last executing test programs: 4m2.072864782s ago: executing program 0 (id=260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x241}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) shutdown(r1, 0x1) 4m2.050549093s ago: executing program 0 (id=261): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0x325, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 4m1.951827244s ago: executing program 0 (id=262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000400)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x35, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x808d) sendmmsg$inet6(r1, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="a27be28369d139f77ba22d1cb89f077a3afcd1690eb4a2c487c2b09ca09562b0", 0x20}], 0x1, &(0x7f0000000840)}}], 0x3, 0x44884) 4m1.910459695s ago: executing program 0 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x890000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x8) 4m1.846303576s ago: executing program 0 (id=265): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x14, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) 4m1.67878537s ago: executing program 0 (id=266): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}], 0x18) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 4m1.63665248s ago: executing program 32 (id=266): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}], 0x18) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 3m44.039812489s ago: executing program 4 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x1, 0x1, 0x8, 0xf8, 0x8, 0x5, 0x68, 0x2, 0x3, 0x9c, 0xfd, 0xa6, 0x81, 0x1, 0x2, 0x5}}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xff, 0x3}, {0x0, 0x4, 0x0, 0x0, 0x7}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x821, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m43.916457641s ago: executing program 4 (id=577): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x6000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[], 0x20}], 0x1}, 0x0) 3m43.916096181s ago: executing program 4 (id=578): unshare(0x64000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000004c0)={@val={0xa, 0x6}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x9, 0x65, 0x65, 0x0, 0x80, 0x2f, 0x0, @local, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x9, 0x1, [0x0, 0x2], "099c1934ba925f25d7"}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xff, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x0, {{0xa, 0x2, 0x3, 0x0, 0x1, 0x0, 0x1, 0xb}, 0x2, {0x3, 0x10, 0x3, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x77) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) 3m43.765797754s ago: executing program 4 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) 3m43.765270724s ago: executing program 4 (id=580): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000080)=[@efer={0x2, 0x5400}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m43.583383518s ago: executing program 4 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1e9000, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 3m43.583251228s ago: executing program 33 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1e9000, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 8.899510039s ago: executing program 1 (id=4284): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000140)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x100659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) 8.899427829s ago: executing program 1 (id=4285): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x0, 0xf}, 0x0, 0x0}) 7.002174265s ago: executing program 5 (id=4291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/1, 0x1) 6.155327662s ago: executing program 5 (id=4292): close(0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r1, &(0x7f0000032440)=""/102364, 0x18fdc) 5.909635836s ago: executing program 1 (id=4293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x7c}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.786263399s ago: executing program 1 (id=4294): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 5.441246846s ago: executing program 1 (id=4298): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5.270307739s ago: executing program 5 (id=4299): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000000)="10db5a") 3.555673472s ago: executing program 5 (id=4311): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="401425"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="401804"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.11778945s ago: executing program 3 (id=4317): fadvise64(0xffffffffffffffff, 0xfcff, 0x0, 0x3) 3.065443681s ago: executing program 3 (id=4319): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000e00)={0x0, 0x0, 0x80000001, 0xfffffffffffffffe}) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x80000a69}) 3.065328031s ago: executing program 3 (id=4320): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 3.065254691s ago: executing program 2 (id=4321): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x40, &(0x7f0000000480)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x8, 0x20000, 0x0}) 3.056092661s ago: executing program 3 (id=4322): socket$inet6(0xa, 0x1, 0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) 2.970532733s ago: executing program 2 (id=4323): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0xfffc, 0x20000000, @private2, 0x10000}}}, 0x108) 2.815354296s ago: executing program 2 (id=4324): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000680)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x963, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x460, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_DEV_CREATE(r1, 0x5501) 2.792744186s ago: executing program 2 (id=4325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 2.719156358s ago: executing program 2 (id=4326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x38, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x38}, 0x2, 0x34005}, 0x0) 2.662219709s ago: executing program 2 (id=4327): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x42) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) 2.422890104s ago: executing program 1 (id=4328): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 2.212085558s ago: executing program 3 (id=4329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) epoll_create1(0x80000) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.294248996s ago: executing program 3 (id=4330): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x2080808, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000940)={0x40, 0x3, 0x4, "f7050250"}, 0x0, 0x0}) 867.501433ms ago: executing program 5 (id=4331): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) 0s ago: executing program 5 (id=4332): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2797b10d1050120080200020301090212004000000000090400"], 0x0) kernel console output (not intermixed with test programs): process `syz.5.3157'. [ 207.854813][ T8682] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3160'. [ 207.887536][ T2120] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 208.007562][ T8701] /dev/rnullb0: Can't lookup blockdev [ 208.057511][ T2120] usb 2-1: Using ep0 maxpacket: 32 [ 208.069239][ T2120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.087554][ T2120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.105531][ T2120] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 208.114882][ T2120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.127084][ T2120] usb 2-1: config 0 descriptor?? [ 208.137422][ T2120] hub 2-1:0.0: USB hub found [ 208.414124][ T8724] tipc: Started in network mode [ 208.419264][ T8724] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 208.428247][ T8724] tipc: Enabling of bearer rejected, failed to enable media [ 208.535308][ T36] audit: type=1400 audit(1759247122.416:6675): avc: denied { mounton } for pid=8733 comm="syz.5.3182" path="/843/file0" dev="tmpfs" ino=4494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 208.535372][ T8734] 9pnet_fd: Insufficient options for proto=fd [ 208.882384][ T8769] overlayfs: failed to clone lowerpath [ 208.936859][ T8776] netlink: 'syz.5.3199': attribute type 27 has an invalid length. [ 209.789921][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.800766][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.120169][ T8840] netlink: 'syz.2.3219': attribute type 27 has an invalid length. [ 210.158782][ T8840] bridge0: port 3(veth0_to_team) entered disabled state [ 210.165894][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.173150][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.285764][ T8844] netlink: 'syz.3.3220': attribute type 27 has an invalid length. [ 210.390139][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.397434][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.823604][ T2120] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 210.843598][ T2120] usbhid 2-1:0.0: can't add hid device: -71 [ 210.853129][ T2120] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 210.897891][ T2120] usb 2-1: USB disconnect, device number 47 [ 210.913874][ T8852] __nla_validate_parse: 6 callbacks suppressed [ 210.913895][ T8852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3222'. [ 210.930675][ T8858] SELinux: security_context_str_to_sid () failed with errno=-22 [ 211.017433][ T8868] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 211.107571][ T8871] netlink: 'syz.1.3230': attribute type 27 has an invalid length. [ 211.148644][ T8871] sit0: left promiscuous mode [ 211.169503][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.176776][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.203113][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3228'. [ 211.379281][ T8885] overlayfs: failed to clone upperpath [ 211.414724][ T8889] rust_binder: Write failure EFAULT in pid:1318 [ 211.415991][ T8890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.478936][ T8895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.488381][ T8895] rust_binder: Error while translating object. [ 211.494905][ T8895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.511546][ T8895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1323 [ 212.062240][ T8909] netlink: 'syz.1.3243': attribute type 27 has an invalid length. [ 212.135422][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.149643][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.224146][ T8920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3247'. [ 212.367694][ T2120] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 212.487563][ T360] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 212.519120][ T2120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.530180][ T2120] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 212.543338][ T2120] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 212.557669][ T2120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.566897][ T2120] usb 2-1: config 0 descriptor?? [ 212.576210][ T8911] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.584568][ T2120] usbhid 2-1:0.0: can't add hid device: -22 [ 212.591029][ T2120] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 212.649895][ T360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.670884][ T360] usb 4-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 212.687548][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.701183][ T360] usb 4-1: config 0 descriptor?? [ 212.795168][ T1405] usb 2-1: USB disconnect, device number 48 [ 213.123480][ T360] wacom 0003:056A:0101.0022: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.3-1/input0 [ 213.343653][ T360] usb 4-1: USB disconnect, device number 62 [ 213.525889][ T8949] tmpfs: Too small a size for current use [ 213.627011][ T8951] /dev/rnullb0: Can't open blockdev [ 213.741631][ T8953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3260'. [ 213.892548][ T36] audit: type=1326 audit(1759247127.776:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.3264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0daf98eec9 code=0x0 [ 214.000214][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 214.083669][ T8968] tmpfs: Too small a size for current use [ 214.149923][ T8970] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 214.438252][ T8991] netlink: 'syz.5.3275': attribute type 27 has an invalid length. [ 215.019594][ T36] audit: type=1400 audit(1759247128.906:6677): avc: denied { create } for pid=9006 comm="syz.5.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.048701][ T9012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9012 comm=syz.5.3283 [ 215.069446][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 215.098393][ T9020] netlink: 'syz.3.3287': attribute type 27 has an invalid length. [ 215.215614][ T36] audit: type=1326 audit(1759247129.096:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.3291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9187f8eec9 code=0x0 [ 215.298533][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3293'. [ 215.335179][ T9039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9039 comm=syz.2.3295 [ 215.348366][ T9039] SELinux: Context system_u:object_r:passwd_exec_t:s0 is not valid (left unmapped). [ 215.348694][ T36] audit: type=1400 audit(1759247129.236:6679): avc: denied { relabelfrom } for pid=9038 comm="syz.2.3295" name="NETLINK" dev="sockfs" ino=41472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 215.358975][ T9039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9039 comm=syz.2.3295 [ 215.399052][ T36] audit: type=1400 audit(1759247129.246:6680): avc: denied { relabelto } for pid=9038 comm="syz.2.3295" name="NETLINK" dev="sockfs" ino=41472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:passwd_exec_t:s0" [ 215.405701][ T9039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9039 comm=syz.2.3295 [ 215.451765][ T9043] netlink: 'syz.2.3297': attribute type 27 has an invalid length. [ 216.025770][ T9054] netlink: 'syz.2.3302': attribute type 1 has an invalid length. [ 216.083717][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3303'. [ 216.151096][ T9070] netlink: 'syz.2.3308': attribute type 27 has an invalid length. [ 216.193024][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3311'. [ 216.225476][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3313'. [ 216.296272][ T9093] netlink: 'syz.2.3318': attribute type 27 has an invalid length. [ 216.380191][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3323'. [ 216.459542][ T9116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3327'. [ 216.470021][ T9116] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 216.618880][ T9130] rust_binder: Write failure EFAULT in pid:1140 [ 216.633340][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3333'. [ 216.694276][ T9137] fuse: Unknown parameter '0x000000000000000500000000000000000000004' [ 216.713855][ T9142] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 216.903866][ T9148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=9148 comm=syz.1.3338 [ 216.932997][ T36] audit: type=1400 audit(1759247130.816:6681): avc: denied { ioctl } for pid=9149 comm="syz.1.3339" path="socket:[41665]" dev="sockfs" ino=41665 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.967684][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 217.031830][ T9155] can0: slcan on ptm0. [ 217.107535][ T9] usb 4-1: device descriptor read/64, error -71 [ 217.223433][ T36] audit: type=1326 audit(1759247131.106:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.2.3343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fe338eec9 code=0x0 [ 217.267587][ T360] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 217.347563][ T9] usb 4-1: device descriptor read/64, error -71 [ 217.417550][ T360] usb 2-1: Using ep0 maxpacket: 16 [ 217.423765][ T360] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.433975][ T360] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 217.444247][ T360] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 217.453358][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.461427][ T360] usb 2-1: Product: syz [ 217.465593][ T360] usb 2-1: Manufacturer: syz [ 217.470253][ T360] usb 2-1: SerialNumber: syz [ 217.475573][ T360] usb 2-1: config 0 descriptor?? [ 217.587537][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 217.717558][ T9] usb 4-1: device descriptor read/64, error -71 [ 217.957534][ T9] usb 4-1: device descriptor read/64, error -71 [ 218.067787][ T9] usb usb4-port1: attempt power cycle [ 218.082599][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.091697][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.101807][ T360] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 218.118557][ T360] asix 2-1:0.0: probe with driver asix failed with error -71 [ 218.136585][ T360] usb 2-1: USB disconnect, device number 49 [ 218.152308][ T9153] can0 (unregistered): slcan off ptm0. [ 218.253151][ T9204] 9pnet_fd: Insufficient options for proto=fd [ 218.277863][ T9207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3349'. [ 218.292408][ T9207] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 218.417551][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 218.439198][ T9] usb 4-1: device descriptor read/8, error -71 [ 218.568672][ T9] usb 4-1: device descriptor read/8, error -71 [ 218.703282][ T9242] SELinux: policydb version 2134819135 does not match my version range 15-33 [ 218.712278][ T9242] SELinux: failed to load policy [ 218.807559][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 218.832189][ T9] usb 4-1: device descriptor read/8, error -71 [ 218.968605][ T9] usb 4-1: device descriptor read/8, error -71 [ 219.077642][ T9] usb usb4-port1: unable to enumerate USB device [ 219.271770][ T9255] overlayfs: failed to clone lowerpath [ 219.293655][ T36] audit: type=1326 audit(1759247133.176:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9257 comm="syz.2.3358" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fe338eec9 code=0x0 [ 219.797528][ T360] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 219.948770][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.959928][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.969742][ T360] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.982777][ T360] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.991876][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.000634][ T360] usb 2-1: config 0 descriptor?? [ 220.137602][ T1405] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 220.173997][ T36] audit: type=1400 audit(1759247134.056:6684): avc: denied { execute_no_trans } for pid=9283 comm="syz.2.3369" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9256F1A65E0202864656C6574656429 dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 220.254956][ T9292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3373'. [ 220.287513][ T1405] usb 4-1: Using ep0 maxpacket: 16 [ 220.294336][ T1405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.305577][ T1405] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.318731][ T1405] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.328047][ T1405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.337957][ T1405] usb 4-1: config 0 descriptor?? [ 220.412493][ T360] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 220.420225][ T360] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 220.427888][ T360] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 220.435878][ T360] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 220.443546][ T360] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 220.451341][ T360] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 220.458871][ T360] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 220.466801][ T360] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 220.481344][ T360] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 220.640858][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3382'. [ 220.663558][ T9318] netlink: 'syz.5.3383': attribute type 16 has an invalid length. [ 220.671623][ T9318] netlink: 'syz.5.3383': attribute type 2 has an invalid length. [ 220.679943][ T9318] netlink: 64086 bytes leftover after parsing attributes in process `syz.5.3383'. [ 220.744473][ T36] audit: type=1400 audit(1759247134.626:6685): avc: denied { checkpoint_restore } for pid=9268 comm="syz.1.3363" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 220.812978][ T9323] /dev/rnullb0: Can't lookup blockdev [ 220.894133][ T36] audit: type=1326 audit(1759247134.776:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.5.3386" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9187f8eec9 code=0x0 [ 221.297150][ T9333] FAULT_INJECTION: forcing a failure. [ 221.297150][ T9333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.310461][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: syz.3.3365 Not tainted syzkaller #0 99b3eabaa23ae162c27001e7be83a6c28a211609 [ 221.310500][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.310516][ T9333] Call Trace: [ 221.310525][ T9333] [ 221.310535][ T9333] __dump_stack+0x21/0x30 [ 221.310574][ T9333] dump_stack_lvl+0x10c/0x190 [ 221.310605][ T9333] ? __cfi_dump_stack_lvl+0x10/0x10 [ 221.310639][ T9333] dump_stack+0x19/0x20 [ 221.310669][ T9333] should_fail_ex+0x3d9/0x530 [ 221.310694][ T9333] should_fail+0xf/0x20 [ 221.310715][ T9333] should_fail_usercopy+0x1e/0x30 [ 221.310738][ T9333] _copy_from_user+0x22/0xb0 [ 221.310767][ T9333] raw_ioctl+0x7fd/0x3600 [ 221.310798][ T9333] ? pte_offset_map_rw_nolock+0xba/0x110 [ 221.310835][ T9333] ? handle_mm_fault+0x169b/0x1b90 [ 221.310861][ T9333] ? __cfi_raw_ioctl+0x10/0x10 [ 221.310891][ T9333] ? selinux_file_ioctl+0x6e0/0x1360 [ 221.310919][ T9333] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 221.310948][ T9333] ? __cfi_handle_mm_fault+0x10/0x10 [ 221.310983][ T9333] ? lock_vma_under_rcu+0x49d/0x540 [ 221.311014][ T9333] ? __fget_files+0x2c5/0x340 [ 221.311039][ T9333] ? bpf_lsm_file_ioctl+0xd/0x20 [ 221.311071][ T9333] ? security_file_ioctl+0x34/0xd0 [ 221.311097][ T9333] ? __cfi_raw_ioctl+0x10/0x10 [ 221.311126][ T9333] __se_sys_ioctl+0x132/0x1b0 [ 221.311153][ T9333] __x64_sys_ioctl+0x7f/0xa0 [ 221.311178][ T9333] x64_sys_call+0x1878/0x2ee0 [ 221.311213][ T9333] do_syscall_64+0x58/0xf0 [ 221.311240][ T9333] ? clear_bhb_loop+0x50/0xa0 [ 221.311264][ T9333] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 221.311301][ T9333] RIP: 0033:0x7f885f18eacb [ 221.311320][ T9333] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 221.311344][ T9333] RSP: 002b:00007f885dbf5f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.311371][ T9333] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f885f18eacb [ 221.311389][ T9333] RDX: 00007f885dbf5ff0 RSI: 0000000040085507 RDI: 0000000000000003 [ 221.311405][ T9333] RBP: 0000000000000003 R08: 00007f885f510320 R09: 0000000000000000 [ 221.311421][ T9333] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 221.311436][ T9333] R13: 0000000000000000 R14: 00007f885f3e6090 R15: 00007ffe25213768 [ 221.311456][ T9333] [ 221.685359][ T9335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9335 comm=syz.5.3388 [ 221.698273][ T9335] netlink: 'syz.5.3388': attribute type 27 has an invalid length. [ 221.706987][ T9335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9335 comm=syz.5.3388 [ 221.797557][ T9] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 221.842137][ T9348] /dev/rnullb0: Can't lookup blockdev [ 221.961994][ T9356] netlink: 'syz.5.3397': attribute type 27 has an invalid length. [ 222.063799][ T9365] overlayfs: failed to resolve './file0': -2 [ 222.191408][ T9378] netlink: 'syz.2.3407': attribute type 4 has an invalid length. [ 222.207541][ T9378] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3407'. [ 222.337497][ T36] audit: type=1326 audit(1759247136.206:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.3407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fe338eec9 code=0x0 [ 222.612400][ T9383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3409'. [ 222.622685][ T36] audit: type=1400 audit(1759247136.506:6688): avc: denied { execute } for pid=9382 comm="syz.1.3409" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.773646][ T9390] /dev/rnullb0: Can't lookup blockdev [ 222.780430][ T1405] usbhid 4-1:0.0: can't add hid device: -71 [ 222.785531][ T9392] kernel profiling enabled (shift: 5) [ 222.787341][ T1405] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 222.812622][ T1405] usb 4-1: USB disconnect, device number 67 [ 222.815950][ T9392] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 222.834231][ T9396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.842350][ T9396] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 222.954447][ T9411] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3421'. [ 223.035674][ T9415] /dev/rnullb0: Can't lookup blockdev [ 223.197585][ T9] usb 2-1: device descriptor read/64, error -71 [ 223.307972][ T9] usb 2-1: device reset changed ep0 maxpacket size! [ 223.314911][ T2120] usb 2-1: USB disconnect, device number 50 [ 223.447527][ T2120] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 223.475902][ T9438] /dev/rnullb0: Can't open blockdev [ 223.607522][ T2120] usb 2-1: Using ep0 maxpacket: 16 [ 223.614033][ T2120] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.624292][ T2120] usb 2-1: config 0 has no interfaces? [ 223.629876][ T2120] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 223.639081][ T2120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.649275][ T2120] usb 2-1: config 0 descriptor?? [ 223.887543][ T1405] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 224.018553][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3435'. [ 224.037527][ T1405] usb 4-1: Using ep0 maxpacket: 16 [ 224.039343][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3436'. [ 224.043925][ T1405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.063047][ T1405] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 224.076006][ T1405] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 224.085118][ T1405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.096957][ T1405] usb 4-1: config 0 descriptor?? [ 224.182888][ T36] audit: type=1400 audit(1759247138.066:6689): avc: denied { create } for pid=9459 comm="syz.5.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 224.210095][ T9462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.683421][ T2120] usb 2-1: USB disconnect, device number 51 [ 225.814028][ T9491] overlayfs: missing 'lowerdir' [ 226.027523][ T2120] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 226.187507][ T2120] usb 2-1: Using ep0 maxpacket: 32 [ 226.194291][ T2120] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.203153][ T2120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.213806][ T2120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.222926][ T2120] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.237620][ T2120] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.246792][ T2120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.254864][ T2120] usb 2-1: Product: syz [ 226.259213][ T2120] usb 2-1: Manufacturer: syz [ 226.263838][ T2120] usb 2-1: SerialNumber: syz [ 226.470592][ T36] audit: type=1400 audit(1759247140.356:6690): avc: denied { create } for pid=9481 comm="syz.1.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.491665][ T9482] tmpfs: Bad value for 'size' [ 226.499749][ T2120] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 226.507343][ T2120] cdc_ncm 2-1:1.0: bind() failure [ 226.513677][ T2120] usb 2-1: USB disconnect, device number 52 [ 226.661435][ T1405] usbhid 4-1:0.0: can't add hid device: -71 [ 226.667602][ T1405] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 226.676760][ T1405] usb 4-1: USB disconnect, device number 68 [ 227.030429][ T9514] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.030542][ T9514] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.038359][ T9515] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 227.052270][ T9515] rust_binder: Write failure EINVAL in pid:1378 [ 227.052346][ T9516] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 227.065969][ T9516] rust_binder: Write failure EINVAL in pid:1378 [ 227.230175][ T36] audit: type=1400 audit(1759247141.116:6691): avc: denied { ioctl } for pid=9530 comm="syz.1.3467" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 227.677108][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3471'. [ 227.852983][ T9551] netlink: 'syz.5.3475': attribute type 16 has an invalid length. [ 227.860907][ T9551] netlink: 'syz.5.3475': attribute type 3 has an invalid length. [ 227.869002][ T9551] netlink: 64054 bytes leftover after parsing attributes in process `syz.5.3475'. [ 227.959676][ T9560] /dev/rnullb0: Can't open blockdev [ 227.966100][ T9562] overlayfs: failed to clone lowerpath [ 228.030701][ T9569] /dev/rnullb0: Can't open blockdev [ 228.084910][ T9573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.184448][ T9578] binder: Unknown parameter 'fscontext?}e0' [ 228.226208][ T9590] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.226364][ T9590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 228.233109][ T9590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1406 [ 228.310820][ T9599] /dev/rnullb0: Can't open blockdev [ 228.376794][ T9610] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3499'. [ 228.486822][ T9616] rust_binder: Write failure EFAULT in pid:1414 [ 228.694776][ T9632] /dev/rnullb0: Can't lookup blockdev [ 228.877540][ T1405] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 228.901805][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3510'. [ 229.038084][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3515'. [ 229.038572][ T1405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.067512][ T1405] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 229.076671][ T1405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.087753][ T1405] usb 4-1: config 0 descriptor?? [ 229.121074][ T36] audit: type=1326 audit(1759247143.006:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.2.3516" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fe338eec9 code=0x0 [ 229.259588][ T9654] /dev/rnullb0: Can't lookup blockdev [ 229.325494][ T9658] GUP no longer grows the stack in syz.1.3519 (9658): 200000005000-200000008000 (200000004000) [ 229.336150][ T9658] CPU: 1 UID: 0 PID: 9658 Comm: syz.1.3519 Not tainted syzkaller #0 99b3eabaa23ae162c27001e7be83a6c28a211609 [ 229.336192][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.336209][ T9658] Call Trace: [ 229.336226][ T9658] [ 229.336241][ T9658] __dump_stack+0x21/0x30 [ 229.336282][ T9658] dump_stack_lvl+0x10c/0x190 [ 229.336317][ T9658] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.336351][ T9658] ? futex_lock_pi_atomic+0xdd/0xc70 [ 229.336384][ T9658] dump_stack+0x19/0x20 [ 229.336417][ T9658] fixup_user_fault+0x63d/0x6d0 [ 229.336449][ T9658] fault_in_user_writeable+0x76/0xe0 [ 229.336475][ T9658] futex_lock_pi+0x258/0xa10 [ 229.336503][ T9658] ? futex_unqueue+0x136/0x160 [ 229.336529][ T9658] ? should_fail+0xf/0x20 [ 229.336553][ T9658] ? __cfi_futex_lock_pi+0x10/0x10 [ 229.336583][ T9658] ? __cfi_futex_wake_mark+0x10/0x10 [ 229.336616][ T9658] ? futex_setup_timer+0xb4/0xd0 [ 229.336640][ T9658] ? __cfi_futex_wake_mark+0x10/0x10 [ 229.336673][ T9658] ? mas_find+0x358/0x5f0 [ 229.336696][ T9658] ? __kasan_check_write+0x18/0x20 [ 229.336735][ T9658] do_futex+0x25c/0x500 [ 229.336761][ T9658] ? __cfi_do_futex+0x10/0x10 [ 229.336787][ T9658] ? __vm_munmap+0x2c7/0x370 [ 229.336814][ T9658] __se_sys_futex+0x28f/0x300 [ 229.336841][ T9658] ? __x64_sys_futex+0x110/0x110 [ 229.336869][ T9658] ? __kasan_check_write+0x18/0x20 [ 229.336908][ T9658] __x64_sys_futex+0xe9/0x110 [ 229.336935][ T9658] x64_sys_call+0x227f/0x2ee0 [ 229.336972][ T9658] do_syscall_64+0x58/0xf0 [ 229.337001][ T9658] ? clear_bhb_loop+0x50/0xa0 [ 229.337026][ T9658] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.337065][ T9658] RIP: 0033:0x7f0daf98eec9 [ 229.337086][ T9658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.337109][ T9658] RSP: 002b:00007f0db0790038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 229.337137][ T9658] RAX: ffffffffffffffda RBX: 00007f0dafbe5fa0 RCX: 00007f0daf98eec9 [ 229.337157][ T9658] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 229.337176][ T9658] RBP: 00007f0dafa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.337194][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.337210][ T9658] R13: 00007f0dafbe6038 R14: 00007f0dafbe5fa0 R15: 00007ffc96788868 [ 229.337245][ T9658] [ 229.572687][ T1405] uclogic 0003:5543:0522.0024: item fetching failed at offset 4/5 [ 229.580774][ T1405] uclogic 0003:5543:0522.0024: parse failed [ 229.586884][ T1405] uclogic 0003:5543:0522.0024: probe with driver uclogic failed with error -22 [ 229.621266][ T36] audit: type=1400 audit(1759247143.506:6693): avc: denied { setattr } for pid=9662 comm="syz.1.3520" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 229.774755][ T9630] /dev/rnullb0: Can't open blockdev [ 229.780775][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.789367][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.798065][ T36] audit: type=1326 audit(1759247143.686:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.3.3506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f885f18eec9 code=0x0 [ 230.575153][ T9679] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3527'. [ 230.616411][ T9687] fuse: Unknown parameter '' [ 230.658982][ T9698] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 230.659174][ T9698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.667006][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3536'. [ 230.776862][ T9718] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3543'. [ 230.798416][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3545'. [ 230.820452][ T36] audit: type=1400 audit(1759247144.706:6695): avc: denied { create } for pid=9724 comm="syz.1.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 230.871592][ T9731] FAULT_INJECTION: forcing a failure. [ 230.871592][ T9731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.884822][ T9731] CPU: 1 UID: 0 PID: 9731 Comm: syz.1.3549 Not tainted syzkaller #0 99b3eabaa23ae162c27001e7be83a6c28a211609 [ 230.884860][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.884874][ T9731] Call Trace: [ 230.884880][ T9731] [ 230.884888][ T9731] __dump_stack+0x21/0x30 [ 230.884916][ T9731] dump_stack_lvl+0x10c/0x190 [ 230.884938][ T9731] ? __cfi_dump_stack_lvl+0x10/0x10 [ 230.884962][ T9731] ? check_stack_object+0x107/0x140 [ 230.884989][ T9731] dump_stack+0x19/0x20 [ 230.885011][ T9731] should_fail_ex+0x3d9/0x530 [ 230.885028][ T9731] should_fail+0xf/0x20 [ 230.885043][ T9731] should_fail_usercopy+0x1e/0x30 [ 230.885068][ T9731] _copy_from_user+0x22/0xb0 [ 230.885089][ T9731] __sys_connect+0x136/0x440 [ 230.885110][ T9731] ? __cfi___sys_connect+0x10/0x10 [ 230.885133][ T9731] ? __kasan_check_read+0x15/0x20 [ 230.885159][ T9731] __x64_sys_connect+0x7e/0x90 [ 230.885179][ T9731] x64_sys_call+0x1c2f/0x2ee0 [ 230.885204][ T9731] do_syscall_64+0x58/0xf0 [ 230.885224][ T9731] ? clear_bhb_loop+0x50/0xa0 [ 230.885240][ T9731] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 230.885266][ T9731] RIP: 0033:0x7f0daf98eec9 [ 230.885281][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.885296][ T9731] RSP: 002b:00007f0db0790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 230.885314][ T9731] RAX: ffffffffffffffda RBX: 00007f0dafbe5fa0 RCX: 00007f0daf98eec9 [ 230.885328][ T9731] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 230.885339][ T9731] RBP: 00007f0db0790090 R08: 0000000000000000 R09: 0000000000000000 [ 230.885351][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.885362][ T9731] R13: 00007f0dafbe6038 R14: 00007f0dafbe5fa0 R15: 00007ffc96788868 [ 230.885377][ T9731] [ 231.083053][ T9733] fuseblk: Unknown parameter 'groqCj.00000000000000000000' [ 231.649146][ T2120] usb 4-1: USB disconnect, device number 69 [ 231.724260][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3555'. [ 232.024937][ T9759] input: syz1 as /devices/virtual/input/input23 [ 232.035017][ T1405] hid-generic 0003:0004:0000.0025: unknown main item tag 0x0 [ 232.043386][ T1405] hid-generic 0003:0004:0000.0025: unknown main item tag 0x0 [ 232.051031][ T1405] hid-generic 0003:0004:0000.0025: unknown main item tag 0x0 [ 232.059083][ T1405] hid-generic 0003:0004:0000.0025: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 232.297501][ T360] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 232.400287][ T9777] veth0_to_team: mtu greater than device maximum [ 232.447523][ T360] usb 2-1: Using ep0 maxpacket: 8 [ 232.865452][ T9788] __nla_validate_parse: 3 callbacks suppressed [ 232.865475][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3571'. [ 232.909211][ T9793] /dev/rnullb0: Can't lookup blockdev [ 232.989829][ T9810] netlink: 'syz.5.3578': attribute type 4 has an invalid length. [ 233.055081][ T36] audit: type=1400 audit(1759247146.936:6696): avc: denied { write } for pid=9813 comm="syz.5.3579" name="/" dev="configfs" ino=2469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.090950][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3580'. [ 233.113921][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3581'. [ 233.319901][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 233.553151][ T9854] binder: Unknown parameter 'context[7' [ 233.572335][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3598'. [ 233.595252][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3599'. [ 233.773339][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3607'. [ 233.948591][ T9898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=9898 comm=syz.5.3613 [ 233.997074][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3617'. [ 234.007530][ T1405] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 234.022376][ T36] audit: type=1400 audit(1759247147.906:6697): avc: denied { lock } for pid=9908 comm="syz.2.3619" path="socket:[45105]" dev="sockfs" ino=45105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 234.157510][ T1405] usb 4-1: Using ep0 maxpacket: 32 [ 234.163822][ T1405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.174860][ T1405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.184668][ T1405] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 234.198470][ T1405] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 234.207582][ T1405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.216847][ T1405] usb 4-1: config 0 descriptor?? [ 234.553992][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'. [ 234.577496][ T9916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=9916 comm=syz.2.3622 [ 234.633760][ T1405] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0026/input/input24 [ 234.646990][ T1405] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0026/input/input25 [ 234.672327][ T1405] kye 0003:0458:5011.0026: input,hiddev96,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 234.823041][ T9928] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3626'. [ 234.935783][ T9] usb 4-1: USB disconnect, device number 70 [ 234.935886][ C1] kye 0003:0458:5011.0026: usb_submit_urb(ctrl) failed: -19 [ 234.942806][ T9930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 234.950599][ T9930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1259 [ 235.111862][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.138780][ T360] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 235.146438][ T360] usb 2-1: can't read configurations, error -71 [ 235.174168][ T9936] sit0: entered promiscuous mode [ 235.179464][ T9936] netlink: 'syz.1.3629': attribute type 1 has an invalid length. [ 235.281542][ T9950] fuse: Bad value for 'fd' [ 235.336587][ T9959] x_tables: duplicate entry at hook 1 [ 235.364212][ T9967] overlayfs: failed to clone lowerpath [ 235.471609][ T9978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64528 sclass=netlink_route_socket pid=9978 comm=syz.2.3643 [ 235.497622][ T360] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 235.576468][ T9993] 9pnet: Unknown protocol version 9 [ 235.583129][ T36] audit: type=1326 audit(1759247149.466:6698): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe338eec9 code=0x7ffc0000 [ 235.612564][ T36] audit: type=1326 audit(1759247149.486:6699): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fe338eec9 code=0x7ffc0000 [ 235.636829][ T36] audit: type=1326 audit(1759247149.486:6700): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe338eec9 code=0x7ffc0000 [ 235.657500][ T360] usb 2-1: Using ep0 maxpacket: 16 [ 235.661046][ T36] audit: type=1326 audit(1759247149.496:6701): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fe3390de7 code=0x7ffc0000 [ 235.693468][ T36] audit: type=1326 audit(1759247149.496:6702): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2fe3390d5c code=0x7ffc0000 [ 235.694095][ T360] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.717781][ T36] audit: type=1326 audit(1759247149.496:6703): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2fe3390c94 code=0x7ffc0000 [ 235.765935][ T360] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 235.785393][ T360] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.787317][ T36] audit: type=1326 audit(1759247149.496:6704): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2fe3390c94 code=0x7ffc0000 [ 235.802854][ T360] usb 2-1: config 1 interface 0 has no altsetting 0 [ 235.829044][ T36] audit: type=1326 audit(1759247149.496:6705): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2fe338db2a code=0x7ffc0000 [ 235.856096][ T360] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 235.864073][ T9999] 9pnet_fd: Insufficient options for proto=fd [ 235.865307][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.879398][ T360] usb 2-1: Product: syz [ 235.883672][ T360] usb 2-1: Manufacturer: syz [ 235.888397][ T360] usb 2-1: SerialNumber: syz [ 235.924482][T10001] netlink: 'syz.3.3654': attribute type 27 has an invalid length. [ 235.948993][T10003] binder: Unknown parameter 'diBsync' [ 235.997759][T10009] VFS: Mount too revealing [ 236.072172][T10013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1277 [ 236.107694][ T360] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 236.307289][ T9] usb 2-1: USB disconnect, device number 54 [ 236.523690][ T9947] usblp0: removed [ 236.837572][ T360] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 236.970796][T10053] netlink: 'syz.2.3674': attribute type 25 has an invalid length. [ 236.998505][ T360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.009635][ T360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.019762][ T360] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.033246][ T360] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.042520][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.052062][ T360] usb 4-1: config 0 descriptor?? [ 237.100869][T10056] /dev/rnullb0: Can't open blockdev [ 237.228808][T10066] rust_binder: Error while translating object. [ 237.228863][T10066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.235799][T10066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1486 [ 237.282382][T10071] cgroup: Invalid name [ 237.319461][T10073] input: syz0 as /devices/virtual/input/input26 [ 237.467780][ T360] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 237.475259][ T360] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 237.490773][ T360] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 237.498518][ T360] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 237.503437][T10075] netlink: 'syz.2.3684': attribute type 27 has an invalid length. [ 237.506087][ T360] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 237.523905][ T360] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 237.531671][ T360] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 237.539493][ T360] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 237.557587][ T360] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 237.577555][ T1405] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 237.624015][T10083] overlayfs: failed to clone lowerpath [ 237.738851][ T1405] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 237.747183][ T1405] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 237.764331][ T1405] usb 2-1: config 220 has no interface number 2 [ 237.770603][T10100] /dev/rnullb0: Can't lookup blockdev [ 237.770984][ T1405] usb 2-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF [ 237.792089][ T1405] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 237.803341][ T1405] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 237.816701][ T1405] usb 2-1: config 220 interface 0 has no altsetting 0 [ 237.823740][ T1405] usb 2-1: config 220 interface 76 has no altsetting 0 [ 237.830849][ T1405] usb 2-1: config 220 interface 1 has no altsetting 0 [ 237.839362][ T1405] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 237.848688][ T1405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.856769][ T1405] usb 2-1: Product: syz [ 237.861241][ T1405] usb 2-1: Manufacturer: syz [ 237.865934][ T1405] usb 2-1: SerialNumber: syz [ 237.877298][T10121] 9pnet_fd: Insufficient options for proto=fd [ 237.922447][ T9] usb 4-1: USB disconnect, device number 71 [ 237.948570][T10132] /dev/rnullb0: Can't lookup blockdev [ 237.968068][T10134] netlink: 'syz.5.3706': attribute type 27 has an invalid length. [ 238.079157][ T1405] usb 2-1: selecting invalid altsetting 0 [ 238.084982][ T1405] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 238.091446][ T1405] usb 2-1: No valid video chain found. [ 238.101731][ T1405] usb 2-1: USB disconnect, device number 55 [ 238.305423][T10162] netlink: 'syz.2.3715': attribute type 27 has an invalid length. [ 238.328154][T10165] __nla_validate_parse: 13 callbacks suppressed [ 238.328181][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3716'. [ 238.508260][T10181] /dev/rnullb0: Can't lookup blockdev [ 238.527142][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'. [ 238.544375][T10184] netlink: 'syz.5.3724': attribute type 27 has an invalid length. [ 238.598271][T10188] netlink: 400 bytes leftover after parsing attributes in process `syz.1.3726'. [ 238.631579][T10190] /dev/rnullb0: Can't open blockdev [ 238.887552][ T9] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 239.039028][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 239.047729][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 239.058653][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 239.071180][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 239.080395][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.088483][ T9] usb 2-1: Product: 或ᇥ먅袷鸞㠴䙤夂爝ﯾ报拖兔卮ٻ㐓㫗㐇頨ﹸ甒芯鹃뵟ਠᨽ썋⭮➄ز㤻퍬烏챎࿸鲭Բ뮲ᚶ㮿봽೯위兗휎屬歛쯯╖଍犠뒱ߘ鲒償묾ʡ鋄彃㔐깁ꈀ뙶梇儃䁷填뙌麋룈텪か팑錸 [ 239.113653][ T9] usb 2-1: Manufacturer: ࠉ [ 239.118314][ T9] usb 2-1: SerialNumber: љ [ 239.124479][T10193] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.234131][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 239.234153][ T36] audit: type=1400 audit(1759247153.116:6732): avc: denied { watch } for pid=10196 comm="syz.2.3730" path="/1507/file0" dev="tmpfs" ino=8060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.274175][T10199] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3731'. [ 239.324341][T10205] netlink: 'syz.2.3733': attribute type 27 has an invalid length. [ 239.533685][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.542591][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.555461][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 239.561494][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 239.570537][ T9] usb 2-1: USB disconnect, device number 56 [ 239.617554][ T1405] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 239.767490][ T1405] usb 4-1: Using ep0 maxpacket: 8 [ 239.773829][ T1405] usb 4-1: config 32 has an invalid interface number: 120 but max is 1 [ 239.782389][ T1405] usb 4-1: config 32 has an invalid interface number: 145 but max is 1 [ 239.788421][T10212] netlink: 396 bytes leftover after parsing attributes in process `syz.5.3736'. [ 239.791057][ T1405] usb 4-1: config 32 has no interface number 0 [ 239.806350][ T1405] usb 4-1: config 32 has no interface number 1 [ 239.812830][ T1405] usb 4-1: config 32 interface 120 altsetting 80 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 239.824207][ T1405] usb 4-1: config 32 interface 120 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 239.835412][ T1405] usb 4-1: config 32 interface 120 altsetting 80 endpoint 0xF has an invalid bInterval 190, changing to 7 [ 239.846898][ T1405] usb 4-1: config 32 interface 120 altsetting 80 has a duplicate endpoint with address 0xF, skipping [ 239.857929][ T1405] usb 4-1: config 32 interface 120 altsetting 80 bulk endpoint 0x1 has invalid maxpacket 64 [ 239.868197][ T1405] usb 4-1: config 32 interface 120 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 239.879391][ T1405] usb 4-1: config 32 interface 145 altsetting 63 endpoint 0x4 has an invalid bInterval 127, changing to 10 [ 239.890929][ T1405] usb 4-1: config 32 interface 145 altsetting 63 endpoint 0x7 has invalid wMaxPacketSize 0 [ 239.901072][ T1405] usb 4-1: config 32 interface 145 altsetting 63 has a duplicate endpoint with address 0x2, skipping [ 239.911814][T10224] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3742'. [ 239.912241][ T1405] usb 4-1: config 32 interface 145 altsetting 63 has a duplicate endpoint with address 0x2, skipping [ 239.932078][ T1405] usb 4-1: config 32 interface 145 altsetting 63 has a duplicate endpoint with address 0x7, skipping [ 239.939100][T10226] netlink: 'syz.5.3743': attribute type 27 has an invalid length. [ 239.943133][ T1405] usb 4-1: config 32 interface 120 has no altsetting 0 [ 239.943161][ T1405] usb 4-1: config 32 interface 145 has no altsetting 0 [ 239.944863][ T1405] usb 4-1: New USB device found, idVendor=1199, idProduct=9006, bcdDevice=35.b4 [ 239.974289][ T1405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.982422][ T1405] usb 4-1: Product: п [ 239.986627][ T1405] usb 4-1: Manufacturer: 牰˩鐛꥝禃㖗㤁ᤧ絺揘鸛ꪄ젦࢒⎪臇웎븾娾᤬ભ䲲䮺衷▐ꚉⷤ醚邊ɏ偐ẑ闲䌯﨑銂牾劉擦樍兂찈楲蹿肘稇엔揄ꠉ뛶ᇟﵹ捅ത㨪ㆹন㺹㫥㑂ꦘ曅㧜轞㶡⎽鵥겙斘籏殺딇묾촣ⵙ各㘾཈뎲蠑쉿백屦 [ 240.013894][ T1405] usb 4-1: SerialNumber: 㰁 [ 240.020274][T10209] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.134807][T10232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.135034][T10232] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 240.161704][T10234] netlink: 396 bytes leftover after parsing attributes in process `syz.1.3747'. [ 240.236648][ T1405] usb 4-1: USB disconnect, device number 72 [ 240.668633][T10246] netlink: 'syz.5.3752': attribute type 27 has an invalid length. [ 240.688840][T10248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34588 sclass=netlink_route_socket pid=10248 comm=syz.5.3753 [ 240.778712][T10263] rust_binder: Write failure EFAULT in pid:1519 [ 240.778997][ T36] audit: type=1400 audit(1759247154.666:6733): avc: denied { map } for pid=10267 comm="syz.5.3761" path="socket:[46139]" dev="sockfs" ino=46139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 240.828696][T10273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61468 sclass=netlink_route_socket pid=10273 comm=syz.5.3763 [ 240.854845][T10279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1291 [ 240.863307][T10282] rust_binder: Write failure EFAULT in pid:1527 [ 240.873174][T10282] rust_binder: Write failure EFAULT in pid:1527 [ 240.886244][ T36] audit: type=1400 audit(1759247154.766:6734): avc: denied { setopt } for pid=10285 comm="syz.5.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.926102][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3770'. [ 240.975212][T10300] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3774'. [ 240.996317][T10302] netlink: 'syz.5.3775': attribute type 4 has an invalid length. [ 241.004153][T10302] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3775'. [ 241.097522][ T1405] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 241.247524][ T1405] usb 4-1: Using ep0 maxpacket: 32 [ 241.253724][ T1405] usb 4-1: config 2 has an invalid interface number: 194 but max is 0 [ 241.262117][ T1405] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 241.272403][ T1405] usb 4-1: config 2 has no interface number 0 [ 241.278621][ T1405] usb 4-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 241.288745][ T1405] usb 4-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 241.299921][ T1405] usb 4-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 241.313027][ T1405] usb 4-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 241.322123][ T1405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.331271][T10279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 241.338560][T10279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 241.548761][T10279] netlink: 'syz.3.3765': attribute type 4 has an invalid length. [ 241.558769][ T1405] usb 4-1: string descriptor 0 read error: -71 [ 241.571260][ T1405] usb 4-1: USB disconnect, device number 73 [ 242.317986][ T2120] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 242.467501][ T2120] usb 4-1: Using ep0 maxpacket: 16 [ 242.478496][ T2120] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.490078][ T2120] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.507183][ T2120] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.521892][T10416] rust_binder: 10403 RLIMIT_NICE not set [ 242.522673][ T2120] usb 4-1: config 1 interface 0 has no altsetting 0 [ 242.537873][ T2120] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.547186][ T2120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.557180][ T2120] usb 4-1: Product: syz [ 242.563790][ T2120] usb 4-1: Manufacturer: syz [ 242.574679][ T2120] usb 4-1: SerialNumber: syz [ 242.751536][T10435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=10435 comm=syz.5.3827 [ 242.793469][ T2120] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 242.798275][T10446] netlink: 'syz.5.3832': attribute type 27 has an invalid length. [ 242.994410][ T2120] usb 4-1: USB disconnect, device number 74 [ 243.145131][T10474] cgroup: fork rejected by pids controller in /syz5 [ 243.204492][T10344] usblp0: removed [ 243.471000][T10548] __nla_validate_parse: 6 callbacks suppressed [ 243.471026][T10548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3849'. [ 243.587082][T10557] netlink: 'syz.2.3852': attribute type 27 has an invalid length. [ 243.725271][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'. [ 243.753542][T10569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3858'. [ 243.794842][T10571] /dev/rnullb0: Can't open blockdev [ 243.796915][T10573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3860'. [ 243.812800][T10573] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3860'. [ 243.827703][T10573] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3860'. [ 243.837070][T10573] netlink: 'syz.1.3860': attribute type 4 has an invalid length. [ 243.899379][T10580] rust_binder: 10573 RLIMIT_NICE not set [ 243.913033][T10582] netlink: 'syz.1.3862': attribute type 27 has an invalid length. [ 243.925942][T10584] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 243.926804][T10582] sit0: left promiscuous mode [ 243.934535][T10584] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 243.977399][T10594] fuse: Bad value for 'group_id' [ 243.982562][T10594] fuse: Bad value for 'group_id' [ 244.002482][T10597] incfs: Error accessing: ./cgroup. [ 244.007920][T10597] incfs: mount failed -20 [ 244.010489][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3869'. [ 244.347624][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 244.399595][T10610] netlink: 'syz.5.3872': attribute type 27 has an invalid length. [ 244.410119][T10608] 9pnet: Unknown protocol version 9T [ 244.497495][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 244.505059][ T9] usb 4-1: config 6 has an invalid interface number: 230 but max is 2 [ 244.519710][ T9] usb 4-1: config 6 has an invalid interface number: 11 but max is 2 [ 244.537616][ T9] usb 4-1: config 6 has an invalid interface number: 120 but max is 2 [ 244.554664][ T9] usb 4-1: config 6 has no interface number 0 [ 244.567474][ T9] usb 4-1: config 6 has no interface number 1 [ 244.584069][ T9] usb 4-1: config 6 has no interface number 2 [ 244.597543][ T9] usb 4-1: config 6 interface 230 altsetting 7 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 244.620258][ T9] usb 4-1: config 6 interface 230 altsetting 7 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 244.645257][ T9] usb 4-1: config 6 interface 230 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 244.666801][ T9] usb 4-1: config 6 interface 120 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 244.685155][ T9] usb 4-1: config 6 interface 120 altsetting 6 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 244.703231][ T9] usb 4-1: config 6 interface 120 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 244.724268][ T9] usb 4-1: config 6 interface 120 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 244.747483][ T9] usb 4-1: config 6 interface 120 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 244.767286][ T9] usb 4-1: config 6 interface 120 altsetting 6 has a duplicate endpoint with address 0x8B, skipping [ 244.790651][ T9] usb 4-1: config 6 interface 120 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 244.813119][ T9] usb 4-1: config 6 interface 230 has no altsetting 0 [ 244.821857][ T9] usb 4-1: config 6 interface 11 has no altsetting 0 [ 244.828788][ T9] usb 4-1: config 6 interface 120 has no altsetting 0 [ 244.837322][ T9] usb 4-1: New USB device found, idVendor=0584, idProduct=b000, bcdDevice=2f.f0 [ 244.846805][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.855407][ T9] usb 4-1: Product: у [ 244.859763][ T9] usb 4-1: Manufacturer: ж [ 244.864306][ T9] usb 4-1: SerialNumber: syz [ 244.870691][T10604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.043356][T10631] netlink: 'syz.2.3880': attribute type 4 has an invalid length. [ 245.051828][T10631] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3880'. [ 245.092426][ T9] pl2303 4-1:6.230: required endpoints missing [ 245.099932][T10635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3881'. [ 245.110196][ T9] pl2303 4-1:6.11: required endpoints missing [ 245.119466][ T9] pl2303 4-1:6.120: required endpoints missing [ 245.135735][ T9] usb 4-1: USB disconnect, device number 75 [ 245.162686][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3882'. [ 245.607534][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 245.650980][T10661] binder: Unknown parameter 'fscontext?}' [ 245.702312][ T36] audit: type=1400 audit(1759247159.586:6735): avc: denied { create } for pid=10667 comm="syz.2.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 245.704148][T10670] netlink: 'syz.5.3896': attribute type 3 has an invalid length. [ 245.737505][ T9] usb 2-1: device descriptor read/64, error -71 [ 245.774162][ T36] audit: type=1400 audit(1759247159.656:6736): avc: denied { shutdown } for pid=10679 comm="syz.2.3901" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.849603][T10693] netlink: 'syz.2.3906': attribute type 27 has an invalid length. [ 245.879811][T10698] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 245.941794][T10705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.950423][T10705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.997562][ T9] usb 2-1: device descriptor read/64, error -71 [ 246.177537][ T1405] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 246.237519][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 246.327497][ T1405] usb 4-1: Using ep0 maxpacket: 32 [ 246.338057][ T1405] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 246.346457][ T1405] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 246.355661][ T1405] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 246.364904][ T1405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.367522][ T9] usb 2-1: device descriptor read/64, error -71 [ 246.375086][ T1405] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 246.390761][ T1405] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.404090][ T1405] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 246.413200][ T1405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.427750][ T1405] usb 4-1: config 0 descriptor?? [ 246.627566][ T9] usb 2-1: device descriptor read/64, error -71 [ 246.635481][ T1405] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 246.648136][ T1405] usb 4-1: USB disconnect, device number 76 [ 246.656861][ T1405] usblp0: removed [ 246.710340][T10762] overlayfs: failed to clone upperpath [ 246.747841][ T9] usb usb2-port1: attempt power cycle [ 247.067538][ T2120] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 247.087555][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 247.108663][ T9] usb 2-1: device descriptor read/8, error -71 [ 247.227524][ T2120] usb 4-1: Using ep0 maxpacket: 32 [ 247.233962][ T2120] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.242529][ T2120] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.246255][ T36] audit: type=1400 audit(1759247161.126:6737): avc: denied { read } for pid=10773 comm="syz.5.3938" name="file0" dev="tmpfs" ino=5992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 247.251680][ T2120] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.283043][ T2120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.292969][ T2120] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.302792][ T2120] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 247.315896][ T2120] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.325215][ T9] usb 2-1: device descriptor read/8, error -71 [ 247.331645][ T2120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.340591][ T2120] usb 4-1: config 0 descriptor?? [ 247.551719][ T2120] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 247.567515][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 247.588663][ T9] usb 2-1: device descriptor read/8, error -71 [ 247.693188][T10819] 9pnet_fd: Insufficient options for proto=fd [ 247.718660][ T9] usb 2-1: device descriptor read/8, error -71 [ 247.751911][T10705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.760545][T10705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.827621][ T9] usb usb2-port1: unable to enumerate USB device [ 248.288081][T10829] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 248.448181][T10844] /dev/rnullb0: Can't open blockdev [ 248.735699][T10862] netlink: 'syz.1.3971': attribute type 40 has an invalid length. [ 248.743941][T10862] rust_binder: Write failure EFAULT in pid:1632 [ 248.765037][T10866] __nla_validate_parse: 11 callbacks suppressed [ 248.765056][T10866] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3973'. [ 248.893089][T10883] overlayfs: failed to clone lowerpath [ 248.899736][T10883] overlayfs: failed to clone upperpath [ 248.957166][T10892] overlayfs: failed to clone upperpath [ 248.963749][T10892] netlink: 'syz.2.3983': attribute type 27 has an invalid length. [ 249.130335][ T2120] usb 4-1: USB disconnect, device number 77 [ 249.141669][ T2120] usblp0: removed [ 249.211605][T10906] /dev/rnullb0: Can't open blockdev [ 249.268289][T10898] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.275481][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.287527][T10898] bridge_slave_0: entered allmulticast mode [ 249.293997][T10898] bridge_slave_0: entered promiscuous mode [ 249.300640][T10898] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.307830][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.314944][T10898] bridge_slave_1: entered allmulticast mode [ 249.321451][T10898] bridge_slave_1: entered promiscuous mode [ 249.380047][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3993'. [ 249.389773][T10919] __vm_enough_memory: pid: 10919, comm: syz.3.3994, bytes: 18014402804453376 not enough memory for the allocation [ 249.444647][T10898] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.451779][T10898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.459130][T10898] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.466194][T10898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.497200][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.505653][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.518499][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.525592][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.560315][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.567461][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.575895][T10935] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3998'. [ 249.601514][T10937] batadv_slave_0: entered promiscuous mode [ 249.607995][T10936] batadv_slave_0: left promiscuous mode [ 249.625949][T10898] veth0_vlan: entered promiscuous mode [ 249.639970][T10898] veth1_macvtap: entered promiscuous mode [ 250.170102][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4002'. [ 250.196047][T10950] bridge0: port 1(bridge_slave_0) entered listening state [ 250.209893][T10950] rust_binder: Write failure EFAULT in pid:6 [ 250.297148][T10955] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 250.304067][T10956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 250.310911][T10955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 250.320441][T10956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1362 [ 250.330165][T10955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1362 [ 250.391545][T10958] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4006'. [ 250.447963][T10961] netlink: 'syz.3.4008': attribute type 27 has an invalid length. [ 250.457102][T10953] rust_binder: Error in use_page_slow: ESRCH [ 250.457128][T10953] rust_binder: use_range failure ESRCH [ 250.471037][T10953] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 250.487698][T10953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 250.504545][T10953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:8 [ 250.554804][T10964] /dev/rnullb0: Can't open blockdev [ 250.569650][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.576735][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.577996][T10973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4011'. [ 250.592941][T10974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 250.593931][T10971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 250.596203][T10962] bridge_slave_0: entered allmulticast mode [ 250.600739][T10974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 250.627837][T10962] bridge_slave_0: entered promiscuous mode [ 250.649829][T10962] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.657097][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.664245][T10962] bridge_slave_1: entered allmulticast mode [ 250.670767][T10962] bridge_slave_1: entered promiscuous mode [ 250.683453][ T5954] 0{X: left allmulticast mode [ 250.688665][ T5954] 0{X: left promiscuous mode [ 250.693901][ T5954] +$<: port 2(30{X) entered disabled state [ 250.701032][ T5954] bridge_slave_0: left allmulticast mode [ 250.706716][ T5954] bridge_slave_0: left promiscuous mode [ 250.712418][ T5954] +$<: port 1(bridge_slave_0) entered disabled state [ 250.729986][T10979] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 250.810629][ T5954] tipc: Left network mode [ 250.860642][T10962] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.867776][T10962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.875124][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.882201][T10962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.889645][ T1405] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 250.912144][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.920372][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.932149][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.939261][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.949591][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.956660][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.989184][ T36] audit: type=1400 audit(1759247164.876:6738): avc: denied { write } for pid=10983 comm="syz.3.4015" path="socket:[48021]" dev="sockfs" ino=48021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.991358][T10962] veth0_vlan: entered promiscuous mode [ 251.014059][T10984] input: syz0 as /devices/virtual/input/input27 [ 251.032873][ T36] audit: type=1400 audit(1759247164.916:6739): avc: denied { sys_module } for pid=10962 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 251.040397][T10962] veth1_macvtap: entered promiscuous mode [ 251.069572][T10978] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 251.078703][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.080237][T10978] rust_binder: Write failure EINVAL in pid:1657 [ 251.091657][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.107185][ T36] audit: type=1400 audit(1759247164.997:6740): avc: denied { accept } for pid=10977 comm="syz.1.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 251.128570][ T1405] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.139350][ T1405] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 251.147556][ T1405] usb 2-1: can't read configurations, error -71 [ 251.169171][T10997] netlink: 'syz.5.4016': attribute type 27 has an invalid length. [ 251.185418][T10997] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.192776][T10997] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.242076][T11000] input: syz0 as /devices/virtual/input/input28 [ 251.531622][T11012] No source specified [ 251.597579][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 251.748827][T11024] rust_binder: Write failure EFAULT in pid:26 [ 251.775221][T11026] can: request_module (can-proto-0) failed. [ 251.799160][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.827712][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.867479][ T36] audit: type=1400 audit(1759247165.712:6741): avc: denied { read write } for pid=11027 comm="syz.2.4029" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.891022][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.946250][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.969674][ T36] audit: type=1400 audit(1759247165.712:6742): avc: denied { open } for pid=11027 comm="syz.2.4029" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.988735][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'. [ 251.993203][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.018231][ T9] usb 6-1: config 0 descriptor?? [ 252.035793][T11037] rust_binder: 1384: no such ref 0 [ 252.048480][T11037] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 252.055775][T11037] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 252.122357][T11038] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.130182][T11038] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.137345][T11038] bridge_slave_0: entered allmulticast mode [ 252.144143][T11038] bridge_slave_0: entered promiscuous mode [ 252.150973][T11038] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.158289][T11038] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.165937][T11038] bridge_slave_1: entered allmulticast mode [ 252.178296][T11038] bridge_slave_1: entered promiscuous mode [ 252.348765][T11040] input: syz0 as /devices/virtual/input/input29 [ 252.359421][ T5954] bridge_slave_1: left allmulticast mode [ 252.365131][ T5954] bridge_slave_1: left promiscuous mode [ 252.372188][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.388033][ T5954] bridge_slave_0: left allmulticast mode [ 252.393762][ T5954] bridge_slave_0: left promiscuous mode [ 252.401384][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.431208][ T9] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 252.442870][ T9] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 252.450372][ T9] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 252.460632][ T9] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 252.468146][ T9] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 252.475650][ T9] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 252.485744][ T9] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 252.495728][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.497716][ T9] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 252.502847][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.518645][ T9] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 252.545742][ T5954] tipc: Left network mode [ 252.606983][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.614146][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.665433][T11038] veth0_vlan: entered promiscuous mode [ 252.681290][T11038] veth1_macvtap: entered promiscuous mode [ 252.853643][ T2120] usb 6-1: USB disconnect, device number 10 [ 252.944185][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'. [ 253.016093][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4039'. [ 253.053885][T11080] rust_binder: Got transaction with invalid offset. [ 253.053949][T11080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 253.060701][T11080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1396 [ 253.134151][T11085] __vm_enough_memory: pid: 11085, comm: syz.3.4043, bytes: 18014402804453376 not enough memory for the allocation [ 253.261959][ T36] audit: type=1400 audit(1759247167.152:6743): avc: denied { map } for pid=11083 comm="syz.1.4044" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 253.285262][ T36] audit: type=1400 audit(1759247167.152:6744): avc: denied { execute } for pid=11083 comm="syz.1.4044" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 253.285285][ T2120] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 253.369813][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 253.457869][ T2120] usb 3-1: too many configurations: 242, using maximum allowed: 8 [ 253.466522][ T2120] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 253.475057][ T2120] usb 3-1: can't read configurations, error -22 [ 253.607510][ T2120] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 253.627517][ T1405] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 253.757908][ T2120] usb 3-1: too many configurations: 242, using maximum allowed: 8 [ 253.766598][ T2120] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 253.775185][ T2120] usb 3-1: can't read configurations, error -22 [ 253.781662][ T2120] usb usb3-port1: attempt power cycle [ 253.787484][ T1405] usb 6-1: Using ep0 maxpacket: 16 [ 253.793899][ T1405] usb 6-1: config 1 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.803898][ T1405] usb 6-1: config 1 interface 0 altsetting 32 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.813803][ T1405] usb 6-1: config 1 interface 0 altsetting 32 bulk endpoint 0x82 has invalid maxpacket 0 [ 253.823762][ T1405] usb 6-1: config 1 interface 0 altsetting 32 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.833549][ T1405] usb 6-1: config 1 interface 0 altsetting 32 bulk endpoint 0x3 has invalid maxpacket 0 [ 253.843367][ T1405] usb 6-1: config 1 interface 0 has no altsetting 0 [ 253.850686][ T1405] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.860103][ T1405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.868148][ T1405] usb 6-1: SerialNumber: syz [ 254.047272][T11094] rust_binder: Read failure Err(EAGAIN) in pid:19 [ 254.117648][ T2120] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 254.134934][ T1405] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 254.144153][ T1405] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 254.148540][ T2120] usb 3-1: too many configurations: 242, using maximum allowed: 8 [ 254.156143][ T1405] usb 6-1: USB disconnect, device number 11 [ 254.172710][ T2120] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 254.185561][T11092] input: syz0 as /devices/virtual/input/input30 [ 254.191997][ T2120] usb 3-1: can't read configurations, error -22 [ 254.196868][ T36] audit: type=1400 audit(1759247168.082:6745): avc: denied { setattr } for pid=11097 comm="syz.1.4048" name="file0" dev="incremental-fs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 254.327510][ T2120] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 254.348257][ T2120] usb 3-1: too many configurations: 242, using maximum allowed: 8 [ 254.356860][ T2120] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 254.365721][ T2120] usb 3-1: can't read configurations, error -22 [ 254.372201][ T2120] usb usb3-port1: unable to enumerate USB device [ 254.426628][T11105] fuse: Bad value for 'user_id' [ 254.431604][T11105] fuse: Bad value for 'user_id' [ 254.437185][T11105] rust_binder: 11104 RLIMIT_NICE not set [ 254.785018][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 254.810578][T11109] rust_binder: Write failure EFAULT in pid:1406 [ 255.067502][ T2120] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 255.173196][ T1405] rust_binder: 11102: removing orphan mapping 0:88 [ 255.209416][T11117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4056'. [ 255.238875][ T2120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.250002][ T2120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.261775][ T2120] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.274753][ T2120] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.284165][ T2120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.293350][ T2120] usb 4-1: config 0 descriptor?? [ 255.307619][ T36] audit: type=1400 audit(1759247169.192:6746): avc: denied { append } for pid=11125 comm="syz.1.4059" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 255.381719][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4060'. [ 255.397618][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 255.403684][ T949] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 255.422301][ T36] audit: type=1400 audit(1759247169.302:6747): avc: denied { watch watch_reads } for pid=11129 comm="syz.1.4061" path="/16/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 255.511256][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4062'. [ 255.533739][T11134] rust_binder: Write failure EINVAL in pid:51 [ 255.598096][T11139] rust_binder: 11138 RLIMIT_NICE not set [ 255.610334][ T1405] rust_binder: 11137: removing orphan mapping 0:24 [ 255.704822][ T2120] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 255.712329][ T2120] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 255.719884][ T2120] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 255.727327][ T2120] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 255.734827][ T2120] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 255.742302][ T2120] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 255.749836][ T2120] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 255.757491][ T2120] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 255.766307][ T2120] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 255.927521][ T1405] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 256.078779][ T1405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 256.091701][ T1405] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 256.111124][ T1405] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 256.120044][ T9] usb 4-1: USB disconnect, device number 78 [ 256.121308][ T1405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.136479][ T1405] usb 2-1: config 0 descriptor?? [ 256.142055][T11148] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 256.150205][ T1405] usbhid 2-1:0.0: can't add hid device: -22 [ 256.156202][ T1405] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 256.187543][ T864] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 256.338791][ T864] usb 6-1: not running at top speed; connect to a high speed hub [ 256.347301][ T864] usb 6-1: config 4 has an invalid interface number: 158 but max is 0 [ 256.355575][ T864] usb 6-1: config 4 has no interface number 0 [ 256.361285][ T9] usb 2-1: USB disconnect, device number 63 [ 256.362730][ T864] usb 6-1: config 4 interface 158 altsetting 8 endpoint 0xA has invalid maxpacket 1088, setting to 64 [ 256.378642][ T864] usb 6-1: config 4 interface 158 has no altsetting 0 [ 256.386838][ T864] usb 6-1: New USB device found, idVendor=a40d, idProduct=548e, bcdDevice=5b.b9 [ 256.395948][ T864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.403990][ T864] usb 6-1: Product: syz [ 256.408191][ T864] usb 6-1: Manufacturer: syz [ 256.412798][ T864] usb 6-1: SerialNumber: syz [ 256.457642][ T2120] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 256.607497][ T2120] usb 3-1: Using ep0 maxpacket: 16 [ 256.613801][ T2120] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.623861][ T2120] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 256.630800][ T864] usb-storage 6-1:4.158: USB Mass Storage device detected [ 256.637516][ T2120] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.654600][ T2120] usb 3-1: config 1 interface 0 has no altsetting 0 [ 256.665578][ T2120] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 256.674791][ T2120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.682863][ T2120] usb 3-1: Product: syz [ 256.687069][ T2120] usb 3-1: Manufacturer: syz [ 256.691698][ T2120] usb 3-1: SerialNumber: syz [ 256.702752][ T864] usb 6-1: USB disconnect, device number 12 [ 256.888978][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 256.897549][ T1405] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 256.906004][ T2120] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 256.918812][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 256.918831][ T36] audit: type=1400 audit(1759247170.812:6750): avc: denied { read } for pid=11162 comm="syz.1.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.048845][ T1405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 257.059798][ T1405] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 257.072664][ T1405] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 257.081814][ T1405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.090814][ T1405] usb 4-1: config 0 descriptor?? [ 257.096070][T11159] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 257.102946][ T2120] usb 3-1: USB disconnect, device number 6 [ 257.104528][ T1405] usbhid 4-1:0.0: can't add hid device: -22 [ 257.115144][ T1405] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 257.157532][ T360] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 257.258565][T11165] FAT-fs (rnullb0): bogus number of reserved sectors [ 257.265280][T11165] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 257.307564][ T360] usb 2-1: Using ep0 maxpacket: 16 [ 257.314392][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.323522][T11155] usblp0: removed [ 257.327518][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.337044][ T2120] usb 4-1: USB disconnect, device number 79 [ 257.339472][ T360] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.351145][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4074'. [ 257.358545][ T360] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.376091][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.387322][ T360] usb 2-1: config 0 descriptor?? [ 257.392150][T11169] tmpfs: Unknown parameter 'hugebithin_size' [ 257.657568][ T359] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 257.787529][ T359] usb 6-1: device descriptor read/64, error -71 [ 257.794700][ T360] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 257.802216][ T360] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 257.809551][ T360] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 257.819266][ T360] microsoft 0003:045E:07DA.002A: No inputs registered, leaving [ 257.827355][ T360] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 257.838882][ T360] microsoft 0003:045E:07DA.002A: no inputs found [ 257.845402][ T360] microsoft 0003:045E:07DA.002A: could not initialize ff, continuing anyway [ 257.878586][T11179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1412 [ 257.890909][T11181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1414 [ 257.997110][T11163] rust_binder: Write failure EFAULT in pid:69 [ 258.006978][ T1405] usb 2-1: USB disconnect, device number 64 [ 258.037619][ T359] usb 6-1: device descriptor read/64, error -71 [ 258.117752][ T360] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 258.268486][ T360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.279682][ T360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.287736][ T359] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 258.289474][ T360] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.309951][ T360] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.319072][ T360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.327871][ T360] usb 3-1: config 0 descriptor?? [ 258.417510][ T359] usb 6-1: device descriptor read/64, error -71 [ 258.556245][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4083'. [ 258.579366][T11190] rust_binder: Error while translating object. [ 258.579427][T11190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 258.585704][T11190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:73 [ 258.607868][T11192] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 258.657495][ T359] usb 6-1: device descriptor read/64, error -71 [ 258.753401][ T360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 258.761126][ T360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 258.768592][ T360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 258.776016][ T360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 258.783930][ T360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 258.787779][ T359] usb usb6-port1: attempt power cycle [ 258.791412][ T360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 258.804201][ T360] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 258.811977][ T360] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 258.821055][ T360] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 258.877557][ T1405] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 259.028615][ T1405] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 259.036943][ T1405] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 259.045882][ T1405] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 259.056298][ T1405] usb 2-1: config 220 has no interface number 2 [ 259.057476][ T9] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 259.062615][ T1405] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 259.083337][ T1405] usb 2-1: config 220 interface 0 has no altsetting 0 [ 259.090168][ T1405] usb 2-1: config 220 interface 76 has no altsetting 0 [ 259.097068][ T1405] usb 2-1: config 220 interface 1 has no altsetting 0 [ 259.105337][ T1405] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 259.114486][ T1405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.122538][ T1405] usb 2-1: Product: syz [ 259.126740][ T1405] usb 2-1: Manufacturer: syz [ 259.131393][ T1405] usb 2-1: SerialNumber: syz [ 259.137497][ T359] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 259.158613][ T359] usb 6-1: device descriptor read/8, error -71 [ 259.170563][ T360] usb 3-1: USB disconnect, device number 7 [ 259.217490][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 259.223916][ T9] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.233838][ T9] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.243901][ T9] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.257049][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 259.265159][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 259.274301][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.282375][ T9] usb 4-1: Product: syz [ 259.286562][ T9] usb 4-1: Manufacturer: syz [ 259.291201][ T9] usb 4-1: SerialNumber: syz [ 259.298542][ T359] usb 6-1: device descriptor read/8, error -71 [ 259.342032][ T1405] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 259.348544][ T1405] usb 2-1: No valid video chain found. [ 259.354077][ T1405] usb 2-1: selecting invalid altsetting 0 [ 259.362922][ T1405] usb 2-1: USB disconnect, device number 65 [ 259.499018][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 259.537577][ T359] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 259.558548][ T359] usb 6-1: device descriptor read/8, error -71 [ 259.689194][ T359] usb 6-1: device descriptor read/8, error -71 [ 259.700579][ T1405] usb 4-1: USB disconnect, device number 80 [ 259.774460][T11206] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 259.797659][ T359] usb usb6-port1: unable to enumerate USB device [ 259.908921][T11197] usblp0: removed [ 260.087498][ T360] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 260.237521][ T360] usb 2-1: Using ep0 maxpacket: 16 [ 260.243983][ T360] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 260.252234][ T360] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.262377][ T360] usb 2-1: config 0 has no interface number 0 [ 260.269964][ T360] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 260.279117][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.287220][ T360] usb 2-1: Product: syz [ 260.291432][ T360] usb 2-1: Manufacturer: syz [ 260.296114][ T360] usb 2-1: SerialNumber: syz [ 260.301460][ T360] usb 2-1: config 0 descriptor?? [ 260.307411][ T360] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 260.313854][ T360] usb 2-1: No valid video chain found. [ 260.467110][T11226] syzkaller0: entered promiscuous mode [ 260.479786][T11226] syzkaller0: entered allmulticast mode [ 260.507853][ T36] audit: type=1400 audit(1759247174.392:6751): avc: denied { audit_write } for pid=11207 comm="syz.1.4090" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 260.573181][T11237] rust_binder: Error in use_page_slow: ESRCH [ 260.573207][T11237] rust_binder: use_range failure ESRCH [ 260.579596][T11237] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 260.585457][T11237] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 260.593828][T11237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:80 [ 260.636141][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4107'. [ 260.654578][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4107'. [ 260.761164][ T36] audit: type=1400 audit(1759247174.652:6752): avc: denied { bind } for pid=11253 comm="syz.2.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 260.821050][T11260] syz.2.4115 (11260) used obsolete PPPIOCDETACH ioctl [ 260.927173][T11268] tipc: Started in network mode [ 260.932280][T11268] tipc: Node identity ac14140f, cluster identity 4711 [ 260.939952][T11268] tipc: New replicast peer: 255.255.255.255 [ 260.947947][T11268] tipc: Enabled bearer , priority 10 [ 260.954960][T11270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4120'. [ 261.225326][T11308] syzkaller0: entered promiscuous mode [ 261.231122][T11308] syzkaller0: entered allmulticast mode [ 261.947479][ T360] tipc: Node number set to 2886997007 [ 263.359278][ T359] usb 2-1: USB disconnect, device number 66 [ 263.892221][ T36] audit: type=1400 audit(1759247177.782:6753): avc: denied { write } for pid=11387 comm="syz.2.4172" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 263.917475][ T359] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 264.086047][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.097651][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.108406][ T359] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.122150][ T359] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.132220][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.145117][ T359] usb 4-1: config 0 descriptor?? [ 264.307520][ T2120] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 264.458570][ T2120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.479997][ T2120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.502867][ T2120] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.516162][ T2120] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.526526][ T2120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.539469][ T2120] usb 6-1: config 0 descriptor?? [ 264.566798][ T359] plantronics 0003:047F:FFFF.002C: unbalanced collection at end of report description [ 264.590173][ T359] plantronics 0003:047F:FFFF.002C: parse failed [ 264.596854][ T359] plantronics 0003:047F:FFFF.002C: probe with driver plantronics failed with error -22 [ 264.677650][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 264.771322][ T1405] usb 4-1: USB disconnect, device number 81 [ 264.954521][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 264.967500][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 264.980923][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 264.988821][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 264.996420][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.004050][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.023430][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.032077][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.042142][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.049808][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.057313][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.065008][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.072825][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.080322][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.087814][ T2120] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 265.095437][ T2120] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 265.107713][ T2120] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 265.157540][ T359] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 265.186574][ T36] audit: type=1400 audit(1759247179.072:6754): avc: denied { create } for pid=11429 comm="syz.1.4190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 265.229076][ T1405] usb 6-1: USB disconnect, device number 17 [ 265.319226][ T359] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 265.336116][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.365492][ T359] usb 3-1: config 0 descriptor?? [ 265.621418][ T36] audit: type=1326 audit(1759247179.512:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ee512af79 code=0x7ffc0000 [ 265.670489][ T36] audit: type=1326 audit(1759247179.512:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee518eec9 code=0x7ffc0000 [ 265.701522][T11447] netpci0: tun_chr_ioctl cmd 1074025672 [ 265.707267][T11447] netpci0: ignored: set checksum enabled [ 265.711150][ T36] audit: type=1326 audit(1759247179.512:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ee512af79 code=0x7ffc0000 [ 265.736466][ T36] audit: type=1326 audit(1759247179.512:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ee512af79 code=0x7ffc0000 [ 265.760062][ T36] audit: type=1326 audit(1759247179.512:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee518eec9 code=0x7ffc0000 [ 265.786986][ T36] audit: type=1326 audit(1759247179.532:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ee512af79 code=0x7ffc0000 [ 265.810854][ T36] audit: type=1326 audit(1759247179.532:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee518eec9 code=0x7ffc0000 [ 265.811010][T11450] loop9: detected capacity change from 0 to 7 [ 265.835052][ T36] audit: type=1326 audit(1759247179.532:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ee512af79 code=0x7ffc0000 [ 265.897816][ T3399] Buffer I/O error on dev loop9, logical block 0, async page read [ 265.905869][ T3399] Buffer I/O error on dev loop9, logical block 0, async page read [ 265.917547][ T3399] loop9: unable to read partition table [ 265.923655][T11450] Buffer I/O error on dev loop9, logical block 0, async page read [ 265.937572][T11450] Buffer I/O error on dev loop9, logical block 0, async page read [ 265.955736][T11450] loop9: unable to read partition table [ 265.965930][T11450] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 265.965930][T11450] ) failed (rc=-5) [ 266.008380][ T1405] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 266.016573][T11451] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.024847][T11451] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.043013][T11451] loop9: unable to read partition table [ 266.051192][T11451] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 266.051192][T11451] ) failed (rc=-5) [ 266.053438][ T3399] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.073083][ T3399] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.086012][ T3399] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.095267][ T3399] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.511441][ T1405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.526330][ T1405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.536791][ T1405] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.566818][ T1405] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.576511][ T1405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.589808][ T1405] usb 4-1: config 0 descriptor?? [ 267.009484][ T1405] plantronics 0003:047F:FFFF.002E: unknown main item tag 0xd [ 267.018499][ T1405] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 267.030830][ T1405] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 267.268593][ T1405] usb 4-1: USB disconnect, device number 82 [ 267.497535][ T359] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 267.507906][ T359] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 267.519178][ T359] asix 3-1:0.0: probe with driver asix failed with error -71 [ 267.531381][ T359] usb 3-1: USB disconnect, device number 8 [ 268.608682][ T359] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 268.618243][ T359] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.758151][T11508] input: syz1 as /devices/virtual/input/input33 [ 269.025032][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 269.025053][ T36] audit: type=1400 audit(269.002:6814): avc: denied { write } for pid=11520 comm="syz.5.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.072756][ T36] audit: type=1400 audit(269.012:6815): avc: denied { map } for pid=11520 comm="syz.5.4225" path="socket:[51803]" dev="sockfs" ino=51803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.096496][ T36] audit: type=1400 audit(269.012:6816): avc: denied { read } for pid=11520 comm="syz.5.4225" path="socket:[51803]" dev="sockfs" ino=51803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.146165][T11526] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 269.377497][ T359] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 269.408224][ T65] kernel write not supported for file /uinput (pid: 65 comm: kworker/0:2) [ 269.528510][ T359] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 269.536679][ T359] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.546910][ T359] usb 2-1: config 0 has no interface number 0 [ 269.553107][ T359] usb 2-1: config 0 interface 34 altsetting 16 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 269.564066][ T359] usb 2-1: config 0 interface 34 altsetting 16 has a duplicate endpoint with address 0x1, skipping [ 269.574874][ T359] usb 2-1: config 0 interface 34 altsetting 16 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 269.588130][ T359] usb 2-1: config 0 interface 34 has no altsetting 0 [ 269.594921][ T359] usb 2-1: New USB device found, idVendor=0846, idProduct=4301, bcdDevice=bd.46 [ 269.604054][ T359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.637894][ T359] usb 2-1: config 0 descriptor?? [ 269.697480][ T1405] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 269.845026][ T359] usb 2-1: string descriptor 0 read error: -71 [ 269.847929][ T1405] usb 4-1: Using ep0 maxpacket: 16 [ 269.853132][ T359] usb 2-1: USB disconnect, device number 67 [ 269.862173][ T1405] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 269.870544][ T1405] usb 4-1: config 0 has no interface number 0 [ 269.876714][ T1405] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 269.886653][ T1405] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 269.896711][ T1405] usb 4-1: config 0 interface 41 has no altsetting 0 [ 269.904786][ T1405] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 269.913910][ T1405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.921992][ T1405] usb 4-1: Product: syz [ 269.926201][ T1405] usb 4-1: Manufacturer: syz [ 269.930875][ T1405] usb 4-1: SerialNumber: syz [ 269.936140][ T1405] usb 4-1: config 0 descriptor?? [ 269.941488][T11539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 269.949105][T11539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 270.157106][T11539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 270.164638][T11539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 270.601054][T11574] input: syz1 as /devices/virtual/input/input35 [ 270.653718][T11580] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4245'. [ 270.773171][ T1405] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 270.986410][ T1405] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 270.998418][ T1405] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 271.016463][ T1405] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 271.039642][ T1405] usb 4-1: USB disconnect, device number 83 [ 271.377486][ T864] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 271.502948][T11602] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 271.502974][T11602] rust_binder: Read failure Err(EFAULT) in pid:1480 [ 271.511423][T11602] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 271.518048][T11602] rust_binder: Read failure Err(EFAULT) in pid:1480 [ 271.527458][ T864] usb 2-1: Using ep0 maxpacket: 8 [ 271.542083][ T864] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 271.551340][ T864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.559436][ T864] usb 2-1: Product: syz [ 271.563665][ T864] usb 2-1: Manufacturer: syz [ 271.568346][ T864] usb 2-1: SerialNumber: syz [ 271.573606][ T864] usb 2-1: config 0 descriptor?? [ 271.827483][ T1405] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 271.977531][ T1405] usb 3-1: Using ep0 maxpacket: 32 [ 271.983823][ T1405] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 271.991985][ T1405] usb 3-1: config 0 has no interface number 0 [ 271.998136][ T1405] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.009154][ T1405] usb 3-1: config 0 interface 85 has no altsetting 0 [ 272.022686][ T1405] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 272.031848][ T1405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.039958][ T1405] usb 3-1: Product: syz [ 272.044164][ T1405] usb 3-1: Manufacturer: syz [ 272.048956][ T1405] usb 3-1: SerialNumber: syz [ 272.057576][ T1405] usb 3-1: config 0 descriptor?? [ 272.277080][ T1405] usb 3-1: USB disconnect, device number 9 [ 272.627522][ T864] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 272.777472][ T864] usb 4-1: Using ep0 maxpacket: 32 [ 272.783794][ T864] usb 4-1: config 251 has an invalid interface number: 229 but max is 0 [ 272.796832][ T864] usb 4-1: config 251 has no interface number 0 [ 272.803315][ T864] usb 4-1: config 251 interface 229 altsetting 218 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 272.814843][ T864] usb 4-1: config 251 interface 229 altsetting 218 bulk endpoint 0xF has invalid maxpacket 8 [ 272.825258][ T864] usb 4-1: config 251 interface 229 altsetting 218 bulk endpoint 0x1 has invalid maxpacket 32 [ 272.835705][ T864] usb 4-1: config 251 interface 229 has no altsetting 0 [ 272.844308][ T864] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=72.c3 [ 272.858083][ T864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.867595][ T864] usb 4-1: Product: syz [ 272.871818][ T864] usb 4-1: Manufacturer: syz [ 272.876438][ T864] usb 4-1: SerialNumber: syz [ 272.888787][T11625] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 272.896265][T11625] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 273.112659][ T864] usb 4-1: USB disconnect, device number 84 [ 273.337620][ T359] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 273.357489][ T2120] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 273.487503][ T359] usb 3-1: Using ep0 maxpacket: 8 [ 273.493658][ T359] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 273.502761][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.510825][ T2120] usb 6-1: Using ep0 maxpacket: 8 [ 273.516771][ T359] usb 3-1: config 0 descriptor?? [ 273.524661][ T2120] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 273.533794][ T2120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.541862][ T2120] usb 6-1: Product: syz [ 273.546142][ T2120] usb 6-1: Manufacturer: syz [ 273.550774][ T2120] usb 6-1: SerialNumber: syz [ 273.556127][ T2120] usb 6-1: config 0 descriptor?? [ 273.621571][ T36] audit: type=1400 audit(273.602:6817): avc: denied { view } for pid=11654 comm="syz.3.4280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 273.779833][T11659] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 274.159825][ T864] usb 2-1: USB disconnect, device number 68 [ 274.175520][T11663] syzkaller1: tun_chr_ioctl cmd 35108 [ 274.577521][ T864] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 274.727500][ T864] usb 2-1: Using ep0 maxpacket: 32 [ 274.733881][ T864] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 274.743127][ T864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.751884][ T864] usb 2-1: config 0 descriptor?? [ 275.527744][ T359] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 275.537919][ T359] asix 3-1:0.0: probe with driver asix failed with error -71 [ 275.546148][ T359] usb 3-1: USB disconnect, device number 10 [ 275.697509][ T2120] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 275.848944][ T2120] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 275.856577][ T2120] usb 4-1: can't read configurations, error -61 [ 275.987537][ T2120] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 276.127003][ T864] usb 6-1: USB disconnect, device number 18 [ 276.139273][ T2120] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 276.146963][ T2120] usb 4-1: can't read configurations, error -61 [ 276.153758][ T2120] usb usb4-port1: attempt power cycle [ 276.287519][ T359] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 276.457486][ T359] usb 3-1: Using ep0 maxpacket: 16 [ 276.465443][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.476528][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.486508][ T359] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.499606][ T359] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 276.508763][ T2120] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 276.516436][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.525604][ T359] usb 3-1: config 0 descriptor?? [ 276.549304][ T2120] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 276.556951][ T2120] usb 4-1: can't read configurations, error -61 [ 276.687463][ T2120] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 276.709199][ T2120] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 276.716915][ T2120] usb 4-1: can't read configurations, error -61 [ 276.723406][ T2120] usb usb4-port1: unable to enumerate USB device [ 276.935080][ T359] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 276.942415][ T359] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 276.949728][ T359] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 276.956980][ T359] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 276.964230][ T359] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 276.971751][ T359] microsoft 0003:045E:07DA.0030: No inputs registered, leaving [ 276.979916][ T359] microsoft 0003:045E:07DA.0030: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 276.991391][ T359] microsoft 0003:045E:07DA.0030: no inputs found [ 277.007456][ T359] microsoft 0003:045E:07DA.0030: could not initialize ff, continuing anyway [ 277.141592][ T359] usb 3-1: USB disconnect, device number 11 [ 277.265507][ T864] usb 2-1: USB disconnect, device number 69 [ 277.977744][ T864] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 278.107496][ T1405] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 278.127501][ T864] usb 2-1: Using ep0 maxpacket: 8 [ 278.127507][ T359] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 278.144056][ T864] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 278.153176][ T864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.161226][ T864] usb 2-1: Product: syz [ 278.165394][ T864] usb 2-1: Manufacturer: syz [ 278.170012][ T864] usb 2-1: SerialNumber: syz [ 278.175348][ T864] usb 2-1: config 0 descriptor?? [ 278.257517][ T1405] usb 6-1: Using ep0 maxpacket: 16 [ 278.263931][ T1405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.275226][ T1405] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 278.284326][ T1405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.287501][ T359] usb 3-1: Using ep0 maxpacket: 16 [ 278.293992][ T1405] usb 6-1: config 0 descriptor?? [ 278.302832][ T359] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 278.314096][ T359] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 278.323898][ T359] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 278.337664][ T359] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.346769][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.354821][ T359] usb 3-1: SerialNumber: syz [ 278.360602][T11706] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 278.572272][ T359] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 278.581909][ T359] usb 3-1: USB disconnect, device number 12 [ 278.705736][ T1405] hid-generic 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 278.713243][ T1405] hid-generic 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 278.720714][ T1405] hid-generic 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 278.728187][ T1405] hid-generic 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 278.735612][ T1405] hid-generic 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 278.743727][ T1405] hid-generic 0003:04D8:00DD.0031: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 278.927544][ T2120] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 279.084862][ T2120] usb 4-1: unable to get BOS descriptor or descriptor too short [ 279.093701][ T2120] usb 4-1: no configurations [ 279.098386][ T2120] usb 4-1: can't read configurations, error -22 [ 279.106985][ T65] usb 6-1: USB disconnect, device number 19 [ 279.867504][ T65] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 280.017521][ T65] usb 6-1: Using ep0 maxpacket: 32 [ 280.024223][ T65] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 280.035963][ T65] usb 6-1: config 0 has no interface number 0 [ 280.037676][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.044252][ T65] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 280.067634][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.075784][ T65] usb 6-1: Product: syz [ 280.089709][ T65] usb 6-1: Manufacturer: syz [ 280.094414][ T65] usb 6-1: SerialNumber: syz [ 280.105699][ T65] usb 6-1: config 0 descriptor?? [ 280.116202][ T65] smsc95xx v2.0.0 [ 280.167842][T11762] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 280.359432][T11768] input: syz1 as /devices/virtual/input/input36 [ 280.568028][ T65] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 280.578933][ T65] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 280.747203][ T2120] usb 2-1: USB disconnect, device number 70 [ 281.077524][ T2120] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 281.247467][ T2120] usb 2-1: Using ep0 maxpacket: 8 [ 281.253746][ T2120] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 281.265056][ T2120] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 281.275170][ T2120] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.285401][ T2120] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.298449][ T2120] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.307572][ T2120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.800510][ T65] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 281.835513][ T65] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 281.847424][ T65] usb 6-1: USB disconnect, device number 20 [ 282.077502][ T1405] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 282.228569][ T1405] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 282.236795][ T1405] usb 4-1: config 0 has no interface number 0 [ 282.244469][ T1405] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 282.253625][ T1405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.261680][ T1405] usb 4-1: Product: syz [ 282.265892][ T1405] usb 4-1: Manufacturer: syz [ 282.270545][ T1405] usb 4-1: SerialNumber: syz [ 282.275983][ T1405] usb 4-1: config 0 descriptor?? [ 283.417507][ T1405] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 283.481931][T11774] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 283.494569][T11774] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 283.502992][T11774] CPU: 1 UID: 0 PID: 11774 Comm: syz.2.4327 Not tainted syzkaller #0 99b3eabaa23ae162c27001e7be83a6c28a211609 [ 283.514632][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.524753][T11774] RIP: 0010:fuse_file_release+0x29e/0x400 [ 283.530619][T11774] Code: 00 74 12 48 89 df e8 c1 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 74 e4 a0 ff 48 ba 00 00 00 00 00 fc [ 283.550235][T11774] RSP: 0018:ffffc9000d76f828 EFLAGS: 00010202 [ 283.556330][T11774] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000 [ 283.564347][T11774] RDX: dffffc0000000000 RSI: 0000000000000081 RDI: 0000000000000082 [ 283.572354][T11774] RBP: ffffc9000d76f870 R08: 0000000000000003 R09: 0000000000000004 [ 283.580338][T11774] R10: dffffc0000000000 R11: fffff52001aeded4 R12: 0000000000000000 [ 283.588341][T11774] R13: ffff88813c737a80 R14: ffff88810f3b6000 R15: 00000000000000c8 [ 283.596330][T11774] FS: 00007fac93aa46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 283.605274][T11774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.611871][T11774] CR2: 00007f885dbd6d58 CR3: 0000000131c34000 CR4: 00000000003526b0 [ 283.619857][T11774] Call Trace: [ 283.623140][T11774] [ 283.626106][T11774] fuse_fileattr_get+0x43a/0x590 [ 283.631067][T11774] ? __cfi_fuse_fileattr_get+0x10/0x10 [ 283.636553][T11774] ? __asan_memcpy+0x5a/0x80 [ 283.641162][T11774] do_vfs_ioctl+0x89b/0x1e30 [ 283.645776][T11774] ? __futex_queue+0x19a/0x340 [ 283.650547][T11774] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 283.656191][T11774] ? __cfi___futex_queue+0x10/0x10 [ 283.661305][T11774] ? futex_wait_setup+0x1bc/0x260 [ 283.666362][T11774] ? __futex_wait+0x218/0x2a0 [ 283.671053][T11774] ? ioctl_has_perm+0x384/0x4d0 [ 283.675909][T11774] ? has_cap_mac_admin+0xd0/0xd0 [ 283.680855][T11774] ? futex_wake+0x5fb/0x900 [ 283.685366][T11774] ? futex_setup_timer+0xb4/0xd0 [ 283.690303][T11774] ? futex_wait+0x29a/0x7a0 [ 283.694813][T11774] ? __cfi_futex_wait+0x10/0x10 [ 283.699672][T11774] ? selinux_file_ioctl+0x6e0/0x1360 [ 283.704965][T11774] ? vfs_write+0x945/0xf30 [ 283.709381][T11774] ? do_futex+0x309/0x500 [ 283.713714][T11774] ? __cfi_do_futex+0x10/0x10 [ 283.718398][T11774] ? __fget_files+0x2c5/0x340 [ 283.723081][T11774] ? bpf_lsm_file_ioctl+0xd/0x20 [ 283.728028][T11774] ? security_file_ioctl+0x34/0xd0 [ 283.733145][T11774] __se_sys_ioctl+0x9f/0x1b0 [ 283.737742][T11774] __x64_sys_ioctl+0x7f/0xa0 [ 283.742337][T11774] x64_sys_call+0x1878/0x2ee0 [ 283.747053][T11774] do_syscall_64+0x58/0xf0 [ 283.751474][T11774] ? clear_bhb_loop+0x50/0xa0 [ 283.756158][T11774] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 283.762075][T11774] RIP: 0033:0x7fac92b8eec9 [ 283.765161][ T65] usb 2-1: USB disconnect, device number 71 [ 283.766515][T11774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.792034][T11774] RSP: 002b:00007fac93aa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.793201][ T36] audit: type=1400 audit(283.772:6818): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 283.800482][T11774] RAX: ffffffffffffffda RBX: 00007fac92de5fa0 RCX: 00007fac92b8eec9 [ 283.800507][T11774] RDX: 0000000000000000 RSI: 00000000801c581f RDI: 0000000000000005 [ 283.800523][T11774] RBP: 00007fac92c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 283.800541][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.824364][ T36] audit: type=1400 audit(283.772:6819): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.829727][T11774] R13: 00007fac92de6038 R14: 00007fac92de5fa0 R15: 00007ffc62b31c78 [ 283.829754][T11774] [ 283.829765][T11774] Modules linked in: [ 283.838768][ T36] audit: type=1400 audit(283.772:6820): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.846666][T11774] ---[ end trace 0000000000000000 ]--- [ 283.855553][ T36] audit: type=1400 audit(283.772:6821): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.877562][T11774] RIP: 0010:fuse_file_release+0x29e/0x400 [ 283.898514][ T36] audit: type=1400 audit(283.772:6822): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.911618][T11774] Code: 00 74 12 48 89 df e8 c1 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 74 e4 a0 ff 48 ba 00 00 00 00 00 fc [ 283.917495][ T36] audit: type=1400 audit(283.772:6823): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.937079][T11774] RSP: 0018:ffffc9000d76f828 EFLAGS: 00010202 [ 283.943190][ T36] audit: type=1400 audit(283.772:6824): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.963037][T11774] [ 284.035467][ T1405] usb 6-1: Using ep0 maxpacket: 16 [ 284.035997][T11774] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000 [ 284.041804][ T1405] usb 6-1: config 0 has too many interfaces: 64, using maximum allowed: 32 [ 284.048711][T11774] RDX: dffffc0000000000 RSI: 0000000000000081 RDI: 0000000000000082 [ 284.057356][ T1405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 64 [ 284.065418][T11774] RBP: ffffc9000d76f870 R08: 0000000000000003 R09: 0000000000000004 [ 284.077306][ T1405] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.08 [ 284.082461][T11774] R10: dffffc0000000000 R11: fffff52001aeded4 R12: 0000000000000000 [ 284.091867][ T1405] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 284.099683][T11774] R13: ffff88813c737a80 R14: ffff88810f3b6000 R15: 00000000000000c8 [ 284.107864][ T1405] usb 6-1: Product: syz [ 284.115658][T11774] FS: 00007fac93aa46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 284.121065][ T1405] usb 6-1: SerialNumber: syz [ 284.128829][T11774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.138020][ T1405] usb 6-1: config 0 descriptor?? [ 284.144941][T11774] CR2: 00007f885d7b1ff0 CR3: 0000000131c34000 CR4: 00000000003526b0 [ 284.146612][ T1405] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 284.153047][T11774] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 284.161549][ T1405] ftdi_sio ttyUSB0: unknown device type: 0x208 [ 284.168619][T11774] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 284.182836][T11774] Kernel panic - not syncing: Fatal exception [ 284.189250][T11774] Kernel Offset: disabled [ 284.193592][T11774] Rebooting in 86400 seconds..