last executing test programs: 3m10.241600431s ago: executing program 1 (id=1367): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000000000000e0000000000200001000500000000000000000003"], 0x58) (async, rerun: 32) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) (async) close(r0) (async, rerun: 64) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64) sendmmsg(r2, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 3m10.241288431s ago: executing program 1 (id=1368): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) sync() iopl(0xff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) 3m10.131049013s ago: executing program 1 (id=1369): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xc1f, 0x0, &(0x7f0000000580)="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"}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x48000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001ff8400000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000004007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04000002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3m10.111575604s ago: executing program 1 (id=1370): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1f0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0xa8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff9004"]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x2800) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000280)=""/65) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x200, 0x110) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1f0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0xa8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff9004"]) (async) pipe2(&(0x7f00000000c0), 0x2800) (async) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000280)=""/65) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x200, 0x110) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) 3m9.917687957s ago: executing program 1 (id=1371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x88, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) 3m9.815834649s ago: executing program 1 (id=1378): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xc1f, 0x0, &(0x7f0000000580)="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"}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x48000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001ff8800000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000004007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04000002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3m9.752166389s ago: executing program 32 (id=1378): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xc1f, 0x0, &(0x7f0000000580)="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"}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x48000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001ff8800000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000004007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04000002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.657555084s ago: executing program 4 (id=4093): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000300)=0x1e9b, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x6a) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = dup(r0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) 2.654987194s ago: executing program 4 (id=4094): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r4, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) 2.481879127s ago: executing program 3 (id=4097): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000500)=[@exit_looper], 0x0, 0x1000000000000, 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000500)=[@exit_looper], 0x0, 0x1000000000000, 0x0}) (async) 2.475536897s ago: executing program 3 (id=4098): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x100000000, 0x12) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000440)=[@increfs], 0x1e, 0x0, 0x0}) 2.332756359s ago: executing program 0 (id=4103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r3, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x4c891}, 0x880) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {0x27}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x5c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 64) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff}]}) (rerun: 64) r11 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_SETINTERFACE(r11, 0x80045510, &(0x7f0000000000)={0x3f}) (async, rerun: 32) close_range(r10, 0xffffffffffffffff, 0x0) (rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) 1.72146422s ago: executing program 4 (id=4108): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x4800, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000100)="55481f", 0x3}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x1002000, 0x0) r2 = gettid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x9, 0x0, 0x1a}, {0x100000, 0xd000, 0x9, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82, 0x1, 0x80, 0x0, 0xe}, {0x6000, 0x8000}, {0x1, 0xfffe}, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x4c98, 0x6, 0x3]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r6, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x22, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) 1.7209624s ago: executing program 4 (id=4109): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x561}]}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) (async) r4 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000073000040"]) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x7, 0x6, 0x26, 0x100000000000009, 0x8, 0xb, 0x64d, 0x8, 0x9657, 0x5, 0x2, 0xe7d4, 0x80000000000008, 0xc, 0x1, 0xcc4, 0x2efa, 0x1, 0x94d8, 0x7, 0x1, 0x6, 0xe, 0xfffffffffffffffa, 0x1, 0x2000008000000}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 1.635711052s ago: executing program 4 (id=4110): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1.487146574s ago: executing program 0 (id=4111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c, 0x80800) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)={0x28, 0x19, 0x15, 0x0, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x130}]}]}, 0x28}], 0x1}, 0x0) dup(r3) dup3(r2, r3, 0x80000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0x6}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000400101c0"]) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 1.421553475s ago: executing program 0 (id=4112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) unshare(0x6040480) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x2) (async) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x2) 1.074218601s ago: executing program 4 (id=4114): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_mrelease(r3, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000e80)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="202275000000751011a5a53d21162021a9506111b1b8e06aa077ed1035b586b4d561028c927cee751f5fe2787c1dcfcc61decc8208c3d6414324ba82109b7f8475d2b3924fba72a143595f5498e6f12f54b00000e642bcefbbcb397d1f97f6bd6cc940fbf9b4d96be44cb2e1f7c227b43200"/125], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="125845031ecd2b20101401a05bec010203010902120001064d400f0904030000817be102"], 0x0) (async) read$hidraw(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$hidraw(0x0, 0x8, 0x109400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) (async) shutdown(r4, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2000}], 0x1, 0x80000001) (async) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) (async) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000180)) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x111100, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) 933.672364ms ago: executing program 3 (id=4115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) (async) splice(r1, 0x0, r3, 0x0, 0x100000004, 0x0) (async) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r4, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 933.182284ms ago: executing program 0 (id=4116): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) request_key(&(0x7f00000000c0)='big_key\x00', 0x0, 0x0, 0xfffffffffffffff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}, 0x10) lseek(r1, 0x10001, 0x0) 932.208594ms ago: executing program 0 (id=4117): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1}, 0xffffffffffffffd1) splice(r0, &(0x7f0000000000)=0x8, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x800, 0x5) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000080)={0x80000002}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301201, 0x0) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f00000001c0)) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xa, 0x0, 0x700, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0x80}}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0]) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) syz_usb_control_io(r6, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00d52d0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x0, 0x0, 0xed, {0xed, 0x21, "b629e2f8e199136c099b99df31ff8e35511a91eae821f40d4a2a444709533413a6b886188f98cd00d0264be89868fb457f9aee6d402db9f99483a5222845b658ef43baa2c31be114f1eaeb28a342e77a3203572a5a11276b62a186f564546c51b411b968b0f4f1f8a0ad0795895a2f9e87c781966f86de54a3ddc516c217ab5a81caeef7ac456a637ad684b04b1600ce310fddd98f6bd2dc5b8846f5f68dcb18a8ce99ce184165dcc7bbb5635d7f4720391419993f0e27f35954a97b52c2204ee822fc414bfb1ebffb3affa8049c3c6c3ffebf82ef72394c4854abd1846a156425f79822d185aa09acbd10"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x0, 0x12, 0x13, "f60e4b4141dcbee98ab618d5bc71bdda20d544"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6c}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x81, 0x3, "d3f5bf"}, &(0x7f0000000680)={0x20, 0x82, 0x3, "c93601"}, &(0x7f00000004c0)=ANY=[@ANYBLOB="20f8ff000000bbfa"], &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000540)={0x20, 0x85, 0x3, "54ddd1"}}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r7, 0x0, 0x40804) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x4800, &(0x7f0000000180)=ANY=[]) (async) sendfile(r2, r2, 0x0, 0x5e7d) 630.318659ms ago: executing program 2 (id=4119): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x10061, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) 573.67343ms ago: executing program 2 (id=4120): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0xd0, 0x40000) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) close_range(r1, r3, 0x0) r4 = accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x800) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) sendfile(r0, r0, 0x0, 0x7ffff000) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x480000, 0x100) 420.804912ms ago: executing program 0 (id=4121): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0xfffffff9, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000040)=ANY=[@ANYBLOB="6673636f6e746d78743d75a6be6e636f6e66696e64645f758ec0c556e36be5b4adba8edce2f43d30ab7ebdd808e11ee5bbeda077c48b7c09335ec8c6b0a0e22a69bc17808f7f970899343939293290a03c3c8dfb01180febff57"]) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0x4, 0x90, 0x23, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0xb, {{0x9, 0x24, 0x6, 0x0, 0x0, "3b464714"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x1, 0x10}, [@mdlm_detail={0xcc, 0x24, 0x13, 0x74, "7a0dc7986294429539284366a78b4b3d5a011e5879ab436be0dcf5cfdd9e1d099d8413d37d2b25788c856fa450795ba0e064e4eab8ab3b3eea294dd9c05581971408c95773ef5b0ef285cd1a44d8554c60adf6904373e345037f713e5998528af52df046e087f250e44556a8c8ad94e1500f9fb37a996809787d0ddfb4bc6f222ec0ccb9ed6faf126e07e0129fd4bc17a543ccc7edeaa2d603fbb110402b01db3366425fc569293ad95bc91a538aa42421b0d522d127b582ed8a27f2d65e3802eeab63b63ee2f3e4"}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x8f, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x9f3, 0x20}, @mdlm={0x15, 0x24, 0x12, 0xf3cd}, @acm={0x4, 0x24, 0x2, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x2e}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xc, 0x6b, 0x97}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0xfc, 0xb, 0x10, 0xf8}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x4, [{0x97, &(0x7f0000000340)=@string={0x97, 0x3, "91c1913248e4b87309fe5ea5486130dcec5470878e464db9bd219a4daedb90aa4a53f6c1082531d40655ef6f6b35c44ea5c42851fd7fa106dd36c8889061cf33ac9fec58894a69f32c9942314edee893eaa6fd47c7d5d0a06eae2ab3459a3edb2a9fb762db42354d742967dec51e4de0d8cf3939269d70193872f76eaa569151334568208c22b7b7eb23f9670a13b4db57482fcf8f"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x300a}}, {0x45, &(0x7f0000000440)=@string={0x45, 0x3, "8017f681e12234ac3dcbb4784c30a84b905a6d91bdbd26f0a427a885d961b453df5a550fc1e38a1e2cdb4301679b5dcc96d888c6afba8b220d511387064154893471f1"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40f}}]}) 124.707067ms ago: executing program 3 (id=4122): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000004c0)='#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-\xc5\x0f3\x9e\xf9\xabP\x80\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex\xcaC.\xda\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\a\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\x1d,K\xa8^\x91\x92@\xff#(\xb9\xf0={\xfaT}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x19\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xd0\xcfoi\xb3\xa7\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\x00\x00\x89\x03\xfe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfas\x1b\x9d\xbb>\xedT\x9eI\xd6\xb0\xf1f\xc1 6\x824\x00\xe1\xb8\xf4L\x97veqaX\xde\n\xcc\xf9Q\xd7ydM\xf5\xe1\x06Q\x01/\xaa\x05\x13\xf0\xf7\x88>\x16\x98\xf4w\xe9\x1d5\x8b\xa0u\xf8\xe2\x9bv\xfb\xae\x8b\x02s\xf8\xa6A\n\xe3\xc6\x1c<\xdaf\xea\xe2.P#\x00T\f\xa8\x052\xd1\nYP\xf7!j&\xb0,a\x1d\xb5\xcd\xda+\x96\xdeML\'\'\xfd\xb1\xfea\x02R7Z\xed\x04\b\xda\xf0\xa8^\xfdp\x8c\xa5mX\xdd\x98\x1b\xa84\x89g\xd8\x88\x98w\xf7\x00\x95\xcf\t\r\xaa9\xe5Za\xa3\x8a6@\xf2\xeaeR\xa6\xf7X\xc1\'\xf4\xde4\x90S\x9eZ1\xf4ui\xad\xad\x92\x9f\xcc\x8fbG\xb5\x91~\xf5\xea`\xfd\xc8\xdf\xf0\xed\xf7') 69.684618ms ago: executing program 3 (id=4123): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x68f, 0x58) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 67.506649ms ago: executing program 2 (id=4124): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x80088d0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) inotify_init1(0x100400) sync_file_range(r1, 0x7, 0x3ff, 0x0) 64.317349ms ago: executing program 3 (id=4125): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f00000038c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004044}, 0x80) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x1}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x48d0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) 60.050618ms ago: executing program 2 (id=4126): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 42.847529ms ago: executing program 2 (id=4127): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x5, 0xffff, 0x5b, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x20, 0x0, 0x0, 0x1}}) (async) r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x12001, 0xa6, 0x10}, 0x18) (async, rerun: 32) socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x78, 0x0, &(0x7f0000000240)=[@acquire, @dead_binder_done, @request_death, @decrefs={0x40046307, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x2, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/125, 0x7d, 0x1, 0x10}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}], 0xa7, 0x0, &(0x7f00000002c0)="87afd5ce247d022deb30b6d5bffc1ba1cc5ddf8e503ea8bfbf348ab9d5e871e25d5d26668a344a41e47a06cc988ad7ea14f019bbd3f097a3c8ea3bae4f2364a7857aed70467a4234ccf69f3d506c6de939b68ecbb1c799bee6e865b30faf6cb98c9b5d016f00dd98ab3c456d98b5c0a089c6e771417fd4caf589f8fc021a0e6f25f6a845e5ddb6a558caa9a59ca12d04c813add3de77348059648291a0ab43f9b105cd5ddc3707"}) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x5, 0x0, &(0x7f0000000500)="7da3644468"}) 0s ago: executing program 2 (id=4128): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) fstat(r2, &(0x7f0000000000)) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x100000004, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x22, 0x0) setsockopt$sock_int(r6, 0x1, 0x2b, &(0x7f0000000040)=0x400000d2, 0x4) kernel console output (not intermixed with test programs): .186716][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.206980][ T809] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 183.221833][ T307] usb 1-1: config 0 descriptor?? [ 183.357653][ T36] audit: type=1400 audit(2000000052.650:785): avc: denied { map } for pid=816 comm="syz.3.3002" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 183.385716][ T36] audit: type=1400 audit(2000000052.650:786): avc: denied { execute } for pid=816 comm="syz.3.3002" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 183.426771][ T820] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 183.428739][ T307] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 183.451129][ T307] usb 1-1: USB disconnect, device number 25 [ 183.458863][ T307] usblp0: removed [ 183.571886][ T36] audit: type=1400 audit(2000000052.860:787): avc: denied { append } for pid=825 comm="syz.3.3006" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.805883][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 183.865833][ T305] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 183.956889][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.966854][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 183.976564][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.990779][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 183.999919][ T305] usb 1-1: device descriptor read/64, error -71 [ 184.006211][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 184.014323][ T10] usb 4-1: Product: syz [ 184.018541][ T10] usb 4-1: Manufacturer: syz [ 184.023142][ T10] usb 4-1: SerialNumber: syz [ 184.230781][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 184.255863][ T305] usb 1-1: device descriptor read/64, error -71 [ 184.346187][ T838] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3012'. [ 184.432791][ T36] audit: type=1400 audit(2000000053.720:788): avc: denied { accept } for pid=825 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 184.452700][ T36] audit: type=1400 audit(2000000053.720:789): avc: denied { read write } for pid=825 comm="syz.3.3006" name="lp0" dev="devtmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 184.495835][ T305] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 184.625837][ T305] usb 1-1: device descriptor read/64, error -71 [ 184.865835][ T305] usb 1-1: device descriptor read/64, error -71 [ 184.936497][ T307] usb 4-1: USB disconnect, device number 18 [ 184.943505][ T859] overlayfs: failed to clone upperpath [ 184.948712][ T307] usblp0: removed [ 184.975979][ T305] usb usb1-port1: attempt power cycle [ 185.285323][ T908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3035'. [ 185.294961][ T908] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 185.294988][ T908] rust_binder: Error in use_page_slow: EBUSY [ 185.305386][ T908] rust_binder: use_range failure EBUSY [ 185.311407][ T908] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 185.316923][ T908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 185.324580][ T908] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 185.325853][ T305] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 185.333996][ T908] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:473 [ 185.356844][ T305] usb 1-1: device descriptor read/8, error -71 [ 185.496888][ T305] usb 1-1: device descriptor read/8, error -71 [ 185.722307][ T922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=922 comm=syz.4.3040 [ 185.736359][ T305] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 185.853817][ T945] fuse: Unknown parameter 'f “0xffffffffffffffff' [ 185.884742][ T948] binder: Unknown parameter 'context' [ 185.936476][ T952] tipc: Enabling of bearer rejected, failed to enable media [ 186.155819][ T305] usb 1-1: device not accepting address 29, error -71 [ 186.162787][ T305] usb usb1-port1: unable to enumerate USB device [ 186.205875][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 186.319112][ T993] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3069'. [ 186.328410][ T993] tipc: Invalid UDP bearer configuration [ 186.328436][ T993] tipc: Enabling of bearer rejected, failed to enable media [ 186.360581][ T998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'. [ 186.369572][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 186.376862][ T31] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 186.393186][ T31] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.418482][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 186.426901][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 186.436050][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.451023][ T31] usb 4-1: Product: à § [ 186.455683][ T31] usb 4-1: Manufacturer: èµ±ê檉í²æƒ„́‰‰ë¬ŒâŸê¡»é³¾é«­æœ“观訆饥Ơ±æ‘ªă„„ä­¹ă•œæ´ï¥á€¯è¤ç½´â·‡â ‹æ¢”à´ î¾ä•è€é¨µî‘Ÿï¤Œà«¹ä¶ê¶¸î¿œå”↽ꦧ齿ứæ™à²ê禀åŒå‰¿å·ˆâŸ™ä±´à®€àª‹á‰ƒă”“맖è‘ç€ê¯ƒîŒŸéŸ·á—†ê¯…醾ë‹é»¬è®­ç—¬ë‚‰ă”¶å­²à¨â²³â½˜âƒµí›¶á†¦é¯¾ë³¿è‰¾è¥…é– [ 186.482948][ T31] usb 4-1: SerialNumber: Ч [ 186.489116][ T954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.500955][ T954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.514745][ T1010] netlink: 'syz.2.3076': attribute type 4 has an invalid length. [ 186.532082][ T1010] netlink: 'syz.2.3076': attribute type 4 has an invalid length. [ 186.541405][ T1010] netlink: 'syz.2.3076': attribute type 4 has an invalid length. [ 186.611726][ T1027] overlayfs: failed to resolve './file1': -2 [ 186.746002][ T1040] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3087'. [ 186.916316][ T31] usb 4-1: USB disconnect, device number 19 [ 187.261262][ T1046] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 187.284659][ T1048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 187.344415][ T1052] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3092'. [ 187.828757][ T1086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.841567][ T1086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.066072][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 188.195841][ T45] usb 4-1: device descriptor read/64, error -71 [ 188.435825][ T45] usb 4-1: device descriptor read/64, error -71 [ 188.452354][ T1130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=1130 comm=syz.0.3122 [ 188.499915][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 188.499936][ T36] audit: type=1326 audit(2000000057.790:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 188.510633][ T1134] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ<' [ 188.552049][ T36] audit: type=1326 audit(2000000057.790:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 188.578784][ T36] audit: type=1326 audit(2000000057.800:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 188.604385][ T36] audit: type=1326 audit(2000000057.800:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 188.629094][ T36] audit: type=1326 audit(2000000057.800:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 188.652782][ T36] audit: type=1326 audit(2000000057.800:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 188.676758][ T36] audit: type=1326 audit(2000000057.800:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 188.700434][ T36] audit: type=1326 audit(2000000057.800:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 188.714154][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 188.733478][ T1147] batadv_slave_1: entered promiscuous mode [ 188.740048][ T1147] batadv_slave_1: left promiscuous mode [ 188.746318][ T36] audit: type=1326 audit(2000000057.800:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 188.770733][ T36] audit: type=1326 audit(2000000057.800:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 188.771193][ T1147] @: renamed from vlan0 (while UP) [ 188.927762][ T45] usb 4-1: device descriptor read/64, error -71 [ 188.941317][ T1154] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 188.949847][ T1154] rust_binder: Write failure EINVAL in pid:233 [ 189.136498][ T1175] binder: Unknown parameter 'staÖ5Ö‡Ù¨ts' [ 189.142073][ T1176] binder: Unknown parameter 'staÖ5Ö‡Ù¨ts' [ 189.175870][ T45] usb 4-1: device descriptor read/64, error -71 [ 189.183874][ T1180] netlink: 'syz.2.3141': attribute type 8 has an invalid length. [ 189.199605][ T1182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3142'. [ 189.285977][ T45] usb usb4-port1: attempt power cycle [ 189.605867][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 189.625887][ T45] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 189.647048][ T45] usb 4-1: device descriptor read/8, error -71 [ 189.755836][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 189.762033][ T10] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 189.770709][ T10] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 189.779346][ T10] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 189.788678][ T10] usb 1-1: config 250 has no interface number 0 [ 189.795037][ T10] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 189.807002][ T10] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 189.817640][ T45] usb 4-1: device descriptor read/8, error -71 [ 189.817860][ T10] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.834348][ T10] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 189.844870][ T10] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 189.858617][ T10] usb 1-1: config 250 interface 228 has no altsetting 0 [ 189.866888][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 189.876097][ T10] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 189.884840][ T10] usb 1-1: Product: syz [ 189.895724][ T10] usb 1-1: SerialNumber: syz [ 189.915559][ T10] hub 1-1:250.228: bad descriptor, ignoring hub [ 189.932069][ T10] hub 1-1:250.228: probe with driver hub failed with error -5 [ 189.972050][ T1209] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 189.980987][ T1209] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 189.992969][ T1209] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.055820][ T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 190.086798][ T45] usb 4-1: device descriptor read/8, error -71 [ 190.116342][ T10] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 30 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 190.226825][ T45] usb 4-1: device descriptor read/8, error -71 [ 190.336391][ T45] usb usb4-port1: unable to enumerate USB device [ 190.768944][ T1218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3156'. [ 191.006591][ T1198] usb 1-1: reset high-speed USB device number 30 using dummy_hcd [ 191.015462][ T1198] usb 1-1: device reset changed ep0 maxpacket size! [ 191.022501][ T10] usb 1-1: USB disconnect, device number 30 [ 191.029254][ T10] usblp0: removed [ 191.165903][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 191.235838][ T308] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 191.315829][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 191.322201][ T10] usb 1-1: config 0 has no interfaces? [ 191.329342][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 191.338447][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.346486][ T10] usb 1-1: Product: syz [ 191.350697][ T10] usb 1-1: Manufacturer: syz [ 191.355415][ T10] usb 1-1: SerialNumber: syz [ 191.360781][ T10] usb 1-1: config 0 descriptor?? [ 191.385837][ T308] usb 4-1: Invalid ep0 maxpacket: 32 [ 191.515875][ T308] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 191.568098][ T1198] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 80) [ 191.568121][ T1198] rust_binder: Error while translating object. [ 191.578644][ T1198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.584840][ T1198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 191.594880][ T31] usb 1-1: USB disconnect, device number 31 [ 191.665825][ T308] usb 4-1: Invalid ep0 maxpacket: 32 [ 191.671287][ T308] usb usb4-port1: attempt power cycle [ 192.015865][ T308] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 192.036158][ T308] usb 4-1: Invalid ep0 maxpacket: 32 [ 192.159977][ T1278] overlayfs: failed to clone upperpath [ 192.165944][ T308] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 192.186184][ T308] usb 4-1: Invalid ep0 maxpacket: 32 [ 192.191991][ T308] usb usb4-port1: unable to enumerate USB device [ 192.799080][ T1288] SELinux: Context /dev/kvm is not valid (left unmapped). [ 193.295829][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 193.404520][ T1326] overlayfs: failed to clone upperpath [ 193.445850][ T31] usb 1-1: device descriptor read/64, error -71 [ 193.684361][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.685857][ T31] usb 1-1: device descriptor read/64, error -71 [ 193.691600][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.704948][ T1341] bridge_slave_0: entered allmulticast mode [ 193.711338][ T1341] bridge_slave_0: entered promiscuous mode [ 193.717839][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.724875][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.732001][ T1341] bridge_slave_1: entered allmulticast mode [ 193.738494][ T1341] bridge_slave_1: entered promiscuous mode [ 193.779462][ T12] bridge_slave_1: left allmulticast mode [ 193.785205][ T12] bridge_slave_1: left promiscuous mode [ 193.790873][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.798389][ T12] bridge_slave_0: left allmulticast mode [ 193.804033][ T12] bridge_slave_0: left promiscuous mode [ 193.809827][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.886236][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.893355][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.900696][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.907773][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.917589][ T12] tipc: Left network mode [ 193.922911][ T12] veth1_macvtap: left promiscuous mode [ 193.928537][ T12] veth0_vlan: left promiscuous mode [ 193.935998][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 194.004964][ T1346] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3201'. [ 194.036363][ T1341] veth0_vlan: entered promiscuous mode [ 194.048136][ T1341] veth1_macvtap: entered promiscuous mode [ 194.066614][ T31] usb 1-1: device descriptor read/64, error -71 [ 194.083995][ T1348] binder: Bad value for 'stats' [ 194.274368][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 194.274389][ T36] audit: type=1400 audit(2000000063.560:874): avc: denied { execute } for pid=1367 comm="syz.3.3207" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.322852][ T31] usb 1-1: device descriptor read/64, error -71 [ 194.367618][ T1376] overlayfs: missing 'lowerdir' [ 194.441079][ T1390] overlayfs: conflicting lowerdir path [ 194.450543][ T31] usb usb1-port1: attempt power cycle [ 194.461530][ T1390] overlayfs: conflicting lowerdir path [ 194.471889][ T1390] overlayfs: conflicting lowerdir path [ 194.487695][ T1390] overlayfs: conflicting lowerdir path [ 194.500844][ T1390] overlayfs: conflicting lowerdir path [ 194.524287][ T1390] overlayfs: conflicting lowerdir path [ 194.536880][ T1390] overlayfs: conflicting lowerdir path [ 194.543513][ T1390] overlayfs: conflicting lowerdir path [ 194.550534][ T1390] overlayfs: conflicting lowerdir path [ 194.557505][ T1390] overlayfs: conflicting lowerdir path [ 194.564179][ T1390] overlayfs: conflicting lowerdir path [ 194.572151][ T1390] overlayfs: conflicting lowerdir path [ 194.578914][ T1390] overlayfs: conflicting lowerdir path [ 194.585554][ T1390] overlayfs: conflicting lowerdir path [ 194.592973][ T1390] overlayfs: conflicting lowerdir path [ 194.599947][ T1390] overlayfs: conflicting lowerdir path [ 194.606988][ T1390] overlayfs: conflicting lowerdir path [ 194.613769][ T1390] overlayfs: conflicting lowerdir path [ 194.620791][ T1390] overlayfs: conflicting lowerdir path [ 194.627597][ T1390] overlayfs: conflicting lowerdir path [ 194.634361][ T1390] overlayfs: conflicting lowerdir path [ 194.641330][ T1390] overlayfs: conflicting lowerdir path [ 194.648168][ T1390] overlayfs: conflicting lowerdir path [ 194.654883][ T1390] overlayfs: conflicting lowerdir path [ 194.661698][ T1390] overlayfs: conflicting lowerdir path [ 194.669016][ T1390] overlayfs: conflicting lowerdir path [ 194.675725][ T1390] overlayfs: conflicting lowerdir path [ 194.682489][ T1390] overlayfs: conflicting lowerdir path [ 194.689540][ T1390] overlayfs: conflicting lowerdir path [ 194.696634][ T1390] overlayfs: conflicting lowerdir path [ 194.703418][ T1390] overlayfs: conflicting lowerdir path [ 194.710261][ T1390] overlayfs: conflicting lowerdir path [ 194.717177][ T1390] overlayfs: conflicting lowerdir path [ 194.795833][ T31] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 194.826905][ T31] usb 1-1: device descriptor read/8, error -71 [ 194.956845][ T31] usb 1-1: device descriptor read/8, error -71 [ 195.000498][ T36] audit: type=1400 audit(2000000064.290:875): avc: denied { setopt } for pid=1418 comm="syz.2.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 195.028492][ T1419] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.028897][ T1419] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 195.035347][ T1419] rust_binder: Error while translating object. [ 195.045976][ T1419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.052158][ T1419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 195.074564][ T1421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 195.083620][ T1421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:10 [ 195.195934][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 195.226930][ T31] usb 1-1: device descriptor read/8, error -71 [ 195.357118][ T31] usb 1-1: device descriptor read/8, error -71 [ 195.466003][ T31] usb usb1-port1: unable to enumerate USB device [ 203.566063][ T1427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3229'. [ 203.576552][ T1430] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 203.576580][ T1430] rust_binder: Error while translating object. [ 203.585277][ T36] audit: type=1400 audit(2000000072.870:876): avc: denied { relabelfrom } for pid=1429 comm="syz.3.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 203.585318][ T36] audit: type=1400 audit(2000000072.870:877): avc: denied { relabelto } for pid=1429 comm="syz.3.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 203.607289][ T1430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.632976][ T1430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 203.789082][ T36] audit: type=1400 audit(2000000073.080:878): avc: denied { create } for pid=1458 comm="syz.4.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 203.907035][ T349] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 204.075806][ T349] usb 4-1: Using ep0 maxpacket: 8 [ 204.086014][ T349] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 204.091204][ T36] audit: type=1400 audit(2000000073.380:879): avc: denied { create } for pid=1494 comm="syz.0.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.094224][ T349] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.131444][ T349] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.142143][ T349] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.157574][ T349] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.173753][ T349] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.182849][ T349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.642120][ T305] usb 4-1: USB disconnect, device number 28 [ 207.025847][ T31] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 207.178174][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.188054][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.201157][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.210273][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.435829][ T305] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 207.585867][ T305] usb 4-1: Using ep0 maxpacket: 8 [ 207.592279][ T305] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 207.600623][ T305] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.610588][ T305] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.620545][ T305] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.630693][ T305] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.644073][ T305] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.657719][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.760745][ T36] audit: type=1326 audit(2000000077.050:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1633 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 207.784796][ T36] audit: type=1326 audit(2000000077.050:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1633 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 207.808429][ T36] audit: type=1326 audit(2000000077.050:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1633 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 207.831650][ T36] audit: type=1326 audit(2000000077.050:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1633 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 207.855221][ T36] audit: type=1326 audit(2000000077.050:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1633 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 207.881081][ T36] audit: type=1400 audit(2000000077.110:885): avc: denied { write } for pid=1638 comm="syz.0.3320" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 208.145824][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 208.296989][ T31] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.305896][ T31] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 208.316171][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.325336][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 208.336466][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 208.348707][ T31] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.357859][ T31] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.365912][ T31] usb 1-1: Product: syz [ 208.370083][ T31] usb 1-1: Manufacturer: syz [ 208.376255][ T31] cdc_wdm 1-1:1.0: skipping garbage [ 208.381486][ T31] cdc_wdm 1-1:1.0: skipping garbage [ 208.387324][ T31] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 208.393249][ T31] cdc_wdm 1-1:1.0: Unknown control protocol [ 208.577782][ T305] usb 1-1: USB disconnect, device number 36 [ 209.801797][ T308] usb 3-1: USB disconnect, device number 29 [ 209.840669][ T1655] random: crng reseeded on system resumption [ 210.017321][ T1686] tipc: Enabling of bearer rejected, media not registered [ 210.122694][ T36] audit: type=1400 audit(2000000079.410:886): avc: denied { create } for pid=1700 comm="syz.4.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.186270][ T1716] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3355'. [ 210.206212][ T308] usb 4-1: USB disconnect, device number 29 [ 211.503145][ T1813] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 212.065824][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 212.226947][ T31] usb 3-1: config 0 has no interfaces? [ 212.234075][ T31] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 212.243229][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.251272][ T31] usb 3-1: Product: syz [ 212.255468][ T31] usb 3-1: Manufacturer: syz [ 212.260115][ T31] usb 3-1: SerialNumber: syz [ 212.265396][ T31] usb 3-1: config 0 descriptor?? [ 212.425824][ T308] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 212.577012][ T308] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 212.585247][ T308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.595444][ T308] usb 1-1: config 0 has no interface number 0 [ 212.601582][ T308] usb 1-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 212.612602][ T308] usb 1-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 212.627115][ T308] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 212.636217][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.644206][ T308] usb 1-1: Product: syz [ 212.648484][ T308] usb 1-1: Manufacturer: syz [ 212.653093][ T308] usb 1-1: SerialNumber: syz [ 212.658511][ T308] usb 1-1: config 0 descriptor?? [ 212.664276][ T308] usb 1-1: bad CDC descriptors [ 212.669312][ T308] usb 1-1: unsupported MDLM descriptors [ 212.908115][ T31] usb 1-1: USB disconnect, device number 37 [ 214.568134][ T1886] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3427'. [ 214.579402][ T1886] tipc: Invalid UDP bearer configuration [ 214.579432][ T1886] tipc: Enabling of bearer rejected, failed to enable media [ 214.621899][ T1890] fuse: Invalid rootmode [ 214.771051][ T31] usb 3-1: USB disconnect, device number 30 [ 214.797721][ T36] audit: type=1400 audit(2000000084.090:887): avc: denied { create } for pid=1900 comm="syz.2.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 214.829783][ T1894] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 214.928576][ T36] audit: type=1326 audit(2000000084.220:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 214.971617][ T36] audit: type=1326 audit(2000000084.220:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 214.998373][ T36] audit: type=1326 audit(2000000084.220:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 215.022032][ T36] audit: type=1326 audit(2000000084.220:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 215.047358][ T36] audit: type=1326 audit(2000000084.220:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 215.070768][ T36] audit: type=1326 audit(2000000084.220:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 215.094196][ T36] audit: type=1326 audit(2000000084.220:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 215.120159][ T36] audit: type=1326 audit(2000000084.220:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 215.144644][ T36] audit: type=1326 audit(2000000084.220:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 215.169082][ T36] audit: type=1326 audit(2000000084.220:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 215.193959][ T36] audit: type=1326 audit(2000000084.250:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 215.218686][ T36] audit: type=1326 audit(2000000084.250:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 215.243353][ T36] audit: type=1326 audit(2000000084.250:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 215.305810][ T36] audit: type=1326 audit(2000000084.250:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 215.331260][ T36] audit: type=1326 audit(2000000084.250:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 215.371048][ T36] audit: type=1326 audit(2000000084.250:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 215.394700][ T36] audit: type=1326 audit(2000000084.250:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc996d2ab19 code=0x7ffc0000 [ 215.418121][ T36] audit: type=1326 audit(2000000084.250:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 215.849750][ T1949] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 215.855781][ T1974] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3466'. [ 217.438313][ T2080] kvm: pic: non byte write [ 218.065831][ T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 218.217046][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.228012][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.237784][ T31] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 218.246950][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.257338][ T31] usb 3-1: config 0 descriptor?? [ 218.664712][ T31] hid-generic 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 218.672227][ T31] hid-generic 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 218.680463][ T31] hid-generic 0003:0D8C:0022.0008: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 218.865258][ T31] usb 3-1: USB disconnect, device number 31 [ 220.419228][ T2196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3567'. [ 220.536996][ T2224] KVM: debugfs: duplicate directory 2224-4 [ 220.835837][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 220.955820][ T349] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 220.985936][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 220.992313][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.002475][ T31] usb 3-1: config 0 has no interfaces? [ 221.009552][ T31] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 221.018682][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.027032][ T31] usb 3-1: Product: syz [ 221.031565][ T31] usb 3-1: Manufacturer: syz [ 221.036444][ T31] usb 3-1: SerialNumber: syz [ 221.044168][ T31] usb 3-1: config 0 descriptor?? [ 221.080788][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 221.080808][ T36] audit: type=1400 audit(2000000090.370:981): avc: denied { bind } for pid=2255 comm="syz.4.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 221.136927][ T349] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.148543][ T349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 221.159941][ T349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 221.171276][ T349] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.184261][ T349] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.193363][ T349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.202760][ T349] usb 4-1: config 0 descriptor?? [ 221.208546][ T2246] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 221.623386][ T349] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.630914][ T349] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.638491][ T349] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.645936][ T349] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.653325][ T349] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.661036][ T349] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 221.674566][ T349] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 222.305806][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 222.456823][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 222.468083][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 222.477183][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.485918][ T10] usb 1-1: config 0 descriptor?? [ 222.611963][ T36] audit: type=1326 audit(2000000091.900:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2288 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb603b8e929 code=0x7ffc0000 [ 222.635431][ T36] audit: type=1326 audit(2000000091.900:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2288 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb603b8e929 code=0x7ffc0000 [ 222.659183][ T36] audit: type=1326 audit(2000000091.900:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2288 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb603b8e929 code=0x7ffc0000 [ 222.682769][ T36] audit: type=1326 audit(2000000091.900:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2288 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb603b8e929 code=0x7ffc0000 [ 222.707674][ T36] audit: type=1326 audit(2000000091.900:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2288 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fb603b8e929 code=0x7ffc0000 [ 222.731006][ T36] audit: type=1326 audit(2000000091.900:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2288 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb603b8e929 code=0x7ffc0000 [ 222.909705][ T10] hid-generic 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 222.918063][ T10] hid-generic 0003:0D8C:0022.000A: hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 223.110168][ T349] usb 1-1: USB disconnect, device number 38 [ 223.613712][ T349] usb 3-1: USB disconnect, device number 32 [ 223.643647][ T36] audit: type=1326 audit(2000000092.930:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2308 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 223.670351][ T36] audit: type=1326 audit(2000000092.960:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2308 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 223.693995][ T36] audit: type=1326 audit(2000000092.960:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2308 comm="syz.0.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 223.726856][ T10] usb 4-1: USB disconnect, device number 30 [ 223.892408][ T2307] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.907097][ T2307] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.926213][ T2307] bridge_slave_0: entered allmulticast mode [ 223.932632][ T2307] bridge_slave_0: entered promiscuous mode [ 223.939594][ T2307] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.946910][ T2307] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.954017][ T2307] bridge_slave_1: entered allmulticast mode [ 223.960697][ T2307] bridge_slave_1: entered promiscuous mode [ 224.035826][ T308] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 224.036520][ T2307] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.050625][ T2307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.057952][ T2307] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.065039][ T2307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.093824][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.101589][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.112866][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.119963][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.132442][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.139541][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.172692][ T2307] veth0_vlan: entered promiscuous mode [ 224.187725][ T2307] veth1_macvtap: entered promiscuous mode [ 224.206350][ T308] usb 1-1: Using ep0 maxpacket: 32 [ 224.213434][ T308] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.222504][ T308] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 224.235803][ T308] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 224.255188][ T308] usb 1-1: config 7 has no interface number 0 [ 224.261471][ T308] usb 1-1: config 7 interface 187 has no altsetting 0 [ 224.270191][ T308] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 224.279627][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.298572][ T308] usb 1-1: Product: syz [ 224.305832][ T308] usb 1-1: Manufacturer: syz [ 224.311035][ T308] usb 1-1: SerialNumber: syz [ 225.569964][ T2358] 8021q: VLANs not supported on lo [ 226.746067][ T308] usb 1-1: USB disconnect, device number 39 [ 227.050294][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 227.050315][ T36] audit: type=1326 audit(2000000096.340:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.0.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 227.083339][ T36] audit: type=1326 audit(2000000096.340:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.0.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 227.147481][ T36] audit: type=1326 audit(2000000096.340:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.0.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 227.200446][ T36] audit: type=1326 audit(2000000096.340:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.0.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 227.270363][ T36] audit: type=1326 audit(2000000096.340:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.0.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 227.486328][ T308] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 227.545838][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 227.636998][ T308] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.648650][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 227.659940][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 227.671104][ T308] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.684160][ T308] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.693298][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.702208][ T308] usb 1-1: config 0 descriptor?? [ 227.707204][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 227.712607][ T2411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.720529][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.733886][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 227.742975][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.751816][ T10] usb 5-1: config 0 descriptor?? [ 227.757832][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 227.763779][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 227.771242][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 228.065888][ T10] usb 5-1: USB disconnect, device number 2 [ 228.123072][ T308] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 228.131064][ T308] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 228.138650][ T308] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 228.146134][ T308] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 228.153535][ T308] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 228.161259][ T308] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 228.170275][ T308] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 228.720968][ T2451] loop6: detected capacity change from 0 to 7 [ 228.745959][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 228.773328][ T36] audit: type=1400 audit(2000000098.060:1024): avc: denied { append } for pid=2472 comm="syz.2.3684" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 228.916908][ T45] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.925942][ T45] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 228.936410][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.945396][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 228.956775][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 228.968940][ T45] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.978071][ T45] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.986122][ T45] usb 5-1: Product: syz [ 228.990363][ T45] usb 5-1: Manufacturer: syz [ 229.000989][ T45] cdc_wdm 5-1:1.0: skipping garbage [ 229.006296][ T45] cdc_wdm 5-1:1.0: skipping garbage [ 229.012363][ T45] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 229.018333][ T45] cdc_wdm 5-1:1.0: Unknown control protocol [ 229.025822][ T308] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 229.176886][ T308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.187514][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 229.198776][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.214318][ T10] usb 5-1: USB disconnect, device number 3 [ 229.220240][ T308] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 229.240366][ T308] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.249894][ T308] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.258014][ T308] usb 3-1: Manufacturer: syz [ 229.265894][ T308] usb 3-1: config 0 descriptor?? [ 229.811936][ T2488] tipc: Enabling of bearer rejected, media not registered [ 230.151136][ T36] audit: type=1326 audit(2000000099.440:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2516 comm="syz.4.3702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9244b8e929 code=0x0 [ 230.165360][ T2519] fuse: root generation should be zero [ 230.196694][ T36] audit: type=1400 audit(2000000099.480:1026): avc: denied { append } for pid=2520 comm="syz.3.3704" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 230.223156][ T308] usb 1-1: USB disconnect, device number 40 [ 230.452237][ T36] audit: type=1326 audit(2000000099.740:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2550 comm="syz.0.3716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x0 [ 230.532592][ T36] audit: type=1400 audit(2000000099.820:1028): avc: denied { read } for pid=2550 comm="syz.0.3716" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 231.803613][ T10] usb 3-1: USB disconnect, device number 33 [ 231.975831][ T307] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 232.075823][ T45] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 232.115833][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 232.127024][ T307] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.138625][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.149660][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 232.159541][ T307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.172479][ T307] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.181569][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.190229][ T307] usb 4-1: config 0 descriptor?? [ 232.236870][ T45] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 232.245031][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.255796][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.268727][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.277804][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.285798][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 232.287825][ T10] usb 3-1: config 1 interface 0 altsetting 204 bulk endpoint 0x1 has invalid maxpacket 16 [ 232.292170][ T45] usb 1-1: config 0 descriptor?? [ 232.305953][ T10] usb 3-1: config 1 interface 0 altsetting 204 bulk endpoint 0x82 has invalid maxpacket 1023 [ 232.307420][ T45] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 232.316641][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 232.332007][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 232.341299][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.349394][ T10] usb 3-1: Product: syz [ 232.353795][ T10] usb 3-1: Manufacturer: syz [ 232.358442][ T10] usb 3-1: SerialNumber: syz [ 232.364197][ T2595] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.371589][ T2595] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.595923][ T10] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 204 proto 3 vid 0x0525 pid 0xA4A8 [ 232.608986][ T307] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 232.614696][ T10] usb 3-1: USB disconnect, device number 34 [ 232.624242][ T307] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 232.632725][ T10] usblp0: removed [ 232.641159][ T307] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 232.753518][ T2618] fuse: Bad value for 'fd' [ 232.773592][ T2621] rust_binder: Write failure EFAULT in pid:72 [ 232.881469][ T2629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 233.020392][ T307] usb 1-1: USB disconnect, device number 41 [ 233.048822][ T2640] random: crng reseeded on system resumption [ 233.048822][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 233.048839][ T36] audit: type=1400 audit(2000000102.340:1030): avc: denied { ioctl } for pid=2639 comm="syz.0.3741" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 233.104639][ T2641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 233.118852][ T2646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 233.128049][ T2646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:568 [ 233.184069][ T12] tipc: Subscription rejected, illegal request [ 233.184597][ T2648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3743'. [ 233.309594][ T2652] rust_binder: Write failure EINVAL in pid:574 [ 233.310447][ T2653] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.356330][ T2659] input: syz1 as /devices/virtual/input/input15 [ 233.468262][ T2661] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 233.468291][ T2661] rust_binder: Error while translating object. [ 233.477187][ T2661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.483480][ T2661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:583 [ 233.518125][ T2667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:585 [ 233.652485][ T36] audit: type=1400 audit(2000000102.940:1031): avc: denied { write } for pid=2671 comm="syz.0.3753" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 233.683395][ T36] audit: type=1400 audit(2000000102.940:1032): avc: denied { add_name } for pid=2671 comm="syz.0.3753" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 233.704433][ T36] audit: type=1400 audit(2000000102.940:1033): avc: denied { create } for pid=2671 comm="syz.0.3753" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 233.755865][ T45] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 233.915919][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 233.922273][ T45] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 233.931175][ T45] usb 3-1: config 1 has no interface number 0 [ 233.938742][ T45] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 233.950000][ T45] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 233.960610][ T45] usb 3-1: config 1 interface 105 has no altsetting 0 [ 233.970884][ T2691] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 233.970909][ T2691] rust_binder: Read failure Err(EFAULT) in pid:96 [ 233.976692][ T45] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 233.981121][ T2693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:601 [ 233.986142][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.011816][ T45] usb 3-1: Product: syz [ 234.016054][ T45] usb 3-1: Manufacturer: syz [ 234.020692][ T45] usb 3-1: SerialNumber: syz [ 234.029424][ T2670] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 234.035394][ T2699] overlay: ./file0 is not a directory [ 234.037056][ T2670] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 234.306063][ T10] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 234.435854][ T305] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 234.451583][ T45] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 234.456956][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 234.466443][ T45] usb 3-1: USB disconnect, device number 35 [ 234.476549][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.485582][ T36] audit: type=1400 audit(2000000103.770:1034): avc: denied { read } for pid=2703 comm="syz.3.3763" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 234.487965][ T10] usb 1-1: config 0 descriptor?? [ 234.510346][ T36] audit: type=1400 audit(2000000103.770:1035): avc: denied { open } for pid=2703 comm="syz.3.3763" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 234.599199][ T305] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.612260][ T305] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 234.620172][ T305] usb 5-1: can't read configurations, error -71 [ 234.716188][ T31] usb 4-1: USB disconnect, device number 31 [ 234.722627][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 235.050264][ T2721] rust_binder: Write failure EFAULT in pid:274 [ 235.524252][ T36] audit: type=1400 audit(2000000104.810:1036): avc: denied { module_load } for pid=2700 comm="syz.0.3762" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 235.525646][ T2701] Invalid ELF header len 16 [ 235.564623][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 235.574768][ T10] asix 1-1:0.0: probe with driver asix failed with error -71 [ 235.584890][ T10] usb 1-1: USB disconnect, device number 42 [ 235.675818][ T305] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 235.847034][ T305] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.858686][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 235.869488][ T36] audit: type=1400 audit(2000000105.160:1037): avc: denied { append } for pid=2743 comm="syz.3.3776" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.869712][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 235.905130][ T305] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.918114][ T305] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.926072][ T36] audit: type=1400 audit(2000000105.220:1038): avc: denied { ioctl } for pid=2743 comm="syz.3.3776" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.927751][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.965054][ T305] usb 5-1: config 0 descriptor?? [ 235.976705][ T2727] incfs_lookup_dentry err:-107 [ 235.981499][ T2727] incfs: Can't find or create .index dir in ./file0 [ 235.988339][ T2727] incfs: mount failed -107 [ 236.052472][ T36] audit: type=1400 audit(2000000105.340:1039): avc: denied { write } for pid=2748 comm="syz.2.3778" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 236.142349][ T2751] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 236.142377][ T2751] rust_binder: Error while translating object. [ 236.153029][ T2751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.159343][ T2751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:611 [ 236.285875][ T308] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 236.373863][ T305] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 236.383785][ T305] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 236.393045][ T305] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 236.425818][ T308] usb 3-1: device descriptor read/64, error -71 [ 236.665824][ T308] usb 3-1: device descriptor read/64, error -71 [ 236.906036][ T308] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 237.035834][ T308] usb 3-1: device descriptor read/64, error -71 [ 237.275818][ T308] usb 3-1: device descriptor read/64, error -71 [ 237.385933][ T308] usb usb3-port1: attempt power cycle [ 237.726553][ T308] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 237.749861][ T308] usb 3-1: device descriptor read/8, error -71 [ 237.886885][ T308] usb 3-1: device descriptor read/8, error -71 [ 237.915875][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 238.068543][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 238.077653][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.085658][ T10] usb 1-1: Product: syz [ 238.089874][ T10] usb 1-1: Manufacturer: syz [ 238.094482][ T10] usb 1-1: SerialNumber: syz [ 238.125823][ T308] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 238.147273][ T308] usb 3-1: device descriptor read/8, error -71 [ 238.214383][ T2768] rust_binder: Write failure EINVAL in pid:105 [ 238.276873][ T308] usb 3-1: device descriptor read/8, error -71 [ 238.395972][ T308] usb usb3-port1: unable to enumerate USB device [ 238.407276][ T2778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 238.476170][ T45] usb 5-1: USB disconnect, device number 5 [ 239.079350][ T2780] SELinux: security_context_str_to_sid (sytem_uƯGĐ¹ ‰:ÿß) failed with errno=-22 [ 239.103820][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 239.103840][ T36] audit: type=1400 audit(2000000108.390:1041): avc: granted { setsecparam } for pid=2781 comm="syz.2.3790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 239.233332][ T2810] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 239.960243][ T2840] @: renamed from vlan0 (while UP) [ 240.010585][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.011359][ T2842] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 240.025074][ T2842] rust_binder: Write failure EINVAL in pid:122 [ 240.025296][ T2842] rust_binder: Write failure EFAULT in pid:122 [ 240.111867][ T2845] binder: Unknown parameter '' [ 240.585810][ T308] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 240.693515][ T10] usb 1-1: USB disconnect, device number 43 [ 240.743520][ T308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.763990][ T308] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 240.778634][ T308] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.788055][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 240.805793][ T308] usb 3-1: SerialNumber: syz [ 240.814984][ T308] usb 3-1: bad CDC descriptors [ 240.951669][ T2871] rust_binder: Error while translating object. [ 240.951701][ T2871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 240.958188][ T2871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:629 [ 241.015376][ T2858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 241.024701][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 241.041182][ T2858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:314 [ 241.042497][ T308] usb 3-1: USB disconnect, device number 40 [ 241.618522][ T2894] SELinux: policydb version 1239461684 does not match my version range 15-33 [ 241.627643][ T2894] SELinux: failed to load policy [ 241.835809][ T308] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 241.996914][ T308] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 242.005193][ T308] usb 4-1: config 1 has no interface number 0 [ 242.011371][ T308] usb 4-1: config 1 interface 105 has no altsetting 0 [ 242.019800][ T308] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 242.028916][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.036966][ T308] usb 4-1: Product: syz [ 242.041135][ T308] usb 4-1: Manufacturer: syz [ 242.045726][ T308] usb 4-1: SerialNumber: syz [ 242.412909][ T2899] rust_binder: Failed copying remainder into alloc: EFAULT [ 242.412930][ T2899] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 242.420259][ T2899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 242.428583][ T2899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:319 [ 242.555991][ T2903] overlay: Unknown parameter 'subj_role' [ 242.571968][ T2903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.572003][ T2903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 242.811918][ T2908] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 242.821718][ T2908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.829868][ T2910] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 242.856549][ T308] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 242.871335][ T36] audit: type=1400 audit(2000000112.150:1042): avc: denied { getopt } for pid=2913 comm="syz.4.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.884812][ T308] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 242.906413][ T308] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 242.926715][ T308] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5a:d6:90:70:0f:fe [ 242.928663][ T36] audit: type=1400 audit(2000000112.220:1043): avc: denied { mounton } for pid=2915 comm="syz.4.3832" path="/60/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 242.962766][ T2916] incfs: Can't find or create .index dir in ./file0 [ 242.964041][ T308] usb 4-1: USB disconnect, device number 32 [ 242.970027][ T2916] incfs: mount failed -30 [ 242.991045][ T308] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 243.039206][ T308] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 243.048692][ T308] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 243.059565][ T308] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 243.085907][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 243.092098][T28127] Bluetooth: hci0: command 0x1003 tx timeout [ 243.177528][ T2940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170 [ 243.465847][ T308] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 243.532252][ T2974] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 243.546112][ T36] audit: type=1400 audit(2000000112.840:1044): avc: denied { associate } for pid=2971 comm="syz.2.3841" name="net_prio.prioidx" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 243.625815][ T308] usb 1-1: Using ep0 maxpacket: 8 [ 243.633643][ T308] usb 1-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 243.651021][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.663010][ T308] usb 1-1: Product: syz [ 243.667600][ T308] usb 1-1: Manufacturer: syz [ 243.673145][ T308] usb 1-1: SerialNumber: syz [ 243.680387][ T308] usb 1-1: config 0 descriptor?? [ 243.886575][ T45] usb 1-1: USB disconnect, device number 44 [ 243.947675][ T36] audit: type=1326 audit(2000000113.240:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2997 comm="syz.0.3849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x0 [ 243.970836][ T36] audit: type=1326 audit(2000000113.240:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2997 comm="syz.0.3849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x0 [ 244.147542][ T36] audit: type=1326 audit(2000000113.440:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 244.171101][ T36] audit: type=1326 audit(2000000113.440:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 244.194818][ T36] audit: type=1326 audit(2000000113.440:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 244.218532][ T36] audit: type=1326 audit(2000000113.440:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 244.242009][ T36] audit: type=1326 audit(2000000113.440:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 244.259399][ T3025] batadv_slave_1: entered promiscuous mode [ 244.265569][ T308] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 244.274037][ T3024] batadv_slave_1: left promiscuous mode [ 244.279052][ T36] audit: type=1326 audit(2000000113.440:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 244.308309][ T36] audit: type=1326 audit(2000000113.440:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 244.332085][ T36] audit: type=1326 audit(2000000113.440:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 244.355877][ T36] audit: type=1326 audit(2000000113.440:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 244.379357][ T36] audit: type=1326 audit(2000000113.440:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.0.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc996d8e929 code=0x7ffc0000 [ 244.475815][ T308] usb 5-1: Using ep0 maxpacket: 8 [ 244.482107][ T308] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 244.491236][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.500387][ T308] usb 5-1: config 0 descriptor?? [ 244.718398][ T308] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 244.728475][ T308] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 244.744741][ T308] asix 5-1:0.0: probe with driver asix failed with error -71 [ 244.755713][ T308] usb 5-1: USB disconnect, device number 6 [ 244.807899][ T3039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3861'. [ 245.035890][ T429] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 245.063943][ T3042] rust_binder: Read failure Err(EFAULT) in pid:184 [ 245.158567][ T3059] SELinux: security_context_str_to_sid (sytem_uƯGĐ¹) failed with errno=-22 [ 245.195798][ T429] usb 3-1: Using ep0 maxpacket: 16 [ 245.205813][ T429] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 245.214543][ T429] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.224741][ T429] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.235840][ T429] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.256914][ T429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.265933][ T429] usb 3-1: Product: syz [ 245.270416][ T429] usb 3-1: Manufacturer: syz [ 245.275206][ T429] usb 3-1: SerialNumber: syz [ 245.686174][ T429] usb 3-1: 0:2 : does not exist [ 245.759436][ T3074] netlink: 'syz.0.3875': attribute type 4 has an invalid length. [ 245.768158][ T3074] netlink: 'syz.0.3875': attribute type 5 has an invalid length. [ 245.776031][ T3074] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3875'. [ 246.555850][ T308] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 246.726902][ T308] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 246.745984][ T308] usb 5-1: config 0 has no interface number 0 [ 246.762090][ T308] usb 5-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=fa.63 [ 246.779972][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.799042][ T308] usb 5-1: Product: syz [ 246.825659][ T308] usb 5-1: Manufacturer: syz [ 246.835777][ T308] usb 5-1: SerialNumber: syz [ 246.848268][ T308] usb 5-1: config 0 descriptor?? [ 246.858673][ T308] hub 5-1:0.253: bad descriptor, ignoring hub [ 246.865013][ T308] hub 5-1:0.253: probe with driver hub failed with error -5 [ 246.873049][ T308] ums-datafab 5-1:0.253: USB Mass Storage device detected [ 246.956715][ T308] ums-sddr55 5-1:0.253: USB Mass Storage device detected [ 246.989292][ T3040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.004395][ T3040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.038813][ T429] usb 3-1: 1:0: cannot get min/max values for control 6 (id 1) [ 247.056555][ T429] usb 3-1: USB disconnect, device number 41 [ 247.535807][ T308] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 247.686998][ T308] usb 4-1: config 7 has an invalid interface number: 209 but max is 1 [ 247.695444][ T308] usb 4-1: config 7 has an invalid interface number: 61 but max is 1 [ 247.703910][ T308] usb 4-1: config 7 has no interface number 0 [ 247.710489][ T308] usb 4-1: config 7 has no interface number 1 [ 247.716881][ T308] usb 4-1: config 7 interface 61 altsetting 1 endpoint 0x9 has invalid maxpacket 1983, setting to 1024 [ 247.728365][ T308] usb 4-1: config 7 interface 61 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 247.738824][ T308] usb 4-1: config 7 interface 61 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 247.749870][ T308] usb 4-1: config 7 interface 209 has no altsetting 0 [ 247.757054][ T308] usb 4-1: config 7 interface 61 has no altsetting 0 [ 247.765595][ T308] usb 4-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=7f.6e [ 247.775161][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.789582][ T308] usb 4-1: Product: syz [ 247.797530][ T308] usb 4-1: Manufacturer: syz [ 247.807596][ T308] usb 4-1: SerialNumber: syz [ 248.024245][ T53] Bluetooth: hci0: sending frame failed (-49) [ 248.030673][T28127] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 248.039360][ T308] hub 4-1:7.209: Invalid hub with more than one config or interface [ 248.053153][ T308] hub 4-1:7.209: probe with driver hub failed with error -22 [ 248.062294][ T308] hub 4-1:7.61: Invalid hub with more than one config or interface [ 248.070595][ T308] hub 4-1:7.61: probe with driver hub failed with error -22 [ 248.081454][ T308] usb 4-1: USB disconnect, device number 33 [ 248.278064][ T3132] can: request_module (can-proto-0) failed. [ 248.292382][ T3132] rust_binder: Error while translating object. [ 248.292413][ T3132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 248.305591][ T3132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:356 [ 248.368984][ T429] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 248.396696][ T429] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.703905][ T3143] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 249.115807][ T429] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 249.267031][ T429] usb 4-1: Using ep0 maxpacket: 32 [ 249.275316][ T3157] rust_binder: Write failure EFAULT in pid:378 [ 249.280166][ T429] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.308973][ T3159] overlayfs: failed to resolve './file1/file0': -2 [ 249.315602][ T429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 249.327644][ T429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.340267][ T3160] overlayfs: failed to resolve './file1/file0': -2 [ 249.354493][ T429] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.373497][ T429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.393734][ T429] usb 4-1: config 0 descriptor?? [ 249.406782][ T3153] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.415633][ T429] hub 4-1:0.0: USB hub found [ 249.458580][ T3169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 249.458618][ T3169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:390 [ 249.624736][ T429] hub 4-1:0.0: 2 ports detected [ 249.976810][ T429] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 249.983229][ T429] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 250.011890][ T429] usbhid 4-1:0.0: can't add hid device: -71 [ 250.021430][ T429] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 250.056158][ T429] usb 4-1: USB disconnect, device number 34 [ 250.059106][ T3180] fuse: Unknown parameter 'r6§¸mode' [ 250.067689][ T307] usb 5-1: USB disconnect, device number 7 [ 250.137791][ T291] Bluetooth: hci0: Frame reassembly failed (-84) [ 250.445137][ T3201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 250.445168][ T3201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 250.505995][ T3208] overlay: ./file0 is not a directory [ 250.583541][ T3213] rust_binder: Write failure EINVAL in pid:223 [ 251.259721][ T3217] input: syz1 as /devices/virtual/input/input16 [ 251.274120][ T3217] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 251.274146][ T3217] rust_binder: Read failure Err(EFAULT) in pid:226 [ 251.282454][ T3217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:226 [ 251.303356][ T3219] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 251.350429][ T3223] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 251.515343][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 251.515362][ T36] audit: type=1400 audit(2000000120.800:1062): avc: denied { setattr } for pid=3252 comm="syz.4.3934" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 251.549956][ T3254] rust_binder: Error while translating object. [ 251.549980][ T3254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 251.556322][ T3254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:237 [ 251.629510][ T3258] rust_binder: Error in use_page_slow: ESRCH [ 251.629530][ T3258] rust_binder: use_range failure ESRCH [ 251.635539][ T3258] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 251.641111][ T3258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 251.649030][ T3258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:240 [ 251.715804][T32296] Bluetooth: hci1: Frame reassembly failed (-84) [ 251.765808][ T376] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 251.916877][ T376] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.927089][ T376] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.936731][ T376] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 251.945840][ T376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.953829][ T376] usb 4-1: SerialNumber: syz [ 252.205818][ T376] usb 4-1: 0:2 : does not exist [ 252.205820][T28127] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 252.206700][T28126] Bluetooth: hci0: command 0x1003 tx timeout [ 252.225885][ T376] usb 4-1: USB disconnect, device number 35 [ 252.258903][ T3270] rust_binder: Error while translating object. [ 252.258940][ T3270] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 252.265189][ T3270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:404 [ 252.353769][ T3282] rust_binder: Write failure EFAULT in pid:411 [ 252.396129][ T2604] udevd[2604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 252.480941][ T3304] netlink: 'syz.2.3950': attribute type 12 has an invalid length. [ 253.035869][ T376] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 253.187112][ T376] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 253.195592][ T376] usb 4-1: config 179 has no interface number 0 [ 253.201957][ T376] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 253.213185][ T376] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 253.223405][ T376] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 253.234838][ T376] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 253.246203][ T376] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 253.259656][ T376] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 253.269328][ T376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.280641][ T3310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 253.289004][ T376] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 253.304755][ T376] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 253.410650][ T3335] rust_binder: Error while translating object. [ 253.410682][ T3335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 253.416978][ T3335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:429 [ 253.452209][ T36] audit: type=1400 audit(2000000122.740:1063): avc: denied { setattr } for pid=3340 comm="syz.2.3964" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 253.490954][ T9] usb 4-1: USB disconnect, device number 36 [ 253.633163][ T3350] rust_binder: Error in use_page_slow: ESRCH [ 253.633183][ T3350] rust_binder: use_range failure ESRCH [ 253.639585][ T3350] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 253.644865][ T3350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 253.652866][ T3350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:442 [ 253.726070][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 253.727372][T28127] Bluetooth: hci1: command 0x1003 tx timeout [ 253.778972][ T3354] input: syz1 as /devices/virtual/input/input17 [ 254.041575][ T3365] fuse: Bad value for 'rootmode' [ 254.375820][ T308] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 254.538005][ T308] usb 4-1: Using ep0 maxpacket: 8 [ 254.546511][ T308] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.555201][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.565801][ T308] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 254.574707][ T308] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.587296][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x2 [ 254.595802][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x2 [ 254.596860][ T308] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.603711][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.613439][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.620935][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.628723][ T308] usb 4-1: Product: syz [ 254.636707][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.648213][ T308] usb 4-1: Manufacturer: syz [ 254.648235][ T308] usb 4-1: SerialNumber: syz [ 254.657538][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.660831][ T3391] UHID_CREATE from different security context by process 461 (syz.2.3981), this is not allowed. [ 254.665326][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.696516][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.704551][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.715096][ T3396] rust_binder: Error while translating object. [ 254.715134][ T3396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 254.717985][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.722090][ T3396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258 [ 254.731746][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.761379][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.769652][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.777614][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.785614][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.793622][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.801715][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.809710][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.816102][ T3410] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3988'. [ 254.817811][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.834305][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.842194][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.849987][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.851915][ T36] audit: type=1326 audit(2000000124.150:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3370 comm="syz.3.3975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40a118e929 code=0x0 [ 254.859537][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.888641][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.896475][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.904342][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.912194][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.920042][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.928031][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.936097][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.943859][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.951651][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.954412][ T308] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 254.959497][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.968254][ T308] cdc_ncm 4-1:1.0: bind() failure [ 254.974060][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 254.983697][ T308] usb 4-1: USB disconnect, device number 37 [ 254.987384][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.000759][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.009062][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.017275][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.025029][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.032857][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.035840][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 255.040712][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.055873][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.063610][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.071551][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.079512][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.087429][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.095183][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.102958][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.110743][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.118510][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.126287][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.134024][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.141912][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.149700][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.157478][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.165310][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.173129][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.181011][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.188874][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.196658][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.204396][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.212170][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.217024][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.219957][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.231218][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.238583][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.248714][ T9] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 255.256069][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.265481][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.272882][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.281928][ T9] usb 5-1: config 0 descriptor?? [ 255.289062][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.301617][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.309437][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.317277][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.325044][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.332898][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.340926][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.348738][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.356544][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.364304][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.372120][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.379907][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.387707][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.395469][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.403298][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.411226][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.419036][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.426974][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.434741][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.442546][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.450347][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.458165][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.465962][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.473801][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.481598][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.489500][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.497505][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.505369][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.513164][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.520947][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.528735][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.536532][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.544291][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.552104][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.559889][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.567679][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.575447][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.583251][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.591046][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.598843][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.606665][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.614943][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.622771][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.630565][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.638355][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.646996][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.654880][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.663044][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.671699][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.679699][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.687534][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.695498][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.697233][ T9] elo 0003:04E7:0030.0010: unknown main item tag 0x0 [ 255.703469][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.717785][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.723418][ T9] elo 0003:04E7:0030.0010: unknown main item tag 0x0 [ 255.725831][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x6 [ 255.740139][ T9] elo 0003:04E7:0030.0010: unknown main item tag 0x0 [ 255.745830][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x3 [ 255.753876][ T9] elo 0003:04E7:0030.0010: unknown main item tag 0x0 [ 255.754585][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.768511][ T9] elo 0003:04E7:0030.0010: unknown main item tag 0x0 [ 255.770834][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.783573][ T9] elo 0003:04E7:0030.0010: unknown main item tag 0x0 [ 255.783715][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.794821][ T9] elo 0003:04E7:0030.0010: unknown main item tag 0x0 [ 255.798738][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.812824][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.813917][ T9] elo 0003:04E7:0030.0010: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 255.821378][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.839569][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.848832][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.856893][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.864670][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.872708][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.880624][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.888628][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.896531][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.904400][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.912345][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.920324][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.928217][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.936195][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.943960][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.952047][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.959989][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.967978][ T376] hid-generic 0008:0000:FFFFFBFF.000F: unknown main item tag 0x0 [ 255.978165][ T376] hid-generic 0008:0000:FFFFFBFF.000F: hidraw1: HID v9.86 Device [syz0] on syz1 [ 256.034043][ T3439] netlink: 'syz.2.3998': attribute type 4 has an invalid length. [ 256.051047][ T3439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:465 [ 256.051089][ T3437] fido_id[3437]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 256.365816][ T376] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 256.387069][ T3447] overlayfs: unescaped trailing colons in lowerdir mount option. [ 256.517240][ T376] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.529071][ T376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 256.540346][ T376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 256.551520][ T376] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.564445][ T376] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.573526][ T376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.582434][ T376] usb 3-1: config 0 descriptor?? [ 256.587774][ T3444] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 256.997536][ T376] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 257.006267][ T376] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 257.015285][ T376] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 257.188362][ T3451] kvm: pic: non byte write [ 257.210843][ T3451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4002'. [ 257.257766][ T3444] plantronics 0003:047F:FFFF.0011: implement() called with too large value -1 (n: 0)! (syz.2.4000) [ 257.294447][ T3457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4004'. [ 257.767654][ T45] usb 5-1: USB disconnect, device number 9 [ 258.435853][ T308] usb 3-1: reset high-speed USB device number 42 using dummy_hcd [ 258.565810][ T308] usb 3-1: device descriptor read/64, error -32 [ 258.805814][ T308] usb 3-1: device descriptor read/64, error -32 [ 259.045832][ T308] usb 3-1: reset high-speed USB device number 42 using dummy_hcd [ 259.175813][ T308] usb 3-1: device descriptor read/64, error -32 [ 260.056116][ T10] usb 3-1: USB disconnect, device number 42 [ 269.077283][ T3496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4018'. [ 269.105958][ T3500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4018'. [ 269.121185][ T3505] overlay: Unknown parameter 'uid>18446744073709551615' [ 269.135171][ T3505] rust_binder: Error while translating object. [ 269.135202][ T3505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 269.155882][ T3505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 269.178345][ T36] audit: type=1400 audit(2000000138.470:1065): avc: denied { bind } for pid=3506 comm="syz.3.4020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.240179][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.240208][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.247533][ T3514] rust_binder: Error in use_page_slow: ESRCH [ 269.255091][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.261635][ T3514] rust_binder: use_range failure ESRCH [ 269.278732][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.286210][ T3514] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 269.293192][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.301980][ T3514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 269.308964][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.318733][ T3514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:478 [ 269.319089][ T3519] overlayfs: failed to clone upperpath [ 269.325371][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.340326][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.347353][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.354109][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.361033][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.369469][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.377529][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.395782][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.402524][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.414234][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.420836][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.427665][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.434393][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.452172][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.469680][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.485903][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.502564][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.513624][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.521945][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.528794][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.535366][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.542398][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.549611][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.556803][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.563670][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.570959][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.578185][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.584767][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.594090][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.600827][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.607595][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.614126][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.621004][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.627740][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.634282][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.641124][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.647894][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.654402][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.661253][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.667973][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.674500][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.681318][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.688362][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.694879][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.701679][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.708362][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.714869][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.726759][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.731867][ T3538] binder: Bad value for 'stats' [ 269.733323][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.733345][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.753299][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.760281][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.767262][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.773609][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.780274][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.786754][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.795873][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.799761][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.815871][ T376] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 269.846305][ T3547] rust_binder: Error while translating object. [ 269.846335][ T3547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 269.852554][ T3547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:483 [ 269.862320][ T3547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:483 [ 269.883654][ T3549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.893552][ T3549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.899731][ T3549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.968320][ T376] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.983886][ T376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.992012][ T376] usb 4-1: Product: syz [ 269.996249][ T376] usb 4-1: Manufacturer: syz [ 270.000857][ T376] usb 4-1: SerialNumber: syz [ 270.760451][ T36] audit: type=1400 audit(2000000140.050:1066): avc: denied { ioctl } for pid=3591 comm="syz.4.4043" path="uts:[4026532317]" dev="nsfs" ino=4026532317 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 270.814005][ T36] audit: type=1400 audit(2000000140.100:1067): avc: denied { compute_member } for pid=3595 comm="syz.2.4045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 270.851328][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4044'. [ 271.075834][ T376] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 271.205885][ T376] usb 3-1: device descriptor read/64, error -71 [ 271.445798][ T376] usb 3-1: device descriptor read/64, error -71 [ 271.691991][ T376] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 271.825857][ T376] usb 3-1: device descriptor read/64, error -71 [ 271.965844][ T308] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 272.065830][ T376] usb 3-1: device descriptor read/64, error -71 [ 272.115802][ T308] usb 5-1: Using ep0 maxpacket: 8 [ 272.121940][ T308] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 272.130243][ T308] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.140379][ T308] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 272.149508][ T308] usb 5-1: config 0 has no interface number 0 [ 272.155620][ T308] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 272.166506][ T308] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 272.178192][ T308] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 272.186013][ T376] usb usb3-port1: attempt power cycle [ 272.189526][ T308] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 272.205071][ T308] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.219653][ T308] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 272.228755][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.236779][ T308] usb 5-1: Product: syz [ 272.240957][ T308] usb 5-1: Manufacturer: syz [ 272.245791][ T308] usb 5-1: SerialNumber: syz [ 272.251263][ T308] usb 5-1: config 0 descriptor?? [ 272.256599][ T3604] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 272.516878][ T308] usb 5-1: USB disconnect, device number 10 [ 272.534608][ T3504] udevd[3504]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 272.539450][ T429] usb 4-1: USB disconnect, device number 38 [ 272.550984][ T376] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 272.596861][ T376] usb 3-1: device descriptor read/8, error -71 [ 272.727139][ T376] usb 3-1: device descriptor read/8, error -71 [ 272.965808][ T376] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 272.986903][ T376] usb 3-1: device descriptor read/8, error -71 [ 273.069745][ T3628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4055'. [ 273.079320][ T3628] rust_binder: Write failure EFAULT in pid:311 [ 273.101902][ T3630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:313 [ 273.127282][ T376] usb 3-1: device descriptor read/8, error -71 [ 273.213517][ T3638] batadv_slave_1: entered promiscuous mode [ 273.220396][ T3637] batadv_slave_1: left promiscuous mode [ 273.246702][ T376] usb usb3-port1: unable to enumerate USB device [ 273.495811][ T376] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 273.600773][ T36] audit: type=1400 audit(2000000398.889:1068): avc: denied { accept } for pid=3644 comm="syz.0.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.643018][ T36] audit: type=1326 audit(2000000398.929:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.0.4065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc996d8e929 code=0x0 [ 273.645816][ T376] usb 4-1: Using ep0 maxpacket: 8 [ 273.672311][ T376] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.685473][ T376] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 273.696601][ T376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.705463][ T376] usb 4-1: config 0 descriptor?? [ 274.112285][ T376] ortek 0003:1223:3F07.0012: unknown main item tag 0x0 [ 274.119316][ T376] ortek 0003:1223:3F07.0012: unknown main item tag 0x0 [ 274.126566][ T376] ortek 0003:1223:3F07.0012: unknown main item tag 0x0 [ 274.133456][ T376] ortek 0003:1223:3F07.0012: unknown main item tag 0x0 [ 274.140368][ T376] ortek 0003:1223:3F07.0012: unknown main item tag 0x0 [ 274.147922][ T376] ortek 0003:1223:3F07.0012: hidraw0: USB HID v0.07 Device [HID 1223:3f07] on usb-dummy_hcd.3-1/input0 [ 274.225813][ T429] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 274.255797][ T307] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 274.313410][ T376] usb 4-1: USB disconnect, device number 39 [ 274.375795][ T429] usb 3-1: Using ep0 maxpacket: 16 [ 274.382014][ T429] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 274.390387][ T429] usb 3-1: config 0 has no interface number 0 [ 274.396521][ T429] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 274.406465][ T429] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 274.416968][ T307] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 274.418015][ T429] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 274.426219][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.435136][ T429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.444617][ T307] usb 5-1: config 0 descriptor?? [ 274.451177][ T429] usb 3-1: Product: syz [ 274.460270][ T429] usb 3-1: Manufacturer: syz [ 274.464886][ T429] usb 3-1: SerialNumber: syz [ 274.470417][ T429] usb 3-1: config 0 descriptor?? [ 274.475693][ T3657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 274.482956][ T3657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 274.494986][ T3666] fuse: Bad value for 'fd' [ 274.690983][ T3657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 274.698487][ T3657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 274.834364][ T3673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4073'. [ 275.075787][ T376] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 275.106701][ T429] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 275.117312][ T429] asix 3-1:0.251: probe with driver asix failed with error -524 [ 275.226865][ T376] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.237081][ T376] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.246739][ T376] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.256077][ T376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.264168][ T376] usb 4-1: SerialNumber: syz [ 275.312328][ T3657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 515 [ 275.319958][ T3657] rust_binder: Write failure EINVAL in pid:527 [ 275.320972][ T429] usb 3-1: USB disconnect, device number 47 [ 275.473146][ T376] usb 4-1: 0:2 : does not exist [ 275.484412][ T376] usb 4-1: USB disconnect, device number 40 [ 275.647053][ T3536] udevd[3536]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 275.786485][ T307] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 275.796639][ T307] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 275.806978][ T307] asix 5-1:0.0: probe with driver asix failed with error -71 [ 275.816747][ T307] usb 5-1: USB disconnect, device number 11 [ 276.154446][ T3705] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4082'. [ 276.310244][ T3711] input: syz0 as /devices/virtual/input/input20 [ 276.455802][ T307] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 276.606852][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 276.616598][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 276.628770][ T307] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 276.637868][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.646005][ T307] usb 4-1: Product: syz [ 276.650178][ T307] usb 4-1: Manufacturer: syz [ 276.654853][ T307] usb 4-1: SerialNumber: syz [ 276.660189][ T307] usb 4-1: config 0 descriptor?? [ 276.665887][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 276.817733][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 276.826250][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 276.834044][ T10] usb 5-1: can't read configurations, error -71 [ 276.871396][ T3705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 276.871426][ T3705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1054 [ 277.029306][ T307] usb 4-1: USB disconnect, device number 41 [ 277.047832][ T3536] udevd[3536]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 277.335545][ T36] audit: type=1326 audit(2000000402.619:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3723 comm="syz.4.4088" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9244b8e929 code=0x0 [ 277.386236][ T3725] binder: Unknown parameter 'context' [ 277.397958][ T3727] fuse: Bad value for 'fd' [ 277.405301][ T36] audit: type=1400 audit(2000000402.689:1071): avc: denied { setattr } for pid=3726 comm="syz.3.4089" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 277.442435][ T36] audit: type=1326 audit(2000000402.729:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.3.4090" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40a118e929 code=0x0 [ 277.498672][ T36] audit: type=1400 audit(2000000402.789:1073): avc: denied { map } for pid=3728 comm="syz.3.4090" path="socket:[51593]" dev="sockfs" ino=51593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.522433][ T36] audit: type=1400 audit(2000000402.789:1074): avc: denied { read } for pid=3728 comm="syz.3.4090" path="socket:[51593]" dev="sockfs" ino=51593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.209718][ T3737] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 278.222684][ T36] audit: type=1400 audit(2000000403.509:1075): avc: denied { execute } for pid=3736 comm="syz.4.4093" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 278.285865][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 278.285886][T28127] Bluetooth: hci0: command 0x1003 tx timeout [ 278.445916][ T3747] rust_binder: Write failure EFAULT in pid:345 [ 278.505126][ T3754] overlayfs: failed to resolve './file1': -2 [ 278.575794][ T36] audit: type=1326 audit(2000000403.859:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3760 comm="syz.0.4103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fc996d8e929 code=0x0 [ 278.605809][ T429] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 278.756814][ T429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.767835][ T429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.777680][ T429] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 278.786757][ T429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.795966][ T429] usb 4-1: config 0 descriptor?? [ 279.205283][ T429] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x3 [ 279.212798][ T429] hid-steam 0003:28DE:1142.0013: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 279.275783][ T429] hid-steam 0003:28DE:1142.0013: Steam wireless receiver connected [ 279.283845][ T429] hid-steam 0003:28DE:1142.0013: No HID_FEATURE_REPORT submitted - nothing to read [ 279.294944][ T429] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x3 [ 279.303122][ T429] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 279.406426][ T3749] rust_binder: Write failure EFAULT in pid:1067 [ 279.406883][ T429] usb 4-1: USB disconnect, device number 42 [ 279.423773][ T429] hid-steam 0003:28DE:1142.0013: Steam wireless receiver disconnected [ 279.964727][ T3804] 9pnet_virtio: no channels available for device ./file0 [ 280.075812][ T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 280.226954][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.238435][ T45] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.247783][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.261583][ T45] usb 5-1: config 0 descriptor?? [ 280.292414][ T3812] 9pnet_fd: Insufficient options for proto=fd [ 280.812986][ T3821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=3821 comm=syz.2.4124 [ 280.860682][ T2885] ------------[ cut here ]------------ [ 280.866253][ T2885] WARNING: CPU: 1 PID: 2885 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 280.874341][ T2885] Modules linked in: [ 280.878314][ T2885] CPU: 1 UID: 0 PID: 2885 Comm: syz.3.3821 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 280.891898][ T2885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.902327][ T2885] RIP: 0010:drop_nlink+0xce/0x110 [ 280.907640][ T2885] Code: 04 00 00 be 08 00 00 00 e8 7f 56 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 68 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 280.927509][ T2885] RSP: 0018:ffffc9000166f860 EFLAGS: 00010293 [ 280.933629][ T2885] RAX: ffffffff81ed146e RBX: ffff888110356958 RCX: ffff88811fd0b900 [ 280.941666][ T2885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.949806][ T2885] RBP: ffffc9000166f888 R08: 0000000000000003 R09: 0000000000000004 [ 280.957859][ T2885] R10: dffffc0000000000 R11: fffff520002cdefc R12: dffffc0000000000 [ 280.965908][ T2885] R13: 1ffff1102206ad34 R14: ffff8881103569a0 R15: 0000000000000000 [ 280.973916][ T2885] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 280.982937][ T2885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.989585][ T2885] CR2: 00007fffea556c88 CR3: 000000013c422000 CR4: 00000000003526b0 [ 280.997629][ T2885] Call Trace: [ 281.000953][ T2885] [ 281.003931][ T2885] shmem_rmdir+0x5f/0x90 [ 281.008266][ T2885] vfs_rmdir+0x3dd/0x560 [ 281.012548][ T2885] incfs_kill_sb+0x109/0x230 [ 281.017204][ T2885] deactivate_locked_super+0xd5/0x2a0 [ 281.022618][ T2885] deactivate_super+0xb8/0xe0 [ 281.024881][ T3813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.027403][ T2885] cleanup_mnt+0x3f1/0x480 [ 281.036539][ T3813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.040196][ T2885] __cleanup_mnt+0x1d/0x40 [ 281.052366][ T2885] task_work_run+0x1e0/0x250 [ 281.057030][ T2885] ? __cfi_task_work_run+0x10/0x10 [ 281.062172][ T2885] ? free_nsproxy+0x223/0x290 [ 281.066930][ T2885] do_exit+0x9b4/0x2630 [ 281.071120][ T2885] ? __sched_text_start+0x10/0x10 [ 281.076214][ T2885] ? __cfi_do_exit+0x10/0x10 [ 281.080823][ T2885] ? __kasan_check_write+0x18/0x20 [ 281.085983][ T2885] ? _raw_spin_lock_irq+0x8d/0x120 [ 281.091116][ T2885] ? __kasan_check_read+0x15/0x20 [ 281.096181][ T2885] ? cgroup_update_frozen+0x160/0x990 [ 281.101575][ T2885] do_group_exit+0x22a/0x300 [ 281.106200][ T2885] ? cgroup_leave_frozen+0x16c/0x2b0 [ 281.111513][ T2885] get_signal+0x139d/0x14f0 [ 281.116067][ T2885] arch_do_signal_or_restart+0x96/0x720 [ 281.121639][ T2885] ? common_nsleep+0x93/0xb0 [ 281.126269][ T2885] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 281.132450][ T2885] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 281.138238][ T2885] ? __kasan_check_read+0x15/0x20 [ 281.143282][ T2885] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 281.149404][ T2885] syscall_exit_to_user_mode+0x58/0xb0 [ 281.154894][ T2885] do_syscall_64+0x64/0xf0 [ 281.159354][ T2885] ? clear_bhb_loop+0x35/0x90 [ 281.164077][ T2885] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 281.170050][ T2885] RIP: 0033:0x7f40a11c11e5 [ 281.174493][ T2885] Code: Unable to access opcode bytes at 0x7f40a11c11bb. [ 281.181540][ T2885] RSP: 002b:00007f40a2077f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 281.190017][ T2885] RAX: fffffffffffffdfc RBX: 00007f40a13b5fa0 RCX: 00007f40a11c11e5 [ 281.198029][ T2885] RDX: 00007f40a2077fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.206141][ T2885] RBP: 00007f40a1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 281.214126][ T2885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 281.222130][ T2885] R13: 0000000000000000 R14: 00007f40a13b5fa0 R15: 00007ffee8d50df8 [ 281.230152][ T2885] [ 281.233180][ T2885] ---[ end trace 0000000000000000 ]--- [ 281.238849][ T2885] ================================================================== [ 281.240871][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 281.246932][ T2885] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 281.246971][ T2885] Write of size 4 at addr 0000000000000168 by task syz.3.3821/2885 [ 281.253684][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 281.259119][ T2885] [ 281.259135][ T2885] CPU: 0 UID: 0 PID: 2885 Comm: syz.3.3821 Tainted: G W 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 281.259170][ T2885] Tainted: [W]=WARN [ 281.259179][ T2885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.259193][ T2885] Call Trace: [ 281.259203][ T2885] [ 281.259216][ T2885] __dump_stack+0x21/0x30 [ 281.259253][ T2885] dump_stack_lvl+0x10c/0x190 [ 281.259284][ T2885] ? __cfi_dump_stack_lvl+0x10/0x10 [ 281.259314][ T2885] print_report+0x3d/0x70 [ 281.259338][ T2885] kasan_report+0x163/0x1a0 [ 281.259372][ T2885] ? ihold+0x24/0x70 [ 281.259407][ T2885] ? _raw_spin_unlock+0x45/0x60 [ 281.259437][ T2885] ? ihold+0x24/0x70 [ 281.259470][ T2885] kasan_check_range+0x299/0x2a0 [ 281.259505][ T2885] __kasan_check_write+0x18/0x20 [ 281.259532][ T2885] ihold+0x24/0x70 [ 281.259563][ T2885] vfs_rmdir+0x26a/0x560 [ 281.259586][ T2885] incfs_kill_sb+0x109/0x230 [ 281.259614][ T2885] deactivate_locked_super+0xd5/0x2a0 [ 281.259637][ T2885] deactivate_super+0xb8/0xe0 [ 281.259660][ T2885] cleanup_mnt+0x3f1/0x480 [ 281.259693][ T2885] __cleanup_mnt+0x1d/0x40 [ 281.259722][ T2885] task_work_run+0x1e0/0x250 [ 281.259740][ T2885] ? __cfi_task_work_run+0x10/0x10 [ 281.259757][ T2885] ? free_nsproxy+0x223/0x290 [ 281.259779][ T2885] do_exit+0x9b4/0x2630 [ 281.259803][ T2885] ? __sched_text_start+0x10/0x10 [ 281.259829][ T2885] ? __cfi_do_exit+0x10/0x10 [ 281.259848][ T2885] ? __kasan_check_write+0x18/0x20 [ 281.259869][ T2885] ? _raw_spin_lock_irq+0x8d/0x120 [ 281.259895][ T2885] ? __kasan_check_read+0x15/0x20 [ 281.259919][ T2885] ? cgroup_update_frozen+0x160/0x990 [ 281.259951][ T2885] do_group_exit+0x22a/0x300 [ 281.260035][ T2885] ? cgroup_leave_frozen+0x16c/0x2b0 [ 281.260072][ T2885] get_signal+0x139d/0x14f0 [ 281.260099][ T2885] arch_do_signal_or_restart+0x96/0x720 [ 281.260133][ T2885] ? common_nsleep+0x93/0xb0 [ 281.260162][ T2885] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 281.260194][ T2885] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 281.260226][ T2885] ? __kasan_check_read+0x15/0x20 [ 281.260252][ T2885] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 281.260279][ T2885] syscall_exit_to_user_mode+0x58/0xb0 [ 281.260308][ T2885] do_syscall_64+0x64/0xf0 [ 281.260338][ T2885] ? clear_bhb_loop+0x35/0x90 [ 281.260373][ T2885] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 281.260408][ T2885] RIP: 0033:0x7f40a11c11e5 [ 281.260428][ T2885] Code: Unable to access opcode bytes at 0x7f40a11c11bb. [ 281.260443][ T2885] RSP: 002b:00007f40a2077f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 281.260469][ T2885] RAX: fffffffffffffdfc RBX: 00007f40a13b5fa0 RCX: 00007f40a11c11e5 [ 281.260489][ T2885] RDX: 00007f40a2077fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.260506][ T2885] RBP: 00007f40a1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 281.260523][ T2885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 281.260538][ T2885] R13: 0000000000000000 R14: 00007f40a13b5fa0 R15: 00007ffee8d50df8 [ 281.260559][ T2885] [ 281.260570][ T2885] ================================================================== [ 281.268716][ T45] usb 5-1: USB disconnect, device number 14 [ 281.287959][ T2885] Disabling lock debugging due to kernel taint [ 281.589881][ T2885] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 281.597716][ T2885] #PF: supervisor write access in kernel mode [ 281.603860][ T2885] #PF: error_code(0x0002) - not-present page [ 281.609829][ T2885] PGD 0 P4D 0 [ 281.613207][ T2885] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 281.619291][ T2885] CPU: 1 UID: 0 PID: 2885 Comm: syz.3.3821 Tainted: G B W 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 281.634225][ T2885] Tainted: [B]=BAD_PAGE, [W]=WARN [ 281.639234][ T2885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.649371][ T2885] RIP: 0010:ihold+0x2a/0x70 [ 281.653895][ T2885] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 cd 5f 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 3c 4d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 dd [ 281.673598][ T2885] RSP: 0018:ffffc9000166f8a0 EFLAGS: 00010246 [ 281.679663][ T2885] RAX: ffff88811fd0b900 RBX: 0000000000000000 RCX: ffff88811fd0b900 [ 281.687640][ T2885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.695606][ T2885] RBP: ffffc9000166f8b0 R08: ffffffff88954947 R09: 1ffffffff112a928 [ 281.703572][ T2885] R10: dffffc0000000000 R11: fffffbfff112a929 R12: ffff888110356964 [ 281.711538][ T2885] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 281.719518][ T2885] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 281.728444][ T2885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.735031][ T2885] CR2: 0000000000000168 CR3: 00000001283a2000 CR4: 00000000003526b0 [ 281.743089][ T2885] Call Trace: [ 281.746370][ T2885] [ 281.749382][ T2885] vfs_rmdir+0x26a/0x560 [ 281.753630][ T2885] incfs_kill_sb+0x109/0x230 [ 281.758218][ T2885] deactivate_locked_super+0xd5/0x2a0 [ 281.763585][ T2885] deactivate_super+0xb8/0xe0 [ 281.768257][ T2885] cleanup_mnt+0x3f1/0x480 [ 281.772675][ T2885] __cleanup_mnt+0x1d/0x40 [ 281.777091][ T2885] task_work_run+0x1e0/0x250 [ 281.781676][ T2885] ? __cfi_task_work_run+0x10/0x10 [ 281.786789][ T2885] ? free_nsproxy+0x223/0x290 [ 281.791486][ T2885] do_exit+0x9b4/0x2630 [ 281.795649][ T2885] ? __sched_text_start+0x10/0x10 [ 281.800786][ T2885] ? __cfi_do_exit+0x10/0x10 [ 281.805384][ T2885] ? __kasan_check_write+0x18/0x20 [ 281.810497][ T2885] ? _raw_spin_lock_irq+0x8d/0x120 [ 281.815620][ T2885] ? __kasan_check_read+0x15/0x20 [ 281.820649][ T2885] ? cgroup_update_frozen+0x160/0x990 [ 281.826034][ T2885] do_group_exit+0x22a/0x300 [ 281.830623][ T2885] ? cgroup_leave_frozen+0x16c/0x2b0 [ 281.835910][ T2885] get_signal+0x139d/0x14f0 [ 281.840412][ T2885] arch_do_signal_or_restart+0x96/0x720 [ 281.845955][ T2885] ? common_nsleep+0x93/0xb0 [ 281.850546][ T2885] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 281.856712][ T2885] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 281.862447][ T2885] ? __kasan_check_read+0x15/0x20 [ 281.867515][ T2885] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 281.873594][ T2885] syscall_exit_to_user_mode+0x58/0xb0 [ 281.879063][ T2885] do_syscall_64+0x64/0xf0 [ 281.883477][ T2885] ? clear_bhb_loop+0x35/0x90 [ 281.888167][ T2885] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 281.894060][ T2885] RIP: 0033:0x7f40a11c11e5 [ 281.898469][ T2885] Code: Unable to access opcode bytes at 0x7f40a11c11bb. [ 281.905478][ T2885] RSP: 002b:00007f40a2077f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 281.913886][ T2885] RAX: fffffffffffffdfc RBX: 00007f40a13b5fa0 RCX: 00007f40a11c11e5 [ 281.921854][ T2885] RDX: 00007f40a2077fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.929820][ T2885] RBP: 00007f40a1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 281.937792][ T2885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 281.945758][ T2885] R13: 0000000000000000 R14: 00007f40a13b5fa0 R15: 00007ffee8d50df8 [ 281.953726][ T2885] [ 281.956738][ T2885] Modules linked in: [ 281.960629][ T2885] CR2: 0000000000000168 [ 281.964774][ T2885] ---[ end trace 0000000000000000 ]--- [ 281.970225][ T2885] RIP: 0010:ihold+0x2a/0x70 [ 281.974736][ T2885] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 cd 5f 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 3c 4d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 dd [ 281.994336][ T2885] RSP: 0018:ffffc9000166f8a0 EFLAGS: 00010246 [ 282.000395][ T2885] RAX: ffff88811fd0b900 RBX: 0000000000000000 RCX: ffff88811fd0b900 [ 282.008358][ T2885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.016324][ T2885] RBP: ffffc9000166f8b0 R08: ffffffff88954947 R09: 1ffffffff112a928 [ 282.024298][ T2885] R10: dffffc0000000000 R11: fffffbfff112a929 R12: ffff888110356964 [ 282.032437][ T2885] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 282.040399][ T2885] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 282.049317][ T2885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.055893][ T2885] CR2: 0000000000000168 CR3: 00000001283a2000 CR4: 00000000003526b0 [ 282.063864][ T2885] Kernel panic - not syncing: Fatal exception [ 282.070269][ T2885] Kernel Offset: disabled [ 282.074601][ T2885] Rebooting in 86400 seconds..