, 0xfffffffffffffff5, 0x9, {{0x0, 0x1, 0x5ad800000000000, 0x4, 0x8, 0x6, {0x3, 0x4, 0x7fffffffffffffff, 0x7ec, 0xf, 0x518a, 0x10, 0x1, 0x3, 0x6000, 0x4, r8, r4, 0xf, 0x40}}, {0x0, 0x11}}}, &(0x7f0000000d00)={0x20, 0x0, 0x158, {0x10000, 0x0, 0x7, 0x1}}, &(0x7f0000000d40)={0x130, 0x0, 0x7, {0x80000000, 0x8, 0x0, '\x00', {0x800, 0x0, 0x4, 0x51dc, r3, r4, 0x6000, '\x00', 0x9, 0x3, 0x7, 0x3, {0x907e, 0xd5b}, {0x29, 0x8}, {0xffffffffffff0000, 0xa}, {0x8b, 0x4}, 0x86, 0x9, 0x0, 0x135}}}}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.184891629s ago: executing program 1 (id=1105): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002140)={0x18, 0x54, 0x1, 0xfeffffff, 0x800000, "", [@typed={0x7, 0x3ffd, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1m10.03562821s ago: executing program 1 (id=1109): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x100010, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000480)={0x42, 0x5, 0x1, 0x3}, 0x10) recvfrom$packet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) truncate(&(0x7f00000000c0)='./file1\x00', 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0xa7, 0x4, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000040201022bbd7000ff00000000000000"], 0x14}}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x6, 0x4, 0xefffffffffffffff, 0x2, 0x1000, 0x2000000, 0x0, 0x18, 0xffffffffffffffff, 0xffffffffffffffff, 0x6], 0x0, 0x41900}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m9.987343324s ago: executing program 32 (id=1109): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x100010, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000480)={0x42, 0x5, 0x1, 0x3}, 0x10) recvfrom$packet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) truncate(&(0x7f00000000c0)='./file1\x00', 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0xa7, 0x4, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000040201022bbd7000ff00000000000000"], 0x14}}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x6, 0x4, 0xefffffffffffffff, 0x2, 0x1000, 0x2000000, 0x0, 0x18, 0xffffffffffffffff, 0xffffffffffffffff, 0x6], 0x0, 0x41900}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 845.568892ms ago: executing program 2 (id=2509): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x10}], 0x8, 0x40000100, 0x0) 845.103862ms ago: executing program 2 (id=2510): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd99000) syz_usb_connect$cdc_ncm(0x1, 0xd1, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES64, @ANYRES16=r0], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f00000001c0)={[{@readahead={'readahead', 0x3d, 0xab}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x8}}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0x6}, {0x6, 0x7}, {0xfff2, 0x10}}}, 0x24}}, 0x49890) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x101) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2800, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) renameat(r4, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180080) write$P9_RVERSION(r6, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x2, 0x6, '9P2000'}, 0x13) 418.756416ms ago: executing program 0 (id=2529): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc008880}, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x313, 0x4000, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="2bc3603996a34b477ff9e61d08297a7ee76c6cb9c5be3d5bfca761624ffc97676fb004b282e0105d51c4c9affb7cbb98e7329e6504a1ac1e0aa917f32ecc", 0x3e}], 0x1) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003000)={0x2020}, 0x2020) 402.816357ms ago: executing program 0 (id=2531): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 333.710283ms ago: executing program 0 (id=2533): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x800000000000000) 333.411643ms ago: executing program 0 (id=2534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x80000002}) r3 = epoll_create1(0x80000) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000001a00)=ANY=[@ANYBLOB="0700000000000000044d564b"]) close_range(r0, r1, 0x0) 332.905293ms ago: executing program 0 (id=2536): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xfdf9, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 323.722944ms ago: executing program 2 (id=2537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) keyctl$session_to_parent(0x12) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfe, 0x52, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async, rerun: 64) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) (rerun: 64) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="86d4617b5ed8c6d1f7083475b1d097322bfbd2ead40cb97b785dc04ea6f27e33a640ce51a983e74d151b4af9b6e1ffa6a38fbd7a9c3535", 0x37, 0xfffffffffffffffc) (async) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r3) (async) keyctl$unlink(0x9, r2, r3) 295.272286ms ago: executing program 0 (id=2538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f0000000200)={0xeb, 0x0, 0xa}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xc8, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x89, 0x4, "13d9656e34118229487ad2e10d1a5f9764779c42a945fbc937bc37495d23616bdba4ade34fd621989894f80c4ce053a3240bb12eb29053a398ed2c2a04129ebc8dafecbe33dde87dedaa4479c4a3920cc8e5861148ef278e4ca19a54086313718973ce5643de61d9e361a5f2f953ed89787e28ea17ecc72b88ac7dff78c2c5f81e9b28730c"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="400e04000000abe763a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) ioctl$TIOCEXCL(r6, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)=ANY=[@ANYBLOB="201405"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x3, 0x35, @string={0x35, 0x3, "01684c81ba18d071e7e6664f792319408a8b2a07207c694db90fe9e861b1d7b2e303e7669e1032469dfbfb9a9a2f0337b2bdd1"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="000f19000000050f19000114100404d2623f2a352ef3b2f641b326ba688b7c"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x5, 0xff, "af741257", "2f19ee36"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x1, 0x9, 0x14, 0x8, 0x9}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x83, "a732960acf02545422a15e5fb273031bdf87a2510010004294f506a539ed5b73f28df31f5c0fec9d71c96ab2bf411b3db55820b3c57409720a574ed09e0b59800ed338f2c335d3dc8286cd8604f271bd0b949e0fb2477419ad7be01a35df96efa158d7f718f901fa1db1e3887b5ac1d62856db77bba87196fe122f04798ddb74d95ec0"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x79}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)=ANY=[@ANYBLOB="20000400020020002000"], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "49ca"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xdb}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="261f29520101"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "7bb6"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000840)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) r7 = getpgrp(0x0) tkill(r7, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000fc0)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="360004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 294.802196ms ago: executing program 2 (id=2539): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc008880}, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x313, 0x4000, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="2bc3603996a34b477ff9e61d08297a7ee76c6cb9c5be3d5bfca761624ffc97676fb004b282e0105d51c4c9affb7cbb98e7329e6504a1ac1e0aa917f32ecc", 0x3e}], 0x1) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003000)={0x2020}, 0x2020) 275.966668ms ago: executing program 2 (id=2540): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/136, 0x88}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000880)=""/276, 0x114}, {&(0x7f0000000480)=""/96, 0x60}], 0x9, 0x0, 0x0, 0xc3}, 0xe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x40000100, 0x0) 231.874981ms ago: executing program 2 (id=2542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10080) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 146.677838ms ago: executing program 3 (id=2548): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc008880}, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x313, 0x4000, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="2bc3603996a34b477ff9e61d08297a7ee76c6cb9c5be3d5bfca761624ffc97676fb004b282e0105d51c4c9affb7cbb98e7329e6504a1ac1e0aa917f32ecc", 0x3e}], 0x1) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003000)={0x2020}, 0x2020) 110.881941ms ago: executing program 4 (id=2549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r2, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder1\x00', 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00') getdents64(r5, &(0x7f0000000040)=""/27, 0x1b) getdents(r3, &(0x7f0000000500)=""/4112, 0x1010) r6 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/236, 0x0, 0x1, 0x33}}, &(0x7f00000000c0)}, 0x40}, @free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) 110.497661ms ago: executing program 3 (id=2550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000003800058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 110.337471ms ago: executing program 4 (id=2551): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x900000000000000) 107.384231ms ago: executing program 4 (id=2552): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{0x0}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x10}], 0x8, 0x40000100, 0x0) 94.381492ms ago: executing program 3 (id=2553): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000240)="6ea59508", 0x4, 0xffffffffffffffff) keyctl$update(0x2, r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 93.881582ms ago: executing program 4 (id=2554): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r0) syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0xf6ffffff, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 33.655377ms ago: executing program 3 (id=2555): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xfeff, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 32.675557ms ago: executing program 4 (id=2556): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x10000, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x20040840) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x3000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) getsockopt$inet_int(r4, 0x0, 0xd, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfcc0, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/235, 0xeb, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x1e}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 32.247537ms ago: executing program 4 (id=2557): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x1, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x63, 0x0, 0x10, 0x29, 0x0, @multicast2, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x1068000000000000) 18.080828ms ago: executing program 3 (id=2558): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/136, 0x88}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000880)=""/276, 0x114}, {&(0x7f0000000480)=""/96, 0x60}], 0x9, 0x0, 0x0, 0xe3}, 0xe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x40000100, 0x0) 0s ago: executing program 3 (id=2559): syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c0202"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x78, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=12432,\x00'/33]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x458002, 0x155) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000400000000000000000000fc02000000000000000000000000000003000600ff00000002"], 0x80}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000400000000000000000000fc02000000000000000000000000000003000600ff00000002"], 0x80}}, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) kernel console output (not intermixed with test programs): vent} for writing: No such file or directory [ 72.768436][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 72.918431][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 72.924867][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.935380][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.944493][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 72.953788][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.962903][ T9] usb 2-1: config 0 descriptor?? [ 73.170312][ T36] audit: type=1400 audit(1924149793.093:48638): avc: denied { append } for pid=1715 comm="syz.1.539" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.170943][ T329] usb 2-1: USB disconnect, device number 16 [ 73.376387][ T1750] /dev/loop0: Can't lookup blockdev [ 73.425713][ T36] audit: type=1400 audit(1924149793.343:48639): avc: denied { getopt } for pid=1755 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.448447][ T570] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 73.588503][ T570] usb 3-1: device descriptor read/64, error -71 [ 73.726339][ T36] audit: type=1400 audit(1924149793.643:48640): avc: denied { connect } for pid=1799 comm="syz.1.576" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.828511][ T570] usb 3-1: device descriptor read/64, error -71 [ 74.078493][ T570] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 74.088557][ T63] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 74.208491][ T570] usb 3-1: device descriptor read/64, error -71 [ 74.238455][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 74.244768][ T63] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.255001][ T63] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 74.264028][ T63] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 74.273112][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.281994][ T63] usb 2-1: config 0 descriptor?? [ 74.448434][ T570] usb 3-1: device descriptor read/64, error -71 [ 74.489434][ T63] usb 2-1: USB disconnect, device number 17 [ 74.558567][ T570] usb usb3-port1: attempt power cycle [ 74.898484][ T570] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 74.919508][ T570] usb 3-1: device descriptor read/8, error -71 [ 75.053024][ T570] usb 3-1: device descriptor read/8, error -71 [ 75.096626][ T1866] /dev/loop0: Can't lookup blockdev [ 75.298495][ T570] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 75.319732][ T570] usb 3-1: device descriptor read/8, error -71 [ 75.459765][ T570] usb 3-1: device descriptor read/8, error -71 [ 75.568614][ T570] usb usb3-port1: unable to enumerate USB device [ 75.652489][ T1878] overlayfs: failed to clone upperpath [ 76.098477][ T329] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 76.258482][ T329] usb 2-1: Using ep0 maxpacket: 32 [ 76.265052][ T329] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 76.273348][ T329] usb 2-1: config 0 has no interface number 0 [ 76.279504][ T329] usb 2-1: config 0 interface 184 has no altsetting 0 [ 76.287724][ T329] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 76.296932][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.305055][ T329] usb 2-1: Product: syz [ 76.309669][ T329] usb 2-1: Manufacturer: syz [ 76.314306][ T329] usb 2-1: SerialNumber: syz [ 76.319995][ T329] usb 2-1: config 0 descriptor?? [ 76.325984][ T329] smsc75xx v1.0.0 [ 76.618439][ T364] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 76.746546][ T1909] overlayfs: failed to clone upperpath [ 76.753324][ T1909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 76.768433][ T364] usb 3-1: Using ep0 maxpacket: 16 [ 76.779069][ T364] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.781618][ T36] audit: type=1400 audit(1940927241.699:48641): avc: denied { execute } for pid=1910 comm="syz.3.627" path="/dev/rnullb0" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.797031][ T364] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.825211][ T364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 76.832099][ T364] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 76.843192][ T364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.854342][ T364] usb 3-1: config 0 descriptor?? [ 76.869679][ T364] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 77.072079][ T364] usb 3-1: USB disconnect, device number 15 [ 77.328447][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 77.339421][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 77.399429][ T36] audit: type=1400 audit(1940927242.319:48642): avc: denied { create } for pid=1929 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.423175][ T1930] netlink: 200 bytes leftover after parsing attributes in process `syz.0.634'. [ 77.432343][ T1930] tc_dump_action: action bad kind [ 77.550235][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 77.561319][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 77.571823][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 77.581470][ T329] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 77.593491][ T329] usb 2-1: USB disconnect, device number 18 [ 77.680868][ T36] audit: type=1400 audit(1940927242.599:48643): avc: denied { bind } for pid=1952 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.700568][ T36] audit: type=1400 audit(1940927242.599:48644): avc: denied { name_bind } for pid=1952 comm="syz.2.644" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 77.722195][ T36] audit: type=1400 audit(1940927242.599:48645): avc: denied { node_bind } for pid=1952 comm="syz.2.644" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 77.743343][ T36] audit: type=1400 audit(1940927242.599:48646): avc: denied { read } for pid=1952 comm="syz.2.644" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.943185][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.418451][ T63] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 78.568523][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 78.575129][ T63] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 78.583556][ T63] usb 2-1: config 0 has no interface number 0 [ 78.589759][ T63] usb 2-1: config 0 interface 184 has no altsetting 0 [ 78.598134][ T63] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 78.607375][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.615425][ T63] usb 2-1: Product: syz [ 78.619716][ T63] usb 2-1: Manufacturer: syz [ 78.624382][ T63] usb 2-1: SerialNumber: syz [ 78.630273][ T63] usb 2-1: config 0 descriptor?? [ 78.638294][ T63] smsc75xx v1.0.0 [ 78.650890][ T36] audit: type=1400 audit(1940927243.569:48647): avc: denied { accept } for pid=2007 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.390766][ T2031] fuse: Bad value for 'fd' [ 79.641006][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 79.651885][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 79.862013][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 79.872978][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 79.882623][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 79.892154][ T63] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 79.901695][ T63] usb 2-1: USB disconnect, device number 19 [ 79.988565][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.988585][ T357] Bluetooth: hci0: command 0x1003 tx timeout [ 80.053233][ T36] audit: type=1400 audit(1957704689.967:48648): avc: denied { mount } for pid=2049 comm="syz.0.685" name="/" dev="ramfs" ino=17470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 80.358443][ T329] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 80.362101][ T2069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 80.508440][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 80.514869][ T329] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.524879][ T329] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.531704][ T329] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 80.540867][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.549740][ T329] usb 3-1: config 0 descriptor?? [ 80.559137][ T329] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 80.612709][ T36] audit: type=1400 audit(1957704690.527:48649): avc: denied { getopt } for pid=2106 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.718416][ T63] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 80.751251][ T2126] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.762762][ T9] usb 3-1: USB disconnect, device number 16 [ 80.772083][ T2126] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.779409][ T2126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.879487][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.889366][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.904072][ T63] usb 2-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 80.913608][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.922591][ T63] usb 2-1: config 0 descriptor?? [ 81.333385][ T63] wacom 0003:056A:0336.0007: item fetching failed at offset 5/7 [ 81.341367][ T63] wacom 0003:056A:0336.0007: parse failed [ 81.347351][ T63] wacom 0003:056A:0336.0007: probe with driver wacom failed with error -22 [ 81.534221][ T329] usb 2-1: USB disconnect, device number 20 [ 81.940551][ T2156] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 82.076086][ T2168] netlink: 44 bytes leftover after parsing attributes in process `syz.3.736'. [ 82.086631][ T2168] netlink: 'syz.3.736': attribute type 4 has an invalid length. [ 82.095139][ T36] audit: type=1400 audit(1974482137.013:48650): avc: denied { append } for pid=2163 comm="syz.2.733" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.119472][ T2168] netlink: 'syz.3.736': attribute type 4 has an invalid length. [ 82.298428][ T329] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 82.449471][ T329] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 82.460716][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.471964][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.482720][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 82.498801][ T329] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 82.508004][ T329] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 82.516803][ T329] usb 2-1: Manufacturer: syz [ 82.525764][ T329] usb 2-1: config 0 descriptor?? [ 82.679291][ T36] audit: type=1400 audit(1974482137.603:48651): avc: denied { accept } for pid=2190 comm="syz.3.745" laddr=fe80::b lport=58888 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.732803][ T2199] tipc: Started in network mode [ 82.737830][ T2199] tipc: Node identity c221df03dd8f, cluster identity 4711 [ 82.745247][ T2199] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 82.754962][ T2199] tipc: Enabled bearer , priority 10 [ 82.812447][ T36] audit: type=1400 audit(1974482137.733:48652): avc: denied { mounton } for pid=2201 comm="syz.2.750" path="/proc/436/cgroup" dev="proc" ino=17953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 82.934201][ T36] audit: type=1400 audit(1974482137.853:48653): avc: denied { execheap } for pid=2165 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.954626][ T329] usbhid 2-1:0.0: can't add hid device: -71 [ 82.960628][ T329] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 82.969701][ T329] usb 2-1: USB disconnect, device number 21 [ 83.305868][ T2208] batadv_slave_0: entered promiscuous mode [ 83.358430][ T2215] FAULT_INJECTION: forcing a failure. [ 83.358430][ T2215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.371979][ T2215] CPU: 1 UID: 0 PID: 2215 Comm: syz.2.755 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 83.372014][ T2215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.372028][ T2215] Call Trace: [ 83.372035][ T2215] [ 83.372043][ T2215] __dump_stack+0x21/0x30 [ 83.372077][ T2215] dump_stack_lvl+0x10c/0x190 [ 83.372107][ T2215] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.372137][ T2215] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 83.372163][ T2215] dump_stack+0x19/0x20 [ 83.372189][ T2215] should_fail_ex+0x3d9/0x530 [ 83.372222][ T2215] should_fail+0xf/0x20 [ 83.372252][ T2215] should_fail_usercopy+0x1e/0x30 [ 83.372273][ T2215] _copy_from_user+0x22/0xb0 [ 83.372296][ T2215] get_user_ifreq+0x71/0x180 [ 83.372317][ T2215] inet_ioctl+0x396/0x4d0 [ 83.372336][ T2215] ? __cfi_inet_ioctl+0x10/0x10 [ 83.372366][ T2215] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 83.372397][ T2215] sock_do_ioctl+0x102/0x330 [ 83.372421][ T2215] ? sock_show_fdinfo+0xd0/0xd0 [ 83.372444][ T2215] ? __cfi_vfs_write+0x10/0x10 [ 83.372522][ T2215] ? __kasan_check_write+0x18/0x20 [ 83.372554][ T2215] ? mutex_unlock+0x8b/0x240 [ 83.372575][ T2215] sock_ioctl+0x634/0x7b0 [ 83.372599][ T2215] ? __cfi_sock_ioctl+0x10/0x10 [ 83.372621][ T2215] ? __fget_files+0x2c5/0x340 [ 83.372657][ T2215] ? bpf_lsm_file_ioctl+0xd/0x20 [ 83.372686][ T2215] ? security_file_ioctl+0x34/0xd0 [ 83.372712][ T2215] ? __cfi_sock_ioctl+0x10/0x10 [ 83.372736][ T2215] __se_sys_ioctl+0x135/0x1b0 [ 83.372761][ T2215] __x64_sys_ioctl+0x7f/0xa0 [ 83.372785][ T2215] x64_sys_call+0x1878/0x2ee0 [ 83.372819][ T2215] do_syscall_64+0x58/0xf0 [ 83.372849][ T2215] ? clear_bhb_loop+0x50/0xa0 [ 83.372874][ T2215] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.372897][ T2215] RIP: 0033:0x7f279658ebe9 [ 83.372916][ T2215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.372937][ T2215] RSP: 002b:00007f2797352038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.372962][ T2215] RAX: ffffffffffffffda RBX: 00007f27967b5fa0 RCX: 00007f279658ebe9 [ 83.372987][ T2215] RDX: 0000200000001040 RSI: 0000000000008916 RDI: 0000000000000003 [ 83.373003][ T2215] RBP: 00007f2797352090 R08: 0000000000000000 R09: 0000000000000000 [ 83.373019][ T2215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.373034][ T2215] R13: 00007f27967b6038 R14: 00007f27967b5fa0 R15: 00007ffe6ec2f828 [ 83.373054][ T2215] [ 83.634201][ T2210] batadv_slave_0: left promiscuous mode [ 83.689821][ T36] audit: type=1400 audit(1974482138.613:48654): avc: denied { accept } for pid=2228 comm="syz.3.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 83.782425][ T36] audit: type=1400 audit(1974482138.703:48655): avc: denied { accept } for pid=2233 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.804543][ T2242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.765'. [ 83.858436][ T63] tipc: Node number set to 531554051 [ 83.979877][ T2266] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 84.381327][ T2280] overlayfs: failed to clone upperpath [ 84.528493][ T329] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 84.678439][ T329] usb 2-1: Using ep0 maxpacket: 32 [ 84.685398][ T329] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 84.694321][ T329] usb 2-1: config 0 has no interface number 0 [ 84.700748][ T329] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 84.710947][ T329] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 84.722841][ T329] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 84.732148][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.740308][ T329] usb 2-1: Product: syz [ 84.744718][ T329] usb 2-1: Manufacturer: syz [ 84.749400][ T329] usb 2-1: SerialNumber: syz [ 84.758670][ T329] usb 2-1: config 0 descriptor?? [ 84.765930][ T2274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.774150][ T2274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.785784][ T329] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, e6:69:8d:89:13:16 [ 84.810473][ T36] audit: type=1400 audit(1974482139.733:48656): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 84.834632][ T36] audit: type=1400 audit(1974482139.733:48657): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.857851][ T36] audit: type=1400 audit(1974482139.733:48658): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2765 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.883152][ T36] audit: type=1400 audit(1974482139.733:48659): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2765 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.913308][ T36] audit: type=1400 audit(1974482139.733:48660): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2765 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.950426][ T36] audit: type=1400 audit(1974482139.773:48661): avc: denied { read } for pid=2292 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.974175][ T36] audit: type=1400 audit(1974482139.773:48662): avc: denied { open } for pid=2292 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.005995][ T329] usb 2-1: USB disconnect, device number 22 [ 85.013018][ T36] audit: type=1400 audit(1974482139.773:48663): avc: denied { getattr } for pid=2292 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.039332][ T329] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 85.607876][ T2342] can0: slcan on ttyS3. [ 85.662763][ T2342] can0 (unregistered): slcan off ttyS3. [ 85.748409][ T357] Bluetooth: hci0: command 0x1003 tx timeout [ 85.754889][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.889738][ T2375] netlink: 'syz.2.793': attribute type 2 has an invalid length. [ 86.108458][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 86.268408][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 86.277084][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 86.289993][ T9] usb 2-1: config 0 has no interface number 0 [ 86.296512][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 86.305192][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 86.315973][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.331551][ T9] usb 2-1: Product: syz [ 86.335887][ T9] usb 2-1: Manufacturer: syz [ 86.346288][ T9] usb 2-1: SerialNumber: syz [ 86.358682][ T9] usb 2-1: config 0 descriptor?? [ 86.365758][ T9] smsc75xx v1.0.0 [ 87.258453][ T329] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 87.419736][ T329] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 87.432758][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.443785][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.454558][ T329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 87.469325][ T329] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 87.478795][ T329] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 87.478843][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 87.487466][ T329] usb 3-1: Manufacturer: syz [ 87.506044][ T329] usb 3-1: config 0 descriptor?? [ 87.512291][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.723308][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 87.734378][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 87.744321][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 87.753991][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 87.763514][ T9] usb 2-1: USB disconnect, device number 23 [ 87.972872][ T329] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 87.980651][ T329] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 87.991207][ T329] appleir 0003:05AC:8243.0008: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 88.352677][ T2419] fuse: Bad value for 'fd' [ 88.448264][ T2434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 88.590338][ T2443] fuse: Bad value for 'fd' [ 88.867561][ T2473] cgroup: Name too long [ 89.138500][ T329] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 89.288442][ T329] usb 2-1: Using ep0 maxpacket: 32 [ 89.299550][ T329] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 89.311048][ T329] usb 2-1: config 0 has no interface number 0 [ 89.326258][ T329] usb 2-1: config 0 interface 184 has no altsetting 0 [ 89.337061][ T329] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 89.347474][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.359079][ T329] usb 2-1: Product: syz [ 89.363620][ T329] usb 2-1: Manufacturer: syz [ 89.372509][ T329] usb 2-1: SerialNumber: syz [ 89.380066][ T329] usb 2-1: config 0 descriptor?? [ 89.389497][ T329] smsc75xx v1.0.0 [ 89.408439][ T9] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 89.782748][ T36] kauditd_printk_skb: 8718 callbacks suppressed [ 89.782770][ T36] audit: type=1400 audit(1991259589.697:57382): avc: denied { ioctl } for pid=2550 comm="syz.0.867" path="socket:[18743]" dev="sockfs" ino=18743 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.179892][ T36] audit: type=1400 audit(1991259590.105:57383): avc: denied { mounton } for pid=2575 comm="syz.3.877" path="/file0" dev="ramfs" ino=18774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 90.435586][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 90.446790][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 90.639308][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 90.650411][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 90.660536][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 90.671669][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 90.681363][ T329] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 90.691288][ T329] usb 2-1: USB disconnect, device number 24 [ 90.799750][ T570] usb 3-1: USB disconnect, device number 17 [ 90.824658][ T2611] fuse: Invalid rootmode [ 91.079023][ T2630] fuse: Invalid rootmode [ 91.227648][ T36] audit: type=1326 audit(1991259591.145:57384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.2.906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f279658ebe9 code=0x0 [ 91.285042][ T2643] tmpfs: Unknown parameter '00000000001914729318' [ 91.293223][ T36] audit: type=1400 audit(1991259591.205:57385): avc: denied { write } for pid=2640 comm="syz.2.906" name="ip6_flowlabel" dev="proc" ino=4026532606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.360637][ T2651] fuse: Invalid rootmode [ 91.578470][ T63] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 91.729622][ T63] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.736806][ T63] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 91.747410][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.756634][ T63] usb 2-1: config 0 descriptor?? [ 92.061716][ T2673] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 92.061752][ T2673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 92.070143][ T36] audit: type=1400 audit(1991259591.995:57386): avc: denied { create } for pid=2672 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.100480][ T2673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:467 [ 92.164785][ T63] pantherlord 0003:0E8F:0003.0009: item fetching failed at offset 0/3 [ 92.184714][ T63] pantherlord 0003:0E8F:0003.0009: parse failed [ 92.191387][ T63] pantherlord 0003:0E8F:0003.0009: probe with driver pantherlord failed with error -22 [ 92.366095][ T63] usb 2-1: USB disconnect, device number 25 [ 92.418412][ T363] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 92.578523][ T363] usb 3-1: Using ep0 maxpacket: 8 [ 92.587327][ T363] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 92.596817][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.607730][ T363] usb 3-1: config 0 descriptor?? [ 92.986577][ T2714] netlink: 76 bytes leftover after parsing attributes in process `syz.0.937'. [ 92.995998][ T2714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 93.112148][ T2724] overlay: Unknown parameter 'uid' [ 93.217823][ T363] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 93.228034][ T363] asix 3-1:0.0: probe with driver asix failed with error -32 [ 93.236706][ T363] usb 3-1: USB disconnect, device number 18 [ 93.880785][ T2747] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 94.097989][ T36] audit: type=1400 audit(1991259594.015:57387): avc: denied { accept } for pid=2753 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.708451][ T329] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 94.767884][ T36] audit: type=1326 audit(1991259594.685:57388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 94.792928][ T36] audit: type=1326 audit(1991259594.685:57389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 94.817835][ T36] audit: type=1326 audit(1991259594.685:57390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 94.844011][ T36] audit: type=1326 audit(1991259594.685:57391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 94.869481][ T36] audit: type=1326 audit(1991259594.685:57392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 94.893498][ T36] audit: type=1326 audit(1991259594.685:57393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 94.917556][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 94.917946][ T36] audit: type=1326 audit(1991259594.685:57394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 94.924322][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.947450][ T36] audit: type=1326 audit(1991259594.685:57395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 94.958971][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.984197][ T36] audit: type=1326 audit(1991259594.685:57396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 94.993743][ T329] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 95.018099][ T36] audit: type=1326 audit(1991259594.695:57397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 95.027981][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.052232][ T36] audit: type=1326 audit(1991259594.695:57398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 95.061195][ T329] usb 3-1: config 0 descriptor?? [ 95.189131][ T2819] can: request_module (can-proto-0) failed. [ 95.239407][ T2827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 95.507304][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.529997][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.550217][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.559138][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.566867][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.576264][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.597383][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.606000][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.613929][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.621961][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.630080][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.637590][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.645193][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.664834][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.673633][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.683863][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.698258][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.706901][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.714408][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.721903][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.729502][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.738329][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.749206][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.758677][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.765869][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.774761][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.781934][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.789745][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.797446][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.804905][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.812215][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.820117][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.829973][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.838962][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.846789][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.854461][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.863129][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.870493][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.877842][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.885405][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.893455][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.901553][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.909954][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.917940][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.926667][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.935239][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.942924][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.953520][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.961696][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.969833][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.979893][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.987328][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 95.995044][ T357] Bluetooth: hci0: command 0x1003 tx timeout [ 96.002283][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.011381][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.020947][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.028450][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.039452][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.042348][ T2852] SELinux: syz.2.993 (2852) set checkreqprot to 1. This is no longer supported. [ 96.046934][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.066129][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.073502][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.081087][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.089876][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.097936][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.105494][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.113605][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.122254][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.130196][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.138575][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.146277][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.155598][ T329] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 96.163904][ T329] apple 0003:05AC:024B.000A: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.2-1/input0 [ 96.197129][ T329] usb 3-1: USB disconnect, device number 19 [ 96.428445][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 96.568449][ T329] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 96.600032][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.626764][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 96.637972][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 96.648723][ T9] usb 2-1: Product: syz [ 96.653979][ T9] usb 2-1: Manufacturer: syz [ 96.660497][ T9] usb 2-1: SerialNumber: syz [ 96.739146][ T329] usb 3-1: not running at top speed; connect to a high speed hub [ 96.759854][ T329] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 96.768767][ T329] usb 3-1: config 95 has no interface number 0 [ 96.775321][ T329] usb 3-1: config 95 interface 1 has no altsetting 0 [ 96.801253][ T329] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 96.818408][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.827678][ T329] usb 3-1: Product: syz [ 96.848402][ T329] usb 3-1: Manufacturer: syz [ 96.853619][ T329] usb 3-1: SerialNumber: syz [ 96.871665][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 96.903670][ T9] usb 2-1: USB disconnect, device number 26 [ 96.928807][ T9] usblp0: removed [ 97.011897][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.048618][ T2887] /dev/loop0: Can't lookup blockdev [ 97.562631][ T329] usb 3-1: USB disconnect, device number 20 [ 97.966231][ T2966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=2966 comm=syz.2.1040 [ 98.877645][ T2989] kvm: kvm [2988]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc1) = 0xffff [ 98.886932][ T2989] kvm: kvm [2988]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc2) = 0xffff [ 98.904070][ T2989] kvm: kvm [2988]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc1) = 0x100000100 [ 98.914444][ T2989] kvm: kvm [2988]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x100 [ 98.925085][ T2989] kvm: kvm [2988]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc2) = 0x100 [ 98.935223][ T2989] kvm: kvm [2988]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x100 [ 98.952109][ T2989] kvm: kvm [2988]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc1) = 0x100000100 [ 98.963669][ T2989] kvm: kvm [2988]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x100 [ 98.973868][ T2989] kvm: kvm [2988]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc2) = 0x100 [ 98.983643][ T2989] kvm: kvm [2988]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x100 [ 99.028575][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.028617][ T357] Bluetooth: hci0: command 0x1003 tx timeout [ 99.123390][ T2999] fuse: Unknown parameter 'group_id00000000000000000000' [ 99.158395][ T329] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 99.278306][ T3018] fuse: Unknown parameter 'group_id00000000000000000000' [ 99.298421][ T329] usb 3-1: device descriptor read/64, error -71 [ 99.306806][ T3020] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 99.408405][ T456] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 99.538403][ T456] usb 2-1: device descriptor read/64, error -71 [ 99.545834][ T329] usb 3-1: device descriptor read/64, error -71 [ 99.791951][ T3046] fuse: Bad value for 'user_id' [ 99.797078][ T3046] fuse: Bad value for 'user_id' [ 99.808416][ T329] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 99.817248][ T456] usb 2-1: device descriptor read/64, error -71 [ 99.960669][ T36] kauditd_printk_skb: 7839 callbacks suppressed [ 99.960697][ T36] audit: type=1326 audit(2008037044.878:65238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 99.993475][ T329] usb 3-1: device descriptor read/64, error -71 [ 99.994111][ T36] audit: type=1326 audit(2008037044.878:65239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 100.025246][ T36] audit: type=1326 audit(2008037044.878:65240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 100.057086][ T36] audit: type=1326 audit(2008037044.878:65241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 100.088381][ T36] audit: type=1326 audit(2008037044.878:65242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 100.088395][ T456] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 100.122118][ T36] audit: type=1326 audit(2008037044.878:65243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 100.146069][ T36] audit: type=1326 audit(2008037044.878:65244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 100.172098][ T36] audit: type=1326 audit(2008037044.878:65245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 100.198574][ T36] audit: type=1326 audit(2008037044.878:65246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 100.225078][ T36] audit: type=1326 audit(2008037044.878:65247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 100.258705][ T456] usb 2-1: device descriptor read/64, error -71 [ 100.265076][ T329] usb 3-1: device descriptor read/64, error -71 [ 100.297041][ T3060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34586 sclass=netlink_route_socket pid=3060 comm=syz.3.1080 [ 100.378700][ T329] usb usb3-port1: attempt power cycle [ 100.508420][ T456] usb 2-1: device descriptor read/64, error -71 [ 100.618088][ T3066] fuse: Bad value for 'user_id' [ 100.618656][ T456] usb usb2-port1: attempt power cycle [ 100.623590][ T3066] fuse: Bad value for 'user_id' [ 100.718423][ T329] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 100.739805][ T329] usb 3-1: device descriptor read/8, error -71 [ 100.870847][ T329] usb 3-1: device descriptor read/8, error -71 [ 100.968394][ T456] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 100.989502][ T456] usb 2-1: device descriptor read/8, error -71 [ 101.108373][ T329] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 101.129447][ T456] usb 2-1: device descriptor read/8, error -71 [ 101.136795][ T329] usb 3-1: device descriptor read/8, error -71 [ 101.201759][ T3082] 9pnet_fd: Insufficient options for proto=fd [ 101.269703][ T329] usb 3-1: device descriptor read/8, error -71 [ 101.368437][ T456] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 101.378742][ T329] usb usb3-port1: unable to enumerate USB device [ 101.389766][ T456] usb 2-1: device descriptor read/8, error -71 [ 101.460444][ T3086] fuse: Bad value for 'user_id' [ 101.466011][ T3086] fuse: Bad value for 'user_id' [ 101.519508][ T456] usb 2-1: device descriptor read/8, error -71 [ 101.628552][ T456] usb usb2-port1: unable to enumerate USB device [ 101.993890][ T3096] fuse: Bad value for 'fd' [ 102.203377][ T3109] tipc: Started in network mode [ 102.209197][ T3109] tipc: Node identity 100, cluster identity 4711 [ 102.215656][ T3109] tipc: Node number set to 256 [ 102.573131][ T2053] bridge_slave_1: left allmulticast mode [ 102.579478][ T2053] bridge_slave_1: left promiscuous mode [ 102.585882][ T2053] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.598945][ T2053] bridge_slave_0: left allmulticast mode [ 102.605125][ T2053] bridge_slave_0: left promiscuous mode [ 102.616330][ T2053] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.668735][ T3127] overlayfs: failed to clone upperpath [ 102.692605][ T3129] fuse: Unknown parameter 'ÿÿÿÿ' [ 102.720443][ T2053] tipc: Left network mode [ 102.726227][ T2053] veth1_macvtap: left promiscuous mode [ 102.731958][ T2053] veth0_vlan: left promiscuous mode [ 102.844281][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.851729][ T3132] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.859809][ T3132] bridge_slave_0: entered allmulticast mode [ 102.867814][ T3132] bridge_slave_0: entered promiscuous mode [ 102.875394][ T3132] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.884336][ T3132] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.892149][ T3132] bridge_slave_1: entered allmulticast mode [ 102.899669][ T3132] bridge_slave_1: entered promiscuous mode [ 103.026537][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.034497][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.051715][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.059422][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.087170][ T3132] veth0_vlan: entered promiscuous mode [ 103.107581][ T3132] veth1_macvtap: entered promiscuous mode [ 103.135079][ T3145] tipc: Started in network mode [ 103.143421][ T3145] tipc: Node identity fffffffa, cluster identity 4711 [ 103.151376][ T3145] tipc: Node number set to 4294967290 [ 103.231244][ T3160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=3160 comm=syz.4.1121 [ 103.988397][ T357] Bluetooth: hci0: command 0x1003 tx timeout [ 103.988397][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.238330][ T456] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.388326][ T456] usb 5-1: Using ep0 maxpacket: 16 [ 104.396922][ T456] usb 5-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 104.408313][ T456] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.422071][ T456] usb 5-1: New USB device found, idVendor=1e6d, idProduct=c29c, bcdDevice= 0.00 [ 104.432335][ T456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.443610][ T456] usb 5-1: config 0 descriptor?? [ 104.707996][ T3211] fuse: Unknown parameter '00000000000000000000003' [ 104.838408][ T363] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 104.878635][ T456] usb 5-1: string descriptor 0 read error: -71 [ 104.886969][ T456] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 104.899446][ T456] usb 5-1: USB disconnect, device number 2 [ 104.968309][ T36] kauditd_printk_skb: 19056 callbacks suppressed [ 104.968329][ T36] audit: type=1326 audit(2024814494.879:84304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 104.999545][ T36] audit: type=1326 audit(2024814494.889:84305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 105.028124][ T36] audit: type=1326 audit(2024814494.889:84306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 105.057224][ T36] audit: type=1326 audit(2024814494.889:84307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 105.057301][ T363] usb 3-1: Using ep0 maxpacket: 32 [ 105.086042][ T36] audit: type=1326 audit(2024814494.889:84308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 105.093629][ T363] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 105.115002][ T36] audit: type=1326 audit(2024814494.889:84309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 105.122828][ T363] usb 3-1: config 0 has no interface number 0 [ 105.146553][ T36] audit: type=1326 audit(2024814494.889:84310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 105.152992][ T363] usb 3-1: config 0 interface 184 has no altsetting 0 [ 105.176767][ T36] audit: type=1326 audit(2024814494.889:84311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 105.186307][ T363] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 105.208765][ T36] audit: type=1326 audit(2024814494.889:84312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 105.217945][ T363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.241287][ T36] audit: type=1326 audit(2024814494.889:84313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.0.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 105.249489][ T363] usb 3-1: Product: syz [ 105.278408][ T363] usb 3-1: Manufacturer: syz [ 105.283176][ T363] usb 3-1: SerialNumber: syz [ 105.289420][ T363] usb 3-1: config 0 descriptor?? [ 105.297572][ T363] smsc75xx v1.0.0 [ 105.355733][ T3224] fuse: Bad value for 'fd' [ 105.616717][ T3246] fuse: Invalid rootmode [ 105.643877][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.919589][ T3201] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 105.949840][ T3201] kvm: pic: level sensitive irq not supported [ 105.949936][ T3201] kvm: pic: non byte read [ 105.960882][ T3201] kvm: pic: level sensitive irq not supported [ 105.960968][ T3201] kvm: pic: non byte read [ 105.971958][ T3201] kvm: pic: level sensitive irq not supported [ 105.972024][ T3201] kvm: pic: non byte read [ 105.982891][ T3201] kvm: pic: level sensitive irq not supported [ 105.982979][ T3201] kvm: pic: non byte read [ 106.395824][ T363] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 106.406701][ T363] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 106.435589][ T3264] overlayfs: failed to clone upperpath [ 106.438446][ T3263] capability: warning: `syz.0.1163' uses 32-bit capabilities (legacy support in use) [ 106.640712][ T363] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 106.651724][ T363] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 106.661464][ T363] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 106.671782][ T363] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 106.681744][ T363] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 106.694712][ T363] usb 3-1: USB disconnect, device number 25 [ 107.179299][ T3268] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.228819][ T3271] fuse: Invalid rootmode [ 107.440783][ T3291] overlayfs: failed to clone upperpath [ 107.668149][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 107.674559][ T357] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.705042][ T3293] fuse: Invalid rootmode [ 107.878586][ T3306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1180'. [ 108.022859][ T3311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65050 sclass=netlink_route_socket pid=3311 comm=syz.3.1182 [ 108.071271][ T3317] fuse: Bad value for 'rootmode' [ 108.086107][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.092641][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.471196][ T3344] fuse: Bad value for 'rootmode' [ 109.563482][ T3366] fuse: Bad value for 'rootmode' [ 110.148199][ T357] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.148221][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 110.179871][ T36] kauditd_printk_skb: 15986 callbacks suppressed [ 110.179890][ T36] audit: type=1400 audit(2024814500.099:100300): avc: denied { setattr } for pid=3399 comm="syz.2.1219" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 110.265347][ T3416] fuse: Unknown parameter 'use00000000000000000000' [ 110.286341][ T3418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 110.300694][ T36] audit: type=1400 audit(2024814500.219:100301): avc: denied { write } for pid=3417 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.385207][ T36] audit: type=1326 audit(2024814500.299:100302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3361 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 110.413149][ T36] audit: type=1326 audit(2024814500.299:100303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3361 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 110.442216][ T36] audit: type=1326 audit(2024814500.299:100304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3361 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 110.469175][ T36] audit: type=1326 audit(2024814500.299:100305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3361 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 110.496616][ T36] audit: type=1326 audit(2024814500.299:100306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3361 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 110.521610][ T36] audit: type=1326 audit(2024814500.299:100307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3361 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 110.545776][ T36] audit: type=1326 audit(2024814500.299:100308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3361 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 110.569783][ T36] audit: type=1326 audit(2024814500.299:100309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3361 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 110.643652][ T3437] 9pnet_fd: Insufficient options for proto=fd [ 110.650946][ T3439] fuse: Unknown parameter 'use00000000000000000000' [ 110.719656][ T3447] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.843136][ T3467] fuse: Unknown parameter 'user_i00000000000000000000' [ 110.867780][ T3469] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59924 sclass=netlink_tcpdiag_socket pid=3469 comm=syz.0.1247 [ 111.599345][ T3497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2836 sclass=netlink_route_socket pid=3497 comm=syz.0.1259 [ 111.644189][ T3507] tipc: Enabling of bearer rejected, failed to enable media [ 112.311277][ T3550] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=61204 sclass=netlink_tcpdiag_socket pid=3550 comm=syz.0.1283 [ 112.436768][ T3569] overlayfs: failed to clone upperpath [ 112.583791][ T363] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 112.742353][ T363] usb 3-1: Using ep0 maxpacket: 32 [ 112.749427][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.760438][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.770712][ T363] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 112.780266][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.789594][ T363] usb 3-1: config 0 descriptor?? [ 112.989247][ T3584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3584 comm=syz.0.1298 [ 113.200210][ T363] savu 0003:1E7D:2D5A.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 113.585419][ T363] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 113.678142][ T329] usb 3-1: USB disconnect, device number 26 [ 113.735586][ T363] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.745982][ T363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.757479][ T363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.767485][ T363] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.781371][ T363] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 113.791075][ T363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.800640][ T363] usb 5-1: config 0 descriptor?? [ 113.950419][ T3600] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1304'. [ 114.141962][ T3622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=61460 sclass=netlink_tcpdiag_socket pid=3622 comm=syz.0.1313 [ 114.205254][ T363] apple 0003:05AC:0225.000C: unknown main item tag 0x0 [ 114.214864][ T363] apple 0003:05AC:0225.000C: item fetching failed at offset 3/5 [ 114.229210][ T363] apple 0003:05AC:0225.000C: parse failed [ 114.235794][ T363] apple 0003:05AC:0225.000C: probe with driver apple failed with error -22 [ 114.319494][ T63] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 114.478141][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 114.482551][ T363] usb 5-1: USB disconnect, device number 3 [ 114.491527][ T63] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.503617][ T63] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 114.512989][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.521652][ T63] usb 3-1: Product: syz [ 114.526694][ T63] usb 3-1: Manufacturer: syz [ 114.531405][ T63] usb 3-1: SerialNumber: syz [ 114.537230][ T63] usb 3-1: config 0 descriptor?? [ 114.543300][ T63] usb 3-1: bad CDC descriptors [ 114.548545][ T63] usb 3-1: unsupported MDLM descriptors [ 114.599529][ T3663] fuse: Unknown parameter 'user_id00000000000000000000' [ 115.069560][ T3677] 9pnet_fd: Insufficient options for proto=fd [ 115.084054][ T3682] fuse: Bad value for 'fd' [ 115.355241][ T3705] fuse: Bad value for 'fd' [ 115.713026][ T3725] fuse: Bad value for 'fd' [ 116.975136][ T9] usb 3-1: USB disconnect, device number 27 [ 117.024211][ T3744] fuse: Unknown parameter '00000000000000000000004' [ 117.389968][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 117.389996][ T357] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.429638][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 117.473729][ T3761] syzkaller1: entered allmulticast mode [ 117.578351][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 117.585205][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 117.593466][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.604035][ T9] usb 3-1: config 0 has no interface number 0 [ 117.610623][ T9] usb 3-1: config 0 interface 184 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 117.625720][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 117.635993][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.644428][ T9] usb 3-1: Product: syz [ 117.648727][ T9] usb 3-1: Manufacturer: syz [ 117.653726][ T9] usb 3-1: SerialNumber: syz [ 117.660150][ T9] usb 3-1: config 0 descriptor?? [ 117.683431][ T3766] fuse: Unknown parameter '00000000000000000000003' [ 117.868680][ T9] hub 3-1:0.184: bad descriptor, ignoring hub [ 117.875248][ T9] hub 3-1:0.184: probe with driver hub failed with error -5 [ 117.882984][ T9] smsc75xx v1.0.0 [ 117.886765][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 117.897078][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 118.173602][ T363] usb 3-1: USB disconnect, device number 28 [ 118.581407][ T363] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.612608][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.729023][ T363] usb 5-1: Using ep0 maxpacket: 32 [ 118.735654][ T363] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 118.744104][ T363] usb 5-1: config 0 has no interface number 0 [ 118.750688][ T363] usb 5-1: config 0 interface 184 has no altsetting 0 [ 118.759821][ T363] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 118.769333][ T363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.777408][ T363] usb 5-1: Product: syz [ 118.781657][ T363] usb 5-1: Manufacturer: syz [ 118.786296][ T363] usb 5-1: SerialNumber: syz [ 118.791774][ T363] usb 5-1: config 0 descriptor?? [ 118.798360][ T363] smsc75xx v1.0.0 [ 119.793492][ T3771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.802484][ T3771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.811238][ T363] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 120.010469][ T363] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 120.021898][ T363] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 120.031698][ T363] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 120.043033][ T363] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 120.053570][ T363] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 120.063487][ T363] usb 5-1: USB disconnect, device number 4 [ 120.198852][ T3827] process 'syz.3.1405' launched './file0' with NULL argv: empty string added [ 120.209175][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 120.209197][ T36] audit: type=1400 audit(2058369400.193:100344): avc: denied { execute_no_trans } for pid=3826 comm="syz.3.1405" path="/478/file0" dev="tmpfs" ino=2594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 120.643991][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 120.643995][ T357] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.842339][ T36] audit: type=1400 audit(2058369400.818:100345): avc: denied { read } for pid=3860 comm="syz.2.1419" path="socket:[24874]" dev="sockfs" ino=24874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 120.884779][ T3876] fuse: Unknown parameter 'fd00000000000000000000004' [ 121.049600][ T3889] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.288805][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 121.437664][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 121.445781][ T9] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 121.457594][ T9] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.470827][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 121.479108][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.40 [ 121.488594][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.496830][ T9] usb 3-1: Product: К [ 121.501069][ T9] usb 3-1: Manufacturer: ઑ [ 121.505919][ T9] usb 3-1: SerialNumber: Э [ 121.719371][ T3889] 9pnet_fd: Insufficient options for proto=fd [ 121.732895][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 121.739260][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 121.749602][ T9] usb 3-1: USB disconnect, device number 29 [ 122.268080][ T36] audit: type=1400 audit(2058369402.259:100346): avc: denied { create } for pid=3929 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.578272][ T36] audit: type=1326 audit(2058369402.571:100347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 122.598908][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 122.604546][ T36] audit: type=1326 audit(2058369402.571:100348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 122.636866][ T36] audit: type=1326 audit(2058369402.581:100349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 122.661010][ T36] audit: type=1326 audit(2058369402.581:100350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 122.685723][ T36] audit: type=1326 audit(2058369402.581:100351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 122.711147][ T36] audit: type=1326 audit(2058369402.581:100352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 122.736106][ T36] audit: type=1326 audit(2058369402.581:100353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 122.777419][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 122.784828][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.789772][ T3948] fuse: Unknown parameter 'fd00000000000000000000003' [ 122.797244][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 122.813374][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.821743][ T9] usb 3-1: Product: syz [ 122.826273][ T9] usb 3-1: Manufacturer: syz [ 122.831217][ T9] usb 3-1: SerialNumber: syz [ 122.837045][ T9] usb 3-1: config 0 descriptor?? [ 122.842964][ T9] usb 3-1: bad CDC descriptors [ 122.848639][ T9] usb 3-1: unsupported MDLM descriptors [ 123.043487][ T456] usb 3-1: USB disconnect, device number 30 [ 123.555008][ T3969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.555041][ T3969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.595524][ T3974] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1464'. [ 123.615743][ T3974] fuse: blksize only supported for fuseblk [ 123.622719][ T3974] overlayfs: missing 'lowerdir' [ 123.869207][ T456] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 124.028121][ T456] usb 3-1: Using ep0 maxpacket: 32 [ 124.035391][ T456] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.045573][ T456] usb 3-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 124.056661][ T456] usb 3-1: config 0 has no interface number 0 [ 124.063633][ T456] usb 3-1: too many endpoints for config 0 interface 184 altsetting 7: 171, using maximum allowed: 30 [ 124.075341][ T456] usb 3-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 171 [ 124.088862][ T456] usb 3-1: config 0 interface 184 has no altsetting 0 [ 124.098106][ T456] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.107429][ T456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.121910][ T456] usb 3-1: Product: syz [ 124.126570][ T456] usb 3-1: Manufacturer: syz [ 124.131635][ T456] usb 3-1: SerialNumber: syz [ 124.141236][ T456] usb 3-1: config 0 descriptor?? [ 124.349851][ T456] smsc75xx v1.0.0 [ 124.355806][ T456] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 124.366880][ T456] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 124.379728][ T456] usb 3-1: USB disconnect, device number 31 [ 124.908727][ T4041] rust_binder: Write failure EFAULT in pid:657 [ 125.182949][ T36] kauditd_printk_skb: 7892 callbacks suppressed [ 125.182970][ T36] audit: type=1326 audit(2075146850.188:108246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279658ebe9 code=0x7fc00000 [ 125.231721][ T36] audit: type=1326 audit(2075146850.198:108247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279658ebe9 code=0x7fc00000 [ 125.257641][ T36] audit: type=1326 audit(2075146850.198:108248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279658ebe9 code=0x7fc00000 [ 125.296217][ T36] audit: type=1326 audit(2075146850.198:108249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279658ebe9 code=0x7fc00000 [ 125.330041][ T36] audit: type=1326 audit(2075146850.198:108250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279658ebe9 code=0x7fc00000 [ 125.356041][ T36] audit: type=1326 audit(2075146850.198:108251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279658ebe9 code=0x7fc00000 [ 125.382294][ T36] audit: type=1326 audit(2075146850.198:108252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279658ebe9 code=0x7fc00000 [ 125.411411][ T36] audit: type=1326 audit(2075146850.198:108253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279658ebe9 code=0x7fc00000 [ 125.436860][ T36] audit: type=1326 audit(2075146850.198:108254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279658ebe9 code=0x7fc00000 [ 125.462358][ T36] audit: type=1326 audit(2075146850.198:108255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279658ebe9 code=0x7fc00000 [ 125.475654][ T4093] overlayfs: failed to clone lowerpath [ 126.162092][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 126.320882][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 126.327678][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.339995][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.351296][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 126.361474][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.371329][ T9] usb 3-1: config 0 descriptor?? [ 126.377573][ T9] hub 3-1:0.0: USB hub found [ 126.577843][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 126.602898][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 126.609455][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 126.640236][ T9] usb 3-1: USB disconnect, device number 32 [ 126.650581][ T4144] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 127.059068][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 127.195014][ T4181] sit0: entered promiscuous mode [ 127.201481][ T4181] netlink: 'syz.3.1551': attribute type 1 has an invalid length. [ 127.209381][ T4181] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1551'. [ 127.227630][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 127.234378][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 127.242845][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.254167][ T9] usb 3-1: config 0 has no interface number 0 [ 127.260899][ T9] usb 3-1: config 0 interface 184 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 127.276037][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 127.285511][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.293702][ T9] usb 3-1: Product: syz [ 127.298117][ T9] usb 3-1: Manufacturer: syz [ 127.303096][ T9] usb 3-1: SerialNumber: syz [ 127.309447][ T9] usb 3-1: config 0 descriptor?? [ 127.375540][ T4198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 127.415095][ T4206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=4206 comm=syz.3.1563 [ 127.516891][ T9] hub 3-1:0.184: bad descriptor, ignoring hub [ 127.524340][ T9] hub 3-1:0.184: probe with driver hub failed with error -5 [ 127.532064][ T9] smsc75xx v1.0.0 [ 127.535899][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 127.546478][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 127.576974][ T9] usb 3-1: USB disconnect, device number 33 [ 127.579672][ T4218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1568'. [ 127.594145][ T4218] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1568'. [ 127.603556][ T4218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 127.844148][ T4237] tmpfs: Unknown parameter 'nr_bˆ¸·y' [ 127.850675][ T4237] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1576'. [ 127.990725][ T4248] fuse: Bad value for 'fd' [ 128.719117][ T4311] netlink: 'syz.3.1603': attribute type 28 has an invalid length. [ 129.481045][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 130.144114][ T4416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=4416 comm=syz.4.1652 [ 130.677813][ T4432] netlink: 'syz.0.1659': attribute type 1 has an invalid length. [ 130.687257][ T4432] netlink: 'syz.0.1659': attribute type 2 has an invalid length. [ 130.833263][ T36] kauditd_printk_skb: 8800 callbacks suppressed [ 130.833291][ T36] audit: type=1326 audit(2142256635.881:117056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 130.868374][ T36] audit: type=1326 audit(2142256635.881:117057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 130.893746][ T36] audit: type=1326 audit(2142256635.881:117058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 130.919047][ T36] audit: type=1326 audit(2142256635.881:117059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 130.942974][ T36] audit: type=1326 audit(2142256635.881:117060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 130.966827][ T36] audit: type=1326 audit(2142256635.881:117061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 130.993201][ T36] audit: type=1326 audit(2142256635.881:117062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 131.017476][ T36] audit: type=1326 audit(2142256635.881:117063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 131.041653][ T36] audit: type=1326 audit(2142256635.921:117064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 131.065439][ T36] audit: type=1326 audit(2142256635.921:117065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e9158ebe9 code=0x7fc00000 [ 131.230180][ T4475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5408 sclass=netlink_route_socket pid=4475 comm=syz.0.1676 [ 132.186612][ T4533] fuse: Bad value for 'fd' [ 132.624518][ T329] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 132.774408][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 132.785586][ T329] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 132.795724][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 60630, setting to 1024 [ 132.806975][ T329] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 132.821390][ T329] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 132.830846][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.839110][ T329] usb 3-1: Product: syz [ 132.843781][ T329] usb 3-1: Manufacturer: syz [ 132.848738][ T329] usb 3-1: SerialNumber: syz [ 132.857187][ T329] usb 3-1: config 0 descriptor?? [ 132.862602][ T4557] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.871945][ T329] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 132.966480][ T4573] devpts: called with bogus options [ 133.072230][ T329] scsi host1: usb-storage 3-1:0.0 [ 133.083020][ T329] usb 3-1: USB disconnect, device number 34 [ 133.535697][ T4588] overlayfs: failed to clone upperpath [ 134.022962][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 134.173048][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.184282][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.194430][ T9] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 134.203828][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.219904][ T9] usb 3-1: config 0 descriptor?? [ 134.628222][ T9] elo 0003:04E7:0030.000D: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 134.825571][ T4609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.834257][ T4609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.855806][ T4646] batadv_slave_1: entered promiscuous mode [ 135.420313][ T4655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=4655 comm=syz.2.1750 [ 135.631339][ T4643] batadv_slave_1: left promiscuous mode [ 135.706639][ T4680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.715983][ T4680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.725655][ T4680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.734641][ T4680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.331911][ T4720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59936 sclass=netlink_route_socket pid=4720 comm=syz.4.1777 [ 136.372635][ T363] rust_binder: 4713: removing orphan mapping 0:8 [ 136.395381][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 136.679879][ T4745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.679911][ T4745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.687236][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 136.687256][ T36] audit: type=1400 audit(2159034086.780:117132): avc: denied { ioctl } for pid=4744 comm="syz.2.1787" path="socket:[27347]" dev="sockfs" ino=27347 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.820761][ T36] audit: type=1400 audit(2159034086.911:117133): avc: denied { shutdown } for pid=4748 comm="syz.2.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.888454][ T36] audit: type=1326 audit(2159034086.982:117134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.4.1794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x0 [ 137.273680][ T36] audit: type=1400 audit(2159034087.375:117135): avc: denied { write } for pid=4795 comm="syz.0.1806" path="socket:[28147]" dev="sockfs" ino=28147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.539539][ T36] audit: type=1400 audit(2175811532.637:117136): avc: denied { create } for pid=4820 comm="syz.4.1818" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.543278][ T4823] tipc: Enabling of bearer rejected, failed to enable media [ 137.561133][ T36] audit: type=1400 audit(2175811532.637:117137): avc: denied { link } for pid=4820 comm="syz.4.1818" name="file1" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.180432][ T36] audit: type=1326 audit(2175811533.279:117138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 138.204625][ T36] audit: type=1326 audit(2175811533.279:117139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 138.228696][ T36] audit: type=1326 audit(2175811533.279:117140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 138.252414][ T36] audit: type=1326 audit(2175811533.279:117141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b878ebe9 code=0x7fc00000 [ 138.466320][ T4858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61472 sclass=netlink_route_socket pid=4858 comm=syz.0.1831 [ 138.503572][ T4863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.503606][ T4863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.510368][ T4863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.699136][ T4879] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.712744][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.720019][ T4879] bridge_slave_0: entered allmulticast mode [ 138.726377][ T4879] bridge_slave_0: entered promiscuous mode [ 138.733170][ T4879] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.740377][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.747580][ T4879] bridge_slave_1: entered allmulticast mode [ 138.754088][ T4879] bridge_slave_1: entered promiscuous mode [ 138.764443][ T13] bridge_slave_1: left allmulticast mode [ 138.770517][ T13] bridge_slave_1: left promiscuous mode [ 138.776233][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.784031][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.792052][ T13] tipc: Resetting bearer [ 138.809031][ T13] tipc: Disabling bearer [ 138.896418][ T4879] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.903557][ T4879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.910921][ T4879] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.918200][ T4879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.930828][ T13] tipc: Left network mode [ 138.937360][ T13] veth1_macvtap: left promiscuous mode [ 138.943099][ T13] veth0_vlan: left promiscuous mode [ 138.992109][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.999831][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.010334][ T2053] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.017478][ T2053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.030680][ T2053] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.037839][ T2053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.067680][ T4879] veth0_vlan: entered promiscuous mode [ 139.075261][ T4890] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=4890 comm=syz.0.1841 [ 139.093682][ T4879] veth1_macvtap: entered promiscuous mode [ 139.170833][ T4893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.179627][ T4893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.373363][ T363] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 139.502358][ T363] usb 4-1: device descriptor read/64, error -71 [ 139.740356][ T363] usb 4-1: device descriptor read/64, error -71 [ 139.978545][ T363] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 140.117363][ T363] usb 4-1: device descriptor read/64, error -71 [ 140.218188][ T4910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65056 sclass=netlink_route_socket pid=4910 comm=syz.0.1849 [ 140.355416][ T363] usb 4-1: device descriptor read/64, error -71 [ 140.464627][ T363] usb usb4-port1: attempt power cycle [ 140.811510][ T4937] overlayfs: failed to clone upperpath [ 140.817182][ T363] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 140.843411][ T363] usb 4-1: device descriptor read/8, error -71 [ 140.982052][ T363] usb 4-1: device descriptor read/8, error -71 [ 141.154479][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.164427][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.218760][ T363] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 141.243359][ T363] usb 4-1: device descriptor read/8, error -71 [ 141.275197][ T4959] tipc: Started in network mode [ 141.280206][ T4959] tipc: Node identity ac14140f, cluster identity 4711 [ 141.287216][ T4959] tipc: New replicast peer: 255.255.255.255 [ 141.293603][ T4959] tipc: Enabled bearer , priority 10 [ 141.301528][ T4959] 9pnet_fd: Insufficient options for proto=fd [ 141.320932][ T4961] /dev/loop0: Can't lookup blockdev [ 141.338581][ T4963] 9pnet_fd: Insufficient options for proto=fd [ 141.389107][ T363] usb 4-1: device descriptor read/8, error -71 [ 141.496422][ T363] usb usb4-port1: unable to enumerate USB device [ 141.778419][ T4973] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 141.898801][ T4984] overlayfs: failed to clone upperpath [ 141.957075][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.964617][ T4985] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.971871][ T4985] bridge_slave_0: entered allmulticast mode [ 141.978530][ T4985] bridge_slave_0: entered promiscuous mode [ 141.985227][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.992277][ T4985] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.999695][ T4985] bridge_slave_1: entered allmulticast mode [ 142.006168][ T4985] bridge_slave_1: entered promiscuous mode [ 142.072047][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.079397][ T4985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.087280][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.094403][ T4985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.094559][ T4999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.117937][ T4999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.148056][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.156074][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.166350][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.173462][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.183833][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.190942][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.226235][ T4985] veth0_vlan: entered promiscuous mode [ 142.238235][ T4985] veth1_macvtap: entered promiscuous mode [ 142.301018][ T5007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5007 comm=syz.0.1886 [ 142.387161][ T2053] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.399200][ T456] tipc: Node number set to 2886997007 [ 142.528210][ T363] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 142.627340][ T36] kauditd_printk_skb: 2403 callbacks suppressed [ 142.627359][ T36] audit: type=1326 audit(2175811537.765:119545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 142.661148][ T36] audit: type=1326 audit(2175811537.765:119546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 142.687471][ T36] audit: type=1326 audit(2175811537.765:119547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 142.713152][ T36] audit: type=1326 audit(2175811537.765:119548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 142.726839][ T363] usb 4-1: Using ep0 maxpacket: 16 [ 142.738132][ T36] audit: type=1326 audit(2175811537.765:119549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 142.745710][ T363] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.768373][ T36] audit: type=1326 audit(2175811537.765:119550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 142.779165][ T363] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.803138][ T36] audit: type=1326 audit(2175811537.765:119551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 142.810190][ T363] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 142.843963][ T36] audit: type=1326 audit(2175811537.765:119552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 142.844690][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.867872][ T36] audit: type=1326 audit(2175811537.765:119553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 142.877316][ T363] usb 4-1: config 0 descriptor?? [ 142.900253][ T36] audit: type=1326 audit(2175811537.765:119554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5105b8ebe9 code=0x7fc00000 [ 142.913687][ T363] usbhid 4-1:0.0: can't add hid device: -22 [ 142.935275][ T363] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 143.119185][ T570] usb 4-1: USB disconnect, device number 19 [ 143.514310][ T5035] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1897'. [ 143.760001][ T5058] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 144.008582][ T570] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 144.158796][ T570] usb 4-1: Using ep0 maxpacket: 32 [ 144.165390][ T570] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 144.174442][ T570] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 144.183492][ T570] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 144.192610][ T570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.202492][ T570] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.212450][ T570] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 144.225495][ T570] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 144.234870][ T570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.242416][ T5070] overlayfs: failed to clone upperpath [ 144.249570][ T570] usb 4-1: config 0 descriptor?? [ 144.398654][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 144.398719][ T357] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.456900][ T570] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 144.553738][ T5077] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 144.561897][ T5077] rust_binder: 15: no such ref 1 [ 144.567112][ T5077] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 144.661590][ T570] usb 4-1: USB disconnect, device number 20 [ 144.676426][ T570] usblp0: removed [ 145.047211][ T5087] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 145.074436][ T5089] fuse: Unknown parameter '' [ 145.080379][ T5089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.091334][ T5089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.103779][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.737758][ T570] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 145.887665][ T570] usb 4-1: Using ep0 maxpacket: 32 [ 145.894614][ T570] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.907060][ T570] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 145.916759][ T570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.925627][ T570] usb 4-1: Product: syz [ 145.930739][ T570] usb 4-1: Manufacturer: syz [ 145.935485][ T570] usb 4-1: SerialNumber: syz [ 145.941736][ T570] usb 4-1: config 0 descriptor?? [ 145.948641][ T570] usb 4-1: bad CDC descriptors [ 145.954437][ T570] usb 4-1: unsupported MDLM descriptors [ 146.152435][ T363] usb 4-1: USB disconnect, device number 21 [ 146.977090][ T570] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 147.117262][ T5094] Bluetooth: hci0: command 0x1003 tx timeout [ 147.117301][ T357] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.123394][ T570] usb 4-1: device descriptor read/64, error -71 [ 147.277153][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 147.366913][ T570] usb 4-1: device descriptor read/64, error -71 [ 147.407742][ T5161] netlink: 'syz.4.1946': attribute type 13 has an invalid length. [ 147.606800][ T570] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 147.666739][ T363] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.736764][ T570] usb 4-1: device descriptor read/64, error -71 [ 147.816691][ T363] usb 1-1: Using ep0 maxpacket: 32 [ 147.823130][ T363] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.835448][ T363] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 147.845233][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.853734][ T363] usb 1-1: Product: syz [ 147.858323][ T363] usb 1-1: Manufacturer: syz [ 147.863113][ T363] usb 1-1: SerialNumber: syz [ 147.868806][ T363] usb 1-1: config 0 descriptor?? [ 147.874596][ T363] usb 1-1: bad CDC descriptors [ 147.879857][ T363] usb 1-1: unsupported MDLM descriptors [ 147.976657][ T570] usb 4-1: device descriptor read/64, error -71 [ 148.075606][ T63] usb 1-1: USB disconnect, device number 11 [ 148.086774][ T570] usb usb4-port1: attempt power cycle [ 148.426467][ T570] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 148.448151][ T570] usb 4-1: device descriptor read/8, error -71 [ 148.577541][ T570] usb 4-1: device descriptor read/8, error -71 [ 148.620364][ T5181] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 148.630960][ T5181] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 148.640772][ T5181] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 148.650178][ T5181] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 148.727009][ T5191] tipc: Enabling of bearer rejected, failed to enable media [ 148.783390][ T5198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.792347][ T5198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.836206][ T570] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 148.857850][ T570] usb 4-1: device descriptor read/8, error -71 [ 148.987909][ T570] usb 4-1: device descriptor read/8, error -71 [ 149.036200][ T329] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.096159][ T570] usb usb4-port1: unable to enumerate USB device [ 149.186051][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 149.193233][ T329] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 149.202445][ T329] usb 1-1: config 0 has no interface number 0 [ 149.209910][ T329] usb 1-1: config 0 interface 184 has no altsetting 0 [ 149.220014][ T329] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 149.229347][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.237605][ T329] usb 1-1: Product: syz [ 149.242139][ T329] usb 1-1: Manufacturer: syz [ 149.247162][ T329] usb 1-1: SerialNumber: syz [ 149.252627][ T329] usb 1-1: config 0 descriptor?? [ 149.259160][ T329] smsc75xx v1.0.0 [ 149.727651][ T5250] rust_binder: Error in use_page_slow: ESRCH [ 149.727673][ T5250] rust_binder: use_range failure ESRCH [ 149.733912][ T5250] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 149.739851][ T5250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 149.749111][ T5250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:896 [ 150.265054][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 150.285335][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 150.323154][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 150.334427][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 150.344586][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 150.355619][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 150.365415][ T329] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 150.708746][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.717392][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.964961][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.239645][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.248694][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.820808][ T5306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 151.820837][ T5306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:922 [ 151.895940][ T63] usb 1-1: USB disconnect, device number 12 [ 152.058316][ T5343] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2025'. [ 152.214495][ T63] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 152.225676][ T5363] netlink: 'syz.2.2032': attribute type 6 has an invalid length. [ 152.233733][ T5363] netlink: 'syz.2.2032': attribute type 4 has an invalid length. [ 152.242021][ T5363] netlink: 'syz.2.2032': attribute type 6 has an invalid length. [ 152.250127][ T5363] netlink: 'syz.2.2032': attribute type 13 has an invalid length. [ 152.258435][ T5363] netlink: 'syz.2.2032': attribute type 15 has an invalid length. [ 152.266603][ T5363] netlink: 'syz.2.2032': attribute type 19 has an invalid length. [ 152.274924][ T5363] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.2032'. [ 152.329385][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 152.364413][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 152.375178][ T63] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.386978][ T63] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 152.396578][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.405659][ T63] usb 1-1: Product: syz [ 152.410241][ T63] usb 1-1: Manufacturer: syz [ 152.415355][ T63] usb 1-1: SerialNumber: syz [ 152.424629][ T63] usb 1-1: config 0 descriptor?? [ 152.432787][ T63] usb 1-1: bad CDC descriptors [ 152.438385][ T63] usb 1-1: unsupported MDLM descriptors [ 152.591089][ T36] kauditd_printk_skb: 14329 callbacks suppressed [ 152.591108][ T36] audit: type=1400 audit(2259698772.740:133884): avc: denied { mount } for pid=5391 comm="syz.2.2044" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 152.632427][ T63] usb 1-1: USB disconnect, device number 13 [ 152.824351][ T5412] netlink: 'syz.4.2051': attribute type 6 has an invalid length. [ 152.833600][ T5412] netlink: 'syz.4.2051': attribute type 4 has an invalid length. [ 152.842932][ T5412] netlink: 'syz.4.2051': attribute type 6 has an invalid length. [ 152.851259][ T5412] netlink: 'syz.4.2051': attribute type 13 has an invalid length. [ 152.859679][ T5412] netlink: 'syz.4.2051': attribute type 15 has an invalid length. [ 152.868095][ T5412] netlink: 'syz.4.2051': attribute type 19 has an invalid length. [ 152.876225][ T5412] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.2051'. [ 153.034075][ T357] Bluetooth: hci0: command 0x1003 tx timeout [ 153.041346][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.089209][ T36] audit: type=1400 audit(2259698773.240:133885): avc: denied { sqpoll } for pid=5422 comm="syz.3.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 153.089508][ T5423] futex_wake_op: syz.3.2056 tries to shift op by 144; fix this program [ 153.222861][ T5436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'. [ 153.238591][ T36] audit: type=1326 audit(2259698773.390:133886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 153.298961][ T36] audit: type=1326 audit(2259698773.390:133887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 153.347834][ T36] audit: type=1326 audit(2259698773.390:133888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 153.373959][ T36] audit: type=1326 audit(2259698773.390:133889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 153.435627][ T5455] netlink: 'syz.3.2072': attribute type 6 has an invalid length. [ 153.437918][ T36] audit: type=1326 audit(2259698773.390:133890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 153.443597][ T5455] netlink: 'syz.3.2072': attribute type 4 has an invalid length. [ 153.471070][ T36] audit: type=1326 audit(2259698773.390:133891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 153.478304][ T5455] netlink: 'syz.3.2072': attribute type 6 has an invalid length. [ 153.503679][ T36] audit: type=1326 audit(2259698773.390:133892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 153.511044][ T5455] netlink: 'syz.3.2072': attribute type 13 has an invalid length. [ 153.534829][ T36] audit: type=1326 audit(2259698773.390:133893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 153.542972][ T5455] netlink: 3684 bytes leftover after parsing attributes in process `syz.3.2072'. [ 153.633803][ T329] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 153.783828][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 153.791943][ T329] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.809600][ T329] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 153.819130][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.827742][ T329] usb 1-1: Product: syz [ 153.832511][ T329] usb 1-1: Manufacturer: syz [ 153.837426][ T329] usb 1-1: SerialNumber: syz [ 153.843915][ T329] usb 1-1: config 0 descriptor?? [ 153.850224][ T329] usb 1-1: bad CDC descriptors [ 153.857489][ T329] usb 1-1: unsupported MDLM descriptors [ 153.923650][ T363] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 154.051556][ T570] usb 1-1: USB disconnect, device number 14 [ 154.071078][ T5487] veth1_macvtap: mtu less than device minimum [ 154.073571][ T363] usb 4-1: Using ep0 maxpacket: 32 [ 154.087219][ T363] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 154.097010][ T363] usb 4-1: config 0 has no interface number 0 [ 154.104251][ T363] usb 4-1: config 0 interface 184 has no altsetting 0 [ 154.114493][ T363] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 154.124385][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.133099][ T363] usb 4-1: Product: syz [ 154.138702][ T363] usb 4-1: Manufacturer: syz [ 154.144568][ T363] usb 4-1: SerialNumber: syz [ 154.150701][ T363] usb 4-1: config 0 descriptor?? [ 154.158803][ T363] smsc75xx v1.0.0 [ 154.360184][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 154.550988][ T5502] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.2092'. [ 154.671117][ T5512] batadv_slave_0: mtu less than device minimum [ 154.770655][ T363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 154.783251][ T363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 154.974059][ T5470] usb usb8: usbfs: process 5470 (syz.3.2077) did not claim interface 0 before use [ 154.993113][ T363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 155.004621][ T363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 155.014820][ T363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 155.025752][ T363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 155.036631][ T363] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 155.131702][ T5553] netlink: 3684 bytes leftover after parsing attributes in process `syz.0.2113'. [ 155.162259][ T5555] overlayfs: missing 'workdir' [ 155.556912][ T5564] overlayfs: failed to clone upperpath [ 155.711618][ T5580] 9pnet_fd: Insufficient options for proto=fd [ 156.218885][ T5608] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.2138'. [ 156.308191][ T5618] overlayfs: failed to clone upperpath [ 156.754096][ T63] usb 4-1: USB disconnect, device number 26 [ 157.092068][ T63] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 157.241989][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 157.248477][ T63] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.258982][ T63] usb 4-1: config 1 interface 1 has no altsetting 1 [ 157.267574][ T63] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.276977][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.285230][ T63] usb 4-1: Product: syz [ 157.289448][ T63] usb 4-1: Manufacturer: syz [ 157.294814][ T63] usb 4-1: SerialNumber: syz [ 157.331149][ T5671] __nla_validate_parse: 1 callbacks suppressed [ 157.331166][ T5671] netlink: 3684 bytes leftover after parsing attributes in process `syz.0.2165'. [ 157.505599][ T63] usb 4-1: selecting invalid altsetting 1 [ 157.514524][ T63] cdc_ncm 4-1:1.0: bind() failure [ 157.521966][ T63] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 157.529720][ T63] cdc_ncm 4-1:1.1: bind() failure [ 157.539941][ T63] usb 4-1: USB disconnect, device number 27 [ 158.094674][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.157475][ T5713] validate_nla: 31 callbacks suppressed [ 158.157492][ T5713] netlink: 'syz.4.2184': attribute type 6 has an invalid length. [ 158.171344][ T5713] netlink: 'syz.4.2184': attribute type 4 has an invalid length. [ 158.179139][ T5713] netlink: 'syz.4.2184': attribute type 6 has an invalid length. [ 158.187283][ T5713] netlink: 'syz.4.2184': attribute type 13 has an invalid length. [ 158.195537][ T5713] netlink: 'syz.4.2184': attribute type 15 has an invalid length. [ 158.203449][ T5713] netlink: 'syz.4.2184': attribute type 19 has an invalid length. [ 158.211699][ T5713] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.2184'. [ 158.518955][ T5732] raw_sendmsg: syz.0.2192 forgot to set AF_INET. Fix it! [ 158.693506][ T36] kauditd_printk_skb: 3100 callbacks suppressed [ 158.693526][ T36] audit: type=1400 audit(2310031113.846:136994): avc: denied { getopt } for pid=5756 comm="syz.0.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.743455][ T5764] netlink: 'syz.0.2204': attribute type 6 has an invalid length. [ 158.751714][ T5764] netlink: 'syz.0.2204': attribute type 4 has an invalid length. [ 158.759915][ T5764] netlink: 'syz.0.2204': attribute type 6 has an invalid length. [ 158.767921][ T5764] netlink: 'syz.0.2204': attribute type 13 has an invalid length. [ 158.775892][ T5764] netlink: 3684 bytes leftover after parsing attributes in process `syz.0.2204'. [ 159.371731][ T5798] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 159.380323][ T5798] overlayfs: missing 'lowerdir' [ 159.471561][ T5803] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2221'. [ 159.500492][ T5805] overlay: Unknown parameter 'smackfsdef' [ 159.798393][ T5807] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.2223'. [ 159.937276][ T36] audit: type=1400 audit(2310031115.087:136995): avc: denied { map } for pid=5816 comm="syz.2.2228" path="socket:[32413]" dev="sockfs" ino=32413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.034623][ T36] audit: type=1326 audit(2310031115.187:136996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.0.2232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3571b8ebe9 code=0x0 [ 160.150692][ T357] Bluetooth: hci0: command 0x1003 tx timeout [ 160.157324][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.405745][ T36] audit: type=1326 audit(2310031115.557:136997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 160.449924][ T36] audit: type=1326 audit(2310031115.557:136998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 160.483681][ T36] audit: type=1326 audit(2310031115.557:136999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 160.510883][ T36] audit: type=1326 audit(2310031115.557:137000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 160.540477][ T36] audit: type=1326 audit(2310031115.557:137001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 160.567979][ T36] audit: type=1326 audit(2310031115.557:137002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 160.618691][ T36] audit: type=1326 audit(2310031115.557:137003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa7c178ebe9 code=0x7ffc0000 [ 160.651503][ T5850] overlayfs: statfs failed on './file0' [ 160.872007][ T5859] netlink: 3684 bytes leftover after parsing attributes in process `syz.0.2245'. [ 161.229991][ T63] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 161.345092][ T5895] overlayfs: failed to clone upperpath [ 161.381722][ T63] usb 4-1: unable to get BOS descriptor or descriptor too short [ 161.391624][ T63] usb 4-1: not running at top speed; connect to a high speed hub [ 161.401039][ T63] usb 4-1: config 12 has an invalid interface number: 173 but max is 1 [ 161.410718][ T63] usb 4-1: config 12 has an invalid interface number: 173 but max is 1 [ 161.420045][ T63] usb 4-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 161.431174][ T63] usb 4-1: config 12 has no interface number 0 [ 161.438024][ T63] usb 4-1: config 12 interface 173 has no altsetting 0 [ 161.445491][ T63] usb 4-1: config 12 interface 173 has no altsetting 1 [ 161.454568][ T63] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 161.464802][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.473541][ T63] usb 4-1: Product: syz [ 161.477929][ T63] usb 4-1: Manufacturer: syz [ 161.484180][ T63] usb 4-1: SerialNumber: syz [ 161.681767][ T5913] netlink: 3684 bytes leftover after parsing attributes in process `syz.0.2267'. [ 161.768388][ T63] usb 4-1: USB disconnect, device number 28 [ 162.442292][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 162.922058][ T5985] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2300'. [ 163.037686][ T6001] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 163.081385][ T5999] overlayfs: failed to clone upperpath [ 163.202707][ T6019] validate_nla: 23 callbacks suppressed [ 163.202733][ T6019] netlink: 'syz.4.2315': attribute type 6 has an invalid length. [ 163.219595][ T6019] netlink: 'syz.4.2315': attribute type 4 has an invalid length. [ 163.227893][ T6019] netlink: 'syz.4.2315': attribute type 6 has an invalid length. [ 163.236051][ T6019] netlink: 'syz.4.2315': attribute type 13 has an invalid length. [ 163.244323][ T6019] netlink: 'syz.4.2315': attribute type 15 has an invalid length. [ 163.252641][ T6019] netlink: 'syz.4.2315': attribute type 19 has an invalid length. [ 163.260822][ T6019] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.2315'. [ 163.530214][ T6053] overlayfs: conflicting options: userxattr,metacopy=on [ 163.602243][ T6062] tipc: Enabling of bearer rejected, failed to enable media [ 163.871517][ T6081] netlink: 'syz.4.2340': attribute type 6 has an invalid length. [ 163.888611][ T6081] netlink: 'syz.4.2340': attribute type 4 has an invalid length. [ 163.906729][ T6081] netlink: 'syz.4.2340': attribute type 6 has an invalid length. [ 163.918579][ T6081] netlink: 'syz.4.2340': attribute type 13 has an invalid length. [ 163.926548][ T6081] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.2340'. [ 164.250376][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'. [ 164.272068][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 164.272086][ T36] audit: type=1326 audit(2360363454.430:137012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.2.2347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f279658ebe9 code=0x0 [ 164.468392][ T357] Bluetooth: hci0: command 0x1003 tx timeout [ 164.474679][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.527313][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2350'. [ 164.715970][ T36] audit: type=1400 audit(2377140899.872:137013): avc: denied { ioctl } for pid=6124 comm="syz.3.2355" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 164.980397][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.168505][ T6150] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.2365'. [ 167.027109][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.027142][ T357] Bluetooth: hci0: command 0x1003 tx timeout [ 167.137645][ T6203] netlink: 3684 bytes leftover after parsing attributes in process `syz.3.2389'. [ 168.239975][ T6245] 9pnet_fd: Insufficient options for proto=fd [ 170.876469][ T36] audit: type=1400 audit(2393918351.039:137014): avc: denied { read } for pid=6379 comm="syz.4.2464" path="socket:[34476]" dev="sockfs" ino=34476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.896850][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'. [ 171.906355][ T6493] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2513'. [ 171.915634][ T6493] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2513'. [ 171.924988][ T6493] validate_nla: 14 callbacks suppressed [ 171.925007][ T6493] netlink: 'syz.3.2513': attribute type 6 has an invalid length. [ 171.939696][ T6493] netlink: 'syz.3.2513': attribute type 5 has an invalid length. [ 171.948167][ T6493] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2513'. [ 172.160817][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2528'. [ 172.172857][ T36] audit: type=1400 audit(2393918352.340:137015): avc: denied { create } for pid=6526 comm="syz.0.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 172.195070][ T6521] overlayfs: failed to clone upperpath [ 172.230610][ T6536] 9pnet_fd: Insufficient options for proto=fd [ 172.449710][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2546'. [ 172.629661][ T6595] overlayfs: failed to clone upperpath [ 172.636439][ T6595] ------------[ cut here ]------------ [ 172.642618][ T6595] WARNING: CPU: 1 PID: 6595 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 172.652554][ T6595] Modules linked in: [ 172.656612][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.3.2559 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 172.668653][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.678972][ T6595] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 172.684993][ T6595] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b9 2e ee 05 00 0f 85 be 00 00 00 c6 05 ac 2e ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 172.705356][ T6595] RSP: 0018:ffffc900041cf880 EFLAGS: 00010246 [ 172.711612][ T6595] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000000000000000 [ 172.719647][ T6595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900041cf938 [ 172.728144][ T6595] RBP: ffffc900041cf9b0 R08: ffffc900041cf937 R09: 0000000000000000 [ 172.736587][ T6595] R10: ffffc900041cf920 R11: fffff52000839f27 R12: ffffc900041cf8c0 [ 172.744718][ T6595] R13: dffffc0000000000 R14: 1ffff92000839f14 R15: 0000000000000000 [ 172.752792][ T6595] FS: 00007fa7c25a36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 172.761953][ T6595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.769473][ T6595] CR2: 00007fa7c2581f98 CR3: 0000000136c0c000 CR4: 00000000003526b0 [ 172.777533][ T6595] Call Trace: [ 172.781079][ T6595] [ 172.784711][ T6595] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 172.790823][ T6595] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 172.797462][ T6595] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 172.803743][ T6595] ___kmalloc_large_node+0x9c/0x1d0 [ 172.809347][ T6595] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 172.815355][ T6595] __kmalloc_large_node_noprof+0x1e/0xe0 [ 172.821577][ T6595] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 172.827953][ T6595] __kmalloc_noprof+0x26d/0x450 [ 172.833061][ T6595] incfs_realloc_mount_info+0xa7/0x4d0 [ 172.838902][ T6595] ? incfs_add_sysfs_node+0x118/0x240 [ 172.844509][ T6595] incfs_alloc_mount_info+0x479/0x600 [ 172.850130][ T6595] incfs_mount_fs+0x3ca/0x960 [ 172.855117][ T6595] ? __cfi_incfs_mount_fs+0x10/0x10 [ 172.860560][ T6595] ? vfs_parse_fs_string+0x102/0x170 [ 172.866110][ T6595] ? selinux_capable+0x38/0x50 [ 172.871044][ T6595] legacy_get_tree+0x103/0x1b0 [ 172.875972][ T6595] ? __cfi_incfs_mount_fs+0x10/0x10 [ 172.881230][ T6595] vfs_get_tree+0xa1/0x290 [ 172.885773][ T6595] do_new_mount+0x251/0xb40 [ 172.890760][ T6595] ? security_capable+0xcf/0xf0 [ 172.895802][ T6595] path_mount+0x688/0x1050 [ 172.900443][ T6595] ? putname+0x113/0x150 [ 172.904780][ T6595] __se_sys_mount+0x2bd/0x480 [ 172.909683][ T6595] ? __x64_sys_mount+0xf0/0xf0 [ 172.914803][ T6595] ? __kasan_check_write+0x18/0x20 [ 172.919974][ T6595] ? fpregs_restore_userregs+0x11d/0x260 [ 172.925786][ T6595] __x64_sys_mount+0xc3/0xf0 [ 172.930729][ T6595] x64_sys_call+0x2021/0x2ee0 [ 172.935585][ T6595] do_syscall_64+0x58/0xf0 [ 172.940048][ T6595] ? clear_bhb_loop+0x50/0xa0 [ 172.945188][ T6595] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 172.951257][ T6595] RIP: 0033:0x7fa7c178ebe9 [ 172.955925][ T6595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.975993][ T6595] RSP: 002b:00007fa7c25a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.984682][ T6595] RAX: ffffffffffffffda RBX: 00007fa7c19b5fa0 RCX: 00007fa7c178ebe9 [ 172.993125][ T6595] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 173.001678][ T6595] RBP: 00007fa7c1811e19 R08: 0000200000000280 R09: 0000000000000000 [ 173.009811][ T6595] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 173.017937][ T6595] R13: 00007fa7c19b6038 R14: 00007fa7c19b5fa0 R15: 00007ffc2f221f78 [ 173.026134][ T6595] [ 173.029168][ T6595] ---[ end trace 0000000000000000 ]--- [ 173.034904][ T6595] incfs: Error allocating mount info. -12 [ 173.040781][ T6595] incfs: mount failed -12