last executing test programs: 15.53167557s ago: executing program 0 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt\x00', &(0x7f0000000700)={0x1036c0, 0x58, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) (async) arch_prctl$ARCH_GET_CPUID(0x1011) (async) socket$inet6(0xa, 0x80001, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt\x00', &(0x7f0000000700)={0x1036c0, 0x58, 0x8}, 0x18) (async) 15.52352539s ago: executing program 0 (id=867): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0xbd30949d0fea2b34, 0xfff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, 0x0, 0x2) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendto(r0, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f046389e1f10009041f81fe00000e000000000020000800b9520f000100", 0x24) 15.464933932s ago: executing program 0 (id=869): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005ec0)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000300)=""/119, 0x77}], 0x2, &(0x7f0000000700)=""/106, 0x6a}, 0x4}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/29, 0x1d}, {&(0x7f0000000a00)=""/212, 0xd4}, {&(0x7f0000000d00)=""/205, 0xcd}, {&(0x7f0000000e00)=""/184, 0xb8}], 0x4, &(0x7f0000000f00)=""/122, 0x7a}, 0x2e}, {{&(0x7f0000001fc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002140)=[{0x0}, {&(0x7f0000002080)=""/139, 0x8b}], 0x2, &(0x7f0000002180)=""/128, 0x80}, 0x1}, {{&(0x7f0000002200)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002280)=""/113, 0x71}, {&(0x7f0000002300)=""/82, 0x52}], 0x2, &(0x7f00000023c0)=""/176, 0xb0}, 0x3}, {{&(0x7f0000002480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002500)=""/172, 0xac}, {&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000002640)=""/13, 0xd}, {&(0x7f0000002680)=""/148, 0x94}, {&(0x7f0000002740)=""/24, 0x18}, {&(0x7f0000002780)=""/230, 0xe6}, {&(0x7f0000002880)=""/3, 0x3}, {&(0x7f00000028c0)=""/38, 0x26}], 0x8, &(0x7f0000002980)=""/151, 0x97}, 0xb}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)=""/144, 0x90}, {&(0x7f0000002b80)=""/6, 0x6}], 0x2, &(0x7f0000003800)=""/4096, 0x1000}}, {{&(0x7f0000004800)=@un=@abs, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004880)=""/83, 0x53}, {&(0x7f0000004900)=""/190, 0xbe}], 0x2, &(0x7f0000004a00)=""/220, 0xdc}, 0x9}, {{0x0, 0x0, 0x0}, 0xb}], 0x8, 0x2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 15.464234892s ago: executing program 0 (id=871): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002940)=@expire={0xf8, 0x27, 0x57d766a7dbb1ddd3, 0x70bd2a, 0x25dfdbfc, {{{@in=@empty, @in=@remote, 0x4e23, 0xbc63, 0x4e24, 0x6, 0x2, 0x80, 0x30, 0x3a}, {@in6=@empty, 0x4d4, 0xff}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x4, 0x1, 0x8, 0x5, 0xffffffffffffff8a, 0xfffffffffffffffe}, {0x4, 0xff, 0x0, 0xffffffffffffffff}, {0x80000001, 0xfffffc00, 0xdcf}, 0x70bd2a, 0x3505, 0xa, 0x0, 0x0, 0x98}, 0x6}}, 0xf8}, 0x1, 0xf00}, 0x0) 15.412040033s ago: executing program 0 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) (async) renameat2(r2, &(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x4) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000200)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0xc9f, 0x8, 0xf, 0x8001, 0xff75}}, {0x1, 0x1, 0x1, 0x0, @adapter={0x7, 0x1, 0xffff, 0x596, 0x401}}, {0x8, 0x0, 0x3, 0x0, @msi={0x8, 0x2, 0xfffffffb, 0x672}}, {0x1, 0x3, 0x0, 0x0, @irqchip={0x10}}]}) (async) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 15.315586606s ago: executing program 0 (id=877): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x111, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x84, 0xb3}, {0x6}, {0x100, 0x0, 0x6, 0x56fe}, {0xff, 0xe, 0x2, 0x16}, {0xfff, 0xd0, 0x0, 0x1000001}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x7, 0x5, 0x5, 0xe99}, {0x5, 0xe0, 0x3, 0x2}, {0xfffc, 0x8, 0x9, 0x9}, {0x62, 0x1e, 0x3, 0x1}, {0x3, 0x7, 0x2, 0xaf0}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1c, 0x0, 0x12, 0xfe}, {0x6}]}) clock_getres(0x7, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1, 0x7, 0x2, 0x6}, {0x8, 0x1, 0x1, 0xffff8000}, {0x0, 0x9, 0x1, 0x7fffffff}, {0x2, 0x0, 0x0, 0x4}, {0x6, 0x64, 0x6, 0x9}, {0xffff, 0x0, 0x6, 0x7ff}]}) 2.547387025s ago: executing program 2 (id=1082): syz_clone(0x2204000, 0x0, 0x3a, 0x0, 0x0, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000300)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '\x94\xben\x85\xc2\xf0E\xa6\xb8\x18\x13^K?\x9d\xc4\xe1e\xba0tu\x154\x0eK\xf3\xce\"dl\x12k8V\xa8(Y\x9eW\xfc\xf03\xb6\x83D\x02\xb7o\xe5\x1a#\xd3\x02\xa7\xbaP\xa4]\xc2\xe7\x16\xd7\xc1\xc7\xa3s\xbb\x15\xa1TL\xdf\xb6\x9bWp\xe8\"P\x97\x1e\x02\xa7P\xbf\x8e\xba\x1c\x16:F\xc1L\x82\xb3\xb4[\x04\xb0\x10\x84\x84\xce\xbe\xff\x84Z\xd9-\xdb\xbcez8\xdf\xa1\x88\x1bl\x9d\xcf\xbe){\xdf\xc6\x86\x8aj\xbe\x10P\x88\xfc\x96\x9f\x95\xcbd&,f\x05\xf3G\x94\x90$\x7f\xfe\xb2+uu/\xf3\x99KXt\xdeC4\x86\xb8\x05\x00\x00\x00\x00\x00\x00\x00jl\x9c\xfa\xd8~\xd5\xca\x9em\x95\x9d\"\xac\x87\xfe\x98=\x89\xb4\\-\x8b(\xd0\xd7\xab\xcc\nw \xd3\xb7\xa7\xdcK,-Ra\xddkrt\xec\x9f\xe7\xb1\xd3j\xb6\xfe\"\xd06\xd8E\xda\x8b\xb46 V\xc5\xa0\xf7\xf3\x15k\xeb\x93\x90\xe7\xd0sc\xa4\x05(\xb7\xb7\xd4\xb0\x83\x06\xe84!\xb1\x83A\xc3\x98\x90\xf1\x95\xbd\xeb1u\xb4\x8c\xd9tF\xf6\xbd\x00a\xce^M\x85\xb4\xcc\x9e\x00\x05{\xba\xa2\x89\xf6\xcdl\xe1\xd5\x87\xcb\xd4\t\xd2Gi\x15\x94\xd4O\xf5\x10\xed\x92?\xe3$\xe8V\xba\xec\xcf<\x148N\xe2\xbb}\xf0(\x04\x92\xd9\x9b-]\x11s-1\xa2%m\x14\xd0D\x8c\xb0C\x90\xfd\xb91uc\x8b\x04y\xe5\xb9\x19[#\x8f%\xf1\xdc\xc2\xce\a~~\xc6\x19\x00\x00\x00\x10\x00\x00\x00', 0x3a, './cgroup.cpu/cpuset.cpus'}, 0x1c3) eventfd(0xffffffff) 2.238325613s ago: executing program 2 (id=1083): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000001f0a00000800040001000000", 0x24) 2.212408214s ago: executing program 2 (id=1084): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000aa00000000000000000000000000000000000107144e230005020000003a001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000ecff00000000000000000001008004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800100000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.160511415s ago: executing program 2 (id=1085): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005ec0)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000300)=""/119, 0x77}], 0x2, &(0x7f0000000700)=""/106, 0x6a}, 0x4}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/29, 0x1d}, {&(0x7f0000000a00)=""/212, 0xd4}, {&(0x7f0000000d00)=""/205, 0xcd}, {0x0}], 0x4, &(0x7f0000000f00)=""/122, 0x7a}, 0x2e}, {{&(0x7f0000001fc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002040)=""/56, 0x38}, {&(0x7f0000002080)=""/139, 0x8b}], 0x2, &(0x7f0000002180)=""/128, 0x80}, 0x1}, {{&(0x7f0000002200)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002280)=""/113, 0x71}, {&(0x7f0000002300)=""/82, 0x52}], 0x2, &(0x7f00000023c0)=""/176, 0xb0}, 0x3}, {{&(0x7f0000002480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002500)=""/172, 0xac}, {&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000002640)=""/13, 0xd}, {&(0x7f0000002680)=""/148, 0x94}, {&(0x7f0000002740)=""/24, 0x18}, {&(0x7f0000002780)=""/230, 0xe6}, {&(0x7f0000002880)=""/3, 0x3}, {&(0x7f00000028c0)=""/38, 0x26}], 0x8, &(0x7f0000002980)=""/151, 0x97}, 0xb}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)=""/144, 0x90}, {&(0x7f0000002b80)=""/6, 0x6}], 0x2, &(0x7f0000003800)=""/4096, 0x1000}}, {{&(0x7f0000004800)=@un=@abs, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004880)=""/83, 0x53}, {&(0x7f0000004900)=""/190, 0xbe}], 0x2, &(0x7f0000004a00)=""/220, 0xdc}, 0x9}, {{0x0, 0x0, 0x0}, 0xb}], 0x8, 0x2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.160104895s ago: executing program 2 (id=1086): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x48c902, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) shutdown(r3, 0x1) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r4 = dup2(r3, r3) write$tun(r4, 0x0, 0x46) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0xa000, 0x102000}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r5 = socket(0x0, 0x3, 0x10b29) r6 = socket$inet(0x2, 0x2, 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="121abb9d8201020301090212000109065c020904e20100020c0705a71ec89ebfcab92c1308b21e78729ed7eb467e549694389e960f7afba1ab496282c7b4706d0e236ef20e8f144d02000000000000000000"], 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r4, 0x4068aea3, &(0x7f0000000180)) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) write(r5, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) 1.531877341s ago: executing program 3 (id=1098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x4, 0x80000000000000, 0x0, 0x4, 0x101000, 0x0, 0x1002, 0x5, 0x3, 0x21, 0x2, 0x6, 0x8bda, 0xfffebffffffffeee, 0x3fe, 0xffffffffffffffff], 0x25000, 0xc4a57}) prlimit64(0x0, 0x6, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x2c, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001e1fd04600000a60c6eec00be140006fffe8000000000000000010000000000aaff020000000000000000000000000001"], 0xfdef) 1.531444011s ago: executing program 2 (id=1099): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0x8}, 0x4}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000f284000000000000000000000000000000000000000100000000000200000000000000060000000000000000000000000000000000000000000000c67c594fd618fd2abf742491d89a788ab2419747d8fc8652f71e7a535835f12da20dc931f72ce393b0"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r3 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x1, 0x0) write$cgroup_pid(r7, &(0x7f0000000140)=0xffffffffffffffff, 0x12) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000240)=0x2) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0x41) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1a8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e21, 0xfffffff9, @mcast1, 0x3}, 0x1c) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') write$binfmt_misc(r7, &(0x7f0000000180)="e502", 0x2) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/19, 0x13}, 0x40}], 0x1, 0x10160, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) 1.450699153s ago: executing program 3 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d8}, 0x50) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, &(0x7f0000000240)={r2, &(0x7f0000000000)='./binderfs/binder0\x00', 0x200, &(0x7f0000000040)={@_ha_fsid={[0x15c, 0x47]}, {0x4, 0xfc17, 0x6, 0x3}}, 0x2d4, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xfff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x20000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x77622a85, 0x1, 0x0, 0x0, 0x1, 0x3c}, @ptr={0x73622a85, 0x0, 0x0, 0x0, 0x4, 0xb}, @flat=@weak_handle={0x77682a85, 0x10b, 0x2}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1.342388646s ago: executing program 3 (id=1101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x700000000000000, 0x0, 0x24044094}, 0x4) 1.284521287s ago: executing program 3 (id=1102): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x40, r2}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190019000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) (async) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000140)=[{&(0x7f0000000040)="09317fa65213b4be3f778f3184e7c2f88d7d4e34efd5be768c8ccbb3bd128d6c6abc2fd2e43a3da6b23737b204b5e3ac60b3fc535c378e8c203a9978be5870c813b0dff612af8db01a0be202c16d5ed043a848108836cc0badafdd7fee369aefbc8639b2ef64af0f174585f7fd09bd794e010ccea5b8f4b670dae7bc30a3ac1c0dec3ebaf33423355c8d215a7225f2274988d044c4da5dc7b4f75f8b35c1eb4c14b588f2fb05efe046e49c2dead8a1c15507c0fc4044cfb436e363f64fa744fa5253e729a841aa7e2f51094695fde64208ab705fc52185d171db3f6c6b0e20ab120b", 0xe2}], 0x1, 0x0) 1.284019287s ago: executing program 3 (id=1103): socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x906, 0x0, 0x2, 0xb5}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10, 0x0, 0x319, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x4, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x4, 0x2, 0x1040021d, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x3000000, {0x6}, 0x0, r4, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0) 1.270501618s ago: executing program 1 (id=1104): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0xffffffff, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x110a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.244256118s ago: executing program 1 (id=1105): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005ec0)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000300)=""/119, 0x77}], 0x2, &(0x7f0000000700)=""/106, 0x6a}, 0x4}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/29, 0x1d}, {&(0x7f0000000a00)=""/212, 0xd4}, {&(0x7f0000000e00)=""/184, 0xb8}], 0x3, &(0x7f0000000f00)=""/122, 0x7a}, 0x2e}, {{&(0x7f0000001fc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002040)=""/56, 0x38}, {&(0x7f0000002080)=""/139, 0x8b}], 0x2, &(0x7f0000002180)=""/128, 0x80}, 0x1}, {{&(0x7f0000002200)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002280)=""/113, 0x71}, {&(0x7f0000002300)=""/82, 0x52}], 0x2, &(0x7f00000023c0)=""/176, 0xb0}, 0x3}, {{&(0x7f0000002480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002500)=""/172, 0xac}, {&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000002640)=""/13, 0xd}, {&(0x7f0000002680)=""/148, 0x94}, {&(0x7f0000002740)=""/24, 0x18}, {&(0x7f0000002780)=""/230, 0xe6}, {&(0x7f0000002880)=""/3, 0x3}, {&(0x7f00000028c0)=""/38, 0x26}], 0x8, &(0x7f0000002980)=""/151, 0x97}, 0xb}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)=""/144, 0x90}, {&(0x7f0000002b80)=""/6, 0x6}], 0x2, &(0x7f0000003800)=""/4096, 0x1000}}, {{&(0x7f0000004800)=@un=@abs, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004880)=""/83, 0x53}, {&(0x7f0000004900)=""/190, 0xbe}], 0x2, &(0x7f0000004a00)=""/220, 0xdc}, 0x9}, {{0x0, 0x0, 0x0}, 0xb}], 0x8, 0x2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.20427684s ago: executing program 1 (id=1106): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x3481cc60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r1, 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="196406"], 0x0, 0x0}) 936.491727ms ago: executing program 3 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x7, 0x0, 0x800, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x64, 0x0, 0x81, 0x0, 0x0, @rand_addr=0x64010100, @multicast1, {[@end, @generic={0x44, 0xb, "f3e54ed296eb2a2d41"}, @end]}}}}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_usb_connect(0x0, 0x7ff, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0) 634.283604ms ago: executing program 1 (id=1108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0xa1, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0xffffffffffffffa1, 0x0, 0x24044094}, 0x4) 607.387385ms ago: executing program 1 (id=1109): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0xbd30949d0fea2b34, 0xfff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, 0x0, 0x2) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendto(r0, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f046389e1f10009041f81fe00000e00000000001f000800b9520f000100", 0x24) 539.894337ms ago: executing program 1 (id=1110): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r5 = getpgrp(0xffffffffffffffff) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000000c0)=0x7f) syz_open_procfs(r5, &(0x7f0000000080)='loginuid\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) removexattr(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 32 (id=877): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x111, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x84, 0xb3}, {0x6}, {0x100, 0x0, 0x6, 0x56fe}, {0xff, 0xe, 0x2, 0x16}, {0xfff, 0xd0, 0x0, 0x1000001}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x7, 0x5, 0x5, 0xe99}, {0x5, 0xe0, 0x3, 0x2}, {0xfffc, 0x8, 0x9, 0x9}, {0x62, 0x1e, 0x3, 0x1}, {0x3, 0x7, 0x2, 0xaf0}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1c, 0x0, 0x12, 0xfe}, {0x6}]}) clock_getres(0x7, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1, 0x7, 0x2, 0x6}, {0x8, 0x1, 0x1, 0xffff8000}, {0x0, 0x9, 0x1, 0x7fffffff}, {0x2, 0x0, 0x0, 0x4}, {0x6, 0x64, 0x6, 0x9}, {0xffff, 0x0, 0x6, 0x7ff}]}) kernel console output (not intermixed with test programs): nder: 1348:1349 transaction call to 1348:0 failed EINVAL, code 0 size 112-24 [ 40.671424][ T64] rust_binder: 1348: undelivered TRANSACTION_ERROR: 29201 [ 40.681150][ T1353] rust_binder: 1352:1353 FDA parent offset not aligned correctly [ 40.689040][ T1353] rust_binder: 1352:1353 error while translating object: EINVAL [ 40.696721][ T1353] rust_binder: Failure in copy_transaction_data: EINVAL [ 40.696750][ T1353] rust_binder: 1352:1353 transaction call to 1352:0 failed EINVAL, code 0 size 112-24 [ 40.714026][ T1353] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.714046][ T1353] rust_binder: Read failure Err(EFAULT) in pid:149 [ 40.723210][ T312] rust_binder: 1352: undelivered TRANSACTION_ERROR: 29201 [ 40.745159][ T1359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.301'. [ 40.782850][ T1363] can0: slcan on ptm0. [ 40.790186][ T1363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.820612][ T1365] netlink: 'syz.1.304': attribute type 16 has an invalid length. [ 40.830320][ T1365] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.304'. [ 40.879458][ T1362] can0 (unregistered): slcan off ptm0. [ 40.893485][ T1381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.906705][ T1381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.952545][ T1388] netlink: 228 bytes leftover after parsing attributes in process `syz.1.307'. [ 41.020900][ T312] rust_binder: 1296: undelivered TRANSACTION_ERROR: 29201 [ 41.064240][ T1409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 41.102514][ T1416] rust_binder: 1415:1416 error while translating object: EPERM [ 41.120900][ T1416] rust_binder: Failure in copy_transaction_data: EPERM [ 41.120935][ T1416] rust_binder: 1415:1416 transaction call to 1415:0 failed EPERM, code 0 size 96-24 [ 41.144087][ T312] rust_binder: 1415: undelivered TRANSACTION_ERROR: 29201 [ 41.171677][ T1425] rust_binder: 1424:1425 error while translating object: ENOENT [ 41.184944][ T1425] rust_binder: Failure in copy_transaction_data: ENOENT [ 41.184976][ T1425] rust_binder: 1424:1425 transaction call to 1424:0 failed ENOENT, code 0 size 104-24 [ 41.224698][ T312] rust_binder: 1424: undelivered TRANSACTION_ERROR: 29201 [ 41.370053][ T1441] Zero length message leads to an empty skb [ 41.518754][ T312] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 41.648383][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.669657][ T312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 41.678134][ T312] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 41.688798][ T312] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 41.700849][ T312] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 41.709992][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.717975][ T312] usb 2-1: Product: ဈ [ 41.722639][ T312] usb 2-1: Manufacturer: 、 [ 41.727229][ T312] usb 2-1: SerialNumber: ࠏ汮৪깑䳃鲔럍ᯨ斣쒻⟊疜㛉ffi㩻髶ᦊ芚ॲ묖쫁堄䞑촽骧ৱ䕿鄈᥹훾㌗왡ᕻ俵㫫썻泼꧙컂弎괻‘ [ 41.778350][ T317] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 41.798696][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 41.805399][ T10] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 41.817094][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8A has invalid maxpacket 1023, setting to 64 [ 41.829446][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 41.838538][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.846525][ T10] usb 1-1: Product: syz [ 41.850692][ T10] usb 1-1: Manufacturer: syz [ 41.855291][ T10] usb 1-1: SerialNumber: syz [ 41.938361][ T317] usb 4-1: Using ep0 maxpacket: 32 [ 41.944547][ T317] usb 4-1: config 5 has no interfaces? [ 41.952615][ T317] usb 4-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice= 1.fb [ 41.961782][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.970541][ T317] usb 4-1: Product: syz [ 41.974767][ T317] usb 4-1: Manufacturer: syz [ 41.979503][ T317] usb 4-1: SerialNumber: syz [ 41.984396][ T312] usb 2-1: low speed audio streaming not supported [ 41.990919][ T312] usb 2-1: low speed audio streaming not supported [ 42.002540][ T312] usb 2-1: USB disconnect, device number 9 [ 42.014680][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.065018][ T10] usb 1-1: unit 5 not found! [ 42.073983][ T10] usb 1-1: USB disconnect, device number 7 [ 42.202966][ T1454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.211494][ T1454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.223693][ T317] usb 4-1: USB disconnect, device number 11 [ 42.322757][ T10] rust_binder: 1461: undelivered TRANSACTION_COMPLETE [ 42.332613][ T312] rust_binder: 1461: undelivered transaction 191, process died [ 42.375901][ T1468] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.375917][ T1468] rust_binder: Read failure Err(EFAULT) in pid:172 [ 42.384904][ T1468] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.391502][ T1468] rust_binder: Read failure Err(EFAULT) in pid:172 [ 42.402784][ T1468] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 42.409360][ T1468] rust_binder: 1467:1468 error while translating object: EINVAL [ 42.425714][ T1468] rust_binder: Failure in copy_transaction_data: EINVAL [ 42.425741][ T1468] rust_binder: 1467:1468 transaction call to 1467:0 failed EINVAL, code 40 size 112-24 [ 42.442948][ T317] rust_binder: 1467: undelivered TRANSACTION_ERROR: 29201 [ 42.465248][ T1470] netlink: 228 bytes leftover after parsing attributes in process `syz.3.334'. [ 42.498234][ T1474] rust_binder: 1473:1474 FDA parent offset not aligned correctly [ 42.510917][ T1474] rust_binder: 1473:1474 error while translating object: EINVAL [ 42.519041][ T1474] rust_binder: Failure in copy_transaction_data: EINVAL [ 42.519071][ T1474] rust_binder: 1473:1474 transaction call to 1473:0 failed EINVAL, code 0 size 112-24 [ 42.536094][ T1474] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.536113][ T1474] rust_binder: Read failure Err(EFAULT) in pid:176 [ 42.544948][ T10] rust_binder: 1473: undelivered TRANSACTION_ERROR: 29201 [ 42.568683][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 42.568698][ T36] audit: type=1400 audit(1786048882.117:246): avc: denied { create } for pid=1479 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 42.632238][ T1488] netlink: 148 bytes leftover after parsing attributes in process `syz.3.343'. [ 42.660472][ T1491] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.660496][ T1491] rust_binder: Read failure Err(EFAULT) in pid:188 [ 42.677684][ T1491] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.693329][ T1491] rust_binder: Read failure Err(EFAULT) in pid:188 [ 42.719307][ T1495] netlink: 228 bytes leftover after parsing attributes in process `syz.3.346'. [ 42.760390][ T317] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.918361][ T317] usb 2-1: Using ep0 maxpacket: 32 [ 42.924908][ T317] usb 2-1: unable to get BOS descriptor or descriptor too short [ 42.933260][ T317] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 42.944337][ T317] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 42.955715][ T317] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 42.964791][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.972788][ T317] usb 2-1: Product: syz [ 42.976940][ T317] usb 2-1: Manufacturer: syz [ 42.981553][ T317] usb 2-1: SerialNumber: syz [ 42.987020][ T1478] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 42.988372][ T64] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 43.002054][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.158411][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 43.164585][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.174805][ T10] usb 1-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 43.185126][ T64] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 43.196073][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 43.199228][ T317] usb 2-1: MIDIStreaming interface descriptor not found [ 43.205052][ T64] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 43.222940][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=8281, bcdDevice= 0.40 [ 43.223628][ T317] usb 2-1: USB disconnect, device number 10 [ 43.232580][ T64] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 43.247075][ T10] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 43.255127][ T10] usb 1-1: Manufacturer: syz [ 43.259767][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.267757][ T64] usb 4-1: Product: syz [ 43.271938][ T10] usb 1-1: SerialNumber: syz [ 43.276751][ T64] usb 4-1: Manufacturer: syz [ 43.281627][ T64] usb 4-1: SerialNumber: syz [ 43.487806][ T10] usb 1-1: USB disconnect, device number 8 [ 43.496278][ T64] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 43.507161][ T64] usb 4-1: USB disconnect, device number 12 [ 43.918655][ T1510] can0: slcan on ptm0. [ 43.925515][ T1510] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.955599][ T1509] can0 (unregistered): slcan off ptm0. [ 43.968540][ T64] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 44.058342][ T524] rust_binder: 1532: undelivered TRANSACTION_COMPLETE [ 44.075551][ T524] rust_binder: 1532: undelivered transaction 214, process died [ 44.119344][ T64] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 44.134897][ T1547] rust_binder: 1546:1547 FDA parent offset not aligned correctly [ 44.142722][ T64] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 44.144740][ T1547] rust_binder: 1546:1547 error while translating object: EINVAL [ 44.157285][ T64] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 44.168361][ T1547] rust_binder: Failure in copy_transaction_data: EINVAL [ 44.169271][ T1547] rust_binder: 1546:1547 transaction call to 1546:0 failed EINVAL, code 0 size 112-24 [ 44.169462][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.176233][ T1547] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.186048][ T64] usb 2-1: Product: syz [ 44.200135][ T1547] rust_binder: Read failure Err(EFAULT) in pid:241 [ 44.203540][ T64] usb 2-1: Manufacturer: syz [ 44.218186][ T64] usb 2-1: SerialNumber: syz [ 44.226241][ T64] usb 2-1: config 0 descriptor?? [ 44.234223][ T312] rust_binder: 1546: undelivered TRANSACTION_ERROR: 29201 [ 44.242454][ T1508] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 44.253739][ T1508] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 44.265151][ T36] audit: type=1400 audit(1786048883.807:247): avc: denied { bind } for pid=1557 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.315868][ T1564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.324589][ T1565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.329044][ T1564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.333243][ T1565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.349435][ T36] audit: type=1400 audit(1786048883.897:249): avc: denied { read } for pid=1563 comm="syz.2.365" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.372634][ T36] audit: type=1400 audit(1786048883.897:248): avc: denied { read } for pid=1563 comm="syz.2.365" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.374842][ T317] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.395817][ T36] audit: type=1400 audit(1786048883.897:250): avc: denied { open } for pid=1563 comm="syz.2.365" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.395850][ T36] audit: type=1400 audit(1786048883.897:251): avc: denied { open } for pid=1563 comm="syz.2.365" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.403315][ T524] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 44.466129][ T1508] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 44.473433][ T1508] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 44.596167][ T1564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.604749][ T1564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.612542][ T317] usb 1-1: Using ep0 maxpacket: 32 [ 44.617703][ T524] usb 4-1: Using ep0 maxpacket: 8 [ 44.623915][ T317] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 44.632154][ T524] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 44.644957][ T317] usb 1-1: config 0 has no interface number 0 [ 44.651082][ T524] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 44.660151][ T317] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 44.670178][ T524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.678339][ T317] usb 1-1: config 0 interface 196 has no altsetting 0 [ 44.685937][ T524] usb 4-1: config 0 descriptor?? [ 44.692634][ T317] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 44.701782][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.709909][ T317] usb 1-1: Product: syz [ 44.714088][ T317] usb 1-1: Manufacturer: syz [ 44.718726][ T317] usb 1-1: SerialNumber: syz [ 44.724369][ T317] usb 1-1: config 0 descriptor?? [ 44.729671][ T1544] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 44.736656][ T1508] kvm: kvm [1507]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 44.745465][ T1508] kvm: kvm [1507]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 45.096048][ T524] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 45.103516][ T524] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 45.110975][ T524] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 45.118399][ T524] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 45.125808][ T524] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 45.136539][ T524] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 45.144048][ T524] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 45.152811][ T524] playstation 0003:054C:0BA0.0006: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 45.172780][ T1573] __nla_validate_parse: 3 callbacks suppressed [ 45.172799][ T1573] netlink: 148 bytes leftover after parsing attributes in process `syz.2.367'. [ 45.230299][ T64] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 45.241221][ T64] usb 2-1: USB disconnect, device number 11 [ 45.249350][ T317] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 45.258436][ T317] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 45.295329][ T524] playstation 0003:054C:0BA0.0006: Failed to retrieve feature with reportID 18: -71 [ 45.304959][ T524] playstation 0003:054C:0BA0.0006: Failed to retrieve DualShock4 pairing info: -71 [ 45.314615][ T524] playstation 0003:054C:0BA0.0006: Failed to get MAC address from DualShock4 [ 45.323717][ T524] playstation 0003:054C:0BA0.0006: Failed to create dualshock4. [ 45.332126][ T524] playstation 0003:054C:0BA0.0006: probe with driver playstation failed with error -71 [ 45.348180][ T524] usb 4-1: USB disconnect, device number 13 [ 45.359299][ T36] audit: type=1400 audit(1786048884.907:252): avc: denied { read write } for pid=1578 comm="syz.2.369" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.362640][ T1579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.382824][ T36] audit: type=1400 audit(1786048884.907:253): avc: denied { open } for pid=1578 comm="syz.2.369" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.391225][ T1579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.431035][ T1584] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.431053][ T1584] rust_binder: Read failure Err(EFAULT) in pid:263 [ 45.439957][ T1584] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.446466][ T1584] rust_binder: Read failure Err(EFAULT) in pid:263 [ 45.467668][ T1586] fuse: Unknown parameter '' [ 45.479591][ T36] audit: type=1400 audit(1786048885.027:254): avc: denied { watch watch_reads } for pid=1585 comm="syz.2.371" path="/109/file0" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 45.479728][ T1586] syz.2.371 uses obsolete (PF_INET,SOCK_PACKET) [ 45.662790][ T1589] rust_binder: Write failure EINVAL in pid:267 [ 45.775984][ T1594] netlink: 228 bytes leftover after parsing attributes in process `syz.1.373'. [ 45.910357][ T1607] TCP: TCP_TX_DELAY enabled [ 45.916045][ T36] audit: type=1400 audit(1786048891.454:255): avc: denied { name_bind } for pid=1606 comm="syz.1.379" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.917685][ T1607] syzkaller1: entered promiscuous mode [ 45.943333][ T1607] syzkaller1: entered allmulticast mode [ 46.022568][ T1611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.381'. [ 46.067177][ T1618] netlink: 228 bytes leftover after parsing attributes in process `syz.1.384'. [ 46.138430][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 46.263796][ T1632] IPv6: A: Disabled Multicast RS [ 46.298371][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 46.305540][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 46.314226][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.324639][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 46.335873][ T10] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 46.347076][ T10] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 46.360723][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 46.371840][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 46.383470][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 46.393175][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.403405][ T10] usb 4-1: Product: syz [ 46.407635][ T10] usb 4-1: Manufacturer: syz [ 46.412532][ T10] usb 4-1: SerialNumber: syz [ 46.492089][ T317] rust_binder: 1633: undelivered TRANSACTION_COMPLETE [ 46.499533][ T604] rust_binder: 1633: undelivered transaction 233, process died [ 46.514632][ T1636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 46.518373][ T64] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 46.620340][ T1605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.628998][ T1605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.639747][ T1640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.648228][ T1640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.678361][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 46.684924][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.693612][ T64] usb 2-1: config 16 has an invalid interface number: 82 but max is 0 [ 46.693832][ T1641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.703019][ T64] usb 2-1: config 16 has no interface number 0 [ 46.710392][ T1641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.724529][ T64] usb 2-1: config 16 interface 82 has no altsetting 0 [ 46.733573][ T64] usb 2-1: string descriptor 0 read error: -22 [ 46.740011][ T64] usb 2-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=3a.dc [ 46.749284][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.762110][ T64] uvcvideo 2-1:16.82: Found Unit with invalid ID 0 [ 46.967244][ T1632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 46.976612][ T1632] rust_binder: 1631:1632 transaction call to 0:0 failed EINVAL, code 0 size 104-24 [ 46.988002][ T317] usb 2-1: USB disconnect, device number 12 [ 46.994156][ T64] rust_binder: 1631: undelivered TRANSACTION_ERROR: 29201 [ 47.110429][ T524] usb 1-1: USB disconnect, device number 9 [ 47.515301][ T1652] rust_binder: 1651:1652 FDA parent offset not aligned correctly [ 47.523190][ T1652] rust_binder: 1651:1652 error while translating object: EINVAL [ 47.530915][ T1652] rust_binder: Failure in copy_transaction_data: EINVAL [ 47.530942][ T1652] rust_binder: 1651:1652 transaction call to 1651:0 failed EINVAL, code 0 size 112-24 [ 47.547702][ T1652] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 47.547718][ T1652] rust_binder: Read failure Err(EFAULT) in pid:270 [ 47.556634][ T604] rust_binder: 1651: undelivered TRANSACTION_ERROR: 29201 [ 47.608097][ T1660] netlink: 148 bytes leftover after parsing attributes in process `syz.1.401'. [ 47.868391][ T524] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 48.018419][ T524] usb 2-1: Using ep0 maxpacket: 32 [ 48.024645][ T524] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 48.033008][ T524] usb 2-1: config 0 has no interface number 0 [ 48.039657][ T524] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 48.050007][ T524] usb 2-1: config 0 interface 196 has no altsetting 0 [ 48.058377][ T524] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 48.067439][ T524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.075476][ T524] usb 2-1: Product: syz [ 48.079678][ T524] usb 2-1: Manufacturer: syz [ 48.084271][ T524] usb 2-1: SerialNumber: syz [ 48.089604][ T524] usb 2-1: config 0 descriptor?? [ 48.094813][ T1662] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 48.946782][ T1600] binfmt_misc: register: failed to install interpreter file ./file0 [ 48.955659][ T524] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 48.966166][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 48.972905][ T524] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 48.974219][ T524] usb 2-1: USB disconnect, device number 13 [ 48.991966][ T1665] rust_binder: 1664:1665 error while translating object: EBADF [ 49.005682][ T10] usb 4-1: USB disconnect, device number 14 [ 49.019219][ T1665] rust_binder: Failure in copy_transaction_data: EBADF [ 49.019251][ T1665] rust_binder: 1664:1665 transaction call to 1664:0 failed EBADF, code 0 size 72-24 [ 49.039891][ T1671] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.039914][ T1671] rust_binder: Read failure Err(EFAULT) in pid:211 [ 49.052782][ T45] rust_binder: 1664: undelivered TRANSACTION_ERROR: 29201 [ 49.056494][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.060281][ T524] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 49.075138][ T1671] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.092303][ T1671] rust_binder: Read failure Err(EFAULT) in pid:211 [ 49.127459][ T1678] netlink: 228 bytes leftover after parsing attributes in process `syz.0.409'. [ 49.203733][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 49.203750][ T36] audit: type=1400 audit(1786048900.746:260): avc: denied { ioctl } for pid=1685 comm="syz.3.413" path="socket:[12762]" dev="sockfs" ino=12762 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.271041][ T36] audit: type=1400 audit(1786048900.816:261): avc: denied { setopt } for pid=1693 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.291475][ T36] audit: type=1400 audit(1786048900.816:262): avc: denied { ioctl } for pid=1693 comm="syz.3.417" path="socket:[11616]" dev="sockfs" ino=11616 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.332272][ T1699] netlink: 36 bytes leftover after parsing attributes in process `syz.3.418'. [ 49.362127][ T36] audit: type=1400 audit(1786048900.906:263): avc: denied { write } for pid=1702 comm="syz.3.420" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.385515][ T36] audit: type=1400 audit(1786048900.906:264): avc: denied { ioctl } for pid=1702 comm="syz.3.420" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.394474][ T1706] netlink: 228 bytes leftover after parsing attributes in process `syz.3.421'. [ 49.410582][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 49.560391][ T9] usb 1-1: device descriptor read/64, error -71 [ 49.562351][ T524] rust_binder: 1716: undelivered TRANSACTION_COMPLETE [ 49.574374][ T10] rust_binder: 1716: undelivered transaction 256, process died [ 49.598335][ T36] audit: type=1400 audit(1786048901.136:265): avc: denied { ioctl } for pid=1720 comm="syz.1.427" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.658337][ T1733] rust_binder: 1732:1733 FDA parent offset not aligned correctly [ 49.666217][ T1733] rust_binder: 1732:1733 error while translating object: EINVAL [ 49.674087][ T1733] rust_binder: Failure in copy_transaction_data: EINVAL [ 49.674105][ T1733] rust_binder: 1732:1733 transaction call to 1732:0 failed EINVAL, code 0 size 112-24 [ 49.690621][ T1733] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.690634][ T1733] rust_binder: Read failure Err(EFAULT) in pid:295 [ 49.699476][ T10] rust_binder: 1732: undelivered TRANSACTION_ERROR: 29201 [ 49.798398][ T9] usb 1-1: device descriptor read/64, error -71 [ 49.948349][ T524] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 49.974749][ T1755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.983860][ T1755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.992425][ T1755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.001002][ T1755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.020251][ T1760] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 50.020270][ T1760] rust_binder: Read failure Err(EFAULT) in pid:312 [ 50.029055][ T1760] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 50.035611][ T1760] rust_binder: Read failure Err(EFAULT) in pid:312 [ 50.044260][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 50.085960][ T1766] rust_binder: 1765:1766 error while translating object: ENOENT [ 50.093726][ T1766] rust_binder: Failure in copy_transaction_data: ENOENT [ 50.093756][ T1766] rust_binder: 1765:1766 transaction call to 1765:0 failed ENOENT, code 0 size 88-24 [ 50.108353][ T524] usb 2-1: Using ep0 maxpacket: 32 [ 50.118431][ T45] rust_binder: 1765: undelivered TRANSACTION_ERROR: 29201 [ 50.128128][ T524] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 50.136420][ T524] usb 2-1: config 0 has no interface number 0 [ 50.142544][ T524] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 50.152586][ T524] usb 2-1: config 0 interface 196 has no altsetting 0 [ 50.160806][ T524] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 50.169886][ T524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.177867][ T524] usb 2-1: Product: syz [ 50.182062][ T524] usb 2-1: Manufacturer: syz [ 50.187365][ T524] usb 2-1: SerialNumber: syz [ 50.188364][ T9] usb 1-1: device descriptor read/64, error -71 [ 50.199269][ T524] usb 2-1: config 0 descriptor?? [ 50.206492][ T1735] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 50.231381][ T1772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.240076][ T1772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.458386][ T9] usb 1-1: device descriptor read/64, error -71 [ 50.568478][ T9] usb usb1-port1: attempt power cycle [ 50.785692][ T1785] __nla_validate_parse: 4 callbacks suppressed [ 50.785709][ T1785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.454'. [ 50.811440][ T1787] syz.2.455 (1787): attempted to duplicate a private mapping with mremap. This is not supported. [ 50.823534][ T1787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.832311][ T1787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.833163][ T524] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 50.853263][ T524] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 50.864837][ T524] usb 2-1: USB disconnect, device number 14 [ 50.870795][ T1793] netlink: 228 bytes leftover after parsing attributes in process `syz.3.457'. [ 50.889266][ T36] audit: type=1400 audit(1786048908.440:266): avc: denied { read write } for pid=1794 comm="syz.3.458" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.913347][ T36] audit: type=1400 audit(1786048908.440:267): avc: denied { open } for pid=1794 comm="syz.3.458" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.939002][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 50.948707][ T36] audit: type=1400 audit(1786048908.440:268): avc: denied { ioctl } for pid=1794 comm="syz.3.458" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.974440][ T36] audit: type=1326 audit(1786048908.440:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1794 comm="syz.3.458" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3cbd9e0d9 code=0x0 [ 51.000517][ T9] usb 1-1: device descriptor read/8, error -71 [ 51.049466][ T524] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 51.149386][ T9] usb 1-1: device descriptor read/8, error -71 [ 51.382264][ T1803] __vm_enough_memory: pid: 1803, comm: syz.1.461, bytes: 2199023259648 not enough memory for the allocation [ 51.388390][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 51.419412][ T9] usb 1-1: device descriptor read/8, error -71 [ 51.479251][ T604] rust_binder: 1807: undelivered TRANSACTION_COMPLETE [ 51.489169][ T45] rust_binder: 1807: undelivered transaction 276, process died [ 51.500640][ T1810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 51.541912][ T1816] netlink: 228 bytes leftover after parsing attributes in process `syz.2.467'. [ 51.559405][ T9] usb 1-1: device descriptor read/8, error -71 [ 51.566780][ T1818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.575421][ T1818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.638366][ T524] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 51.668445][ T9] usb usb1-port1: unable to enumerate USB device [ 51.731436][ T1820] netlink: 'syz.3.469': attribute type 4 has an invalid length. [ 51.741118][ T1820] netlink: 'syz.3.469': attribute type 4 has an invalid length. [ 51.760062][ T1822] rust_binder: 1821:1822 FDA parent offset not aligned correctly [ 51.767892][ T1822] rust_binder: 1821:1822 error while translating object: EINVAL [ 51.775848][ T1822] rust_binder: Failure in copy_transaction_data: EINVAL [ 51.775878][ T1822] rust_binder: 1821:1822 transaction call to 1821:0 failed EINVAL, code 0 size 112-24 [ 51.789458][ T524] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 51.796461][ T1822] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 51.801306][ T1822] rust_binder: Read failure Err(EFAULT) in pid:263 [ 51.802037][ T524] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 51.812025][ T9] rust_binder: 1821: undelivered TRANSACTION_ERROR: 29201 [ 51.815865][ T524] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 51.843727][ T524] usb 2-1: config 1 has no interface number 0 [ 51.847463][ T1824] netlink: 148 bytes leftover after parsing attributes in process `syz.3.471'. [ 51.849851][ T524] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 51.869516][ T524] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 51.884506][ T524] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.893820][ T524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.902007][ T524] usb 2-1: Product: syz [ 51.906379][ T524] usb 2-1: Manufacturer: syz [ 51.911008][ T524] usb 2-1: SerialNumber: syz [ 51.916973][ T524] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 51.923829][ T524] cdc_ncm 2-1:1.1: bind() failure [ 52.123333][ T1834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.132417][ T1834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.133592][ T10] usb 2-1: USB disconnect, device number 15 [ 52.149200][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 52.180385][ T1838] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.180402][ T1838] rust_binder: Read failure Err(EFAULT) in pid:208 [ 52.189407][ T1838] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.195909][ T1838] rust_binder: Read failure Err(EFAULT) in pid:208 [ 52.299769][ T9] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 52.319171][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 52.325756][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 52.334843][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.343858][ T9] usb 4-1: config 0 descriptor?? [ 52.578369][ T604] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 52.660859][ T1842] netlink: 228 bytes leftover after parsing attributes in process `syz.1.480'. [ 52.687383][ T1848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.696106][ T1848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.723101][ T1847] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 52.731020][ T604] usb 1-1: Using ep0 maxpacket: 8 [ 52.737564][ T604] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.747702][ T604] usb 1-1: config 2 has an invalid interface number: 2 but max is 0 [ 52.757152][ T9] uclogic 0003:5543:0042.0007: No inputs registered, leaving [ 52.764662][ T604] usb 1-1: config 2 has no interface number 0 [ 52.771241][ T604] usb 1-1: config 2 interface 2 altsetting 128 endpoint 0x5 has invalid wMaxPacketSize 0 [ 52.781313][ T9] uclogic 0003:5543:0042.0007: hidraw0: USB HID v10.01 Device [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 52.800085][ T604] usb 1-1: config 2 interface 2 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 0 [ 52.811058][ T604] usb 1-1: config 2 interface 2 has no altsetting 0 [ 52.819767][ T604] usb 1-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 52.828853][ T604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.836827][ T604] usb 1-1: Product: syz [ 52.841050][ T604] usb 1-1: Manufacturer: syz [ 52.845654][ T604] usb 1-1: SerialNumber: syz [ 52.957664][ T9] usb 4-1: USB disconnect, device number 15 [ 53.058532][ T604] usb 1-1: USB disconnect, device number 14 [ 53.100211][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.275438][ T1862] netlink: 'syz.2.487': attribute type 4 has an invalid length. [ 53.586365][ T1875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'. [ 53.626304][ T1880] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.626326][ T1880] rust_binder: Read failure Err(EFAULT) in pid:214 [ 53.635292][ T1880] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.641986][ T1880] rust_binder: Read failure Err(EFAULT) in pid:214 [ 53.653651][ T1880] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 53.660292][ T1880] rust_binder: 1879:1880 error while translating object: EINVAL [ 53.677024][ T1880] rust_binder: Failure in copy_transaction_data: EINVAL [ 53.677052][ T1880] rust_binder: 1879:1880 transaction call to 1879:0 failed EINVAL, code 112 size 112-24 [ 53.694748][ T10] rust_binder: 1879: undelivered TRANSACTION_ERROR: 29201 [ 53.728776][ T1886] random: crng reseeded on system resumption [ 53.902483][ T1893] rust_binder: 1892:1893 error while translating object: ENOENT [ 53.910269][ T1893] rust_binder: Failure in copy_transaction_data: ENOENT [ 53.910295][ T1893] rust_binder: 1892:1893 transaction call to 1892:0 failed ENOENT, code 0 size 104-24 [ 53.927605][ T10] rust_binder: 1892: undelivered TRANSACTION_ERROR: 29201 [ 54.002947][ T1904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'. [ 54.065843][ T1909] netlink: 228 bytes leftover after parsing attributes in process `syz.0.505'. [ 54.095415][ T1913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.121456][ T10] rust_binder: 1917: undelivered TRANSACTION_COMPLETE [ 54.134068][ T524] rust_binder: 1917: undelivered transaction 303, process died [ 54.149247][ T1922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 54.208352][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 54.234493][ T1932] rust_binder: 1931:1932 FDA parent offset not aligned correctly [ 54.242330][ T1932] rust_binder: 1931:1932 error while translating object: EINVAL [ 54.250151][ T1932] rust_binder: Failure in copy_transaction_data: EINVAL [ 54.250177][ T1932] rust_binder: 1931:1932 transaction call to 1931:0 failed EINVAL, code 0 size 112-24 [ 54.266751][ T1932] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.266771][ T1932] rust_binder: Read failure Err(EFAULT) in pid:376 [ 54.276705][ T604] rust_binder: 1931: undelivered TRANSACTION_ERROR: 29201 [ 54.291044][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 54.291059][ T36] audit: type=1400 audit(1786048917.834:277): avc: denied { create } for pid=1933 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.317278][ T36] audit: type=1400 audit(1786048917.834:278): avc: denied { bind } for pid=1933 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.358725][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 54.367418][ T45] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 54.375912][ T45] usb 2-1: config 0 has no interface number 0 [ 54.382072][ T45] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 54.392286][ T45] usb 2-1: config 0 interface 196 has no altsetting 0 [ 54.407234][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 54.419314][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.427378][ T45] usb 2-1: Product: syz [ 54.431622][ T45] usb 2-1: Manufacturer: syz [ 54.436253][ T45] usb 2-1: SerialNumber: syz [ 54.444494][ T45] usb 2-1: config 0 descriptor?? [ 54.448388][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 54.449768][ T1898] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 54.580508][ T1953] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.580533][ T1953] rust_binder: Read failure Err(EFAULT) in pid:287 [ 54.589786][ T1953] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.596368][ T1953] rust_binder: Read failure Err(EFAULT) in pid:287 [ 54.609370][ T10] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 54.635456][ T10] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.649641][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 54.656374][ T10] usb 1-1: New USB device found, idVendor=1d6e, idProduct=00fc, bcdDevice= 0.00 [ 54.668174][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.680808][ T10] usb 1-1: config 0 descriptor?? [ 54.686897][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 55.079498][ T45] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 55.090066][ T45] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 55.098989][ T45] usb 2-1: USB disconnect, device number 16 [ 55.139118][ T45] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 55.568376][ T31] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 55.592578][ T1979] Bluetooth: ISO socket layer initialized [ 55.635189][ T1985] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.635212][ T1985] rust_binder: Read failure Err(EFAULT) in pid:326 [ 55.644132][ T1985] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.650705][ T1985] rust_binder: Read failure Err(EFAULT) in pid:326 [ 55.653051][ T1979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.660504][ T1985] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 55.675204][ T1985] rust_binder: 1984:1985 error while translating object: EINVAL [ 55.675360][ T1979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.699473][ T1985] rust_binder: Failure in copy_transaction_data: EINVAL [ 55.699501][ T1985] rust_binder: 1984:1985 transaction call to 1984:0 failed EINVAL, code 120 size 112-24 [ 55.719996][ T45] rust_binder: 1984: undelivered TRANSACTION_ERROR: 29201 [ 55.727810][ T36] audit: type=1400 audit(1786048925.264:279): avc: denied { read } for pid=1927 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.754410][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.768713][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.779823][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.794513][ T31] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 55.805782][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.819676][ T31] usb 4-1: config 0 descriptor?? [ 55.992906][ T1997] rust_binder: 1996:1997 error while translating object: ENOENT [ 56.000709][ T1997] rust_binder: Failure in copy_transaction_data: ENOENT [ 56.000735][ T1997] rust_binder: 1996:1997 transaction call to 1996:0 failed ENOENT, code 0 size 104-24 [ 56.018347][ T317] rust_binder: 1996: undelivered TRANSACTION_ERROR: 29201 [ 56.039060][ T2002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.047638][ T2002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.048169][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 56.061506][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 56.070633][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 56.080023][ T31] usb 4-1: USB disconnect, device number 16 [ 56.197243][ T36] audit: type=1400 audit(1786048925.734:280): avc: denied { create } for pid=2012 comm="syz.3.548" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.248368][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 56.254614][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.266779][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.277748][ T45] usb 2-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 56.287257][ T36] audit: type=1400 audit(1786048925.824:281): avc: denied { unlink } for pid=296 comm="syz-executor" name="file5" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.292719][ T2015] __nla_validate_parse: 5 callbacks suppressed [ 56.292736][ T2015] netlink: 228 bytes leftover after parsing attributes in process `syz.3.549'. [ 56.309741][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.333424][ T45] usb 2-1: Product: syz [ 56.337744][ T45] usb 2-1: Manufacturer: syz [ 56.342680][ T45] usb 2-1: SerialNumber: syz [ 56.469082][ T36] audit: type=1400 audit(1786048926.014:282): avc: denied { mounton } for pid=2020 comm="syz.3.552" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 56.469108][ T2022] overlayfs: missing 'lowerdir' [ 56.520881][ T10] rust_binder: 2027: undelivered TRANSACTION_COMPLETE [ 56.531013][ T317] rust_binder: 2027: undelivered transaction 330, process died [ 56.550493][ T45] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 56.557938][ T45] usb 2-1: unit 0 not found! [ 56.565544][ T45] usb 2-1: USB disconnect, device number 17 [ 56.592421][ T2030] fuseblk: Bad value for 'source' [ 56.605340][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 56.632722][ T2038] 9pnet_fd: Insufficient options for proto=fd [ 56.649872][ T2040] netlink: 228 bytes leftover after parsing attributes in process `syz.2.559'. [ 56.674084][ T2042] rust_binder: 2041:2042 FDA parent offset not aligned correctly [ 56.681885][ T2042] rust_binder: 2041:2042 error while translating object: EINVAL [ 56.689680][ T2042] rust_binder: Failure in copy_transaction_data: EINVAL [ 56.689705][ T2042] rust_binder: 2041:2042 transaction call to 2041:0 failed EINVAL, code 0 size 112-24 [ 56.706539][ T2042] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 56.706557][ T2042] rust_binder: Read failure Err(EFAULT) in pid:413 [ 56.715179][ T10] rust_binder: 2041: undelivered TRANSACTION_ERROR: 29201 [ 56.747594][ T2047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.562'. [ 56.765998][ T2050] netlink: 148 bytes leftover after parsing attributes in process `syz.2.563'. [ 56.783551][ T2052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.792077][ T2052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.070572][ T36] audit: type=1400 audit(1786048926.614:283): avc: denied { shutdown } for pid=2055 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.129030][ T2066] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.129052][ T2066] rust_binder: Read failure Err(EFAULT) in pid:346 [ 57.137956][ T2066] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.144747][ T2066] rust_binder: Read failure Err(EFAULT) in pid:346 [ 57.173418][ T2070] netlink: 228 bytes leftover after parsing attributes in process `syz.1.572'. [ 57.212367][ T10] usb 1-1: USB disconnect, device number 15 [ 57.261688][ T2079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2079 comm=syz.1.574 [ 57.343997][ T65] device offline error, dev sda, sector 680246 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 57.354523][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 85030) [ 57.366047][ T65] Buffer I/O error on device sda1, logical block 84992 [ 57.372961][ T65] device offline error, dev sda, sector 688438 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 57.383585][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 86054) [ 57.395285][ T65] Buffer I/O error on device sda1, logical block 86016 [ 57.402281][ T65] device offline error, dev sda, sector 704822 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 57.408423][ T2088] incfs: Options parsing error. -22 [ 57.412898][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2034 starting block 88102) [ 57.417987][ T2088] incfs: mount failed -22 [ 57.429393][ T65] Buffer I/O error on device sda1, logical block 88064 [ 57.440771][ T65] device offline error, dev sda, sector 705326 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 57.451444][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2034 starting block 88165) [ 57.463128][ T65] Buffer I/O error on device sda1, logical block 88127 [ 57.470175][ T65] device offline error, dev sda, sector 712998 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 57.475221][ T2092] netlink: 36 bytes leftover after parsing attributes in process `syz.3.582'. [ 57.480662][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2034 starting block 89124) [ 57.501059][ T65] Buffer I/O error on device sda1, logical block 89086 [ 57.507925][ T65] Buffer I/O error on device sda1, logical block 89087 [ 57.513384][ T361] device offline error, dev sda, sector 688942 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 57.514817][ T65] device offline error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 57.525542][ T361] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 86117) [ 57.535584][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 90150) [ 57.535611][ T65] Buffer I/O error on device sda1, logical block 90112 [ 57.535652][ T65] device offline error, dev sda, sector 721710 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 57.547419][ T361] Buffer I/O error on device sda1, logical block 86079 [ 57.558529][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 90213) [ 57.565462][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 57.575764][ T65] Buffer I/O error on device sda1, logical block 90175 [ 57.605063][ T361] device offline error, dev sda, sector 696566 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 57.608468][ T65] device offline error, dev sda, sector 729382 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 57.622157][ T361] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 87070) [ 57.629249][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 91172) [ 57.629283][ T65] Buffer I/O error on device sda1, logical block 91134 [ 57.641601][ T73] Aborting journal on device sda1-8. [ 57.664380][ T361] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775800 pages, ino 2035; err -30 [ 57.664579][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 57.675204][ T361] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm kworker/u8:10: Detected aborted journal [ 57.686159][ T2084] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.2.579: Detected aborted journal [ 57.695033][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 57.713318][ T65] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 57.721597][ T361] EXT4-fs (sda1): I/O error while writing superblock [ 57.728273][ T361] EXT4-fs (sda1): Remounting filesystem read-only [ 57.728554][ T2084] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 57.734776][ T361] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 2035; err -30 [ 57.746858][ T2084] EXT4-fs (sda1): I/O error while writing superblock [ 57.760135][ T2084] EXT4-fs (sda1): Remounting filesystem read-only [ 57.790605][ T2085] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 57.825777][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 57.878851][ T10] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 57.893055][ T10] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 57.905993][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 57.912676][ T10] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 57.917946][ T2097] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.921746][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.928722][ T10] usb 1-1: config 0 descriptor?? [ 57.932354][ T2097] rust_binder: Read failure Err(EFAULT) in pid:432 [ 57.946207][ T2097] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.952834][ T2097] rust_binder: Read failure Err(EFAULT) in pid:432 [ 57.961380][ T2097] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 57.967959][ T2097] rust_binder: 2096:2097 error while translating object: EINVAL [ 57.984381][ T2097] rust_binder: Failure in copy_transaction_data: EINVAL [ 57.984407][ T2097] rust_binder: 2096:2097 transaction call to 2096:0 failed EINVAL, code 180 size 112-24 [ 58.001775][ T317] rust_binder: 2096: undelivered TRANSACTION_ERROR: 29201 [ 58.015556][ T2099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.024113][ T2099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.161275][ T2108] rust_binder: 2107:2108 error while translating object: ENOENT [ 58.169081][ T2108] rust_binder: Failure in copy_transaction_data: ENOENT [ 58.169121][ T2108] rust_binder: 2107:2108 transaction call to 2107:0 failed ENOENT, code 0 size 104-24 [ 58.186740][ T317] rust_binder: 2107: undelivered TRANSACTION_ERROR: 29201 [ 58.352001][ T10] sony 0003:12BA:0100.0008: item fetching failed at offset 5/6 [ 58.359755][ T10] sony 0003:12BA:0100.0008: parse failed [ 58.365410][ T10] sony 0003:12BA:0100.0008: probe with driver sony failed with error -22 [ 58.544321][ T2121] netlink: 228 bytes leftover after parsing attributes in process `syz.2.595'. [ 58.569083][ T2078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.577650][ T2078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.586798][ T2078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.595755][ T2078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.661355][ T10] usb 1-1: USB disconnect, device number 16 [ 58.729873][ T36] audit: type=1400 audit(1786048934.272:284): avc: denied { read } for pid=2125 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.824538][ T45] rust_binder: 2136: undelivered TRANSACTION_COMPLETE [ 58.840517][ T45] rust_binder: 2136: undelivered transaction 357, process died [ 58.867870][ T2140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2050 sclass=netlink_audit_socket pid=2140 comm=syz.1.601 [ 58.895217][ T2141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 58.915595][ T36] audit: type=1400 audit(1786048934.452:285): avc: denied { read } for pid=2139 comm="syz.1.601" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.949795][ T36] audit: type=1400 audit(1786048934.452:286): avc: denied { open } for pid=2139 comm="syz.1.601" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.003476][ T2149] netlink: 228 bytes leftover after parsing attributes in process `syz.3.606'. [ 59.018575][ T2147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.039427][ T2147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.050753][ T2151] rust_binder: 2150:2151 FDA parent offset not aligned correctly [ 59.058535][ T2151] rust_binder: 2150:2151 error while translating object: EINVAL [ 59.066255][ T2151] rust_binder: Failure in copy_transaction_data: EINVAL [ 59.066284][ T2151] rust_binder: 2150:2151 transaction call to 2150:0 failed EINVAL, code 0 size 112-24 [ 59.082913][ T2151] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.082934][ T2151] rust_binder: Read failure Err(EFAULT) in pid:374 [ 59.091659][ T45] rust_binder: 2150: undelivered TRANSACTION_ERROR: 29201 [ 59.137536][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.146327][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.202739][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 59.368331][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 59.381603][ T10] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 59.383458][ T2176] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.389881][ T2176] rust_binder: Read failure Err(EFAULT) in pid:273 [ 59.398595][ T10] usb 2-1: config 0 has no interface number 0 [ 59.401365][ T2176] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.405433][ T10] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 59.411344][ T2176] rust_binder: Read failure Err(EFAULT) in pid:273 [ 59.419584][ T10] usb 2-1: config 0 interface 196 has no altsetting 0 [ 59.444198][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 59.453483][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.460386][ T36] audit: type=1400 audit(1786048935.002:287): avc: denied { write } for pid=2179 comm="syz.0.618" name="netlink" dev="proc" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.461721][ T10] usb 2-1: Product: syz [ 59.489486][ T10] usb 2-1: Manufacturer: syz [ 59.493569][ T36] audit: type=1400 audit(1786048935.032:288): avc: denied { mount } for pid=2179 comm="syz.0.618" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 59.494136][ T10] usb 2-1: SerialNumber: syz [ 59.516403][ T36] audit: type=1400 audit(1786048935.032:289): avc: denied { search } for pid=2179 comm="syz.0.618" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.522039][ T10] usb 2-1: config 0 descriptor?? [ 59.547448][ T36] audit: type=1400 audit(1786048935.032:290): avc: denied { write } for pid=2179 comm="syz.0.618" name="buffer_size_kb" dev="tracefs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 59.547900][ T2143] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.570364][ T36] audit: type=1400 audit(1786048935.032:291): avc: denied { open } for pid=2179 comm="syz.0.618" path="/118/tracefs_dir/buffer_size_kb" dev="tracefs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 59.792147][ T2188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.800992][ T2188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.058806][ T36] audit: type=1400 audit(1786048941.603:292): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 60.091842][ T36] audit: type=1400 audit(1786048941.633:293): avc: denied { ioctl } for pid=2195 comm="syz.3.625" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 60.093616][ T2203] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.116957][ T2203] rust_binder: Read failure Err(EFAULT) in pid:281 [ 60.131850][ T2205] veth1_to_bond: entered promiscuous mode [ 60.141603][ T2203] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.144145][ T2203] rust_binder: Read failure Err(EFAULT) in pid:281 [ 60.153380][ T2203] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 60.153842][ T2205] veth1_to_bond (unregistering): left promiscuous mode [ 60.159954][ T2203] rust_binder: 2200:2203 error while translating object: EINVAL [ 60.183442][ T2203] rust_binder: Failure in copy_transaction_data: EINVAL [ 60.183472][ T2203] rust_binder: 2200:2203 transaction call to 2200:0 failed EINVAL, code 216 size 112-24 [ 60.198034][ T36] audit: type=1400 audit(1786048941.733:294): avc: denied { lock } for pid=2204 comm="syz.3.628" path="socket:[15672]" dev="sockfs" ino=15672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 60.203889][ T45] rust_binder: 2200: undelivered TRANSACTION_ERROR: 29201 [ 60.232367][ T10] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 60.238623][ T36] audit: type=1400 audit(1786048941.733:295): avc: denied { bpf } for pid=2204 comm="syz.3.628" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.242999][ T10] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 60.272496][ T10] usb 2-1: USB disconnect, device number 18 [ 60.353929][ T2219] rust_binder: 2218:2219 error while translating object: ENOENT [ 60.361689][ T2219] rust_binder: Failure in copy_transaction_data: ENOENT [ 60.361709][ T2219] rust_binder: 2218:2219 transaction call to 2218:0 failed ENOENT, code 0 size 104-24 [ 60.379198][ T10] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 60.379715][ T45] rust_binder: 2218: undelivered TRANSACTION_ERROR: 29201 [ 60.416679][ T36] audit: type=1400 audit(1786048941.953:296): avc: denied { execute } for pid=2220 comm="syz.2.635" path="/file1" dev="ramfs" ino=16395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 60.577533][ T2237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.593080][ T2237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.621030][ T45] rust_binder: 2239: undelivered TRANSACTION_COMPLETE [ 60.632851][ T45] rust_binder: 2239: undelivered transaction 384, process died [ 60.746535][ T2257] rust_binder: 2256:2257 FDA parent offset not aligned correctly [ 60.754439][ T2257] rust_binder: 2256:2257 error while translating object: EINVAL [ 60.762701][ T2257] rust_binder: Failure in copy_transaction_data: EINVAL [ 60.762729][ T2257] rust_binder: 2256:2257 transaction call to 2256:0 failed EINVAL, code 0 size 112-24 [ 60.779333][ T2257] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.779390][ T2257] rust_binder: Read failure Err(EFAULT) in pid:377 [ 60.788033][ T9] rust_binder: 2256: undelivered TRANSACTION_ERROR: 29201 [ 60.868409][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 61.018349][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 61.024551][ T10] usb 1-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config [ 61.034851][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.043740][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 61.051700][ T10] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 61.060767][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.068774][ T10] usb 1-1: Product: syz [ 61.072928][ T10] usb 1-1: Manufacturer: syz [ 61.077498][ T10] usb 1-1: SerialNumber: syz [ 61.078351][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 61.092114][ T110] udevd[110]: worker [313] terminated by signal 7 (Bus error) [ 61.099659][ T110] udevd[110]: worker [313] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 61.133029][ T110] udevd[110]: worker [333] terminated by signal 7 (Bus error) [ 61.140668][ T110] udevd[110]: worker [333] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0' [ 61.162579][ T2273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.171177][ T2273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.238357][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 61.244604][ T45] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 61.255742][ T45] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 61.264815][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.272837][ T45] usb 2-1: Product: syz [ 61.277006][ T45] usb 2-1: Manufacturer: syz [ 61.281624][ T45] usb 2-1: SerialNumber: syz [ 61.288348][ T2266] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 61.296203][ T10] usb 1-1: 0:1 : does not exist [ 61.301115][ T10] usb 1-1: unit 6 not found! [ 61.305766][ T10] usb 1-1: unit 12 not found! [ 61.310947][ T10] usb 1-1: unit 101 not found! [ 61.315722][ T10] usb 1-1: unit 189 not found! [ 61.332154][ T10] usb 1-1: USB disconnect, device number 17 [ 61.347711][ T110] udevd[110]: worker [445] terminated by signal 7 (Bus error) [ 61.355308][ T110] udevd[110]: worker [445] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0' [ 61.498831][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 61.508138][ T45] usb 2-1: USB disconnect, device number 19 [ 61.513062][ T110] udevd[110]: worker [1455] terminated by signal 7 (Bus error) [ 61.521913][ T110] udevd[110]: worker [1455] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 61.536619][ T110] udevd[110]: worker [321] terminated by signal 7 (Bus error) [ 61.544165][ T110] udevd[110]: worker [321] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0' [ 61.642043][ T2281] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.642065][ T2281] rust_binder: Read failure Err(EFAULT) in pid:422 [ 61.651818][ T2281] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.658424][ T2281] rust_binder: Read failure Err(EFAULT) in pid:422 [ 61.687110][ T2286] SELinux: policydb magic number 0xaef0c685 does not match expected magic number 0xf97cff8c [ 61.703999][ T2286] SELinux: failed to load policy [ 61.728061][ T2292] rust_binder: 2291:2292 got transaction with invalid offset [ 61.735659][ T2292] rust_binder: Failure in copy_transaction_data: EINVAL [ 61.735684][ T2292] rust_binder: 2291:2292 transaction async to 2291:0 failed EINVAL, code 0 size 72-24 [ 61.790202][ T2301] overlayfs: failed to resolve './file1/file0': -2 [ 61.792486][ T45] rust_binder: 2291: undelivered TRANSACTION_ERROR: 29201 [ 61.834058][ T2304] __nla_validate_parse: 9 callbacks suppressed [ 61.834075][ T2304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.671'. [ 61.862937][ T2310] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.862956][ T2310] rust_binder: Read failure Err(EFAULT) in pid:297 [ 61.871903][ T2310] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.878548][ T2310] rust_binder: Read failure Err(EFAULT) in pid:297 [ 61.887487][ T2310] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 61.894297][ T2310] rust_binder: 2309:2310 error while translating object: EINVAL [ 61.910927][ T2310] rust_binder: Failure in copy_transaction_data: EINVAL [ 61.910957][ T2310] rust_binder: 2309:2310 transaction call to 2309:0 failed EINVAL, code 231 size 112-24 [ 61.918251][ T2312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.932313][ T618] rust_binder: 2309: undelivered TRANSACTION_ERROR: 29201 [ 61.937163][ T2312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.021280][ T2319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=2319 comm=syz.0.677 [ 62.041212][ T2321] rust_binder: 2320:2321 error while translating object: ENOENT [ 62.049006][ T2321] rust_binder: Failure in copy_transaction_data: ENOENT [ 62.049034][ T2321] rust_binder: 2320:2321 transaction call to 2320:0 failed ENOENT, code 0 size 104-24 [ 62.066642][ T618] rust_binder: 2320: undelivered TRANSACTION_ERROR: 29201 [ 62.083778][ T2329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.092339][ T2329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.100112][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 62.123974][ T2333] netlink: 228 bytes leftover after parsing attributes in process `syz.0.683'. [ 62.199097][ T2335] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.258391][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 62.264677][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 62.272887][ T10] usb 4-1: config 0 has no interface number 0 [ 62.278977][ T10] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 62.289019][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 62.298709][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 62.307800][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.315861][ T10] usb 4-1: Product: syz [ 62.320058][ T618] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 62.327649][ T10] usb 4-1: Manufacturer: syz [ 62.332357][ T10] usb 4-1: SerialNumber: syz [ 62.337966][ T10] usb 4-1: config 0 descriptor?? [ 62.344750][ T2307] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 62.478381][ T618] usb 2-1: device descriptor read/64, error -71 [ 62.495863][ T45] rust_binder: 2350: undelivered TRANSACTION_COMPLETE [ 62.515285][ T45] rust_binder: 2350: undelivered transaction 413, process died [ 62.548967][ T2357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 62.605092][ T2353] Write-error on swap-device (8:0:293198) Aug 6 20:42:30 syzkaller kern.alert kernel: [ 62.605092][ T2353] Write-error on swap-device (8:0:293198) [ 62.664737][ T2353] netlink: 228 bytes leftover after parsing attributes in process `syz.2.691'. [ 62.695628][ T2367] netlink: 228 bytes leftover after parsing attributes in process `syz.2.695'. [ 62.704334][ T2369] rust_binder: 2368:2369 FDA parent offset not aligned correctly [ 62.712725][ T2369] rust_binder: 2368:2369 error while translating object: EINVAL [ 62.720520][ T2369] rust_binder: Failure in copy_transaction_data: EINVAL [ 62.720545][ T2369] rust_binder: 2368:2369 transaction call to 2368:0 failed EINVAL, code 0 size 112-24 [ 62.737179][ T618] usb 2-1: device descriptor read/64, error -71 [ 62.743587][ T2369] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 62.743606][ T2369] rust_binder: Read failure Err(EFAULT) in pid:338 [ 62.752576][ T604] rust_binder: 2368: undelivered TRANSACTION_ERROR: 29201 [ 62.773454][ T2373] netlink: 148 bytes leftover after parsing attributes in process `syz.0.698'. [ 62.800397][ T2371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.809600][ T2371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.898740][ T2397] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 62.898758][ T2397] rust_binder: Read failure Err(EFAULT) in pid:360 [ 62.907647][ T2397] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 62.914206][ T2397] rust_binder: Read failure Err(EFAULT) in pid:360 [ 62.967330][ T10] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 62.985002][ T10] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 62.992606][ T618] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 63.003317][ T10] usb 4-1: USB disconnect, device number 17 [ 63.034201][ T2415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.715'. [ 63.051320][ T10] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 63.062527][ T2417] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 63.062550][ T2417] rust_binder: Read failure Err(EFAULT) in pid:527 [ 63.071553][ T2417] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 63.078090][ T2417] rust_binder: Read failure Err(EFAULT) in pid:527 [ 63.086475][ T2417] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 63.093081][ T2417] rust_binder: 2416:2417 error while translating object: EINVAL [ 63.109450][ T2417] rust_binder: Failure in copy_transaction_data: EINVAL [ 63.109474][ T2417] rust_binder: 2416:2417 transaction call to 2416:0 failed EINVAL, code 240 size 112-24 [ 63.126715][ T45] rust_binder: 2416: undelivered TRANSACTION_ERROR: 29201 [ 63.148348][ T618] usb 2-1: device descriptor read/64, error -71 [ 63.162855][ T2419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.171475][ T2419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.388394][ T618] usb 2-1: device descriptor read/64, error -71 [ 63.499076][ T618] usb usb2-port1: attempt power cycle [ 63.558869][ T2439] rust_binder: 2438:2439 error while translating object: ENOENT [ 63.568366][ T2439] rust_binder: Failure in copy_transaction_data: ENOENT [ 63.568396][ T2439] rust_binder: 2438:2439 transaction call to 2438:0 failed ENOENT, code 0 size 104-24 [ 63.588461][ T10] rust_binder: 2438: undelivered TRANSACTION_ERROR: 29201 [ 63.599143][ T2429] : renamed from vlan0 (while UP) [ 63.626812][ T2444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 63.663085][ T2448] netlink: 228 bytes leftover after parsing attributes in process `syz.3.726'. [ 63.737428][ T2454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.747962][ T2454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.848373][ T618] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 63.869459][ T618] usb 2-1: device descriptor read/8, error -71 [ 63.918394][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 63.999404][ T618] usb 2-1: device descriptor read/8, error -71 [ 64.068362][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 64.073869][ T45] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 64.083006][ T45] usb 4-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 64.091770][ T45] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 64.101720][ T45] usb 4-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 64.110466][ T45] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 64.120412][ T45] usb 4-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 64.129161][ T45] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 64.139116][ T45] usb 4-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 64.147879][ T45] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 64.157756][ T45] usb 4-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 64.166497][ T45] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 64.176319][ T45] usb 4-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 64.185055][ T45] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 64.194857][ T45] usb 4-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 64.203575][ T45] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 64.213402][ T45] usb 4-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 64.222148][ T45] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 64.232533][ T2450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.240999][ T618] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 64.241136][ T2450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.259544][ T45] usb 4-1: string descriptor 0 read error: -71 [ 64.265768][ T45] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 64.269341][ T618] usb 2-1: device descriptor read/8, error -71 [ 64.274870][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.293906][ T45] r8152-cfgselector 4-1: Unknown version 0x0000 [ 64.300236][ T45] r8152-cfgselector 4-1: rejected 8 configurations due to insufficient available bus power [ 64.309364][ T10] rust_binder: 2467: undelivered TRANSACTION_COMPLETE [ 64.315347][ T45] r8152-cfgselector 4-1: no configuration chosen from 8 choices [ 64.325969][ T10] rust_binder: 2467: undelivered transaction 440, process died [ 64.332886][ T45] r8152-cfgselector 4-1: USB disconnect, device number 18 [ 64.350883][ T2474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'. [ 64.382259][ T2478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.390920][ T2478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.409492][ T618] usb 2-1: device descriptor read/8, error -71 [ 64.518482][ T618] usb usb2-port1: unable to enumerate USB device [ 64.678409][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 64.778726][ T2486] rust_binder: 2485:2486 FDA parent offset not aligned correctly [ 64.786490][ T2486] rust_binder: 2485:2486 error while translating object: EINVAL [ 64.794420][ T2486] rust_binder: Failure in copy_transaction_data: EINVAL [ 64.794446][ T2486] rust_binder: 2485:2486 transaction call to 2485:0 failed EINVAL, code 0 size 112-24 [ 64.811092][ T2486] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 64.811112][ T2486] rust_binder: Read failure Err(EFAULT) in pid:453 [ 64.820048][ T618] rust_binder: 2485: undelivered TRANSACTION_ERROR: 29201 [ 64.833794][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 64.842560][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 64.850892][ T10] usb 1-1: config 0 has no interface number 0 [ 64.857163][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 64.867286][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 64.875549][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 64.884744][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.892775][ T10] usb 1-1: Product: syz [ 64.897023][ T10] usb 1-1: Manufacturer: syz [ 64.901639][ T10] usb 1-1: SerialNumber: syz [ 64.907493][ T10] usb 1-1: config 0 descriptor?? [ 64.917520][ T2484] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 65.028747][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 65.028763][ T36] audit: type=1400 audit(1786048958.576:311): avc: denied { setopt } for pid=2503 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.064514][ T36] audit: type=1400 audit(1786048958.606:313): avc: denied { bind } for pid=2503 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.084147][ T36] audit: type=1400 audit(1786048958.606:312): avc: denied { bind } for pid=2503 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.088126][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 65.130238][ T10] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 65.143935][ T10] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 65.156634][ T2509] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.156657][ T2509] rust_binder: Read failure Err(EFAULT) in pid:391 [ 65.166546][ T10] usb 1-1: USB disconnect, device number 18 [ 65.180902][ T2509] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.180924][ T2509] rust_binder: Read failure Err(EFAULT) in pid:391 [ 65.189096][ T36] audit: type=1400 audit(1786048958.736:314): avc: denied { getopt } for pid=2512 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.190223][ T2513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.224213][ T2513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.258415][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 65.265322][ T45] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 65.275338][ T45] usb 4-1: config 0 has no interface number 0 [ 65.281478][ T45] usb 4-1: config 0 interface 184 has no altsetting 0 [ 65.290559][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 65.300145][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.308188][ T45] usb 4-1: Product: syz [ 65.312461][ T45] usb 4-1: Manufacturer: syz [ 65.317065][ T45] usb 4-1: SerialNumber: syz [ 65.326443][ T45] usb 4-1: config 0 descriptor?? [ 65.332173][ T45] smsc75xx v1.0.0 [ 65.618406][ T524] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 65.645802][ T2528] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.645822][ T2528] rust_binder: Read failure Err(EFAULT) in pid:391 [ 65.654809][ T2528] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.661375][ T2528] rust_binder: Read failure Err(EFAULT) in pid:391 [ 65.669790][ T2528] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 65.676392][ T2528] rust_binder: 2527:2528 error while translating object: EINVAL [ 65.692825][ T2528] rust_binder: Failure in copy_transaction_data: EINVAL [ 65.692854][ T2528] rust_binder: 2527:2528 transaction call to 2527:0 failed EINVAL, code 248 size 112-24 [ 65.710133][ T31] rust_binder: 2527: undelivered TRANSACTION_ERROR: 29201 [ 65.752717][ T524] usb 2-1: device descriptor read/64, error -71 [ 65.768170][ T2538] rust_binder: 2536:2538 error while translating object: EINVAL [ 65.775968][ T2538] rust_binder: Failure in copy_transaction_data: EINVAL [ 65.775992][ T2538] rust_binder: 2536:2538 transaction async to 2536:0 failed EINVAL, code 0 size 120-24 [ 65.796740][ T604] rust_binder: 2536: undelivered TRANSACTION_ERROR: 29201 [ 65.814937][ T2540] rust_binder: 2539:2540 error while translating object: ENOENT [ 65.822686][ T2540] rust_binder: Failure in copy_transaction_data: ENOENT [ 65.822714][ T2540] rust_binder: 2539:2540 transaction call to 2539:0 failed ENOENT, code 0 size 104-24 [ 65.840387][ T604] rust_binder: 2539: undelivered TRANSACTION_ERROR: 29201 [ 65.865407][ T2544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.874406][ T2544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.883884][ T36] audit: type=1400 audit(1786048965.435:315): avc: denied { read } for pid=2543 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.888789][ T2544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.912810][ T2544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.008392][ T524] usb 2-1: device descriptor read/64, error -71 [ 66.118392][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 66.136072][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 66.146959][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 66.156492][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 66.167324][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 66.177001][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 66.187268][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 66.196918][ T45] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 66.207115][ T45] usb 4-1: USB disconnect, device number 19 [ 66.248374][ T524] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 66.278385][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 66.284600][ T31] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 66.292936][ T31] usb 1-1: config 0 has no interface number 0 [ 66.299060][ T31] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 66.309078][ T31] usb 1-1: config 0 interface 196 has no altsetting 0 [ 66.317196][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 66.326427][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.334625][ T31] usb 1-1: Product: syz [ 66.338842][ T31] usb 1-1: Manufacturer: syz [ 66.343439][ T31] usb 1-1: SerialNumber: syz [ 66.348633][ T31] usb 1-1: config 0 descriptor?? [ 66.353908][ T2548] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 66.388444][ T524] usb 2-1: device descriptor read/64, error -71 [ 66.566316][ T31] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 66.577007][ T31] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 66.590842][ T31] usb 1-1: USB disconnect, device number 19 [ 66.628380][ T524] usb 2-1: device descriptor read/64, error -71 [ 66.636637][ T36] audit: type=1400 audit(1786048966.175:316): avc: denied { ioctl } for pid=2564 comm="syz.2.774" path="socket:[18257]" dev="sockfs" ino=18257 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.748399][ T524] usb usb2-port1: attempt power cycle [ 66.765017][ T604] rust_binder: 2576: undelivered TRANSACTION_COMPLETE [ 66.777567][ T604] rust_binder: 2576: undelivered transaction 472, process died [ 66.852440][ T2587] __nla_validate_parse: 6 callbacks suppressed [ 66.852461][ T2587] netlink: 228 bytes leftover after parsing attributes in process `syz.3.783'. [ 66.942140][ T2591] rust_binder: 2590:2591 FDA parent offset not aligned correctly [ 66.950113][ T2591] rust_binder: 2590:2591 error while translating object: EINVAL [ 66.957877][ T2591] rust_binder: Failure in copy_transaction_data: EINVAL [ 66.957908][ T2591] rust_binder: 2590:2591 transaction call to 2590:0 failed EINVAL, code 0 size 112-24 [ 66.974919][ T2591] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 66.974939][ T2591] rust_binder: Read failure Err(EFAULT) in pid:479 [ 66.983787][ T31] rust_binder: 2590: undelivered TRANSACTION_ERROR: 29201 [ 67.012021][ T2593] netlink: 148 bytes leftover after parsing attributes in process `syz.3.786'. [ 67.088360][ T524] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 67.118195][ T524] usb 2-1: device descriptor read/8, error -71 [ 67.159277][ T2610] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.159303][ T2610] rust_binder: Read failure Err(EFAULT) in pid:413 [ 67.173507][ T2610] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.185730][ T2610] rust_binder: Read failure Err(EFAULT) in pid:413 [ 67.249335][ T524] usb 2-1: device descriptor read/8, error -71 [ 67.438361][ T317] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 67.476310][ T2631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.803'. [ 67.508535][ T524] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 67.529461][ T524] usb 2-1: device descriptor read/8, error -71 [ 67.568420][ T317] usb 4-1: device descriptor read/64, error -71 [ 67.659523][ T524] usb 2-1: device descriptor read/8, error -71 [ 67.769563][ T524] usb usb2-port1: unable to enumerate USB device [ 67.808558][ T317] usb 4-1: device descriptor read/64, error -71 [ 67.825048][ T2641] netlink: 'syz.0.808': attribute type 27 has an invalid length. [ 67.841830][ T2643] rust_binder: 2642:2643 error while translating object: ENOENT [ 67.849612][ T2643] rust_binder: Failure in copy_transaction_data: ENOENT [ 67.849640][ T2643] rust_binder: 2642:2643 transaction call to 2642:0 failed ENOENT, code 0 size 104-24 [ 67.867157][ T524] rust_binder: 2642: undelivered TRANSACTION_ERROR: 29201 [ 68.009145][ T2651] netlink: 228 bytes leftover after parsing attributes in process `syz.2.813'. [ 68.048431][ T317] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 68.128408][ T604] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 68.178372][ T317] usb 4-1: device descriptor read/64, error -71 [ 68.258428][ T604] usb 1-1: device descriptor read/64, error -71 [ 68.418464][ T317] usb 4-1: device descriptor read/64, error -71 [ 68.508390][ T604] usb 1-1: device descriptor read/64, error -71 [ 68.538456][ T317] usb usb4-port1: attempt power cycle [ 68.738411][ T45] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 68.758393][ T604] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 68.868408][ T45] usb 2-1: device descriptor read/64, error -71 [ 68.878507][ T317] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 68.898414][ T604] usb 1-1: device descriptor read/64, error -71 [ 68.899476][ T317] usb 4-1: device descriptor read/8, error -71 [ 69.039433][ T317] usb 4-1: device descriptor read/8, error -71 [ 69.108415][ T45] usb 2-1: device descriptor read/64, error -71 [ 69.138532][ T604] usb 1-1: device descriptor read/64, error -71 [ 69.248458][ T604] usb usb1-port1: attempt power cycle [ 69.288906][ T317] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 69.309489][ T317] usb 4-1: device descriptor read/8, error -71 [ 69.348382][ T45] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 69.439405][ T317] usb 4-1: device descriptor read/8, error -71 [ 69.478387][ T45] usb 2-1: device descriptor read/64, error -71 [ 69.548467][ T317] usb usb4-port1: unable to enumerate USB device [ 69.588393][ T604] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 69.609364][ T604] usb 1-1: device descriptor read/8, error -71 [ 69.718390][ T45] usb 2-1: device descriptor read/64, error -71 [ 69.739471][ T604] usb 1-1: device descriptor read/8, error -71 [ 69.828479][ T45] usb usb2-port1: attempt power cycle [ 69.978391][ T604] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 69.999431][ T604] usb 1-1: device descriptor read/8, error -71 [ 70.129348][ T604] usb 1-1: device descriptor read/8, error -71 [ 70.178399][ T45] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 70.209402][ T45] usb 2-1: device descriptor read/8, error -71 [ 70.221140][ T2678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 70.238608][ T604] usb usb1-port1: unable to enumerate USB device [ 70.339386][ T45] usb 2-1: device descriptor read/8, error -71 [ 70.578415][ T45] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 70.599483][ T45] usb 2-1: device descriptor read/8, error -71 [ 70.729450][ T45] usb 2-1: device descriptor read/8, error -71 [ 70.838501][ T45] usb usb2-port1: unable to enumerate USB device [ 70.881462][ T2687] netlink: 228 bytes leftover after parsing attributes in process `syz.3.828'. [ 70.900280][ T2689] rust_binder: 2688:2689 FDA parent offset not aligned correctly [ 70.908103][ T2689] rust_binder: 2688:2689 error while translating object: EINVAL [ 70.915890][ T2689] rust_binder: Failure in copy_transaction_data: EINVAL [ 70.915919][ T2689] rust_binder: 2688:2689 transaction call to 2688:0 failed EINVAL, code 0 size 112-24 [ 70.932590][ T2693] sit0: entered promiscuous mode [ 70.932871][ T2689] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 70.937867][ T2689] rust_binder: Read failure Err(EFAULT) in pid:509 [ 70.939281][ T2693] netlink: 'syz.0.831': attribute type 1 has an invalid length. [ 70.948564][ T45] rust_binder: 2688: undelivered TRANSACTION_ERROR: 29201 [ 70.952567][ T2693] netlink: 1 bytes leftover after parsing attributes in process `syz.0.831'. [ 70.976966][ T2696] netlink: 148 bytes leftover after parsing attributes in process `syz.3.832'. [ 70.983600][ T36] audit: type=1400 audit(1786048976.520:317): avc: denied { setopt } for pid=2692 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.019319][ T36] audit: type=1400 audit(1786048976.560:318): avc: denied { execute } for pid=2699 comm="syz.0.835" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.044030][ T36] audit: type=1400 audit(1786048976.590:319): avc: denied { ioctl } for pid=2699 comm="syz.0.835" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.368398][ T45] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 71.519510][ T45] usb 1-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.534053][ T45] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 71.545447][ T45] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.546568][ T2726] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 71.555698][ T45] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 71.555822][ T2726] rust_binder: Read failure Err(EFAULT) in pid:517 [ 71.564037][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.579199][ T2726] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 71.587477][ T2726] rust_binder: Read failure Err(EFAULT) in pid:517 [ 71.640995][ T2734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.847'. [ 71.670079][ T386] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.677166][ T386] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.785922][ T45] usb 1-1: string descriptor 0 read error: -71 [ 71.792707][ T45] hub 1-1:32.0: USB hub found [ 71.797993][ T45] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 71.829221][ T45] usb 1-1: USB disconnect, device number 24 [ 72.013166][ T2751] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.013183][ T2751] rust_binder: Read failure Err(EFAULT) in pid:426 [ 72.022170][ T2751] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.029676][ T2751] rust_binder: Read failure Err(EFAULT) in pid:426 [ 72.038080][ T2751] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 72.044696][ T2751] rust_binder: 2750:2751 error while translating object: EINVAL [ 72.061141][ T2751] rust_binder: Failure in copy_transaction_data: EINVAL [ 72.061162][ T2751] rust_binder: 2750:2751 transaction call to 2750:0 failed EINVAL, code 272 size 112-24 [ 72.078562][ T604] rust_binder: 2750: undelivered TRANSACTION_ERROR: 29201 [ 72.174430][ T2755] fuse: Bad value for 'fd' [ 72.187258][ T2758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2758 comm=syz.2.853 [ 72.187513][ T2759] 9pnet: Unknown protocol version 9 [ 72.227180][ T36] audit: type=1400 audit(1786048983.765:320): avc: denied { create } for pid=2764 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.312923][ T2768] netlink: 228 bytes leftover after parsing attributes in process `syz.0.857'. [ 72.494327][ T36] audit: type=1400 audit(1786048984.035:321): avc: denied { create } for pid=2779 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.513837][ T36] audit: type=1400 audit(1786048984.035:322): avc: denied { setopt } for pid=2779 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.535323][ T524] rust_binder: 2783: undelivered TRANSACTION_COMPLETE [ 72.548453][ T524] rust_binder: 2783: undelivered transaction 508, process died [ 72.565196][ T36] audit: type=1400 audit(1786048984.105:323): avc: denied { mounton } for pid=2785 comm="syz.0.866" path="/204/proc_mnt" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 72.592555][ T2791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 72.635242][ T2799] netlink: 228 bytes leftover after parsing attributes in process `syz.0.871'. [ 72.643796][ T2801] rust_binder: 2800:2801 FDA parent offset not aligned correctly [ 72.652208][ T2801] rust_binder: 2800:2801 error while translating object: EINVAL [ 72.659957][ T2801] rust_binder: Failure in copy_transaction_data: EINVAL [ 72.659984][ T2801] rust_binder: 2800:2801 transaction call to 2800:0 failed EINVAL, code 0 size 112-24 [ 72.676513][ T2801] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.676533][ T2801] rust_binder: Read failure Err(EFAULT) in pid:434 [ 72.685608][ T604] rust_binder: 2800: undelivered TRANSACTION_ERROR: 29201 [ 72.710858][ T2809] netlink: 148 bytes leftover after parsing attributes in process `syz.1.875'. [ 72.735769][ T36] audit: type=1400 audit(1786048984.275:324): avc: denied { setattr } for pid=293 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.937803][ T2839] netlink: 36 bytes leftover after parsing attributes in process `syz.2.890'. [ 73.290070][ T2856] netlink: 228 bytes leftover after parsing attributes in process `syz.1.898'. [ 73.407987][ T36] audit: type=1400 audit(1786048990.945:325): avc: denied { read write } for pid=2861 comm="syz.1.901" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.432701][ T36] audit: type=1400 audit(1786048990.945:326): avc: denied { open } for pid=2861 comm="syz.1.901" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.624520][ T2868] Invalid argument reading file caps for ./file0 [ 73.718579][ T2738] Bluetooth: hci0: command 0x1003 tx timeout [ 73.724646][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.831054][ T2882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 74.118364][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 74.176483][ T2888] netlink: 228 bytes leftover after parsing attributes in process `syz.2.913'. [ 74.269486][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.279399][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 74.289973][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.304852][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 74.314444][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 74.322987][ T45] usb 4-1: Product: syz [ 74.327293][ T45] usb 4-1: Manufacturer: syz [ 74.332197][ T45] usb 4-1: SerialNumber: syz [ 74.487480][ T2896] netlink: 148 bytes leftover after parsing attributes in process `syz.1.917'. [ 74.512077][ T2898] netlink: 'syz.1.918': attribute type 4 has an invalid length. [ 74.519805][ T2898] netlink: 'syz.1.918': attribute type 2 has an invalid length. [ 74.527449][ T2898] netlink: 3613 bytes leftover after parsing attributes in process `syz.1.918'. [ 74.540361][ T45] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 74.770267][ T9] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 74.939819][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 74.948510][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 74.961498][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 74.970984][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.979219][ T9] usb 2-1: Product: syz [ 74.983538][ T9] usb 2-1: Manufacturer: syz [ 74.988207][ T9] usb 2-1: SerialNumber: syz [ 75.202913][ T9] usb 2-1: selecting invalid altsetting 1 [ 75.210787][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 75.220833][ T9] usb 2-1: selecting invalid altsetting 1 [ 75.226897][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 75.236962][ T9] usb 2-1: selecting invalid altsetting 1 [ 75.247155][ T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 75.257596][ T9] usb 2-1: USB disconnect, device number 32 [ 75.270647][ T2308] udevd[2308]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.306279][ T2909] &nr: renamed from bond_slave_1 [ 76.018369][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 76.178352][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 76.184653][ T9] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 76.197824][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.204743][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 76.214051][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.224365][ T9] usb 2-1: config 0 descriptor?? [ 76.891236][ T45] usb 4-1: USB disconnect, device number 24 [ 76.928973][ T45] usblp0: removed [ 76.934036][ T2941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 76.934058][ T2941] rust_binder: Read failure Err(EFAULT) in pid:551 [ 76.943746][ T2944] overlayfs: failed to clone upperpath [ 76.958669][ T2945] overlayfs: failed to clone upperpath [ 76.969024][ T2941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.969112][ T2941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 76.975548][ T2941] rust_binder: Read failure Err(EFAULT) in pid:551 [ 77.008366][ T2941] rust_binder: 2940:2941 got transaction to invalid handle 1 [ 77.022692][ T2946] rust_binder: 2943:2946 error while translating object: ENOENT [ 77.030705][ T2941] rust_binder: 2940:2941 transaction call to 0:0 failed ENOENT, code 4073 size 112-24 [ 77.048792][ T524] rust_binder: 2940: undelivered TRANSACTION_ERROR: 29201 [ 77.058522][ T2946] rust_binder: Failure in copy_transaction_data: ENOENT [ 77.058553][ T2946] rust_binder: 2943:2946 transaction call to 2943:0 failed ENOENT, code 0 size 104-24 [ 77.115011][ T524] rust_binder: 2943: undelivered TRANSACTION_ERROR: 29201 [ 77.348354][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 77.450339][ T31] rust_binder: 2970: undelivered TRANSACTION_COMPLETE [ 77.465892][ T31] rust_binder: 2970: undelivered transaction 529, process died [ 77.498384][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 77.506893][ T45] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 77.513448][ T2973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.523446][ T45] usb 4-1: config 0 has no interface number 0 [ 77.524647][ T2973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.537327][ T45] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 77.548360][ T45] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 77.570433][ T45] usb 4-1: config 0 interface 48 has no altsetting 0 [ 77.578721][ T45] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 77.587915][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.596000][ T45] usb 4-1: Product: syz [ 77.601969][ T45] usb 4-1: Manufacturer: syz [ 77.606576][ T45] usb 4-1: SerialNumber: syz [ 77.612327][ T45] usb 4-1: config 0 descriptor?? [ 77.818601][ T2955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.835726][ T2955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.845039][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 77.845056][ T36] audit: type=1400 audit(1786049001.388:331): avc: denied { ioctl } for pid=2954 comm="syz.3.941" path="socket:[20641]" dev="sockfs" ino=20641 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.847786][ T45] ftdi_sio 4-1:0.48: FTDI USB Serial Device converter detected [ 77.885385][ T2977] __nla_validate_parse: 2 callbacks suppressed [ 77.885401][ T2977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 77.885829][ T45] usb 4-1: Detected SIO [ 77.910413][ T45] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 77.949417][ T45] usb 4-1: USB disconnect, device number 25 [ 77.958652][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 77.968640][ T45] ftdi_sio 4-1:0.48: device disconnected [ 78.123059][ T2986] netlink: 228 bytes leftover after parsing attributes in process `syz.1.954'. [ 78.300641][ T2993] rust_binder: 2992:2993 FDA parent offset not aligned correctly [ 78.308579][ T2993] rust_binder: 2992:2993 error while translating object: EINVAL [ 78.316375][ T2993] rust_binder: Failure in copy_transaction_data: EINVAL [ 78.316406][ T2993] rust_binder: 2992:2993 transaction call to 2992:0 failed EINVAL, code 0 size 112-24 [ 78.333610][ T2993] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.333631][ T2993] rust_binder: Read failure Err(EFAULT) in pid:500 [ 78.342687][ T45] rust_binder: 2992: undelivered TRANSACTION_ERROR: 29201 [ 78.374559][ T2995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.386233][ T2995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.434745][ T36] audit: type=1400 audit(1786049001.978:332): avc: denied { write } for pid=2998 comm="syz.3.959" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 78.454276][ T3001] netlink: 148 bytes leftover after parsing attributes in process `syz.3.960'. [ 78.520438][ T3009] netlink: 'syz.2.963': attribute type 11 has an invalid length. [ 78.794744][ T3026] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.794769][ T3026] rust_binder: Read failure Err(EFAULT) in pid:577 [ 78.803967][ T3026] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.810824][ T3026] rust_binder: Read failure Err(EFAULT) in pid:577 [ 78.939405][ T3040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.974'. [ 78.993320][ T3044] syzkaller1: entered allmulticast mode [ 79.010371][ T3047] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 79.010392][ T3047] rust_binder: Read failure Err(EFAULT) in pid:593 [ 79.021631][ T3047] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 79.028156][ T3047] rust_binder: Read failure Err(EFAULT) in pid:593 [ 79.036743][ T3047] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 79.043419][ T3047] rust_binder: 3046:3047 error while translating object: EINVAL [ 79.060609][ T3047] rust_binder: Failure in copy_transaction_data: EINVAL [ 79.060639][ T3047] rust_binder: 3046:3047 transaction call to 3046:0 failed EINVAL, code 4093 size 112-24 [ 79.093564][ T3049] netlink: 228 bytes leftover after parsing attributes in process `syz.1.978'. [ 79.103954][ T31] rust_binder: 3046: undelivered TRANSACTION_ERROR: 29201 [ 79.141776][ T3052] rust_binder: 3050:3052 error while translating object: ENOENT [ 79.162101][ T3052] rust_binder: Failure in copy_transaction_data: ENOENT [ 79.162131][ T3052] rust_binder: 3050:3052 transaction call to 3050:0 failed ENOENT, code 0 size 104-24 [ 79.180134][ T10] rust_binder: 3050: undelivered TRANSACTION_ERROR: 29201 [ 79.448640][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 79.593191][ T31] usb 4-1: device descriptor read/64, error -71 [ 79.617585][ T36] audit: type=1400 audit(1786049009.159:333): avc: denied { search } for pid=3069 comm="syz.1.987" name="/" dev="configfs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.655271][ T36] audit: type=1400 audit(1786049009.189:334): avc: denied { read } for pid=3069 comm="syz.1.987" name="/" dev="configfs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.677305][ T36] audit: type=1400 audit(1786049009.189:335): avc: denied { open } for pid=3069 comm="syz.1.987" path="/" dev="configfs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.743312][ T3081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'. [ 79.834870][ T36] audit: type=1400 audit(1786049009.379:336): avc: denied { mount } for pid=3084 comm="syz.1.993" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 79.848357][ T31] usb 4-1: device descriptor read/64, error -71 [ 80.108426][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 80.231222][ T3091] netlink: 228 bytes leftover after parsing attributes in process `syz.2.995'. [ 80.240377][ T31] usb 4-1: device descriptor read/64, error -71 [ 80.302711][ T3099] netlink: 148 bytes leftover after parsing attributes in process `syz.2.999'. [ 80.478406][ T31] usb 4-1: device descriptor read/64, error -71 [ 80.588457][ T31] usb usb4-port1: attempt power cycle [ 80.865760][ T36] audit: type=1400 audit(1786049010.409:337): avc: denied { accept } for pid=3106 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 80.948369][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 80.969507][ T31] usb 4-1: device descriptor read/8, error -71 [ 81.099472][ T31] usb 4-1: device descriptor read/8, error -71 [ 81.338404][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 81.359439][ T31] usb 4-1: device descriptor read/8, error -71 [ 81.479084][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 81.491607][ T31] usb 4-1: device descriptor read/8, error -71 [ 81.495226][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 81.527297][ T3125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1012'. [ 81.598476][ T31] usb usb4-port1: unable to enumerate USB device [ 82.277294][ T3134] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1016'. [ 82.319696][ T3138] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 82.319721][ T3138] rust_binder: Read failure Err(EFAULT) in pid:607 [ 82.328752][ T3138] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 82.335339][ T3138] rust_binder: Read failure Err(EFAULT) in pid:607 [ 82.344052][ T3138] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 82.350786][ T3138] rust_binder: 3137:3138 error while translating object: EINVAL [ 82.387470][ T3138] rust_binder: Failure in copy_transaction_data: EINVAL [ 82.387501][ T3138] rust_binder: 3137:3138 transaction call to 3137:0 failed EINVAL, code 4097 size 112-24 [ 82.415772][ T9] rust_binder: 3137: undelivered TRANSACTION_ERROR: 29201 [ 83.032561][ T36] audit: type=1400 audit(1786049018.576:338): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 83.069540][ T3154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.079286][ T3154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.351695][ T3163] __nla_validate_parse: 1 callbacks suppressed [ 83.351717][ T3163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 83.612741][ T36] audit: type=1400 audit(1786049019.156:339): avc: denied { write } for pid=3166 comm="syz.1.1032" path="socket:[22895]" dev="sockfs" ino=22895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.650729][ T45] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 83.679022][ T3171] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1034'. [ 83.727999][ T3176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.737367][ T3176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.807289][ T36] audit: type=1400 audit(1786049019.346:340): avc: denied { accept } for pid=3183 comm="syz.2.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 83.833988][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 83.855367][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.868553][ T3186] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1040'. [ 83.869648][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.888241][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 83.897812][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.914624][ T45] usb 4-1: Product: syz [ 83.929574][ T45] usb 4-1: Manufacturer: syz [ 83.938340][ T45] usb 4-1: SerialNumber: syz [ 83.951151][ T45] usb 4-1: config 0 descriptor?? [ 84.014896][ T3204] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 84.014919][ T3204] rust_binder: Read failure Err(EFAULT) in pid:554 [ 84.025139][ T3204] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 84.031905][ T3204] rust_binder: Read failure Err(EFAULT) in pid:554 [ 84.121872][ T3217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1053'. [ 84.189091][ T3223] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1056'. [ 84.234342][ T3227] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 84.234368][ T3227] rust_binder: Read failure Err(EFAULT) in pid:575 [ 84.243392][ T3227] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 84.250107][ T3227] rust_binder: Read failure Err(EFAULT) in pid:575 [ 84.258737][ T3227] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 84.265261][ T3227] rust_binder: 3226:3227 error while translating object: EINVAL [ 84.282012][ T3227] rust_binder: Failure in copy_transaction_data: EINVAL [ 84.282041][ T3227] rust_binder: 3226:3227 transaction call to 3226:0 failed EINVAL, code 4296 size 112-24 [ 84.299663][ T45] rust_binder: 3226: undelivered TRANSACTION_ERROR: 29201 [ 84.324267][ T3229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.333516][ T3229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.344106][ T3229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.353431][ T3229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.461038][ T3236] rust_binder: 3235:3236 error while translating object: ENOENT [ 84.468966][ T3236] rust_binder: Failure in copy_transaction_data: ENOENT [ 84.468998][ T3236] rust_binder: 3235:3236 transaction call to 3235:0 failed ENOENT, code 0 size 104-24 [ 84.487094][ T618] rust_binder: 3235: undelivered TRANSACTION_ERROR: 29201 [ 85.149515][ T3255] 9pnet_fd: p9_fd_create_unix (3255): problem connecting socket: ./file0: -111 [ 85.166635][ T3257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 85.176087][ T3255] overlayfs: failed to clone upperpath [ 85.220798][ T3264] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1073'. [ 85.236471][ T3267] rust_binder: 3266:3267 FDA parent offset not aligned correctly [ 85.247693][ T3267] rust_binder: 3266:3267 error while translating object: EINVAL [ 85.260909][ T3267] rust_binder: Failure in copy_transaction_data: EINVAL [ 85.260941][ T3267] rust_binder: 3266:3267 transaction call to 3266:0 failed EINVAL, code 0 size 112-24 [ 85.281547][ T3267] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 85.281568][ T3267] rust_binder: Read failure Err(EFAULT) in pid:595 [ 85.291762][ T524] rust_binder: 3266: undelivered TRANSACTION_ERROR: 29201 [ 85.374104][ T36] audit: type=1400 audit(1786049026.916:341): avc: denied { create } for pid=3268 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 85.401270][ T3276] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1078'. [ 85.443700][ T3278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.457099][ T3278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.947686][ T36] audit: type=1400 audit(1786049027.486:342): avc: denied { shutdown } for pid=3293 comm="syz.2.1086" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.005764][ T3296] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 86.005791][ T3296] rust_binder: Read failure Err(EFAULT) in pid:605 [ 86.029629][ T3296] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 86.043886][ T3296] rust_binder: Read failure Err(EFAULT) in pid:605 [ 86.173851][ T3307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1091'. [ 86.227753][ T3316] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1094'. [ 86.265618][ T3320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.274487][ T3320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.283518][ T3320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.292201][ T3320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.398862][ T9] usb 4-1: USB disconnect, device number 30 [ 86.419864][ T3322] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 86.419887][ T3322] rust_binder: Read failure Err(EFAULT) in pid:619 [ 86.428984][ T3322] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 86.435587][ T3322] rust_binder: Read failure Err(EFAULT) in pid:619 [ 86.444236][ T3322] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 86.451088][ T3322] rust_binder: 3321:3322 error while translating object: EINVAL [ 86.468012][ T3322] rust_binder: Failure in copy_transaction_data: EINVAL [ 86.468041][ T3322] rust_binder: 3321:3322 transaction call to 3321:0 failed EINVAL, code 10240 size 112-24 [ 86.486339][ T618] rust_binder: 3321: undelivered TRANSACTION_ERROR: 29201 [ 86.535976][ T36] audit: type=1326 audit(1786049034.075:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.2.1099" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27af9e0d9 code=0x50000 [ 86.561398][ T36] audit: type=1326 audit(1786049034.075:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.2.1099" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27af9e0d9 code=0x50000 [ 86.591453][ T36] audit: type=1326 audit(1786049034.075:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.2.1099" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27af9e0d9 code=0x50000 [ 86.616955][ T36] audit: type=1326 audit(1786049034.075:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.2.1099" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27af9e0d9 code=0x50000 [ 86.642461][ T36] audit: type=1326 audit(1786049034.075:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3325 comm="syz.2.1099" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27af9e0d9 code=0x50000 [ 86.675758][ T3329] rust_binder: 3328:3329 error while translating object: ENOENT [ 86.698402][ T3329] rust_binder: Failure in copy_transaction_data: ENOENT [ 86.698434][ T3329] rust_binder: 3328:3329 transaction call to 3328:0 failed ENOENT, code 0 size 104-24 [ 86.738366][ T45] rust_binder: 3328: undelivered TRANSACTION_ERROR: 29201 [ 86.843980][ T618] rust_binder: 3338: undelivered TRANSACTION_COMPLETE [ 86.850929][ T618] rust_binder: 3338: undelivered transaction 593, process died [ 86.894859][ T3343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.925762][ T3343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.378389][ T524] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 87.518842][ T3351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.528343][ T524] usb 4-1: Using ep0 maxpacket: 8 [ 87.533877][ T3351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.544683][ T524] usb 4-1: config 248 has an invalid interface number: 115 but max is 2 [ 87.559740][ T524] usb 4-1: config 248 has an invalid interface number: 241 but max is 2 [ 87.578418][ T524] usb 4-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config [ 87.618394][ T524] usb 4-1: config 248 has 2 interfaces, different from the descriptor's value: 3 [ 87.627543][ T524] usb 4-1: config 248 has no interface number 0 [ 87.642704][ T524] usb 4-1: config 248 has no interface number 1 [ 87.658362][ T524] usb 4-1: config 248 interface 115 altsetting 128 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 87.669917][ T524] usb 4-1: config 248 interface 115 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 1023 [ 87.680467][ T524] usb 4-1: config 248 interface 241 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 87.691452][ T524] usb 4-1: config 248 interface 241 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 87.704930][ T524] usb 4-1: config 248 interface 115 has no altsetting 0 [ 87.711942][ T524] usb 4-1: config 248 interface 241 has no altsetting 0 [ 87.729660][ T524] usb 4-1: New USB device found, idVendor=4971, idProduct=8017, bcdDevice=5f.a1 [ 87.738800][ T524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.748338][ T524] usb 4-1: Product: syz [ 87.752503][ T524] usb 4-1: Manufacturer: syz [ 87.767334][ T524] usb 4-1: SerialNumber: syz [ 87.773001][ T3345] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 87.983895][ T524] usb-storage 4-1:248.115: USB Mass Storage device detected [ 87.998836][ T524] usb-storage 4-1:248.115: Quirks match for vid 4971 pid 8017: 4000000 [ 88.070651][ T524] usb-storage 4-1:248.241: USB Mass Storage device detected [ 88.095314][ T524] usb-storage 4-1:248.241: Quirks match for vid 4971 pid 8017: 4000000 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 88.118338][ T36] kauditd_printk_skb: 157 callbacks suppressed [ 88.118385][ T36] audit: type=1400 audit(1786049035.635:505): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1564]" dev="pipefs" ino=1564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 88.182355][ T524] usb 4-1: USB disconnect, device number 31 [ 88.201361][ T2549] usb 2-1: USB disconnect, device number 33 [ 88.293375][ T31] usb 3-1: USB disconnect, device number 4 [ 88.330395][ T356] bridge_slave_1: left allmulticast mode [ 88.336061][ T356] bridge_slave_1: left promiscuous mode [ 88.341826][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.350106][ T356] bridge_slave_0: left allmulticast mode [ 88.355750][ T356] bridge_slave_0: left promiscuous mode [ 88.361392][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.480245][ T356] veth1_macvtap: left promiscuous mode [ 88.485768][ T356] veth0_vlan: left promiscuous mode [ 88.669998][ T356] bridge_slave_1: left allmulticast mode [ 88.675662][ T356] bridge_slave_1: left promiscuous mode [ 88.681301][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.688856][ T356] bridge_slave_0: left allmulticast mode [ 88.694484][ T356] bridge_slave_0: left promiscuous mode [ 88.700206][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.707853][ T356] bridge_slave_1: left allmulticast mode [ 88.713617][ T356] bridge_slave_1: left promiscuous mode [ 88.719268][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.726708][ T356] bridge_slave_0: left allmulticast mode [ 88.732496][ T356] bridge_slave_0: left promiscuous mode [ 88.738112][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.745759][ T356] bridge_slave_1: left allmulticast mode [ 88.751450][ T356] bridge_slave_1: left promiscuous mode [ 88.757027][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.764492][ T356] bridge_slave_0: left allmulticast mode [ 88.770207][ T356] bridge_slave_0: left promiscuous mode [ 88.775827][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.002960][ T356] veth1_macvtap: left promiscuous mode [ 89.009045][ T356] veth0_vlan: left promiscuous mode [ 89.014566][ T356] veth1_macvtap: left promiscuous mode [ 89.020138][ T356] veth0_vlan: left promiscuous mode [ 89.025594][ T356] veth1_macvtap: left promiscuous mode [ 89.031591][ T356] veth0_vlan: left promiscuous mode