last executing test programs: 1m17.802786066s ago: executing program 3 (id=280): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1m17.786351406s ago: executing program 3 (id=281): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x325001, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) 1m17.775275866s ago: executing program 3 (id=282): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x2207011, &(0x7f0000000000)=ANY=[@ANYRES64]) 1m17.724407377s ago: executing program 3 (id=283): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000005c0)={r1, 0x1, 0x6, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@huge_advise}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 1m17.724046627s ago: executing program 3 (id=284): keyctl$get_keyring_id(0x0, 0x0, 0x4) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x3, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x1c, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="894150da2e", @generic="15c76bc0"]}, 0x1c}], 0x1}, 0x4000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0x4, 0x4) keyctl$get_keyring_id(0x0, 0x0, 0x4) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x3, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x1c, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="894150da2e", @generic="15c76bc0"]}, 0x1c}], 0x1}, 0x4000080) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0x4, 0x4) (async) 1m17.660875368s ago: executing program 3 (id=285): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xac506000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000034c0)=""/4093, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000c00)=""/255, 0xff}, {&(0x7f0000000680)=""/148, 0xc6}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x7e}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x8910, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m17.56522962s ago: executing program 32 (id=285): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xac506000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000034c0)=""/4093, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000c00)=""/255, 0xff}, {&(0x7f0000000680)=""/148, 0xc6}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x7e}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x8910, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 28.808296975s ago: executing program 4 (id=843): mount$binderfs(0x0, 0x0, 0x0, 0x120020, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x1002, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x8e39deb88d66f74, 0xa3, 0xbd, 0x92, 0x8, 0x499, 0x100e, 0xa221, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x93, 0xc, 0x1, 0xd, 0xae, 0x9c, 0x9, [@generic={0x2, 0x3}], [{{0x9, 0x5, 0x7, 0x11, 0x3ff, 0x3, 0x4e, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc6, 0x6}]}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x5, &(0x7f0000000980)={0x5, 0xf, 0x5}}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001dc0), &(0x7f0000001e00)=0x30) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x40) syz_open_dev$evdev(0x0, 0x4, 0x1a7902) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xa, 0x20010, 0xffffffffffffffff, 0xf930000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) wait4(0x0, 0x0, 0x4, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 27.064804962s ago: executing program 4 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x100, 0x0, @mcast2, 0xffffbffc}, {0xa, 0x4e23, 0x400009, @mcast2}, 0x4, {[0x0, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x6]}}, 0x5c) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d55000905020253c751f500090582020002"], 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x40, 0x5, 0x4d, {0x4d, 0x31, "21791e2a047578fc4601b2781567235c6a77024def0f316c294c70c224194cf9b6780450c2d75cb74ff54941521c8376af6931dcf7b0aa0432dab08877c9bde0f0d7601340238a17dcc435"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000000000013f2c"], &(0x7f0000000300)={0x0, 0xf, 0x61, {0x5, 0xf, 0x61, 0x6, [@wireless={0xb, 0x10, 0x1, 0xa, 0x12, 0x0, 0xdc, 0x10, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x5, 0x22}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x4032, 0xff0f, 0x800, [0xcf, 0xf, 0xffff00, 0xffff00, 0x3f3f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x7, 0x19, 0x8001, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x3ff, 0xf, 0x7f, [0xff00c0, 0xc0, 0xc000]}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x5, 0x7, "41aafa83", "59ab4349"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x1, 0x2, 0x9, 0x4, 0xa5, 0x1000}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x20, 0xe, 0x3a, "27db7737d22bf20e8c55b0707d75e1ec5ff4d4f1f7c8134aa96b394d7a1c1a584ed4c264224fd719a1dac003eaf39e789efd0568d99dc59571af"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1000, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0xb, 0x2, 'P&'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x81}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, '\\j'}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xfa}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xb5}}) sendmsg$802154_dgram(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="d1f7b3aa9e1911cc604cc9868a4c533e", 0x10}, 0x1, 0x0, 0x0, 0x4401}, 0x8010) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) sendfile(r5, r0, 0x0, 0x800a121) 25.780314481s ago: executing program 4 (id=866): unshare(0x62040200) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6174000100800000000000000000000000000000000000000000100000000002"], 0x48) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xd, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/63, 0x0, 0x0, 0x36}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x10}], 0x0, 0x0, 0x0}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) (async, rerun: 32) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (rerun: 32) flock(r5, 0x2) (async, rerun: 64) r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) (rerun: 64) flock(r6, 0x1) flock(r6, 0x2) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000040)=0x4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) close(0x3) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="0001410127c0de206a0803073ff00102030109024e261b0001000010000201f3bff50009050602000202000a"], 0x0) (async, rerun: 32) mmap(&(0x7f00000fc000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r3, 0x45809000) (async, rerun: 32) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) 25.731602761s ago: executing program 4 (id=868): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) socket(0x10, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = fsopen(&(0x7f00000005c0)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000600)='#\x00', &(0x7f0000000640)='./file0\x00', 0xffffffffffffff9c) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="03de0400000000fdff002a", @ANYRES16=r3, @ANYBLOB="14000000", @ANYRESDEC=r2, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0/../file0/../file0\x00', 0x89901) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r5, r5, 0xc, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5df, 0x8b, 0x0, 0x4, 'syz0\x00'}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, &(0x7f0000000180)) move_mount(r4, &(0x7f0000000100)='.\x00', r4, &(0x7f0000000280)='./file0/file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYBLOB="d73d81f152a6d7d8cd1c97cd8c8eebfee813cd3c04ba8b301954ed837b8ca429244c3f4b89f3ee3581568ad6cc5c003e68359f1bb4c28eaa26eabd079f4997b1f0f9434700006a18ee7cfae60945b19bc582aecc640f4015231d", @ANYRESHEX=r5], 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r7, 0x200, &(0x7f0000000240)={&(0x7f0000000140)=""/96, 0x60}) syz_usb_control_io(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) 25.15624181s ago: executing program 4 (id=883): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/185, 0xb9, 0x0, 0x12}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/185, 0xb9, 0x0, 0x12}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 25.079547452s ago: executing program 4 (id=885): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x4b49, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000028c0)={'ip6_vti0\x00', &(0x7f0000002840)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0xfb, 0x10001, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8700, 0x8, 0xff, 0x2}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f00000001c0)=0x9, 0x4) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6"}) connect$can_bcm(r7, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f0000000140), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x3, 0x940, 0xe4, {0x77359400}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x17, 0x2, 0x0, 0x0, "158f8c1e480ade16ce0d08d047f9a3e4debb5e02df83fb9c2bb3dcde204b7743dd6f8668fe543e10ea409f1e1e95600cd3b7f99d734a783c7a63125744aaf79c"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000500)={0x5, 0x0, [{0x80000000, 0x2, 0x1, 0x8, 0x8, 0x8}, {0x40000001, 0x0, 0x4, 0x9, 0x3, 0x10, 0x81}, {0xa, 0x5, 0x0, 0x80000001, 0x7, 0x5, 0x41}, {0x4, 0xffffffd4, 0x4, 0xb5e3, 0x5, 0x8, 0x8}, {0xd, 0x1, 0x3, 0x8, 0x1, 0x80000000, 0xac7}]}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 25.038424412s ago: executing program 33 (id=885): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x4b49, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000028c0)={'ip6_vti0\x00', &(0x7f0000002840)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0xfb, 0x10001, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8700, 0x8, 0xff, 0x2}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f00000001c0)=0x9, 0x4) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6"}) connect$can_bcm(r7, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f0000000140), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x3, 0x940, 0xe4, {0x77359400}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x17, 0x2, 0x0, 0x0, "158f8c1e480ade16ce0d08d047f9a3e4debb5e02df83fb9c2bb3dcde204b7743dd6f8668fe543e10ea409f1e1e95600cd3b7f99d734a783c7a63125744aaf79c"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000500)={0x5, 0x0, [{0x80000000, 0x2, 0x1, 0x8, 0x8, 0x8}, {0x40000001, 0x0, 0x4, 0x9, 0x3, 0x10, 0x81}, {0xa, 0x5, 0x0, 0x80000001, 0x7, 0x5, 0x41}, {0x4, 0xffffffd4, 0x4, 0xb5e3, 0x5, 0x8, 0x8}, {0xd, 0x1, 0x3, 0x8, 0x1, 0x80000000, 0xac7}]}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 10.241910176s ago: executing program 0 (id=948): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3, 0x3}}, 0x10) (async) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) accept4$tipc(r2, 0x0, 0x0, 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8000) syz_usb_connect(0x3, 0x75, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 10.159108137s ago: executing program 5 (id=886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r3, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0x2f, 0x0, &(0x7f0000000a80)={0x11, 0x15, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_usb_connect(0x3, 0x51, &(0x7f00000029c0)=ANY=[@ANYBLOB="1201095dcb0102030109023f000200f8400109042480008b5c0d040904810603ffffff0209240202060062000409050200200008070109050c0340000108e409050a08000401d846000000000000000000"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x2, 0x6, 0xff, 0xa}, 0x2f, &(0x7f0000000040)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xb, 0x8, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "8471a1cc6feb1534b2e18db7304cb157"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x32, 0xf, 0x7, 0xc6a, 0xe}]}, 0x1, [{0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="07032420adf1de25fd1f5f42bd001d9798c9874a016d"]}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r4, 0x4, 0x9, 0x8, 0x5, 0xc, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x1, 0x8}}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 8.509960862s ago: executing program 0 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ptrace$setopts(0x4206, 0x0, 0x2, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) sendfile(r1, r0, 0x0, 0x800a121) 8.179719356s ago: executing program 5 (id=886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r3, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0x2f, 0x0, &(0x7f0000000a80)={0x11, 0x15, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_usb_connect(0x3, 0x51, &(0x7f00000029c0)=ANY=[@ANYBLOB="1201095dcb0102030109023f000200f8400109042480008b5c0d040904810603ffffff0209240202060062000409050200200008070109050c0340000108e409050a08000401d846000000000000000000"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x2, 0x6, 0xff, 0xa}, 0x2f, &(0x7f0000000040)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xb, 0x8, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "8471a1cc6feb1534b2e18db7304cb157"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x32, 0xf, 0x7, 0xc6a, 0xe}]}, 0x1, [{0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="07032420adf1de25fd1f5f42bd001d9798c9874a016d"]}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r4, 0x4, 0x9, 0x8, 0x5, 0xc, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x1, 0x8}}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 6.522230541s ago: executing program 0 (id=956): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1000000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400e011}, 0x4a030) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000240)=0xff, 0x4) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000240)=0xff, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async) close(r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x8e) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "effeb92f0f6c9e220900000000000000"}, 0x1b) (async) write$binfmt_script(r10, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "effeb92f0f6c9e220900000000000000"}, 0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r9, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) 6.370456724s ago: executing program 5 (id=886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r3, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0x2f, 0x0, &(0x7f0000000a80)={0x11, 0x15, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_usb_connect(0x3, 0x51, &(0x7f00000029c0)=ANY=[@ANYBLOB="1201095dcb0102030109023f000200f8400109042480008b5c0d040904810603ffffff0209240202060062000409050200200008070109050c0340000108e409050a08000401d846000000000000000000"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x2, 0x6, 0xff, 0xa}, 0x2f, &(0x7f0000000040)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xb, 0x8, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "8471a1cc6feb1534b2e18db7304cb157"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x32, 0xf, 0x7, 0xc6a, 0xe}]}, 0x1, [{0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="07032420adf1de25fd1f5f42bd001d9798c9874a016d"]}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r4, 0x4, 0x9, 0x8, 0x5, 0xc, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x1, 0x8}}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 4.468226473s ago: executing program 0 (id=960): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x10d000, 0x0) userfaultfd(0x80001) (async) userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x3c}], 0x1, 0x40002060, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) shutdown(r2, 0x0) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)) (async) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)) 4.466071773s ago: executing program 0 (id=963): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r0, 0x0, r0, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x17) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x10d000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0x147a5000) syz_usb_connect(0x5, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120110036a5b611082050500875c0102030109021b000209050003090438bd006b29ec8109049f0000ffffff03"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)) 4.368413144s ago: executing program 2 (id=965): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040), 0x4) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) 4.361520234s ago: executing program 2 (id=967): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x1}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x11, r1, 0x0, &(0x7f0000000540)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 4.360627134s ago: executing program 2 (id=968): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x4b3, 0x3109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x4349, 0x3e, 0x1, {0x22, 0xa8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x9, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x85, 0x6}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x351, 0x65, 0x9, 0xc2, 0x40, 0x4}, 0x3d, &(0x7f00000000c0)={0x5, 0xf, 0x3d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x2, 0x7, 0xfffc}, @generic={0x8, 0x10, 0xa, "db34740701"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3a635d7b1c1d6ca1fc8f8237842926ec"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc3, 0x0, 0x2, 0x3, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x3, 0x7}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80c}}, {0x14, &(0x7f0000000880)=@string={0x14, 0x3, "933356bc1b2bc72e0d8d727c7d6f0b39b913"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41f}}, {0xc, &(0x7f0000000200)=@string={0xc, 0x3, "59f40289fd9eb33ad726"}}, {0xc0, &(0x7f0000000240)=@string={0xc0, 0x3, "5f140c34716527a63784177de16856a08ddf917123930d9e7223fe22cf681290698148770fc10639933d56da2942118b99bfc5df8c4428aaeb642e82071c5ebcb21289411a9fba8e2f52d34a271bcda40f50ee4be6fee1e9e0d8240a4436aa1d91ddef0d556e9c573461816fbe9e987dd2919acb24761a8fe4bde1b2b2702f96c7e215be985347b0359cdc5f29c66fcb0e3eb99891dc42200220f502cf55f2cba79b40c3c4f9ee92acec2878e757eb45920b3a21ffcd058772af29d59799"}}, {0x23, &(0x7f0000000300)=@string={0x23, 0x3, "33ba629f2ff0c3986c575c002fcd3feb05378b29e4e2600daa24612723143e48a0"}}, {0x6, &(0x7f0000000340)=@string={0x6, 0x3, "c0d1257f"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, &(0x7f0000000400)={0x0, 0x2, 0xe8, {0xe8, 0x22, "0b732dab01a2531c96f02d0a8b186905d794dbde257d3a90ebe53f424bb2eb280f406d0f7f3846b2b0c9a7924c508538de74534ab4b5a8019b5d05299602378ffa00104ef0c7ff949184092269355df6805e9622baffb8305efd6bbddfb9cbd114e0b4cc3a12f802bec3391c4071758a32fca518b03852a9376d53b0acfb19f935faf0fc9e2f9c22507abbb33428dd566ec0250f982643451bdcbea071187c753d69d785e247003189757a6ad8a4ed604652f0d4170efa3f574a17d2234129567e6e6bb57c7032927248402d8bcbf70c7359dd43e01d753ecce1c58d425e7c2b17c65db7a54b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000000580)={0x0, 0x22, 0x18, {[@main=@item_012={0x1, 0x0, 0xb, "d6"}, @global=@item_4={0x3, 0x1, 0x6, "1ec75912"}, @main=@item_4={0x3, 0x0, 0xc, "754b069f"}, @global=@item_012={0x1, 0x1, 0xb765042d466dcb17, 'X'}, @local=@item_012={0x1, 0x2, 0x0, "d7"}, @main=@item_4={0x3, 0x0, 0xc, "aedfba19"}, @global=@item_012={0x2, 0x1, 0x6, "c263"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x12a}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000640)={0x20, 0x1, 0x2c, "ee4cdad7e8b537b09a902954f10a093002b7eda07df24436bc5a6f1180c973b07dc74fb3750e31b26ffd3136"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000700)={0x20, 0x1, 0xd5, "de3cef3449e386fb287d898dc91ee9148e2b1abea880493d87b97314f416c0360d87f812d19f39255d1fe5ea6da7a9a9c663ce65a7b6e122db09ef9d027d5e85f12ac690f06228a757363ac9a9521ed70ecfa823e68f62547ffa6cb8295f418b8637bf01aad923a8adcc3abc48656992d2d69c2fd9eb6fcf65cfefe52691f74d3de49485ac7b95a8cda707cfe461e8328c7ee2a33aa73b933b683ee7f82a1fb43b66922932a69fba012a6508f234b058a6f5c58ee2d58ef9ee908100a23f88b84e1880aca3e20edbe6d1513b3b3901206b24320137"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x9}}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='$\xc5\x166\x84-O\xb1\x91\xbe\x06') r2 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r2, &(0x7f00000008c0)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 4.336377955s ago: executing program 5 (id=886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r3, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0x2f, 0x0, &(0x7f0000000a80)={0x11, 0x15, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_usb_connect(0x3, 0x51, &(0x7f00000029c0)=ANY=[@ANYBLOB="1201095dcb0102030109023f000200f8400109042480008b5c0d040904810603ffffff0209240202060062000409050200200008070109050c0340000108e409050a08000401d846000000000000000000"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x2, 0x6, 0xff, 0xa}, 0x2f, &(0x7f0000000040)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xb, 0x8, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "8471a1cc6feb1534b2e18db7304cb157"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x32, 0xf, 0x7, 0xc6a, 0xe}]}, 0x1, [{0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="07032420adf1de25fd1f5f42bd001d9798c9874a016d"]}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r4, 0x4, 0x9, 0x8, 0x5, 0xc, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x1, 0x8}}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 2.383730984s ago: executing program 1 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='selinuxfs\x00', 0x4804, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) (async) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/85, 0x55}, {0x0}, {&(0x7f0000000540)=""/86, 0x56}, {&(0x7f00000019c0)=""/228, 0xe4}], 0x8}, 0x40}], 0x1, 0x40010020, 0x0) (async) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x42280, 0x20) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='mountinfo\x00', &(0x7f00000000c0)='./file0\x00', r2) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f", 0x7) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="0012ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r3, 0x10001, 0x0) 2.376014664s ago: executing program 2 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000002140)=""/260, 0x104}], 0x2}, 0x390}], 0x1, 0x10022, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xff, @mcast2, 0x7}, 0x1c) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0xf3, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000004010500e0000002000000000000000000000000000000003c00000000000000ffffff09000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a00"], 0x1bc}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x60, 0x14, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done={0x40106308, 0x3}], 0x8, 0x0, 0x0}) 2.355703005s ago: executing program 1 (id=972): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}, {@volatile}]}) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') socket$inet6(0xa, 0x80003, 0x3) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) (async) r2 = socket$inet6(0xa, 0x800, 0x594) write(r2, &(0x7f0000000200)="b9b84c93ec3f041d5e4d7a2e4632335bff784f3921332b35d54d4e23954c31e7b8a6e34ecbb356deff45468e011a48fe8ee57d970d50cfb36b42205d5eed3a60e0f408b540d3e96eccdf8b46b3af102936bf028b562d0c6e05cffde6ab410606221deaed5e043fcd7f12e6da04fc034539c15de7d74e2d2820a4845a275a78359a641068700e8f295db3f30d78002bfd28965416ac6768cdc4010ced49a8327009182b2ce7050c982e970a0b75b872d83c6470d7e43b75609e29c122e5aa2c1fb44f63cbd2c20957582e459297a874a5f89ad1829eb798d74c4411751bdc4f442ac634bb8c76", 0xe6) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 2.294527846s ago: executing program 2 (id=973): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x4000000e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x2}]}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000240)={{&(0x7f000038e000/0x1000)=nil, 0x1000}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r7}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@allocspi={0x108, 0x16, 0x1, 0xfffffffe, 0x0, {{{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@remote, 0x1, 0x32}, @in=@rand_addr=0x64010102, {0x70b}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa0b1}, [@tfcpad={0x8}, @proto={0x5, 0x19, 0x32}]}, 0x108}}, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f00000083c0)={{0x1}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000044000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="430f06b9800000c00f3235002000000f30dadd66410f38804c81002ef247ad66baf80cb8600df58bef66bafc0cb8104cdc25efc744240087000000c7442402f32f0000ff1c24c7442400b9000000c744240200200000c7442406000000000f011c2466b869008ec066ba4100b0beee", 0x6f}], 0x1, 0x41, &(0x7f0000002580)=[@cstype0={0x4, 0x6}], 0x1) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="01000000971b9bcc44ad77590779467f", @ANYRES64=0x0, @ANYRES16=r1, @ANYRES8=r0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)={0x128, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1006}, @CTA_NAT_SRC={0xb0, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x6e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0x128}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x14, 0x0, 0x0}) 2.294171346s ago: executing program 1 (id=974): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r1, r1, 0x0) 2.273765756s ago: executing program 1 (id=975): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xac506000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r2) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001240)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/205, 0xcd}, {&(0x7f0000000140)=""/206, 0xce}], 0x2, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/51, 0x33}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/101, 0x65}, {&(0x7f0000000640)=""/169, 0xa9}, {&(0x7f0000000700)=""/31, 0x1f}], 0x7, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x2, 0x20001, &(0x7f0000000980)={r4, r5+60000000}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f00000009c0)={[{0x0, 0x5, 0x5, 0x28, 0x9, 0x0, 0x7, 0x6, 0x8, 0xcb, 0x3, 0x3, 0x7}, {0x1, 0x3, 0x4, 0x8, 0x8, 0x7, 0x4, 0x7, 0x1, 0x5, 0x1, 0x40, 0x7fff}, {0xffffd807, 0xfafe, 0x8, 0x40, 0x28, 0xff, 0x5, 0xbf, 0x2, 0x87, 0x8, 0x0, 0x2}], 0x27d}) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0x100, 0x4) 2.245125586s ago: executing program 5 (id=886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r3, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0x2f, 0x0, &(0x7f0000000a80)={0x11, 0x15, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_usb_connect(0x3, 0x51, &(0x7f00000029c0)=ANY=[@ANYBLOB="1201095dcb0102030109023f000200f8400109042480008b5c0d040904810603ffffff0209240202060062000409050200200008070109050c0340000108e409050a08000401d846000000000000000000"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x2, 0x6, 0xff, 0xa}, 0x2f, &(0x7f0000000040)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xb, 0x8, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "8471a1cc6feb1534b2e18db7304cb157"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x32, 0xf, 0x7, 0xc6a, 0xe}]}, 0x1, [{0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="07032420adf1de25fd1f5f42bd001d9798c9874a016d"]}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r4, 0x4, 0x9, 0x8, 0x5, 0xc, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x1, 0x8}}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 164.943977ms ago: executing program 0 (id=976): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r0, 0x2b09d000) r1 = mmap$binder(&(0x7f0000268000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x10000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 159.400467ms ago: executing program 1 (id=977): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0xc, 0x8, 0x40, 0x7, 0x13, "71feaf33c32ed6fe90107884be157e88b3e578"}) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xfe) (async) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, 0xc}, 0x1c) sendmmsg$unix(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}], 0x1, 0x2000c080) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x583}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async, rerun: 32) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (rerun: 32) sendto$packet(r1, &(0x7f00000001c0)="c4", 0x1, 0x4000080, &(0x7f0000000080)={0x11, 0x6558, r5, 0x1, 0xd, 0x6, @remote}, 0x14) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xa, 0x4, 0x6, 0xfffa}, 0x20, [0x0, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x8, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x20000000, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x1, 0x80092a3, 0x4, 0xcbee, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x5, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x6, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53ce697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1e, 0x120002, 0x3, 0x6, 0xaaed, 0x4, 0x103], [0x10, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xfffffffd, 0x6, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x10, 0x0, 0x4, 0x4, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xfff) shutdown(r1, 0x0) (async) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000180)) pipe2$9p(&(0x7f0000000080), 0x80800) 156.515277ms ago: executing program 2 (id=978): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x20, 0x80, 0x6, 0xcd, {{0x11, 0x4, 0x2, 0x16, 0x44, 0x68, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@timestamp_prespec={0x44, 0x1c, 0x9, 0x3, 0x2, [{@rand_addr=0x64010100, 0x2124}, {@local, 0x1}, {@remote, 0xffffffff}]}, @ssrr={0x89, 0x13, 0x1a, [@empty, @remote, @loopback, @multicast2]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x4, 0xd84, 0x4c, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7800, 0x7ff, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x7, 0x1, 0x9, 0x2, {{0x10, 0x4, 0x1, 0x8, 0x40, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x1f, 0xa6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, @local]}, @end, @ssrr={0x89, 0xb, 0x23, [@broadcast, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x124, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x124}}, 0x20020040) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000240)="94", 0x1) (async) vmsplice(r9, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x0) tee(r7, r10, 0x8f5, 0x100000000000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async, rerun: 32) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x41) (rerun: 32) fsetxattr$system_posix_acl(r11, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [{0x2, 0x6}], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x2c, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x185c00, 0x0) openat$cgroup_ro(r12, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) (async) userfaultfd(0x800) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f000037a000/0x4000)=nil, 0x4000}, 0x1}) (async) r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r13, 0x2000) 32.259249ms ago: executing program 1 (id=979): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x5a10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0xee01) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) getdents(0xffffffffffffffff, 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xee01) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x18, 0x69, 0x15, 0x8000000, 0xffffffff, "", [@generic="fdee1438fa"]}, 0x18}], 0x1}, 0x8000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0xac506000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) setresuid(0xee00, 0xee00, 0x0) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x2, r7, 0x29, r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', r7, 0x2f, 0x2c, 0x80, 0x8, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7, 0x7800, 0x7ff, 0xffffffff}}) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x8910, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fstat(r8, &(0x7f0000000100)) 0s ago: executing program 5 (id=886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r3, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0x2f, 0x0, &(0x7f0000000a80)={0x11, 0x15, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_usb_connect(0x3, 0x51, &(0x7f00000029c0)=ANY=[@ANYBLOB="1201095dcb0102030109023f000200f8400109042480008b5c0d040904810603ffffff0209240202060062000409050200200008070109050c0340000108e409050a08000401d846000000000000000000"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x2, 0x6, 0xff, 0xa}, 0x2f, &(0x7f0000000040)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xb, 0x8, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "8471a1cc6feb1534b2e18db7304cb157"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x32, 0xf, 0x7, 0xc6a, 0xe}]}, 0x1, [{0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="07032420adf1de25fd1f5f42bd001d9798c9874a016d"]}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r4, 0x4, 0x9, 0x8, 0x5, 0xc, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x1, 0x8}}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 16, is_oneway:false [ 56.953390][ T1353] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 56.961370][ T1353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:25 [ 57.123846][ T1368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.141422][ T1368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.150596][ T1368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.159070][ T1369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.160073][ T1368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.167808][ T1369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.315399][ T308] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 57.355346][ T399] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 57.466445][ T308] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 57.475691][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.484365][ T308] usb 1-1: config 0 descriptor?? [ 57.506142][ T399] usb 5-1: not running at top speed; connect to a high speed hub [ 57.514878][ T399] usb 5-1: config 16 has an invalid interface number: 245 but max is 1 [ 57.523221][ T399] usb 5-1: config 16 has an invalid interface number: 131 but max is 1 [ 57.531696][ T399] usb 5-1: config 16 has no interface number 0 [ 57.537940][ T399] usb 5-1: config 16 has no interface number 1 [ 57.544143][ T399] usb 5-1: config 16 interface 245 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 57.555130][ T399] usb 5-1: config 16 interface 245 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 57.566224][ T399] usb 5-1: config 16 interface 245 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 57.577226][ T399] usb 5-1: config 16 interface 245 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 57.588223][ T399] usb 5-1: config 16 interface 245 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 57.599263][ T399] usb 5-1: config 16 interface 245 altsetting 2 endpoint 0xC has invalid maxpacket 1040, setting to 64 [ 57.610356][ T399] usb 5-1: config 16 interface 245 altsetting 2 endpoint 0xD has an invalid bInterval 20, changing to 4 [ 57.621558][ T399] usb 5-1: config 16 interface 245 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 57.632379][ T399] usb 5-1: config 16 interface 245 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 57.643205][ T399] usb 5-1: config 16 interface 245 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 57.645338][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 57.654119][ T399] usb 5-1: config 16 interface 245 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 57.672752][ T399] usb 5-1: config 16 interface 245 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 57.684005][ T399] usb 5-1: config 16 interface 131 altsetting 245 has a duplicate endpoint with address 0x6, skipping [ 57.695373][ T399] usb 5-1: config 16 interface 245 has no altsetting 0 [ 57.702431][ T399] usb 5-1: config 16 interface 131 has no altsetting 0 [ 57.710832][ T399] usb 5-1: New USB device found, idVendor=07aa, idProduct=0056, bcdDevice=98.27 [ 57.719964][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.728009][ T399] usb 5-1: Product: ࠄ [ 57.732203][ T399] usb 5-1: Manufacturer: ࠐ [ 57.738216][ T1367] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 57.806456][ T31] usb 2-1: config 0 has no interfaces? [ 57.812064][ T31] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 57.821332][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.830132][ T31] usb 2-1: config 0 descriptor?? [ 57.951441][ T399] usb 5-1: USB disconnect, device number 3 [ 58.222904][ T399] usb 2-1: USB disconnect, device number 11 [ 58.357819][ T36] audit: type=1400 audit(2000000014.940:335): avc: denied { block_suspend } for pid=1378 comm="syz.1.344" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.362847][ T1380] /dev/rnullb0: Can't open blockdev [ 58.464411][ T1382] TCP: out of memory -- consider tuning tcp_mem [ 58.486713][ T1385] 9pnet_fd: Insufficient options for proto=fd [ 58.587677][ T1388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 58.587708][ T1388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:44 [ 58.598059][ T1387] overlayfs: statfs failed on './file0' [ 58.875359][ T1349] Bluetooth: hci0: command 0x1003 tx timeout [ 58.875379][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.908753][ T36] audit: type=1400 audit(2000000015.490:336): avc: denied { write } for pid=1396 comm="syz.2.350" name="packet" dev="proc" ino=4026532609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.931561][ T36] audit: type=1400 audit(2000000015.490:337): avc: denied { map } for pid=1396 comm="syz.2.350" path="/proc/279/net/packet" dev="proc" ino=4026532609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.955818][ T36] audit: type=1400 audit(2000000015.490:338): avc: denied { execute } for pid=1396 comm="syz.2.350" path="/proc/279/net/packet" dev="proc" ino=4026532609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.176069][ T1411] 9pnet_fd: Insufficient options for proto=fd [ 59.212577][ T308] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 59.224306][ T308] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 59.234752][ T308] asix 1-1:0.0: probe with driver asix failed with error -71 [ 59.245886][ T308] usb 1-1: USB disconnect, device number 11 [ 59.505463][ T910] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 59.535389][ T399] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 59.565343][ T31] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 59.656545][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.665371][ T399] usb 5-1: device descriptor read/64, error -71 [ 59.667567][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.683713][ T910] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 59.692912][ T910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.701820][ T910] usb 2-1: config 0 descriptor?? [ 59.716788][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 59.725017][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 59.735879][ T31] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 59.744213][ T31] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 59.754038][ T1420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 59.757605][ T31] usb 3-1: config 4 has no interface number 0 [ 59.776301][ T31] usb 3-1: string descriptor 0 read error: -22 [ 59.782571][ T31] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 59.792818][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.803595][ T31] usb 3-1: Found UVC 0.00 device (04f2:b746) [ 59.810656][ T31] usb 3-1: No valid video chain found. [ 59.848304][ T36] audit: type=1400 audit(2000000016.430:339): avc: denied { map } for pid=1423 comm="syz.0.358" path="/proc/252/syscall" dev="proc" ino=12056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 59.925404][ T399] usb 5-1: device descriptor read/64, error -71 [ 59.940063][ T1427] rust_binder: 1427: no such ref 0 [ 60.052483][ T31] usb 3-1: USB disconnect, device number 17 [ 60.108781][ T910] belkin 0003:1020:0006.000B: unknown main item tag 0x7 [ 60.115846][ T910] belkin 0003:1020:0006.000B: unknown main item tag 0x6 [ 60.116062][ T36] audit: type=1400 audit(2000000016.700:340): avc: denied { map } for pid=1430 comm="syz.2.360" path="socket:[12443]" dev="sockfs" ino=12443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 60.125610][ T910] belkin 0003:1020:0006.000B: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 60.165340][ T399] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 60.309381][ T31] usb 2-1: USB disconnect, device number 12 [ 60.315807][ T399] usb 5-1: device descriptor read/64, error -71 [ 60.555335][ T399] usb 5-1: device descriptor read/64, error -71 [ 60.665538][ T399] usb usb5-port1: attempt power cycle [ 60.842665][ T1445] /dev/rnullb0: Can't open blockdev [ 60.883793][ T1447] SELinux: unknown common r [ 60.888631][ T1447] SELinux: failed to load policy [ 60.921829][ T1449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 60.949669][ T1449] binder: Unknown parameter 'fscfinw6c' [ 60.982695][ T36] audit: type=1400 audit(2000000017.560:341): avc: denied { listen } for pid=1452 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.985355][ T308] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 61.004703][ T36] audit: type=1400 audit(2000000017.560:342): avc: denied { shutdown } for pid=1452 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.015392][ T399] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 61.069382][ T399] usb 5-1: device descriptor read/8, error -71 [ 61.109896][ T1458] /dev/rnullb0: Can't open blockdev [ 61.185340][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 61.192107][ T308] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.203872][ T308] usb 1-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.217222][ T308] usb 1-1: config 0 interface 0 has no altsetting 0 [ 61.224107][ T308] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 61.233669][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.241823][ T399] usb 5-1: device descriptor read/8, error -71 [ 61.255712][ T308] usb 1-1: config 0 descriptor?? [ 61.485336][ T399] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 61.506502][ T399] usb 5-1: device descriptor read/8, error -71 [ 61.636435][ T399] usb 5-1: device descriptor read/8, error -71 [ 61.663616][ T308] usbhid 1-1:0.0: can't add hid device: -71 [ 61.669797][ T308] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 61.679399][ T308] usb 1-1: USB disconnect, device number 12 [ 61.746036][ T399] usb usb5-port1: unable to enumerate USB device [ 61.858669][ T1475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'. [ 61.913418][ T36] audit: type=1400 audit(2000000018.490:343): avc: denied { append } for pid=1476 comm="syz.1.375" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.958367][ T1483] usb usb1: usbfs: process 1483 (syz.1.378) did not claim interface 0 before use [ 62.075317][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 62.241293][ T36] audit: type=1400 audit(2000000018.820:344): avc: denied { getopt } for pid=1491 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.261836][ T36] audit: type=1400 audit(2000000018.850:345): avc: denied { connect } for pid=1491 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.286187][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.296453][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.318657][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.339605][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.348030][ T10] usb 3-1: Product: syz [ 62.352485][ T10] usb 3-1: Manufacturer: syz [ 62.357379][ T10] usb 3-1: SerialNumber: syz [ 62.445837][ T1504] fuse: Bad value for 'fd' [ 62.505087][ T1509] SELinux: unknown common r [ 62.509940][ T1509] SELinux: failed to load policy [ 62.586328][ T10] cdc_ncm 3-1:1.0: bind() failure [ 62.595328][ T62] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 62.604285][ T10] usb 3-1: USB disconnect, device number 18 [ 62.704195][ T36] audit: type=1326 audit(2000000019.280:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1515 comm="syz.4.390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f425438e929 code=0x0 [ 62.766409][ T62] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 62.774622][ T62] usb 1-1: config 0 has no interface number 0 [ 62.780875][ T62] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.793031][ T62] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.807022][ T62] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 62.816269][ T1519] KVM: debugfs: duplicate directory 1519-7 [ 62.816382][ T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.831996][ T1513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 62.841636][ T62] usb 1-1: config 0 descriptor?? [ 62.848724][ T36] audit: type=1400 audit(2000000019.430:347): avc: denied { wake_alarm } for pid=1512 comm="syz.2.389" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.892168][ T1522] tipc: Started in network mode [ 62.897258][ T1522] tipc: Node identity de1d00446c4d, cluster identity 4711 [ 62.904607][ T1522] tipc: Enabled bearer , priority 0 [ 62.913187][ T1521] tipc: Disabling bearer [ 62.957771][ T1524] SELinux: unknown common r [ 62.962572][ T1524] SELinux: failed to load policy [ 63.065327][ T910] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 63.074284][ T36] audit: type=1400 audit(2000000019.650:348): avc: denied { associate } for pid=1525 comm="syz.1.393" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 63.081257][ T1527] overlay: filesystem on ./bus not supported as upperdir [ 63.095251][ T36] audit: type=1400 audit(2000000019.660:349): avc: denied { getattr } for pid=1525 comm="syz.1.393" name="/" dev="incremental-fs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.155398][ T36] audit: type=1400 audit(2000000019.730:350): avc: denied { read } for pid=1531 comm="syz.1.395" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.178884][ T1537] binder: Bad value for 'max' [ 63.179649][ T36] audit: type=1400 audit(2000000019.730:351): avc: denied { open } for pid=1531 comm="syz.1.395" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.235364][ T910] usb 5-1: Using ep0 maxpacket: 8 [ 63.241611][ T910] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 63.249877][ T910] usb 5-1: config 0 has no interface number 1 [ 63.252609][ T62] uclogic 0003:256C:006D.000C: No inputs registered, leaving [ 63.258323][ T910] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.268038][ T62] uclogic 0003:256C:006D.000C: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input1 [ 63.274325][ T910] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 63.297269][ T910] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 63.308633][ T910] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 63.318858][ T910] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.333269][ T910] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 63.342395][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.350430][ T910] usb 5-1: Product: syz [ 63.354614][ T910] usb 5-1: Manufacturer: syz [ 63.359488][ T910] usb 5-1: SerialNumber: syz [ 63.364813][ T910] usb 5-1: config 0 descriptor?? [ 63.370132][ T1519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 63.380592][ T910] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 63.466207][ T1496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.474818][ T1496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.483655][ T910] usb 1-1: USB disconnect, device number 13 [ 63.530637][ T1540] FAULT_INJECTION: forcing a failure. [ 63.530637][ T1540] name failslab, interval 1, probability 0, space 0, times 1 [ 63.543352][ T1540] CPU: 1 UID: 0 PID: 1540 Comm: syz.2.397 Not tainted 6.12.30-syzkaller-g06ca12d7d229 #0 9aba5d3c529198ed3462d1d46215a794785d0dd5 [ 63.543386][ T1540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.543404][ T1540] Call Trace: [ 63.543411][ T1540] [ 63.543422][ T1540] __dump_stack+0x21/0x30 [ 63.543453][ T1540] dump_stack_lvl+0x10c/0x190 [ 63.543471][ T1540] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.543490][ T1540] ? kasan_save_track+0x4f/0x80 [ 63.543512][ T1540] ? kasan_save_free_info+0x4a/0x60 [ 63.543529][ T1540] ? __kasan_slab_free+0x5f/0x80 [ 63.543551][ T1540] ? kmem_cache_free+0x1c1/0x4c0 [ 63.543571][ T1540] ? kern_path+0x46/0x60 [ 63.543593][ T1540] ? do_move_mount_old+0xbc/0x180 [ 63.543613][ T1540] dump_stack+0x19/0x20 [ 63.543630][ T1540] should_fail_ex+0x3d9/0x530 [ 63.543649][ T1540] should_failslab+0xac/0x100 [ 63.543672][ T1540] __kmalloc_cache_noprof+0x41/0x3c0 [ 63.543691][ T1540] ? get_mountpoint+0x21f/0x500 [ 63.543710][ T1540] get_mountpoint+0x21f/0x500 [ 63.543729][ T1540] do_lock_mount+0x424/0x520 [ 63.543753][ T1540] ? mnt_warn_timestamp_expiry+0x370/0x370 [ 63.543777][ T1540] ? __kasan_slab_free+0x6a/0x80 [ 63.543799][ T1540] do_move_mount+0x2a/0x810 [ 63.543822][ T1540] ? putname+0x113/0x150 [ 63.543843][ T1540] do_move_mount_old+0x100/0x180 [ 63.543862][ T1540] ? do_change_type+0x510/0x510 [ 63.543881][ T1540] ? security_capable+0xcf/0xf0 [ 63.543898][ T1540] ? ns_capable+0x91/0xf0 [ 63.543917][ T1540] path_mount+0x748/0x1050 [ 63.543935][ T1540] ? putname+0x113/0x150 [ 63.543956][ T1540] __se_sys_mount+0x2bd/0x480 [ 63.543975][ T1540] ? ksys_write+0x1ef/0x250 [ 63.543995][ T1540] ? __x64_sys_mount+0xf0/0xf0 [ 63.544016][ T1540] __x64_sys_mount+0xc3/0xf0 [ 63.544035][ T1540] x64_sys_call+0x2021/0x2ee0 [ 63.544056][ T1540] do_syscall_64+0x58/0xf0 [ 63.544070][ T1540] ? clear_bhb_loop+0x50/0xa0 [ 63.544089][ T1540] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.544107][ T1540] RIP: 0033:0x7f2a51b8e929 [ 63.544124][ T1540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.544163][ T1540] RSP: 002b:00007f2a5291d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.544188][ T1540] RAX: ffffffffffffffda RBX: 00007f2a51db5fa0 RCX: 00007f2a51b8e929 [ 63.544201][ T1540] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000480 [ 63.544211][ T1540] RBP: 00007f2a5291d090 R08: 0000000000000000 R09: 0000000000000000 [ 63.544222][ T1540] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000001 [ 63.544231][ T1540] R13: 0000000000000000 R14: 00007f2a51db5fa0 R15: 00007ffc9f2fd938 [ 63.544244][ T1540] [ 63.731248][ T1542] SELinux: unknown common r [ 63.803339][ T1543] netlink: 140 bytes leftover after parsing attributes in process `syz.1.398'. [ 63.808926][ T1542] SELinux: failed to load policy [ 63.842526][ T1545] netlink: 4908 bytes leftover after parsing attributes in process `syz.2.399'. [ 63.926588][ T1555] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 63.927036][ T1555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.009167][ T36] audit: type=1400 audit(2000000020.590:352): avc: denied { setattr } for pid=1560 comm="syz.0.403" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.103496][ T1566] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 64.103522][ T1566] rust_binder: Read failure Err(EFAULT) in pid:279 [ 64.112674][ T1566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:279 [ 64.223417][ T1574] Invalid ELF header magic: != ELF [ 64.475529][ T910] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 64.626535][ T910] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.637641][ T910] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 64.648462][ T910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 64.655118][ T910] usb 1-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 64.664196][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.672854][ T910] usb 1-1: config 0 descriptor?? [ 64.678147][ T1574] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 64.795037][ T1579] rust_binder: 1579: no such ref 7 [ 64.800346][ T1579] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 64.800367][ T1579] rust_binder: Read failure Err(EFAULT) in pid:335 [ 65.015320][ T306] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 65.055337][ T62] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 65.176642][ T306] usb 2-1: not running at top speed; connect to a high speed hub [ 65.185152][ T306] usb 2-1: config 1 interface 1 has no altsetting 0 [ 65.193134][ T306] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.202330][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.210373][ T306] usb 2-1: Product: syz [ 65.214567][ T306] usb 2-1: Manufacturer: syz [ 65.215317][ T62] usb 3-1: Using ep0 maxpacket: 16 [ 65.219208][ T306] usb 2-1: SerialNumber: syz [ 65.226009][ T62] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 65.237099][ T62] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.247673][ T62] usb 3-1: config 0 has no interface number 0 [ 65.255723][ T62] usb 3-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 65.264908][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.272999][ T62] usb 3-1: Product: syz [ 65.277236][ T62] usb 3-1: Manufacturer: syz [ 65.281858][ T62] usb 3-1: SerialNumber: syz [ 65.287490][ T62] usb 3-1: config 0 descriptor?? [ 65.290045][ T910] usbhid 1-1:0.0: can't add hid device: -71 [ 65.304080][ T910] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 65.313085][ T910] usb 1-1: USB disconnect, device number 14 [ 65.498456][ T62] usb 3-1: Found UVC 0.00 device syz (0408:4034) [ 65.504888][ T62] usb 3-1: No valid video chain found. [ 65.633972][ T306] usb 2-1: 2:1 : sample bitwidth 9 in over sample bytes 1 [ 65.641264][ T306] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 65.651755][ T306] usb 2-1: USB disconnect, device number 13 [ 65.661196][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 65.708551][ T31] usb 5-1: USB disconnect, device number 8 [ 65.823597][ T1587] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 65.823796][ T1587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.853209][ T1591] TCP: out of memory -- consider tuning tcp_mem [ 65.967942][ T1601] binder: Unknown parameter 'rw+Z|*/aLSAJjIaz4#L}xRF7e' [ 66.119903][ T1609] rust_binder: Error while translating object. [ 66.119930][ T1609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.126394][ T1609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300 [ 66.149820][ T399] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 66.177485][ T1616] TCP: out of memory -- consider tuning tcp_mem [ 66.316455][ T399] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.327489][ T399] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 66.338308][ T399] usb 5-1: config 0 interface 0 has no altsetting 0 [ 66.344953][ T399] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 66.354054][ T399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.362695][ T399] usb 5-1: config 0 descriptor?? [ 66.367987][ T1598] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 66.405355][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 66.556675][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.567773][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.577580][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.590520][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.599619][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.608411][ T31] usb 2-1: config 0 descriptor?? [ 66.780520][ T399] wacom 0003:056A:0319.000D: unknown main item tag 0x0 [ 66.787516][ T399] wacom 0003:056A:0319.000D: unknown main item tag 0x0 [ 66.794417][ T399] wacom 0003:056A:0319.000D: unknown main item tag 0x0 [ 66.801387][ T399] wacom 0003:056A:0319.000D: unknown main item tag 0x0 [ 66.808307][ T399] wacom 0003:056A:0319.000D: unknown main item tag 0x0 [ 66.815226][ T399] wacom 0003:056A:0319.000D: unknown main item tag 0x0 [ 66.822163][ T399] wacom 0003:056A:0319.000D: unknown main item tag 0x0 [ 66.829092][ T399] wacom 0003:056A:0319.000D: unknown main item tag 0x0 [ 66.982362][ T1598] SELinux: unknown common r [ 66.987230][ T1598] SELinux: failed to load policy [ 67.028912][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 67.042935][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 67.058274][ T31] usb 2-1: USB disconnect, device number 14 [ 67.065075][ T1624] netlink: 92 bytes leftover after parsing attributes in process `syz.0.424'. [ 67.084757][ T910] usb 5-1: USB disconnect, device number 9 [ 67.542497][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 67.542517][ T36] audit: type=1400 audit(2000000024.120:358): avc: denied { write } for pid=1628 comm="syz.1.425" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 67.634732][ T1633] binder: Bad value for 'defcontext' [ 67.652390][ T1635] netlink: 5 bytes leftover after parsing attributes in process `syz.4.428'. [ 67.661428][ T1635] 0M: renamed from gretap0 (while UP) [ 67.668163][ T1635] 0M: entered allmulticast mode [ 67.673918][ T1635] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 67.775346][ T62] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 67.877660][ T399] usb 3-1: USB disconnect, device number 19 [ 67.898181][ T1646] rust_binder: Error while translating object. [ 67.898221][ T1646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.904817][ T1646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:341 [ 67.927004][ T62] usb 2-1: Using ep0 maxpacket: 32 [ 67.946158][ T1647] TCP: out of memory -- consider tuning tcp_mem [ 67.952547][ T62] usb 2-1: config 8 has an invalid interface number: 139 but max is 0 [ 67.962261][ T62] usb 2-1: config 8 has no interface number 0 [ 67.969488][ T62] usb 2-1: config 8 interface 139 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 64 [ 67.980083][ T62] usb 2-1: config 8 interface 139 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 67.999552][ T62] usb 2-1: config 8 interface 139 has no altsetting 0 [ 68.008375][ T36] audit: type=1400 audit(2000000024.590:359): avc: denied { ioctl } for pid=1653 comm="syz.0.436" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.010805][ T62] usb 2-1: New USB device found, idVendor=07cf, idProduct=1167, bcdDevice= 1.00 [ 68.052366][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.053325][ T1652] overlayfs: missing 'lowerdir' [ 68.067526][ T62] usb 2-1: Product: 礝饍똍桡ؔꧏॿ꟩䑲쒢㸍憝ᘉ簬ꃪ洰欐렎䗻薅坂훴᭨蔚튻麇Ｚ옂ᇼ⯍똄쒣٤⒟敖慟ὸ冒첔鿽퍳伍污趰ꡜ沓碮紉Ṋ눜돟䡂᳁俐燂犋ꇈ쏖逆 [ 68.102852][ T62] usb 2-1: Manufacturer: 䀊 [ 68.108429][ T62] usb 2-1: SerialNumber: 㑢 [ 68.113694][ T1657] rust_binder: Error while translating object. [ 68.113728][ T1657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 68.120582][ T1657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:320 [ 68.129301][ T1629] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.170004][ T1667] /dev/rnullb0: Can't open blockdev [ 68.224505][ T1669] rust_binder: Write failure EINVAL in pid:351 [ 68.269511][ T36] audit: type=1400 audit(2000000024.850:360): avc: denied { shutdown } for pid=1676 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.292289][ T1677] rust_binder: 1677: no such ref 2 [ 68.300473][ T1677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 68.316960][ T36] audit: type=1400 audit(2000000024.900:361): avc: denied { mount } for pid=1680 comm="syz.4.447" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 68.352580][ T36] audit: type=1400 audit(2000000024.930:362): avc: denied { unmount } for pid=1202 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 68.425339][ T910] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 68.576459][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.587508][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.597365][ T910] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 68.606563][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.615346][ T910] usb 1-1: config 0 descriptor?? [ 68.715733][ T36] audit: type=1400 audit(2000000025.300:363): avc: denied { remount } for pid=1696 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.716414][ T1697] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 68.744495][ T1697] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 69.024593][ T910] hid-multitouch 0003:1FD2:6007.000E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 69.226104][ T36] audit: type=1400 audit(2000000025.810:364): avc: denied { create } for pid=1705 comm="syz.2.454" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.246956][ T36] audit: type=1400 audit(2000000025.810:365): avc: denied { write } for pid=1705 comm="syz.2.454" name="file0" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.269578][ T36] audit: type=1400 audit(2000000025.810:366): avc: denied { open } for pid=1705 comm="syz.2.454" path="/120/file0" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.285489][ T910] usb 1-1: USB disconnect, device number 15 [ 69.293991][ T36] audit: type=1400 audit(2000000025.810:367): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.434795][ T1721] can0: slcan on ptm1. [ 69.480540][ T1721] can0 (unregistered): slcan off ptm1. [ 69.827457][ T1761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.853220][ T1766] SELinux: security_context_str_to_sid () failed with errno=-22 [ 69.945340][ T910] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 70.075358][ T910] usb 5-1: device descriptor read/64, error -71 [ 70.104997][ T1773] rust_binder: Write failure EFAULT in pid:338 [ 70.315343][ T910] usb 5-1: device descriptor read/64, error -71 [ 70.362084][ T1776] rust_binder: Error while translating object. [ 70.362124][ T1776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.368575][ T1776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385 [ 70.487733][ T1788] input: syz0 as /devices/virtual/input/input13 [ 70.555640][ T62] usb-storage 2-1:8.139: USB Mass Storage device detected [ 70.565336][ T910] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 70.608322][ T62] usb 2-1: USB disconnect, device number 15 [ 70.639908][ T1801] raw_sendmsg: syz.0.479 forgot to set AF_INET. Fix it! [ 70.691648][ T1805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.691681][ T1805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344 [ 70.695558][ T910] usb 5-1: device descriptor read/64, error -71 [ 70.721202][ T1799] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.478'. [ 70.831458][ T1814] fuse: Bad value for 'fd' [ 70.900860][ T1825] KVM: debugfs: duplicate directory 1825-6 [ 70.975418][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 70.985417][ T910] usb 5-1: device descriptor read/64, error -71 [ 71.095794][ T910] usb usb5-port1: attempt power cycle [ 71.127013][ T10] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 71.135253][ T10] usb 1-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.145175][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 71.153574][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 71.162739][ T10] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 71.171100][ T10] usb 1-1: Product: syz [ 71.175409][ T10] usb 1-1: Manufacturer: syz [ 71.180031][ T10] usb 1-1: SerialNumber: syz [ 71.445419][ T910] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 71.466465][ T910] usb 5-1: device descriptor read/8, error -71 [ 71.588299][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 71.596508][ T910] usb 5-1: device descriptor read/8, error -71 [ 71.845338][ T910] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 71.866512][ T910] usb 5-1: device descriptor read/8, error -71 [ 71.996498][ T910] usb 5-1: device descriptor read/8, error -71 [ 72.105839][ T910] usb usb5-port1: unable to enumerate USB device [ 72.182116][ T910] usb 1-1: USB disconnect, device number 16 [ 72.191432][ T910] usblp0: removed [ 72.545340][ T307] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 72.560744][ T1884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:371 [ 72.704765][ T307] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 72.723276][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.732764][ T307] usb 2-1: config 0 descriptor?? [ 72.742601][ T1895] tipc: Can't bind to reserved service type 1 [ 72.935375][ T308] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 73.096728][ T308] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 73.104347][ T308] usb 1-1: can't read configurations, error -61 [ 73.235339][ T308] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 73.265323][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 73.386921][ T308] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 73.394720][ T308] usb 1-1: can't read configurations, error -61 [ 73.401465][ T308] usb usb1-port1: attempt power cycle [ 73.415324][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 73.421582][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.433168][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 73.444405][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 73.455641][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 73.464734][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.473492][ T10] usb 5-1: config 0 descriptor?? [ 73.479086][ T1906] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 73.487067][ T10] hub 5-1:0.0: USB hub found [ 73.687072][ T10] hub 5-1:0.0: 2 ports detected [ 73.745413][ T308] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 73.767238][ T308] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 73.774938][ T308] usb 1-1: can't read configurations, error -61 [ 73.781415][ T31] rust_binder: get_current_thread was called from the wrong process. [ 73.894135][ T1906] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 73.905347][ T308] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 73.919627][ T10] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 73.928778][ T10] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 73.942204][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 73.952645][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 73.964046][ T308] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 73.971808][ T308] usb 1-1: can't read configurations, error -61 [ 73.981514][ T308] usb usb1-port1: unable to enumerate USB device [ 73.995746][ T10] usb 5-1: USB disconnect, device number 14 [ 74.229328][ T307] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 74.246164][ T307] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 74.263251][ T307] asix 2-1:0.0: probe with driver asix failed with error -71 [ 74.276254][ T307] usb 2-1: USB disconnect, device number 16 [ 74.484313][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 74.484342][ T36] audit: type=1400 audit(2000000031.060:381): avc: denied { name_bind } for pid=1920 comm="syz.4.520" src=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 74.512179][ T36] audit: type=1400 audit(2000000031.060:382): avc: denied { map } for pid=1920 comm="syz.4.520" path="socket:[16448]" dev="sockfs" ino=16448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 74.538745][ T36] audit: type=1400 audit(2000000031.060:383): avc: denied { accept } for pid=1920 comm="syz.4.520" path="socket:[16448]" dev="sockfs" ino=16448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 74.807372][ T1930] overlayfs: missing 'lowerdir' [ 74.874693][ T36] audit: type=1400 audit(2000000031.450:384): avc: denied { setattr } for pid=1931 comm="syz.1.525" name="" dev="pipefs" ino=16464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 75.040889][ T1945] /dev/rnullb0: Can't open blockdev [ 75.053489][ T1945] /dev/rnullb0: Can't open blockdev [ 75.060734][ T1945] /dev/rnullb0: Can't open blockdev [ 75.069804][ T1945] /dev/rnullb0: Can't open blockdev [ 75.075345][ T1945] /dev/rnullb0: Can't open blockdev [ 75.080958][ T1945] /dev/rnullb0: Can't open blockdev [ 75.086534][ T1945] /dev/rnullb0: Can't open blockdev [ 75.092379][ T1945] /dev/rnullb0: Can't open blockdev [ 75.098083][ T1945] /dev/rnullb0: Can't open blockdev [ 75.103629][ T1945] /dev/rnullb0: Can't open blockdev [ 75.109212][ T1945] /dev/rnullb0: Can't open blockdev [ 75.114754][ T1945] /dev/rnullb0: Can't open blockdev [ 75.120738][ T1950] 9pnet: Could not find request transport: fd0x0000000000000003 [ 75.120760][ T1945] /dev/rnullb0: Can't open blockdev [ 75.133975][ T1945] /dev/rnullb0: Can't open blockdev [ 75.139589][ T1945] /dev/rnullb0: Can't open blockdev [ 75.145525][ T1945] /dev/rnullb0: Can't open blockdev [ 75.151040][ T1945] /dev/rnullb0: Can't open blockdev [ 75.156697][ T1945] /dev/rnullb0: Can't open blockdev [ 75.162315][ T1945] /dev/rnullb0: Can't open blockdev [ 75.167953][ T1945] /dev/rnullb0: Can't open blockdev [ 75.173493][ T1945] /dev/rnullb0: Can't open blockdev [ 75.179160][ T1945] /dev/rnullb0: Can't open blockdev [ 75.184685][ T1945] /dev/rnullb0: Can't open blockdev [ 75.190309][ T1945] /dev/rnullb0: Can't open blockdev [ 75.196330][ T1945] /dev/rnullb0: Can't open blockdev [ 75.201901][ T1945] /dev/rnullb0: Can't open blockdev [ 75.207565][ T1945] /dev/rnullb0: Can't open blockdev [ 75.213104][ T1945] /dev/rnullb0: Can't open blockdev [ 75.218737][ T1945] /dev/rnullb0: Can't open blockdev [ 75.224273][ T1945] /dev/rnullb0: Can't open blockdev [ 75.229892][ T1945] /dev/rnullb0: Can't open blockdev [ 75.235548][ T1945] /dev/rnullb0: Can't open blockdev [ 75.241082][ T1945] /dev/rnullb0: Can't open blockdev [ 75.266414][ T36] audit: type=1400 audit(2000000031.850:385): avc: denied { create } for pid=1951 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 75.378042][ T36] audit: type=1326 audit(2000000031.960:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1922 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425438e929 code=0x7fc00000 [ 75.730692][ T1961] rust_binder: Write failure EINVAL in pid:383 [ 75.795105][ T1964] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1168, size: 4087) [ 75.801489][ T1964] rust_binder: Error while translating object. [ 75.812348][ T1964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.818569][ T1964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385 [ 75.863474][ T1966] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 75.884041][ T1966] binder: Bad value for 'stats' [ 75.967571][ T36] audit: type=1400 audit(2000000032.550:387): avc: denied { nlmsg_write } for pid=1976 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 76.063717][ T1993] netlink: 'syz.1.546': attribute type 4 has an invalid length. [ 76.071640][ T1993] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.546'. [ 76.122885][ T2005] rust_binder: 2005: no such ref 7 [ 76.154290][ T2008] can0: slcan on ptm1. [ 76.188966][ T2007] can0 (unregistered): slcan off ptm1. [ 76.350248][ T2044] netlink: 96 bytes leftover after parsing attributes in process `syz.4.557'. [ 76.361063][ T36] audit: type=1400 audit(2000000032.940:388): avc: denied { remount } for pid=2018 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.381290][ T2045] /dev/rnullb0: Can't open blockdev [ 76.517998][ T2054] mmap: syz.2.558 (2054): VmData 29073408 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 76.557189][ T2054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.557230][ T2054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458 [ 76.774114][ T2081] rust_binder: Error while translating object. [ 76.783580][ T2081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 76.790192][ T2081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:466 [ 76.833815][ T2085] rust_binder: Error while translating object. [ 76.843030][ T2085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 76.849542][ T2085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:468 [ 76.967881][ T2091] rust_binder: Error while translating object. [ 76.977301][ T2091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 76.983602][ T2091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:474 [ 77.065327][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 77.128567][ T2098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 77.194042][ T2109] overlay: Unknown parameter 'smackfsdef' [ 77.236386][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.255328][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.285666][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 77.304985][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 77.313956][ T31] usb 1-1: SerialNumber: syz [ 77.464773][ T36] audit: type=1400 audit(2000000034.040:389): avc: denied { checkpoint_restore } for pid=2113 comm="syz.1.579" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.528528][ T2083] batadv_slave_1: entered promiscuous mode [ 77.552293][ T2083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.575502][ T2083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.707373][ T31] usb 1-1: 0:2 : does not exist [ 77.712783][ T2116] batadv_slave_1: left promiscuous mode [ 77.724588][ T31] usb 1-1: USB disconnect, device number 21 [ 77.741228][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.895321][ T308] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 78.035322][ T308] usb 5-1: device descriptor read/64, error -71 [ 78.179852][ T2126] random: crng reseeded on system resumption [ 78.179854][ T36] audit: type=1400 audit(2000000034.760:390): avc: denied { write } for pid=2123 comm="syz.1.582" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.275334][ T308] usb 5-1: device descriptor read/64, error -71 [ 78.375361][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 78.505320][ T31] usb 3-1: device descriptor read/64, error -71 [ 78.525325][ T308] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 78.655329][ T308] usb 5-1: device descriptor read/64, error -71 [ 78.745342][ T31] usb 3-1: device descriptor read/64, error -71 [ 78.895361][ T308] usb 5-1: device descriptor read/64, error -71 [ 78.967562][ T2129] binder: Bad value for 'max' [ 78.985567][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 79.006577][ T308] usb usb5-port1: attempt power cycle [ 79.017783][ T2135] batadv_slave_0: entered promiscuous mode [ 79.024238][ T2135] rust_binder: validate_parent_fixup: new_min_offset=14, sg_entry.length=0 [ 79.024263][ T2135] rust_binder: Error while translating object. [ 79.033165][ T2135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.039584][ T2135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:409 [ 79.049733][ T2134] batadv_slave_0: left promiscuous mode [ 79.125333][ T31] usb 3-1: device descriptor read/64, error -71 [ 79.315362][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 79.355346][ T308] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 79.366529][ T31] usb 3-1: device descriptor read/64, error -71 [ 79.380399][ T308] usb 5-1: device descriptor read/8, error -71 [ 79.381683][ T2169] 9pnet_fd: Insufficient options for proto=fd [ 79.465347][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 79.471797][ T2139] rust_binder: Write failure EFAULT in pid:411 [ 79.473469][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.485468][ T31] usb usb3-port1: attempt power cycle [ 79.488046][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 79.500804][ T10] usb 1-1: can't read configurations, error -71 [ 79.516462][ T308] usb 5-1: device descriptor read/8, error -71 [ 79.755355][ T308] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 79.776377][ T308] usb 5-1: device descriptor read/8, error -71 [ 79.835319][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 79.856459][ T31] usb 3-1: device descriptor read/8, error -71 [ 79.906496][ T308] usb 5-1: device descriptor read/8, error -71 [ 79.987136][ T31] usb 3-1: device descriptor read/8, error -71 [ 80.015415][ T308] usb usb5-port1: unable to enumerate USB device [ 80.225340][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 80.246769][ T31] usb 3-1: device descriptor read/8, error -71 [ 80.280904][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 80.280921][ T36] audit: type=1400 audit(2000000036.860:392): avc: denied { write } for pid=2177 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.282459][ T2178] fuse: Unknown parameter 'smackfsfloor' [ 80.287598][ T36] audit: type=1400 audit(2000000036.860:393): avc: denied { mounton } for pid=2177 comm="syz.1.601" path="/174/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 80.339434][ T36] audit: type=1400 audit(2000000036.920:394): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.359245][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 80.376372][ T31] usb 3-1: device descriptor read/8, error -71 [ 80.485484][ T31] usb usb3-port1: unable to enumerate USB device [ 80.516575][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.527576][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.537348][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.550188][ T10] usb 1-1: New USB device found, idVendor=1223, idProduct=0107, bcdDevice= 0.00 [ 80.559449][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.568210][ T10] usb 1-1: config 0 descriptor?? [ 80.705323][ T307] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 80.865305][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 80.871763][ T307] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 80.881862][ T307] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 80.892229][ T307] usb 2-1: config 1 interface 0 has no altsetting 0 [ 80.900610][ T307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 80.910036][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.918287][ T307] usb 2-1: Product: syz [ 80.922647][ T307] usb 2-1: Manufacturer: syz [ 80.927535][ T307] usb 2-1: SerialNumber: syz [ 80.935185][ T2185] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 80.943087][ T2185] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 81.168056][ T307] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 81.202728][ T307] usb 2-1: USB disconnect, device number 17 [ 81.218093][ T307] usblp0: removed [ 81.326656][ T2196] rust_binder: Error while translating object. [ 81.326690][ T2196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.333057][ T2196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:413 [ 81.474794][ T10] hid (null): unknown global tag 0xc [ 81.491142][ T10] hid (null): usage index exceeded [ 81.496330][ T10] hid (null): usage index exceeded [ 81.501473][ T10] hid (null): unknown global tag 0xc [ 81.513298][ T10] hid (null): invalid report_size 1078742164 [ 81.520090][ T10] hid (null): unknown global tag 0xc [ 81.526567][ T10] hid-generic 0003:1223:0107.000F: unknown global tag 0xc [ 81.533754][ T10] hid-generic 0003:1223:0107.000F: item 0 1 1 12 parsing failed [ 81.541752][ T10] hid-generic 0003:1223:0107.000F: probe with driver hid-generic failed with error -22 [ 81.684333][ T307] usb 1-1: USB disconnect, device number 23 [ 81.727812][ T2214] fuse: Unknown parameter 'fdp0x0000000000000003' [ 81.752000][ T36] audit: type=1400 audit(2000000038.330:395): avc: denied { mounton } for pid=2215 comm="syz.1.611" path="/181/file0" dev="tmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.775065][ T36] audit: type=1400 audit(2000000038.330:396): avc: denied { mount } for pid=2215 comm="syz.1.611" name="/" dev="pstore" ino=2678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 81.775705][ T2216] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 82.005830][ T2227] netlink: 188 bytes leftover after parsing attributes in process `syz.1.616'. [ 82.015630][ T36] audit: type=1400 audit(2000000038.600:397): avc: denied { setopt } for pid=2226 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.381462][ T36] audit: type=1400 audit(2000000038.960:398): avc: denied { map } for pid=2246 comm="syz.4.625" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 82.476302][ T2253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 82.508460][ T2255] rust_binder: 2255: no such ref 3 [ 82.615464][ T2264] rust_binder: Error while translating object. [ 82.615510][ T2264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.621744][ T2264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 82.752330][ T36] audit: type=1400 audit(2000000039.330:399): avc: denied { module_load } for pid=2297 comm="syz.4.636" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=18905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 82.815639][ T36] audit: type=1400 audit(2000000039.370:400): avc: denied { mounton } for pid=2297 comm="syz.4.636" path="/69/file0" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 83.428849][ T2328] can0: slcan on ptm1. [ 83.458644][ T2337] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.458939][ T2337] rust_binder: Error while translating object. [ 83.470411][ T2337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.480461][ T2337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:436 [ 83.490001][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 83.493480][ T2326] can0 (unregistered): slcan off ptm1. [ 83.515845][ T36] audit: type=1400 audit(2000000040.090:401): avc: denied { lock } for pid=2336 comm="syz.0.649" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.518700][ T2346] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2346 comm=syz.4.651 [ 83.563244][ T2351] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2351 comm=syz.4.651 [ 83.576860][ T2353] /dev/rnullb0: Can't open blockdev [ 83.640079][ T10] usb 3-1: device descriptor read/64, error -71 [ 83.885357][ T10] usb 3-1: device descriptor read/64, error -71 [ 84.125342][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 84.255335][ T10] usb 3-1: device descriptor read/64, error -71 [ 84.851380][ T2406] rust_binder: Error while translating object. [ 84.851420][ T2406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.858073][ T2406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 84.867744][ T307] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 85.036505][ T307] usb 5-1: config 0 has no interfaces? [ 85.043724][ T307] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 85.053190][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 85.061531][ T307] usb 5-1: Product: syz [ 85.066007][ T307] usb 5-1: Manufacturer: syz [ 85.070687][ T307] usb 5-1: SerialNumber: syz [ 85.076507][ T307] usb 5-1: config 0 descriptor?? [ 85.145316][ T910] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 85.154364][ T10] usb 3-1: device descriptor read/64, error -71 [ 85.275687][ T10] usb usb3-port1: attempt power cycle [ 85.305313][ T910] usb 1-1: Using ep0 maxpacket: 16 [ 85.314550][ T910] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.325549][ T910] usb 1-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.338596][ T910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.345244][ T910] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 85.354453][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.363384][ T910] usb 1-1: config 0 descriptor?? [ 85.615320][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 85.639589][ T10] usb 3-1: device descriptor read/8, error -71 [ 85.770993][ T910] usbhid 1-1:0.0: can't add hid device: -71 [ 85.775902][ T10] usb 3-1: device descriptor read/8, error -71 [ 85.781873][ T910] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 85.801244][ T910] usb 1-1: USB disconnect, device number 24 [ 85.812248][ T2418] rust_binder: Write failure EFAULT in pid:511 [ 86.129161][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 86.129181][ T36] audit: type=1400 audit(2000000042.710:405): avc: denied { remount } for pid=2435 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.129647][ T2436] option changes via remount are deprecated (pid=2435 comm=syz.2.672) [ 86.171302][ T2436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:521 [ 86.203005][ T2442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:525 [ 86.435311][ T910] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 86.470637][ T2456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:455 [ 86.491834][ T2458] vlan1: entered allmulticast mode [ 86.506223][ T2458] veth0_vlan: entered allmulticast mode [ 86.512519][ T2458] vlan1: left allmulticast mode [ 86.517467][ T2458] veth0_vlan: left allmulticast mode [ 86.625311][ T910] usb 2-1: Using ep0 maxpacket: 32 [ 86.636384][ T910] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 86.653568][ T910] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.666737][ T910] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.681006][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.689422][ T910] usb 2-1: Product: syz [ 86.696477][ T910] usb 2-1: Manufacturer: syz [ 86.704265][ T910] usb 2-1: SerialNumber: syz [ 86.752653][ T36] audit: type=1400 audit(2000000043.330:406): avc: denied { map } for pid=2468 comm="syz.0.684" path="socket:[19450]" dev="sockfs" ino=19450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 86.873843][ T2473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.686'. [ 86.883923][ T2473] batadv_slave_1: entered promiscuous mode [ 86.893426][ T2473] tmpfs: Unknown parameter 'no' [ 86.899271][ T2472] batadv_slave_1: left promiscuous mode [ 86.918864][ T910] usb 2-1: 0:2 : does not exist [ 86.929420][ T910] usb 2-1: USB disconnect, device number 18 [ 87.034352][ T2477] KVM: debugfs: duplicate directory 2477-6 [ 87.040283][ T31] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 87.196773][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.207867][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.217670][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 87.226774][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.235415][ T31] usb 1-1: config 0 descriptor?? [ 87.445565][ T31] lua 0003:1E7D:2C2E.0010: unbalanced collection at end of report description [ 87.455090][ T31] lua 0003:1E7D:2C2E.0010: parse failed [ 87.461013][ T31] lua 0003:1E7D:2C2E.0010: probe with driver lua failed with error -22 [ 87.470505][ T31] usb 1-1: USB disconnect, device number 25 [ 87.577319][ T2510] /dev/rnullb0: Can't open blockdev [ 87.625606][ T10] usb 5-1: USB disconnect, device number 19 [ 87.707616][ T2514] __vm_enough_memory: pid: 2514, comm: syz.4.695, bytes: 21199722852352 not enough memory for the allocation [ 87.741931][ T2518] syz.4.697 uses obsolete (PF_INET,SOCK_PACKET) [ 87.895323][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 88.045308][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 88.054253][ T31] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 88.069728][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.083319][ T31] usb 1-1: Product: syz [ 88.087590][ T31] usb 1-1: Manufacturer: syz [ 88.092411][ T31] usb 1-1: SerialNumber: syz [ 88.097985][ T31] usb 1-1: config 0 descriptor?? [ 88.104351][ T31] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 88.112565][ T31] usb 1-1: Detected FT232H [ 88.304487][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 88.585310][ T399] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 88.700265][ T2536] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2536 comm=syz.2.703 [ 88.715416][ T399] usb 5-1: device descriptor read/64, error -71 [ 88.716386][ T31] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 88.730949][ T31] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 88.744909][ T31] usb 1-1: USB disconnect, device number 26 [ 88.747056][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 88.751194][ T2541] binder: Bad value for 'max' [ 88.764630][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 88.775526][ T31] ftdi_sio 1-1:0.0: device disconnected [ 88.799629][ T2543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.705'. [ 88.906407][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.917398][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.930352][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.939441][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.948217][ T10] usb 2-1: config 0 descriptor?? [ 88.955321][ T399] usb 5-1: device descriptor read/64, error -71 [ 89.055343][ T910] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 89.206428][ T910] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.214461][ T910] usb 3-1: config 0 has no interface number 0 [ 89.215338][ T399] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 89.220933][ T910] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.245292][ T910] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.255147][ T910] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.268055][ T910] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 89.277615][ T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.289209][ T910] usb 3-1: config 0 descriptor?? [ 89.297316][ T2547] SELinux: failed to load policy [ 89.354120][ T2549] tipc: Enabling of bearer rejected, failed to enable media [ 89.357063][ T10] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 89.370520][ T399] usb 5-1: device descriptor read/64, error -71 [ 89.377479][ T10] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 89.387830][ T10] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 89.615329][ T399] usb 5-1: device descriptor read/64, error -71 [ 89.678202][ T306] usb 2-1: USB disconnect, device number 19 [ 89.696865][ T910] uclogic 0003:28BD:0042.0012: failed retrieving string descriptor #100: -71 [ 89.705771][ T910] uclogic 0003:28BD:0042.0012: failed retrieving pen parameters: -71 [ 89.713881][ T910] uclogic 0003:28BD:0042.0012: pen probing failed: -71 [ 89.720792][ T910] uclogic 0003:28BD:0042.0012: failed probing parameters: -71 [ 89.728431][ T910] uclogic 0003:28BD:0042.0012: probe with driver uclogic failed with error -71 [ 89.735490][ T399] usb usb5-port1: attempt power cycle [ 89.738900][ T910] usb 3-1: USB disconnect, device number 28 [ 90.075353][ T399] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 90.096378][ T399] usb 5-1: device descriptor read/8, error -71 [ 90.226358][ T399] usb 5-1: device descriptor read/8, error -71 [ 90.233605][ T2561] /dev/rnullb0: Can't open blockdev [ 90.383431][ T2585] overlayfs: missing 'lowerdir' [ 90.475389][ T399] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 90.506444][ T399] usb 5-1: device descriptor read/8, error -71 [ 90.643667][ T2595] tipc: Enabling of bearer rejected, failed to enable media [ 90.653074][ T399] usb 5-1: device descriptor read/8, error -71 [ 90.673815][ T2597] netlink: 104 bytes leftover after parsing attributes in process `syz.1.724'. [ 90.760970][ T2599] sit0: entered promiscuous mode [ 90.766163][ T399] usb usb5-port1: unable to enumerate USB device [ 90.768131][ T2599] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 90.780419][ T2599] netlink: 1 bytes leftover after parsing attributes in process `syz.1.725'. [ 90.833148][ T36] audit: type=1400 audit(2000000047.410:407): avc: denied { write } for pid=2604 comm="syz.2.727" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.030622][ T2615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.043130][ T2617] 9pnet: Could not find request transport: f [ 91.065708][ T399] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 91.216441][ T399] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.227715][ T399] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.237816][ T399] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.244477][ T399] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 91.253617][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.265049][ T399] usb 3-1: config 0 descriptor?? [ 91.672921][ T399] apple 0003:05AC:029F.0013: item fetching failed at offset 3/5 [ 91.685561][ T399] apple 0003:05AC:029F.0013: parse failed [ 91.695352][ T399] apple 0003:05AC:029F.0013: probe with driver apple failed with error -22 [ 91.854474][ T2642] 9pnet_fd: Insufficient options for proto=fd [ 91.880152][ T10] usb 3-1: USB disconnect, device number 29 [ 92.027099][ T2651] /dev/rnullb0: Can't open blockdev [ 92.050068][ T2653] netlink: 'syz.1.743': attribute type 4 has an invalid length. [ 92.062729][ T2653] netlink: 'syz.1.743': attribute type 4 has an invalid length. [ 92.075148][ T36] audit: type=1400 audit(2000000048.650:408): avc: denied { getopt } for pid=2652 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.095296][ T399] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 92.119716][ T36] audit: type=1400 audit(2000000048.650:409): avc: denied { ioctl } for pid=2652 comm="syz.1.743" path="socket:[21566]" dev="sockfs" ino=21566 ioctlcmd=0xaed5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.207312][ T36] audit: type=1400 audit(2000000048.790:410): avc: denied { ioctl } for pid=2658 comm="syz.1.746" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.254939][ T399] usb 5-1: device descriptor read/64, error -71 [ 92.263974][ T2662] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 92.272577][ T2662] rust_binder: Write failure EINVAL in pid:703 [ 92.451457][ T2683] rust_binder: Error while translating object. [ 92.465399][ T2683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.471646][ T2683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:529 [ 92.495343][ T399] usb 5-1: device descriptor read/64, error -71 [ 92.617206][ T2698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 92.617231][ T2698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:537 [ 92.691534][ T2702] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2702 comm=syz.0.759 [ 92.743899][ T2704] netlink: 68 bytes leftover after parsing attributes in process `syz.0.760'. [ 92.745371][ T399] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 92.775292][ T36] audit: type=1400 audit(2000000049.350:411): avc: denied { write } for pid=2705 comm="syz.0.761" path="socket:[21723]" dev="sockfs" ino=21723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.807083][ T2711] rust_binder: Error while translating object. [ 92.807117][ T2711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.813334][ T2711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:550 [ 92.825321][ T306] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 92.885401][ T399] usb 5-1: device descriptor read/64, error -71 [ 92.956415][ T36] audit: type=1400 audit(2000000049.540:412): avc: denied { accept } for pid=2717 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.996334][ T306] usb 2-1: config 223 has an invalid interface number: 35 but max is 3 [ 93.015413][ T306] usb 2-1: config 223 has an invalid interface number: 252 but max is 3 [ 93.024076][ T306] usb 2-1: config 223 has an invalid interface number: 61 but max is 3 [ 93.042888][ T306] usb 2-1: config 223 has an invalid interface number: 35 but max is 3 [ 93.052771][ T2733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.063614][ T306] usb 2-1: config 223 contains an unexpected descriptor of type 0x2, skipping [ 93.073665][ T306] usb 2-1: config 223 has 3 interfaces, different from the descriptor's value: 4 [ 93.073919][ T2733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.083131][ T306] usb 2-1: config 223 has no interface number 0 [ 93.096931][ T306] usb 2-1: config 223 has no interface number 1 [ 93.103246][ T306] usb 2-1: config 223 has no interface number 2 [ 93.109750][ T306] usb 2-1: config 223 interface 35 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 93.124562][ T306] usb 2-1: config 223 interface 35 altsetting 6 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 93.125311][ T399] usb 5-1: device descriptor read/64, error -71 [ 93.143948][ T306] usb 2-1: config 223 interface 35 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 93.154917][ T306] usb 2-1: config 223 interface 35 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 93.170723][ T306] usb 2-1: config 223 interface 35 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 93.181946][ T306] usb 2-1: config 223 interface 35 altsetting 6 endpoint 0x8 has invalid maxpacket 576, setting to 64 [ 93.193195][ T306] usb 2-1: config 223 interface 35 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 93.204343][ T306] usb 2-1: config 223 interface 252 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 93.215921][ T306] usb 2-1: config 223 interface 61 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 93.238902][ T306] usb 2-1: config 223 interface 61 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 93.249364][ T399] usb usb5-port1: attempt power cycle [ 93.257002][ T306] usb 2-1: config 223 interface 61 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 93.269085][ T306] usb 2-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 93.275323][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 93.285915][ T306] usb 2-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 93.300141][ T306] usb 2-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 93.311050][ T306] usb 2-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 93.322136][ T306] usb 2-1: config 223 interface 35 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 93.336597][ T306] usb 2-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 93.347610][ T306] usb 2-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 93.359742][ T306] usb 2-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 93.370799][ T306] usb 2-1: config 223 interface 35 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 93.382275][ T306] usb 2-1: config 223 interface 35 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 93.393563][ T306] usb 2-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 93.404724][ T306] usb 2-1: config 223 interface 35 has no altsetting 0 [ 93.411798][ T306] usb 2-1: config 223 interface 35 has no altsetting 1 [ 93.418887][ T306] usb 2-1: config 223 interface 252 has no altsetting 0 [ 93.426509][ T306] usb 2-1: config 223 interface 61 has no altsetting 0 [ 93.435825][ T306] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=b4.bb [ 93.446570][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.454608][ T306] usb 2-1: Product: syz [ 93.459089][ T306] usb 2-1: Manufacturer: syz [ 93.463715][ T306] usb 2-1: SerialNumber: syz [ 93.495470][ T2753] netlink: 152 bytes leftover after parsing attributes in process `syz.0.772'. [ 93.517598][ T2755] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 93.559054][ T2760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 93.566995][ T2760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:584 [ 93.578562][ T2761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.595340][ T399] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 93.613977][ T2765] syz.2.775: attempt to access beyond end of device [ 93.613977][ T2765] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 93.626830][ T2765] FAT-fs (loop2): unable to read boot sector [ 93.646310][ T399] usb 5-1: device descriptor read/8, error -71 [ 93.672937][ T2771] SELinux: unknown common r [ 93.677734][ T2771] SELinux: failed to load policy [ 93.685119][ T2696] rust_binder: Failed copying remainder into alloc: EFAULT [ 93.685143][ T2696] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 93.692687][ T2696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 93.701437][ T2696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:715 [ 93.776353][ T399] usb 5-1: device descriptor read/8, error -71 [ 93.838493][ T306] usbserial_generic 2-1:223.35: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 93.850124][ T306] usbserial_generic 2-1:223.35: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 93.861692][ T306] usbserial_generic 2-1:223.35: device has no bulk endpoints [ 93.872297][ T306] usbserial_generic 2-1:223.252: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 93.884241][ T306] usbserial_generic 2-1:223.252: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 93.895683][ T306] usbserial_generic 2-1:223.252: device has no bulk endpoints [ 93.903952][ T306] usbhid 2-1:223.252: couldn't find an input interrupt endpoint [ 93.913723][ T306] usbserial_generic 2-1:223.61: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 93.927112][ T306] usbserial_generic 2-1:223.61: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 93.935576][ T10] usb 1-1: device descriptor read/64, error -71 [ 93.938592][ T306] usbserial_generic 2-1:223.61: device has no bulk endpoints [ 93.959987][ T306] usb 2-1: USB disconnect, device number 20 [ 94.045344][ T399] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 94.066627][ T399] usb 5-1: device descriptor read/8, error -71 [ 94.195306][ T10] usb 1-1: device descriptor read/64, error -71 [ 94.202806][ T399] usb 5-1: device descriptor read/8, error -71 [ 94.245695][ T2785] fuse: Unknown parameter 'fd7;|A+' [ 94.320926][ T399] usb usb5-port1: unable to enumerate USB device [ 94.435339][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 94.515326][ T62] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 94.585434][ T10] usb 1-1: device descriptor read/64, error -71 [ 94.666731][ T62] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 94.674448][ T62] usb 2-1: can't read configurations, error -61 [ 94.799396][ T2795] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 94.805357][ T62] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 94.824111][ T2797] binder: Bad value for 'defcontext' [ 94.829573][ T10] usb 1-1: device descriptor read/64, error -71 [ 94.885587][ T2799] SELinux: policydb magic number 0x49080022 does not match expected magic number 0xf97cff8c [ 94.895936][ T2799] SELinux: failed to load policy [ 94.934876][ T2804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.934909][ T2804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:243 [ 94.945420][ T10] usb usb1-port1: attempt power cycle [ 94.972626][ T62] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 94.980765][ T62] usb 2-1: can't read configurations, error -61 [ 94.987400][ T62] usb usb2-port1: attempt power cycle [ 95.245319][ T306] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 95.305341][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 95.326436][ T10] usb 1-1: device descriptor read/8, error -71 [ 95.335446][ T62] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 95.357110][ T62] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 95.364788][ T62] usb 2-1: can't read configurations, error -61 [ 95.375331][ T306] usb 3-1: device descriptor read/64, error -71 [ 95.456378][ T10] usb 1-1: device descriptor read/8, error -71 [ 95.495333][ T62] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 95.517991][ T62] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 95.525667][ T62] usb 2-1: can't read configurations, error -61 [ 95.532073][ T62] usb usb2-port1: unable to enumerate USB device [ 95.615344][ T306] usb 3-1: device descriptor read/64, error -71 [ 95.695386][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 95.717661][ T10] usb 1-1: device descriptor read/8, error -71 [ 95.846307][ T10] usb 1-1: device descriptor read/8, error -71 [ 95.855325][ T306] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 95.955490][ T10] usb usb1-port1: unable to enumerate USB device [ 95.985314][ T306] usb 3-1: device descriptor read/64, error -71 [ 95.995336][ T910] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 96.145307][ T910] usb 5-1: Using ep0 maxpacket: 16 [ 96.152921][ T910] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 96.162061][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.170149][ T910] usb 5-1: Product: syz [ 96.174325][ T910] usb 5-1: Manufacturer: syz [ 96.179143][ T910] usb 5-1: SerialNumber: syz [ 96.184380][ T910] usb 5-1: config 0 descriptor?? [ 96.192387][ T910] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 96.200231][ T910] usb 5-1: Detected FT232H [ 96.235353][ T306] usb 3-1: device descriptor read/64, error -71 [ 96.345412][ T306] usb usb3-port1: attempt power cycle [ 96.390764][ T910] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 96.600127][ T36] audit: type=1400 audit(2000000053.180:413): avc: denied { setattr } for pid=2821 comm="syz.4.794" name="NETLINK" dev="sockfs" ino=22249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.623986][ T910] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 96.631617][ T910] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 96.650228][ T910] usb 5-1: USB disconnect, device number 28 [ 96.659511][ T910] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 96.669302][ T910] ftdi_sio 5-1:0.0: device disconnected [ 96.685439][ T306] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 96.706319][ T306] usb 3-1: device descriptor read/8, error -71 [ 96.836411][ T306] usb 3-1: device descriptor read/8, error -71 [ 97.035355][ T62] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 97.075372][ T306] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 97.096537][ T306] usb 3-1: device descriptor read/8, error -71 [ 97.115065][ T36] audit: type=1400 audit(2000000053.690:414): avc: denied { remount } for pid=2825 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.165402][ T62] usb 1-1: device descriptor read/64, error -71 [ 97.226431][ T306] usb 3-1: device descriptor read/8, error -71 [ 97.336452][ T306] usb usb3-port1: unable to enumerate USB device [ 97.355386][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 97.415333][ T62] usb 1-1: device descriptor read/64, error -71 [ 97.435295][ T36] audit: type=1400 audit(2000000054.010:415): avc: denied { lock } for pid=2835 comm="syz.1.800" path="socket:[22666]" dev="sockfs" ino=22666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 97.506532][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.519385][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.528927][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.537513][ T10] usb 5-1: Product: syz [ 97.541846][ T10] usb 5-1: Manufacturer: syz [ 97.547006][ T10] usb 5-1: SerialNumber: syz [ 97.665348][ T62] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 97.675317][ T399] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 97.763059][ T10] cdc_ncm 5-1:1.0: bind() failure [ 97.769876][ T10] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 97.778465][ T10] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 97.788540][ T10] usb 5-1: USB disconnect, device number 29 [ 97.795835][ T62] usb 1-1: device descriptor read/64, error -71 [ 97.828736][ T399] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 97.837945][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.845975][ T399] usb 2-1: Product: syz [ 97.850154][ T399] usb 2-1: Manufacturer: syz [ 97.854743][ T399] usb 2-1: SerialNumber: syz [ 97.890429][ T2851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 97.890627][ T2851] rust_binder: Error while translating object. [ 97.900015][ T2851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.906313][ T2851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 98.020420][ T2855] /dev/rnullb0: Can't open blockdev [ 98.045564][ T62] usb 1-1: device descriptor read/64, error -71 [ 98.155461][ T62] usb usb1-port1: attempt power cycle [ 98.365357][ T306] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 98.405339][ T910] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 98.505366][ T62] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 98.515337][ T306] usb 5-1: Using ep0 maxpacket: 8 [ 98.522458][ T306] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.527537][ T62] usb 1-1: device descriptor read/8, error -71 [ 98.531016][ T306] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 98.543922][ T306] usb 5-1: can't read configurations, error -71 [ 98.566877][ T910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.574881][ T910] usb 3-1: not running at top speed; connect to a high speed hub [ 98.583368][ T910] usb 3-1: config 11 has an invalid interface number: 229 but max is 0 [ 98.591695][ T910] usb 3-1: config 11 has no interface number 0 [ 98.597908][ T910] usb 3-1: config 11 interface 229 altsetting 241 endpoint 0xA has invalid wMaxPacketSize 0 [ 98.608016][ T910] usb 3-1: config 11 interface 229 has no altsetting 0 [ 98.616379][ T910] usb 3-1: New USB device found, idVendor=0582, idProduct=be1e, bcdDevice=cf.ce [ 98.625492][ T910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.633485][ T910] usb 3-1: Product: syz [ 98.637703][ T910] usb 3-1: Manufacturer: syz [ 98.642314][ T910] usb 3-1: SerialNumber: syz [ 98.676393][ T62] usb 1-1: device descriptor read/8, error -71 [ 98.905988][ T910] usb 3-1: USB disconnect, device number 34 [ 98.910448][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:11.229/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.927955][ T62] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 98.956519][ T62] usb 1-1: device descriptor read/8, error -71 [ 99.086314][ T62] usb 1-1: device descriptor read/8, error -71 [ 99.195481][ T62] usb usb1-port1: unable to enumerate USB device [ 99.595465][ T306] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 99.685358][ T62] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 99.738022][ T2887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.746039][ T306] usb 5-1: not running at top speed; connect to a high speed hub [ 99.761167][ T306] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.774060][ T306] usb 5-1: config 1 interface 0 has no altsetting 0 [ 99.782823][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.792361][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.800547][ T306] usb 5-1: Product: syz [ 99.805417][ T306] usb 5-1: Manufacturer: syz [ 99.810067][ T306] usb 5-1: SerialNumber: syz [ 99.845317][ T62] usb 3-1: Using ep0 maxpacket: 16 [ 99.850926][ T62] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 99.860047][ T62] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 99.867933][ T62] usb 3-1: can't read configurations, error -61 [ 99.995360][ T62] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 100.145314][ T62] usb 3-1: Using ep0 maxpacket: 16 [ 100.150918][ T62] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 100.159712][ T62] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 100.167348][ T62] usb 3-1: can't read configurations, error -61 [ 100.173741][ T62] usb usb3-port1: attempt power cycle [ 100.218235][ T306] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 100.384448][ T306] usb 2-1: USB disconnect, device number 25 [ 100.525319][ T62] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 100.545705][ T62] usb 3-1: Using ep0 maxpacket: 16 [ 100.555330][ T62] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 100.564787][ T62] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 100.572935][ T62] usb 3-1: can't read configurations, error -61 [ 100.710702][ T62] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 100.737137][ T62] usb 3-1: Using ep0 maxpacket: 16 [ 100.742763][ T62] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 100.751848][ T62] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 100.759675][ T62] usb 3-1: can't read configurations, error -61 [ 100.767229][ T62] usb usb3-port1: unable to enumerate USB device [ 100.879807][ T2918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.829'. [ 100.889938][ T36] audit: type=1326 audit(2000000057.470:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2916 comm="syz.1.829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc69a78e929 code=0x0 [ 101.549852][ T2934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.785316][ T306] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 101.839211][ T2944] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 101.839235][ T2944] rust_binder: Read failure Err(EFAULT) in pid:765 [ 101.865127][ T2946] netlink: 'syz.1.837': attribute type 46 has an invalid length. [ 101.955312][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 101.961566][ T306] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.972027][ T306] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 101.987095][ T306] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.996425][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.004497][ T306] usb 1-1: SerialNumber: syz [ 102.012754][ T306] usb 1-1: bad CDC descriptors [ 102.219421][ T2934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 102.219460][ T2934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:626 [ 102.229760][ T910] usb 1-1: USB disconnect, device number 35 [ 102.253092][ T31] usb 5-1: USB disconnect, device number 31 [ 102.261401][ T31] usblp0: removed [ 102.387783][ T2959] overlayfs: failed to resolve './file1': -2 [ 102.395323][ T306] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 102.556589][ T306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.565067][ T306] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 102.573855][ T306] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 102.582608][ T306] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 102.591609][ T306] usb 2-1: config 1 has no interface number 1 [ 102.597742][ T306] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 102.611973][ T306] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.621087][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.629106][ T306] usb 2-1: Product: syz [ 102.633283][ T306] usb 2-1: Manufacturer: syz [ 102.637946][ T306] usb 2-1: SerialNumber: syz [ 102.705326][ T62] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 102.844767][ T36] audit: type=1400 audit(2000000059.420:417): avc: denied { create } for pid=2954 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.855362][ T62] usb 5-1: Using ep0 maxpacket: 16 [ 102.866864][ T306] usb 2-1: found format II with max.bitrate = 8, frame size=9 [ 102.870414][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.876879][ T306] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 102.887948][ T62] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 102.899041][ T306] usb 2-1: USB disconnect, device number 26 [ 102.910766][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.915891][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.920738][ T62] usb 5-1: config 0 descriptor?? [ 103.345697][ T62] wacom 0003:056A:00C5.0014: hidraw0: USB HID v0.05 Device [HID 056a:00c5] on usb-dummy_hcd.4-1/input0 [ 103.421532][ T36] audit: type=1400 audit(2000000060.000:418): avc: denied { sqpoll } for pid=2982 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.435375][ T2983] SELinux: policydb magic number 0x3a2a2063 does not match expected magic number 0xf97cff8c [ 103.451376][ T2983] SELinux: failed to load policy [ 103.461472][ T36] audit: type=1400 audit(2000000060.000:419): avc: denied { execute } for pid=2982 comm="syz.2.850" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 103.539429][ T2991] netlink: 'syz.2.852': attribute type 46 has an invalid length. [ 103.541774][ T2992] rust_binder: Write failure EINVAL in pid:638 [ 103.558585][ T2992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 103.561593][ T2991] netlink: 44 bytes leftover after parsing attributes in process `syz.2.852'. [ 103.583602][ T2962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.585353][ T36] audit: type=1400 audit(2000000060.160:420): avc: denied { map } for pid=2989 comm="syz.0.851" path="socket:[24090]" dev="sockfs" ino=24090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.594319][ T2962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.639039][ T36] audit: type=1400 audit(2000000060.160:421): avc: denied { read accept } for pid=2989 comm="syz.0.851" path="socket:[24090]" dev="sockfs" ino=24090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.648125][ T306] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 103.798407][ T2999] rust_binder: Write failure EFAULT in pid:646 [ 103.826375][ T306] usb 2-1: config 0 has no interfaces? [ 103.839655][ T306] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 103.849251][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 103.857668][ T306] usb 2-1: Product: syz [ 103.861926][ T306] usb 2-1: Manufacturer: syz [ 103.866803][ T306] usb 2-1: SerialNumber: syz [ 103.872261][ T306] usb 2-1: config 0 descriptor?? [ 104.035300][ T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 104.182684][ T3003] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.185845][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 104.198764][ T31] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 104.207145][ T31] usb 3-1: config 0 has no interface number 1 [ 104.213686][ T31] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.226120][ T3006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.234647][ T3006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.252638][ T31] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 104.264587][ T31] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 104.285502][ T31] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 104.305341][ T31] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.336580][ T31] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 104.355309][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.363837][ T31] usb 3-1: Product: syz [ 104.373883][ T31] usb 3-1: Manufacturer: syz [ 104.379340][ T3008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.379655][ T3008] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 104.386420][ T31] usb 3-1: SerialNumber: syz [ 104.407487][ T3008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 104.407532][ T3008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:645 [ 104.425733][ T31] usb 3-1: config 0 descriptor?? [ 104.449502][ T2999] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 104.462449][ T31] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 104.471965][ T3009] rust_binder: Error while translating object. [ 104.471995][ T3009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.520687][ T3009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645 [ 104.663442][ T31] usb 3-1: USB disconnect, device number 39 [ 104.735315][ T36] audit: type=1326 audit(2000000061.310:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.0.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24c538e929 code=0x0 [ 105.494773][ T3032] rust_binder: Write failure EFAULT in pid:307 [ 105.621872][ T36] audit: type=1400 audit(2000000062.200:423): avc: denied { create } for pid=3041 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.666689][ T3050] binder: Unknown parameter 'context' [ 105.730538][ T3062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:669 [ 105.955623][ T62] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 106.116072][ T62] usb 1-1: Using ep0 maxpacket: 32 [ 106.145015][ T306] usb 5-1: USB disconnect, device number 32 [ 106.154911][ T62] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 106.163152][ T62] usb 1-1: config 0 has no interface number 0 [ 106.171527][ T62] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 106.180695][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.189778][ T62] usb 1-1: Product: syz [ 106.193977][ T62] usb 1-1: Manufacturer: syz [ 106.198839][ T62] usb 1-1: SerialNumber: syz [ 106.205784][ T62] usb 1-1: config 0 descriptor?? [ 106.214369][ T62] smsc95xx v2.0.0 [ 106.286141][ T292] bridge_slave_1: left allmulticast mode [ 106.291942][ T292] bridge_slave_1: left promiscuous mode [ 106.299926][ T3085] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 106.299950][ T3085] rust_binder: Read failure Err(EFAULT) in pid:691 [ 106.308147][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.329014][ T292] bridge_slave_0: left allmulticast mode [ 106.334727][ T292] bridge_slave_0: left promiscuous mode [ 106.347532][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.401689][ T308] usb 2-1: USB disconnect, device number 27 [ 106.421942][ T3060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.438558][ T3060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.488836][ T292] veth1_macvtap: left promiscuous mode [ 106.496406][ T292] veth0_vlan: left promiscuous mode [ 106.783485][ T62] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 106.815635][ T62] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 106.946643][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.953151][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.025483][ T62] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 107.043657][ T62] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 107.075297][ T36] audit: type=1400 audit(2000000063.650:424): avc: denied { getopt } for pid=3102 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.272653][ T3108] ./cgroup: Can't lookup blockdev [ 107.295318][ T3111] /dev/rnullb0: Can't open blockdev [ 107.565331][ T308] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 107.716483][ T308] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.726453][ T308] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 107.735536][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.745827][ T308] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 108.941195][ T910] usb 1-1: USB disconnect, device number 36 [ 108.955325][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.955333][ T1349] Bluetooth: hci0: command 0x1003 tx timeout [ 109.131117][ T36] audit: type=1400 audit(2000000065.710:425): avc: denied { mounton } for pid=3124 comm="syz.0.896" path="/223/file0" dev="tmpfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.155051][ T3128] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.395348][ T910] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 109.556491][ T910] usb 1-1: config 223 has an invalid interface number: 35 but max is 3 [ 109.564819][ T910] usb 1-1: config 223 has an invalid interface number: 252 but max is 3 [ 109.573216][ T910] usb 1-1: config 223 has an invalid interface number: 61 but max is 3 [ 109.581862][ T910] usb 1-1: config 223 has an invalid interface number: 35 but max is 3 [ 109.590146][ T910] usb 1-1: config 223 contains an unexpected descriptor of type 0x2, skipping [ 109.599073][ T910] usb 1-1: config 223 has 3 interfaces, different from the descriptor's value: 4 [ 109.608321][ T910] usb 1-1: config 223 has no interface number 0 [ 109.614589][ T910] usb 1-1: config 223 has no interface number 1 [ 109.620882][ T910] usb 1-1: config 223 has no interface number 2 [ 109.627177][ T910] usb 1-1: config 223 interface 35 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 109.638146][ T910] usb 1-1: config 223 interface 35 altsetting 6 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 109.649478][ T910] usb 1-1: config 223 interface 35 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 109.660278][ T910] usb 1-1: config 223 interface 35 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 109.671356][ T910] usb 1-1: config 223 interface 35 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 109.682343][ T910] usb 1-1: config 223 interface 35 altsetting 6 endpoint 0x8 has invalid maxpacket 576, setting to 64 [ 109.693342][ T910] usb 1-1: config 223 interface 35 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 109.704178][ T910] usb 1-1: config 223 interface 252 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 109.715090][ T910] usb 1-1: config 223 interface 61 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 109.726132][ T910] usb 1-1: config 223 interface 61 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 109.737154][ T910] usb 1-1: config 223 interface 61 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 109.748250][ T910] usb 1-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 109.759238][ T910] usb 1-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 109.770082][ T910] usb 1-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 109.781001][ T910] usb 1-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 109.791829][ T910] usb 1-1: config 223 interface 35 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 109.802820][ T910] usb 1-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 109.813625][ T910] usb 1-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 109.824464][ T910] usb 1-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 109.835368][ T910] usb 1-1: config 223 interface 35 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 109.846433][ T910] usb 1-1: config 223 interface 35 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 109.857526][ T910] usb 1-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 109.868337][ T910] usb 1-1: config 223 interface 35 has no altsetting 0 [ 109.875191][ T910] usb 1-1: config 223 interface 35 has no altsetting 1 [ 109.882073][ T910] usb 1-1: config 223 interface 252 has no altsetting 0 [ 109.889054][ T910] usb 1-1: config 223 interface 61 has no altsetting 0 [ 109.897375][ T910] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=b4.bb [ 109.906468][ T910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.914463][ T910] usb 1-1: Product: syz [ 109.918673][ T910] usb 1-1: Manufacturer: syz [ 109.923293][ T910] usb 1-1: SerialNumber: syz [ 110.021854][ T3141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 110.289480][ T910] usbserial_generic 1-1:223.35: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 110.301116][ T910] usbserial_generic 1-1:223.35: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 110.312121][ T910] usbserial_generic 1-1:223.35: device has no bulk endpoints [ 110.321730][ T910] usbserial_generic 1-1:223.252: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 110.333341][ T910] usbserial_generic 1-1:223.252: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 110.344451][ T910] usbserial_generic 1-1:223.252: device has no bulk endpoints [ 110.345814][ T62] usb 3-1: USB disconnect, device number 40 [ 110.352222][ T910] usbhid 1-1:223.252: couldn't find an input interrupt endpoint [ 110.371343][ T910] usbserial_generic 1-1:223.61: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 110.382869][ T910] usbserial_generic 1-1:223.61: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 110.393931][ T910] usbserial_generic 1-1:223.61: device has no bulk endpoints [ 110.403498][ T910] usb 1-1: USB disconnect, device number 37 [ 110.966355][ T36] audit: type=1400 audit(2000000067.550:426): avc: denied { read } for pid=3156 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.034018][ T3172] binder: Unknown parameter 'defcontext01777777777777777777777' [ 112.042679][ T3174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:814 [ 112.055987][ T3175] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2929313029 (23434504232 ns) > initial count (4721684440 ns). Using initial count to start timer. [ 112.078833][ T3177] rust_binder: Write failure EFAULT in pid:816 [ 112.248831][ T3189] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 112.271613][ T3192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.272655][ T3189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.286467][ T3189] netlink: 'syz.0.915': attribute type 3 has an invalid length. [ 112.301787][ T3189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 112.326902][ T3189] rust_binder: Error while translating object. [ 112.326935][ T3189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 112.340500][ T3189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:692 [ 112.405360][ T308] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 112.576540][ T308] usb 2-1: config 223 has an invalid interface number: 35 but max is 3 [ 112.584945][ T308] usb 2-1: config 223 has an invalid interface number: 252 but max is 3 [ 112.593579][ T308] usb 2-1: config 223 has an invalid interface number: 61 but max is 3 [ 112.602121][ T308] usb 2-1: config 223 has an invalid interface number: 35 but max is 3 [ 112.610582][ T308] usb 2-1: config 223 contains an unexpected descriptor of type 0x2, skipping [ 112.619694][ T308] usb 2-1: config 223 has 3 interfaces, different from the descriptor's value: 4 [ 112.629025][ T308] usb 2-1: config 223 has no interface number 0 [ 112.635522][ T308] usb 2-1: config 223 has no interface number 1 [ 112.641833][ T308] usb 2-1: config 223 has no interface number 2 [ 112.648466][ T308] usb 2-1: config 223 interface 35 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 112.659687][ T308] usb 2-1: config 223 interface 35 altsetting 6 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 112.671330][ T308] usb 2-1: config 223 interface 35 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 112.682389][ T308] usb 2-1: config 223 interface 35 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 112.693683][ T308] usb 2-1: config 223 interface 35 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 112.704902][ T308] usb 2-1: config 223 interface 35 altsetting 6 endpoint 0x8 has invalid maxpacket 576, setting to 64 [ 112.716114][ T308] usb 2-1: config 223 interface 35 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 112.727137][ T308] usb 2-1: config 223 interface 252 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 112.738249][ T308] usb 2-1: config 223 interface 61 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 112.749441][ T308] usb 2-1: config 223 interface 61 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 112.760645][ T308] usb 2-1: config 223 interface 61 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 112.771803][ T308] usb 2-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 112.782635][ T308] usb 2-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 112.793451][ T308] usb 2-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 112.804566][ T308] usb 2-1: config 223 interface 61 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 112.815476][ T308] usb 2-1: config 223 interface 35 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 112.826490][ T308] usb 2-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 112.837301][ T308] usb 2-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 112.848103][ T308] usb 2-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 112.858938][ T308] usb 2-1: config 223 interface 35 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 112.869912][ T308] usb 2-1: config 223 interface 35 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 112.881042][ T308] usb 2-1: config 223 interface 35 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 112.891986][ T308] usb 2-1: config 223 interface 35 has no altsetting 0 [ 112.898893][ T308] usb 2-1: config 223 interface 35 has no altsetting 1 [ 112.905807][ T308] usb 2-1: config 223 interface 252 has no altsetting 0 [ 112.912770][ T308] usb 2-1: config 223 interface 61 has no altsetting 0 [ 112.920926][ T308] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=b4.bb [ 112.930028][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.938135][ T308] usb 2-1: Product: syz [ 112.942314][ T308] usb 2-1: Manufacturer: syz [ 112.946932][ T308] usb 2-1: SerialNumber: syz [ 113.311905][ T308] usbserial_generic 2-1:223.35: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 113.323477][ T308] usbserial_generic 2-1:223.35: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 113.334465][ T308] usbserial_generic 2-1:223.35: device has no bulk endpoints [ 113.344061][ T308] usbserial_generic 2-1:223.252: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 113.355784][ T308] usbserial_generic 2-1:223.252: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 113.366855][ T308] usbserial_generic 2-1:223.252: device has no bulk endpoints [ 113.374468][ T308] usbhid 2-1:223.252: couldn't find an input interrupt endpoint [ 113.383295][ T308] usbserial_generic 2-1:223.61: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 113.394902][ T308] usbserial_generic 2-1:223.61: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 113.411000][ T308] usbserial_generic 2-1:223.61: device has no bulk endpoints [ 113.422800][ T308] usb 2-1: USB disconnect, device number 28 [ 113.735403][ T910] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 113.885388][ T910] usb 1-1: Using ep0 maxpacket: 16 [ 113.891947][ T910] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.900357][ T910] usb 1-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 113.910655][ T910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.919739][ T910] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.934111][ T910] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.943201][ T910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.951219][ T910] usb 1-1: Product: syz [ 113.955413][ T910] usb 1-1: Manufacturer: syz [ 113.960000][ T910] usb 1-1: SerialNumber: syz [ 114.168596][ T910] cdc_ncm 1-1:1.0: skipping garbage [ 114.173861][ T910] cdc_ncm 1-1:1.0: skipping garbage [ 114.179691][ T910] cdc_ncm 1-1:1.0: skipping garbage [ 114.184932][ T910] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 114.191988][ T910] cdc_ncm 1-1:1.0: bind() failure [ 114.198245][ T910] usb 1-1: USB disconnect, device number 38 [ 114.687903][ T3209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.688135][ T3209] rust_binder: Error in use_page_slow: ESRCH [ 114.694805][ T3209] rust_binder: use_range failure ESRCH [ 114.700921][ T3209] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 114.706565][ T3209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 114.714759][ T3209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:724 [ 114.796413][ T3222] batadv_slave_1: entered promiscuous mode [ 114.839341][ T36] audit: type=1400 audit(2000000071.420:427): avc: denied { setopt } for pid=3228 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.871362][ T3221] batadv_slave_1: left promiscuous mode [ 114.968319][ T3234] SELinux: security_context_str_to_sid () failed with errno=-22 [ 115.008478][ T36] audit: type=1400 audit(2000000071.590:428): avc: denied { search } for pid=3230 comm="syz.0.927" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 115.031652][ T36] audit: type=1400 audit(2000000071.590:429): avc: denied { write } for pid=3230 comm="syz.0.927" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 115.063585][ T36] audit: type=1400 audit(2000000071.590:430): avc: denied { add_name } for pid=3230 comm="syz.0.927" name="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 115.063814][ T36] audit: type=1400 audit(2000000071.590:431): avc: denied { create } for pid=3230 comm="syz.0.927" name="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 116.455354][ T308] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 116.696386][ T308] usb 3-1: config 0 has no interfaces? [ 116.703431][ T308] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 116.712544][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 116.720667][ T308] usb 3-1: Product: syz [ 116.724837][ T308] usb 3-1: Manufacturer: syz [ 116.729452][ T308] usb 3-1: SerialNumber: syz [ 116.734657][ T308] usb 3-1: config 0 descriptor?? [ 117.301563][ T3249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.301931][ T3249] rust_binder: Error in use_page_slow: ESRCH [ 117.308446][ T3249] rust_binder: use_range failure ESRCH [ 117.314449][ T3249] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 117.319949][ T3249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 117.328006][ T3249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:732 [ 117.690824][ T3254] /dev/rnullb0: Can't open blockdev [ 117.794231][ T3272] binder: Unknown parameter 'maxdoe`̏c.5g^' [ 117.828515][ T36] audit: type=1400 audit(2000000074.410:432): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.208441][ T62] usb 3-1: USB disconnect, device number 41 [ 119.307059][ T36] audit: type=1400 audit(2000000075.890:433): avc: denied { execute } for pid=3279 comm="syz.1.942" path="/280/hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.335818][ T3281] input: syz1 as /devices/virtual/input/input22 [ 121.080146][ T3304] /dev/rnullb0: Can't open blockdev [ 121.155467][ T3304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'. [ 122.895515][ T3313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.923713][ T3317] /dev/sg0: Can't lookup blockdev [ 122.946679][ T36] audit: type=1400 audit(2000000079.530:434): avc: denied { bind } for pid=3319 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.817297][ T36] audit: type=1400 audit(2000000081.390:435): avc: denied { create } for pid=3326 comm="syz.1.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.841105][ T3331] rust_binder: Error in use_page_slow: ESRCH [ 124.841130][ T3331] rust_binder: use_range failure ESRCH [ 124.847274][ T3331] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 124.853114][ T3331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 124.861452][ T3331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:856 [ 126.866915][ T3355] SELinux: failed to load policy [ 126.915059][ T3363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.920419][ T3363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.010569][ T36] audit: type=1326 audit(2000000083.590:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c538e929 code=0x7fc00000 [ 127.215361][ T62] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 127.345343][ T62] usb 1-1: device descriptor read/64, error -71 [ 127.585382][ T62] usb 1-1: device descriptor read/64, error -71 [ 127.825391][ T62] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 127.955374][ T62] usb 1-1: device descriptor read/64, error -71 [ 128.195441][ T62] usb 1-1: device descriptor read/64, error -71 [ 128.305479][ T62] usb usb1-port1: attempt power cycle [ 128.645324][ T62] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 128.666456][ T62] usb 1-1: device descriptor read/8, error -71 [ 128.796468][ T62] usb 1-1: device descriptor read/8, error -71 [ 128.951907][ T3379] rust_binder: Write failure EINVAL in pid:772 [ 128.979845][ T36] audit: type=1326 audit(2000000085.560:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3388 comm="syz.2.973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a51b8e929 code=0x0 [ 129.035293][ T62] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 129.066272][ T62] usb 1-1: device descriptor read/8, error -71 [ 129.196745][ T62] usb 1-1: device descriptor read/8, error -71 [ 129.305463][ T62] usb usb1-port1: unable to enumerate USB device [ 129.852407][ T36] audit: type=1326 audit(2000000086.440:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24c532ab19 code=0x7fc00000 [ 131.153978][ T36] audit: type=1400 audit(2000000087.730:439): avc: denied { ioctl } for pid=3401 comm="syz.0.976" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=886 state=3 status=67 (errno 9: Bad file descriptor) [ 131.352100][ T36] audit: type=1400 audit(2000000087.930:440): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2904]" dev="pipefs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 131.475315][ T62] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 131.658183][ T292] bridge_slave_1: left allmulticast mode [ 131.663880][ T292] bridge_slave_1: left promiscuous mode [ 131.685573][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.827150][ T292] tipc: Disabling bearer [ 131.832562][ T292] tipc: Left network mode [ 131.838231][ T292] veth1_macvtap: left promiscuous mode [ 131.843752][ T292] veth0_vlan: left promiscuous mode