last executing test programs: 2.463355188s ago: executing program 3 (id=801): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="15323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) 2.462750508s ago: executing program 3 (id=802): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x468042, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x9) recvmmsg(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000440)=0x4) accept4$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x0, @fixed}, &(0x7f00000003c0)=0xe, 0x80000) rt_sigaction(0x8, &(0x7f0000000300)={&(0x7f0000000240)="2437c483596d28c0dfd5c4a2fa00170f8d0300000036c941d3ca0f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f00000002c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_trace_dev_match', 0x0, 0x43) finit_module(r6, 0x0, 0x1) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r1, 0x22e7c000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/11, &(0x7f00000000c0)=0xb) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000100)) 2.462326338s ago: executing program 3 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006200)={&(0x7f00000024c0)={0x14, 0x1e, 0x1, 0x4070bd29, 0x25dfdbfd, {0x6}}, 0x14}}, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000300)={{}, {r2, r3/1000+10000}}, 0x0) getitimer(0x1, &(0x7f0000000740)) (async) getitimer(0x1, &(0x7f0000000740)) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setpriority(0x2, 0xff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)={[{@nfs_export_off, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)={[{@nfs_export_off, 0x3a}], [], 0x2f}) r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffc, 0x103803) syz_usb_disconnect(r7) sendfile(r6, r1, 0x0, 0xffffffff) 1.962912707s ago: executing program 2 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) syz_clone3(&(0x7f0000000440)={0x40020000, 0x0, 0x0, 0x0, {0x3e}, &(0x7f0000000280)=""/251, 0xfb, 0x0, 0x0}, 0x58) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) utimes(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={{0x77359400}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x1}) 1.674141116s ago: executing program 3 (id=823): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000100)=""/172, 0xac}, {&(0x7f00000001c0)=""/98, 0x62}], 0x4, 0x98, 0x2f, 0x0) pipe2$9p(&(0x7f0000005500)={0xffffffffffffffff}, 0x800) fcntl$getflags(r1, 0x408) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fadvise64(r0, 0xaec, 0x10, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x0, 0x0, 0x3d, 0x0, "2660091fb435d325b7c0a4e78dcb745009eefb969c6df78cb52a69dff5c03f6066dae52dafb1aadf67afcd40d3572609fd219709c735bf284dbf03a3d0446f880f042904a3bc7cf4c2490f305135563e"}, 0xd8) sendfile(r0, r0, 0x0, 0x7ffff000) 1.644954328s ago: executing program 3 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000200)={0x0, 0xcd6f, 0x1, 0x1, 0xc3}, 0x0, 0x0) pause() clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)) timer_settime(r2, 0x1, &(0x7f0000000240)={{r3, r4+60000000}, {0x77359400}}, 0x0) r5 = inotify_init1(0x0) read(r5, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) rt_sigtimedwait(&(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000300)={0x77359400}, 0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 1.306417622s ago: executing program 2 (id=825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313060004070c0000002a7f0083000000000b09007a1583e4"], 0x0}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$rtc(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/187, 0xbb, 0x4, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 957.387536ms ago: executing program 1 (id=830): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r5, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001a80)={0x0, [{0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x5, 0x0, 0xfffffffb, 0x0}, {0x1, 0x0, 0x7fff, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x80, 0x0}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000052c0)={0x32c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x14, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @typed={0x5, 0x6b, 0x0, 0x0, @str='\x00'}]}, @nested={0x304, 0x5, 0x0, 0x1, [@nested={0x300, 0x124, 0x0, 0x1, [@generic="e52cfdc68ae361504fb4c62b8d9ac5e3dbef730cb2cf00eac243342b13b4b2783e39f91b", @nested={0xc1, 0x95, 0x0, 0x1, [@nested={0x4, 0x151}, @generic="9f04e2e04c5e100d9e58807b0096f337701f7abd7496b5b3ca4cc3c940ca62110404496d613fb09e1b288a498db87682d4352c7b0bdf2c65590cd71a73eb0e7784562bf1f677c65ddb15175cb931cab7a37a62f6e4c9c52327f48dd9952d429bb2a199dc6ddee341de7a400bdd0e6928657e2de5a6d05869fb6773ae19db71894e2711b8864a9b1d9178a18d0e0329ae717bc4892619efe6e32e57f3b248aab32dbf6abddece7fa450210297ee", @typed={0x8, 0xac, 0x0, 0x0, @uid}, @nested={0x4, 0xd7}]}, @typed={0x4, 0x138}, @nested={0x20d, 0x110, 0x0, 0x1, [@typed={0x14, 0x67, 0x0, 0x0, @ipv6=@mcast1}, @generic="11277c096e5b2d7552ca4f113df5e2b9cb2c8a2aedb1ac80f4027491f90f75b0286a2340c5a0f49430ed6ffe7c03ece4148486d5976f0ae19577fbfc7a8d2ca4f725832d", @generic="037e1ee9f7b0a4220dd524d682cc8cbbbdea4835ea4084f3a42b8263beaacbb438155fb626b5605be64b919ff93802c1e5e24c6193c4198fee8b119e011113f8920122e3b4fffc8efce6031d349a3848fc3126e8aeb1d282b47c74f6e6648e6179a4be3bd11a2c4b84623e4129c26e0c4a7b9293fb5b2598cd45c43ab1910968bb4aff9c74ad264076f3134d86dc36948a4daa60062b27cb2fefcf86572d37bcd40a7ed907bb11a98cea45381165f55a6fe6bd1897874865ab2987ae36390edcc29f987d98c534e2", @generic="081b173ca8c2c3138757b83f4768f5a0e07d1416eb8cc8d0fac2af900348d0587fd3d18489f4d44c5fd6f5a340322156f395402e880b7def364e3d08298d018b6e2a2eacfb0fe275314f07c051c112b70523e0dd9a59166bc4358134bb63c4a540d8545f7f7f85d829", @nested={0x4, 0x53}, @generic="95ee4c3a9c6424b78ca9e13d79519fd93d569f0e73125311f414ab609624114982a1df7b89262ede6bdab02ab1886d3197d0ff5dc7fd26fc1baf07a6b0eac5bb9d7109c54efe4c72aae082e9726422bdaeb64f1eb08e9d04ccd4d078542502ee386e0955d63dabb459ad711c1d", @nested={0x4, 0x1e}, @generic="e0e599aa90e954075c89b6"]}]}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4}, 0x804) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x5f00}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r9, 0xc004ae0a, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 839.083358ms ago: executing program 1 (id=831): unshare(0x62040200) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0xdc, 0x0, 0xfffffffffffffffd}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast1, 0xa, r4}) pread64(r2, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 714.85087ms ago: executing program 1 (id=832): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, 0x0, &(0x7f0000000280)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r6 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x100ba7) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001500010027bd7000fbdbdf25ac14143dec0000000000451900000000000000000000000000000000000000004e22051a4e220fff0a0080805c0000003d246fc76a431edfbb0332c5b9"], 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x13}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 714.32664ms ago: executing program 3 (id=833): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000001040)=0x40, 0x4) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002740)={'vlan0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) sendto$packet(r3, &(0x7f00000002c0)="c8e42e71588de583d4c717426e7149144e3bc04cb0e396f58e6b", 0x1a, 0x68044, &(0x7f0000002780)={0x11, 0x0, r2, 0x1, 0x4, 0x6, @broadcast}, 0x14) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80181, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454cc, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f00000001c0)=[{r6, 0x22}, {r4, 0x2504}, {r0, 0x6172}, {r4, 0x8}, {r7, 0x103}, {r0, 0x40}, {r4, 0x1004}, {r0, 0x2}], 0x8, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x7f]}, 0x8) write$vga_arbiter(r6, &(0x7f0000000040)=@other={'lock', ' ', 'none'}, 0xa) close_range(r6, 0xffffffffffffffff, 0x0) 713.7731ms ago: executing program 1 (id=834): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 614.67435ms ago: executing program 2 (id=835): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r1, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x85b83000) 556.439065ms ago: executing program 2 (id=836): mlockall(0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x4200031, 0xffffffffffffffff, 0xffffd000) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x1c0) r3 = inotify_init1(0x800) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1a7) mkdir(&(0x7f0000000600)='./bus\x00', 0x50) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',']) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') fcntl$setsig(r3, 0xa, 0xe) 458.612955ms ago: executing program 2 (id=837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "50f4bc06a7b00c27", "1e03338d2c2c28a9179e4386abb412898ad780429c04c1b2725af212ae23ca1d", "2c6b9367", "c7ab00f4ef0c213b"}, 0x38) r1 = userfaultfd(0x801) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x3000000, &(0x7f00000004c0)={[{@nfs_export_on}, {@redirect_dir_nofollow}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) fstatfs(r1, &(0x7f0000000040)=""/142) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x18, 0x0, &(0x7f0000000000)) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x4, &(0x7f0000000040)={@rand_addr=0x7acf, @local}, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group2yqs', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffff5, 0x2, {0x1, 0x0, 0x0, 0x0, 0xffeffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xfffe, 0x7d59, 0x7fff, 0x4, 0xc000, 0x7f, r8, r9, 0x78002, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000240)=0x6, 0x12) mount$9p_fd(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x800, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@aname}, {@version_9p2000}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@access_user}], [{@pcr}, {@fowner_eq={'fowner', 0x3d, r10}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#'}}]}}) 338.915157ms ago: executing program 2 (id=840): syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 202.99602ms ago: executing program 0 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x3, 0x1, 0x635, 0x5, 0x9a, 0x0}) prlimit64(r2, 0x2, &(0x7f00000000c0)={0x1, 0x202000000003}, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000180)={0x7, 0xfffffffffffffff4, 0x0, 0x5, 0x4, 0x0, [{0x1, 0x4, 0x7, '\x00', 0x1201}, {0x0, 0x3, 0x32, '\x00', 0xa}, {0x6, 0x9, 0x8, '\x00', 0x1000}, {0x9d5, 0x8001, 0xd38, '\x00', 0xb13}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000a00fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) (async) mmap$binder(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1, 0x11, r3, 0x1) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) 199.504461ms ago: executing program 0 (id=846): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) r0 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x41) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r1, 0xfdc4a000) r2 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r2, 0x89e1, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 180.500692ms ago: executing program 0 (id=847): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 151.405935ms ago: executing program 0 (id=848): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x2, 0x3, 0xfe) sendmmsg$inet(r1, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001140)="281effe935fdce249bd774480a584b135c556eabe1a3f2724200a50e8002a6e5", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000054c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0xaa, 0x0, 0xf, [0x5f0f, 0x400]}, @ra={0x94, 0x4, 0x1}]}}}], 0x48}}], 0x2, 0x4800) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000840)={0xc, 0xb1, {0x52, 0x7fff, 0xfff9, {0x8, 0x98f}, {0x6, 0x4}, @period={0x2e, 0x1, 0xc, 0x8, 0x3, {0x8000, 0xfe00, 0x103}, 0x0, 0x0}}, {0x56, 0x4, 0x27, {0x3, 0x101}, {0x3, 0xa5}, @cond=[{0xc4b, 0x1, 0x400, 0xc, 0x8, 0x1}, {0x5, 0x7a42, 0x9, 0x7, 0xbaa7, 0xffbc}]}}) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x21}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4008040) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr(r6, &(0x7f0000005f40)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x2) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x19, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a763a52f0a11d26a730c0000e5ef230de84eea7ad8ffffffffffffff00", [0x2, 0x800]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$mouse(&(0x7f0000000100), 0x34, 0x4201) write$binfmt_aout(r7, &(0x7f0000000480)={{0x10b, 0xa5, 0x6, 0x17c, 0x9f, 0x95ba, 0x304, 0x80000000}, "30c6b497156e3a47642c1f18490d1066b0c0b400e43b4b685a0186bff624fa43b73d56e2dd749053fb6c68659e7a1e7b7714d42371607774de0682d6627929c87e14305dc77d4900f65cbdcb47124012fa170509d1743dd6bad028e7f25ef8af2bd96793a683c1940f53b60d3f79751205f44969721608e53bb0cd5b0d452f2ec888a6b4905c8c221211d75884b122f74665ee336cd4230dfeb565ff274508a3e5332b787eef7c272e0a2ba51de43ea84394", ['\x00']}, 0x1d2) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x10) 46.622046ms ago: executing program 0 (id=849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x4c01, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000041c0)="d5b4c19350682aae162f7f1d21a37d7e53a1c8f6743a534cf74fbebdab8472a40d520bf56c2d1db036afee61680f3bd7724c76e07c976d05820dcba59343c6f742191f49eb3f612aa15620e6a0d810e80ee7e7efdbb70fec0d06ef2067a51d1db9cabc231187bb40e9a3f8b8b53b5a3a157c16a833113983e89a9992d45f3119b563394c4b373286dfa8720813bc1c92ff7bd5bc205f496384ae45d8c992f9246b4d276198d62e35d16abdd155e5b28a04e66110fa016fbcc3e7061fdc8bca4999ee915cac0ade79d50d8eb8dff6b45244a0af22d81b54b2e710025693c752416c57c82b7560da97fa0178f9d13e8630caf6b06c9089636582e8e689153f8b2fa3fb1a6c4e11b81355e334c3573014dad11369f2304437a21f89e440c5bfcbac1e2c989da36926cf05e0035073f3e720727a6152019c14a1363f79d845b09b04b128f1cd70bf1005cd4a0d4080897cef2fecc466233b023fd62bd15e86b0352d75d40cfab96a54ff76c2f8e9b54cc05824503c2246738424e27f6aa0206030c24400edbe72072c6292feb0bae118cf6b1352149c4c26265125d6b1525dc27d89cd08f25292f7b371b0a06e4a83db9164ca3b58bb376ff385885fa376e9a659c17a9d210ebe0703849fe2ee2619ce34704af3d8831db10fc466d7d75e36fd16b8e342271ac55327829c3377dd6c956206107effedbaa89846e8407ab7c3a92c14e7b37715f30e8ae3dd3c5bf5a1d6d1826bea760370a121003f1ed5f06db5952b371861825a2de312ded37f4a68036a10664f14af70249b97f29e3e6bed196023e2ac5db25f19eb71760230e5016c1cf363ae125d205ee84c1f4f1d5785cb0052a4f17f14cf4ee9186f5648f302042e88ce3dcb81350db64c4e347fa46d28f1ceab2f46a94f6423bbd3d1e0d2af5b37a20ebae16a55e00daf6f5ea443fea80f1284339bffdcad51c7a845bc522b6eab8c70b4f8cd09a1e3c0789fc1d5efa1f94b2f865e6943f3b0dd28801858b243e16f3d9046541ff78bec1f3874c2864be7e9d3833f23bb4f37ee6cd8e0eb1a528f1533b9ff47790fb7ab31e10c407066bacd5338df97c3e8dd69b0a611cf9c763330fb48c4721763ca4ecbe35c38816b1f6a70fd46230e4e1af70dced6b4e62107dacbe73a399eaee0ca22e12a1312bb44d6672e7a890f4bbc95996b980fa973492a199318ee3bc37f6d5a5c8c46248d9cbfef7d1b616fd9713d2f541374889aa6d1660ee3af5907f109a253960eb3cdb14cb567da6eea5cdcbc2c5285f298544963480c82484564055afb4da926834b60e8ca0088522a66e5daf97d9e25cd7a983efe489abe3adeed27f37aa44302609b20617dafb1375ea15a8270887722aff91d9c6ca9a5ddc718935c922138b8e30625702b4eb85c4c591eebd0f256da55b6fb3ce7208b4ae1a15cc41e2b3dad98db5c1e260b913e2c80674ca02b8f1c01ca8409acf31707b76d66c9531dfb76f637adce1c57827a1be86930b90a7607b5dc6a5e498163d51d1281cfe52c0db1fddaeb1cf201008dc5317cfe9abf97a974c15554661b3532a791a5d513225cb9d58831dd91a80cfcc6a75caab5522d1df51007aa66818c0290d9b15b0544802a1dc5ddeac7903edd3c1acfdc219eff111ddd179bc9174b9386f3ce5b6abd730cf8772b10a5bfe26230d67b5c2b32ab939f3fc497dd5da8b012b2042a17d423f0cecd3d307d5c690d24f75c7d3c6ea64831e96a5e2cffe4beeeaaf08e0115f59f147da44de215f8090183eb643d65d194f08614e05195a49869fbc97c8f14f1ffea683a2fd7e7fc399ba94aa2817156ab58254c1117f4153222ecf8070e751b30154cfa0b6816370bb79496e6e2acd03e5865753e14717779050708a2a47c91c1ee9fb0ed9d6c3cb30c0c7f5aafd0475f41130da41b3a7a0f4471635e0adb2ffd6342158d34fedf1e1011414be6e3bfd2ec06837aa203bf70c714724006eed3983c608005f1898fdb1d87e77f32b92ba131f791c424012fedbd073db00735b0ba56f3454516532696501b8c39f47a66e6552391be2894faa6e29e30d8e87156392f5f2e41b33fcc81224fe1583d8c5cbd97a0334b142db571fe2d99b0144a2174f97d9ed2399bea409babd74214f4ad49e877c6b1cf2b5b5d0f5b7e390d64e91df4d9511468a4c00a7e44f5461ab4e16b98296683c99621db26c29cc447c574b7477986cac0c82c74d47c6f698f8598cb2a32e866b40df3fe234af029081a64b3457dd5a18ccdcdc3d323f2d895fb57e777eadc970e29b61d5569d19e85ec7de03b9d3134b0ac79a790acbd03899af731c7e84bc1814b05968c76db9569e25ab50a9ad59fd1247eda5931442c4a7cf58974a7bec986555faced9e57ccac3f6b287b1d1484c6258ef41f3a05d7709edf257bac48ac614c86ce28f5f1a05c50333c6e870123663590c04d3e49e62b158f4c49370994c33f415d5bd4abe69dbdb67a83748afadc520af28bce0abb4f135c3e52101968e9852f7034690742ff8701a6c114876b70b18e8c338bb8a96bb9f7885db8702e721154d2bd836e0c1b3da5b038d559e4df33a345d28340d832ee0ea5a0b2d8b3c9a4871b1fc40b717e8525ac48cf7fcb7bad17f5810faf2d8edaaf5539595d2737316637bf9c9f81ec86fb414fb219b37f0a6251c79f0c5310dc98d60588ae4928c5df9b9489b3cc79a5ca0c7dc2f3b3d8b857bd2b225dbd413920b21b80d8e910489e83e261d3e9a9db3ee42924955b36c2086bb96df8069cf49fad3b89c130be4135d36582980fb29f9b4367903a7cab416b96e06a41d8841b232043f201a32626a657d5c07e4fd4ffaecbacc93cfa1e521a5ee54254dda0c85fe8721439affb0b40c8f9c87f11f100cdb332985630bc101c7f8bc1a3fbbc666e57c953d2b0ff6b57702b6463a01bc2f226e78bfa246e3f9377229fdcab9977fb3c506c206d1195a4a2736c335423546207233f84124fb3e522c6f6061f662ccf0e240e814ff7d70b26500048bd9177f7a32e8a6ec6cbf73be47cb5e3b936cef2936ab535e249a0e68814636454198493e0508b526f125439b41804f343511270f53f6628a8c1ccb77a081b4b66d7a6ec6630f02165b7de0c71a6d53968e400c2b5ce05bca384ede05ed58a0c7ef31ad5db4b6dbd71dd37e8c57f238622a9a9d0632bb352bbc8b1d7f70dbbffaabadfd12dba1891d2c7a501ff8919edc9ccca8923736a93c34f7dff08fd3c0f011d0cf1db058698ffd48a005f02fe9fefb0d025495f7b45b77d42de44747c62004bf0a2dcdecb7639e6902ca5af744a8fb6aa0e3b5ef120bd63b09cee4bcd8679694ff17eb0da66fdc01c8730707d2883678092b5183da76e977e231a8ccd3805a667d29122ab7af10086633eb108a9b4768900545c9eb9e1d720caf868eac1fef7db7e2a68c49a1516ede6b90b543c974227293492293f1c13996f5978247572c977bfb9c4be32a456d9c13989b849da4087fb25bf8d1759961d15cb0e465725eedf421268e7b83baee73fa8fde2dd1d5a8bf1db63fab7e637bdd37d4f33f0ffc774b54e251f672a741f6e031a6b7841e3db92ecae9202a11b6528e3605c0396a50aaeb24808c6ca8658e9b876f642abf5bdba2d64c7b75740095d65e29a0e528e4b148cda99f7f0f8e8d9bfaeb554e71b6e11e5cfe06e9d5f8ce801652ec41f8e6576ba059aec3f107e0e8231a0ab2642c8376393ea89620801e480f9f08f19833533c54d6e6d637fb3feafdb30c8f56b14bf9be4f45c7a5d58f78ea315a9c57668b0e8e057c227206a97ec9744965a76f317ce978932abaabb9059253fa860eba52f4d73173b8ecff9bc364f7f43db9e9885e3c7460e297b61ff1239d275db52372b29b02e54e350d2029280f2008df4e173acc79dca02dc946f540c6136f6a1ee6c4167b669c93b7171ec8142774112376af4b44ec828f62c9a771e66d150e7d041c2ddcff7b98027d7cfb99ac5e89768c07db705ab4bb866b6bf42837435c6cb98059b2239958e29cfdd8968bcb8fb5faf40402d55c0a1d0dfe67aad600ec6ed9ccbfe60b33642608c711b53f791e91788e925995e3cbd0f860cbe40a1c93334a43dea2cea5eed0860e77f98e03feaa87f93409226eaa55ef7722c3e3014e50ef19d665a2e420b89fda603eda4607084a40eda001526d7bc59e3b91dbd00aa6872c8a8fd87f2c832eb01d74dc210e07e5a478a1a86d20cf31349038784ea437029a78f42370fb0dea0b11be387eb64528b87c8690f2b031acb6a7c42f0f868720cdc7161b2e0f0c24d7aa849f9781dcb22fe6ba6d27d63abcaea10f7b540b9d1f02eb3e6f21e01b865242f684011d7e3f60150f5288ed795f3e51510c0b4c7d97a296570405a32f70fb4a120a0cfc1b7a6fcff5209705362a71f117968842cb1add55fa758cae010d3f952f3ef44ea58da4a5e0002ce9c6a44edce1ee99c9b98cad1f1eb64e494a6c8fd0201ec9786ee610804a2832a684a6e42828eea6e8bfe355a2d38831fd37f1da62881254c82f7f4c07dd5f78dcff38b63d4c70c33c5e63faaa9c64025a4e63f8b84654400c9e2cc05b232608ff4adb3e4f1666745461443a8b6f77e05860aa3ef7acc7cf0fe020c0e9cebbd9467a76d43c6c4a8fd54143b6cdf8b9130969b0663ae139d67eb8040a365a30d5d9b801b73ba51a9e41d4d189516a634a27620e1196954d353d93eb4b875c2106d8001ca9ff7a4439349020ca62fa4d87960d92874d7169db4953b8642c62f731defa14b1b16d81741bd2df90db2681b44e2c54f286188bb7abb96a6622328cf4ef67b88f25f2343d6142b1bb71a56b982f67339fd87930680045c1582d69d361c4b4b660b807637b2621ef3fd2b3e3712543728f8ab3f46e6ce3b3e758782f924efb26697538990ec3a1fc2f220300b39ee5c65a6b6cc58f64b4ed064430702fd352bf2fecb252e78346d20b7319c914d985494327dd1a651eec5a7843bdce224637d7dcf2dabe062fff0a07368ca2ec81e654e70316b251882f923156df4b269ecef7fc0816c1448cf5e48e9a1ec96d68f8782f2c17c618a637894a3b09c7941968969e5a1ee3f16c403e643fbacd1c04b21b2e5827e90a8e6d58ad5103fd0dc932b43a5b7c80e0626a117f7a4791064df3c1cf4640f51350ddf2c64b385e67eefacaf5f2016c9744bacc55a491547d1075c9fb75aa0351bba0b2c6bad42e49018e9594f0d4847ce597f857af217f869135aff082b2045f86a081bf34f34ae8b74fb56397113c373977c109e1ddf4cd935c3acb88a42cd7a44146921f323ffa8a4334933c5a069f48f1520c250a7eb97a4fd28f5ffb8bcb46696762459b5c7f998079716c068403150231fd4bcbefcb5a38023a65052f86359f3b11d485f58fdbca9c823383e9febffc2a3cddbad1a56502c7b0325c56ddd2a9b63fb1c017c8a83426b735928c2a89fa7204b9b2fa2ff4c3979e4b11ddf3e19d011832eb8413867b96479aa2a7be5bd21416960a26f66789a8ef2b8542ffa8667447d9ab2d7ace5fbb0d6450df46f822675420be8285c9ed1c619b4f36aa3b3ff643a1c5982c7d2d1fb965c9e337f1dc7b15c0f85bc446a405e3166abfcdd09e0c14caa6634e70b5f7516e0426203266315cd5c6b799150c324b8c22d8d7e093ede33c7ec2e4354bdb60cdcce19e2a55fcc8377ada5f51bde31d1c7cc206e51a497f66087c337e20a08a96b366a1ed35a93a26391c71b31c0ff4255064e0f6c8f99a757b5e2eb680918772fe03f32821ce6d24e5499465922507fef9034ea3ad026e6d4deab4f82432a4628533ea14a4a529597ad4f15df1875e945ff7ab06e462b5b277d53057dca09a68f9280de2eb9437a4d5d815f9db62996e5cf43fedee037ae5e120c5c56f85a0f5ecc9cff58cf50e56a3088673467ee7153a79857e716c926df8429bee608b66708f3092ea799435fe7ed19cee985b77d14ed461954a89cc29be0624f70aee515f974b2237e20d766c6bbcb14242754d92532776fe352c8c95342ea683dff2344cf8ba2d82bcf9828490ebe359ff47511ad11e9d3edd1cb79c65b3ebddf752e3f190f9b7aedd71f8a0d58f0d791e21234c9b12fd526ee4de3d6111c3c1787fa71561979e68b7d2db686a48f17af14c1a3bafd5a8347eb3ddaf54efc3d7aa355161f5885c4005a92778ec0754f4dab3829ffe508a538c16fac4b5fa6e81c762f36518631cad48e1be71a2333f786a1705af987f5d9d2dfd78cdaa65b3e0966d961d484bb43c081ad135c78695c88d1fb80d5cbaac79bbcca6de7e6bb0ca99fdb4799155037fe08626455818475f85fed6884e73123ffb91d7118292581874dff61a890d2033b9611fd650b46dbeafea09e6a296f388bc39e72189e67b00fd4fe99e719a1fa965895d3b17b9e883a0319d8373a2f55d88f0ab481ccd691069a8ad2afe090079a9f2ddbff82a0a8fe3da694ea16eca45aaf24caf14240fb3706f8f3762bb556383cbca94f4fa26c003c40bc9ee39883246ab1f4a3b4e7e3d566219d71d4df00e3136fb5879a43181cab751de240c7d6699750f2fe51f758595554a4606903dcffcc63d23d127bd7a81bb9853d9f959e5a6e35739cfd0f9c019f19a03a38ba77f6b9b126e173edb5605ae5c9f2096ff513e76782f107c8ec9fb21824d4146df411ee52611a37fc9a241f89204714c6be7e2a638ae2a987013f02067cfb05c660dc43336acf9a89c337b1e3e431eb8fb0e47245701071679dd3450eff6b0729c708dba808a3a1059b17fd465241807188115f7e7558da3a8591f06b21cc4168d6ef1beff2a19b9bbf16be189fbff6fae5af3761c9bb62d21156e352a0099c3a6bc53215eb85bc5664238be01e25ee9b98a8010510eb39b8e06c2480104740bcc353bc92fa0362ea87d84a77ceaf5aa8ccd2ae8c3510c558228d4aea8e2c7dbab4ae88225e4bee29883b6c8a1e56903f2acb4daf3ae45a4f925fa28c0f9eb786211b8725bc172b15bfb1c342d39d95bc01633493a674ddb16758b670052277cd6f50a65ef54267561598d7dc170adcb9a5b6819a9dc1c11f18115355daa678df9a4c9a117ead16a00ea3b05cff04f0df983fb4cf0e112ad8922a1113b868ed2f4f319185a1e97acdf06ecfc5e4cb15cec484d24990ee5eadaf3bf244e06791b7709173c4d4f6dc5033e57e59f008fd65688f0c8d071bc71d230d151fc03091f9367bc135c7d4013dbc10f681bdca78d5c52e63a42e89ec6c65392225c738c7e831f03ed4b78c8ac2f2e486fdb84a769694525d7014c7d9f3f022631c27af4062436bff898cb7b16d575f34ded4a519221564d25213a08bea618f346001490be6786788f6fe8987c750cea05e2af3363aaa8bcd7cc870ff0fea26d260b4a87c969f14d2e91a41b7f6cd12cdd35345e94e3607a0985c473ac0b06bec7c3d810db9b9721953d8b03c99c733cbd8927a3c163908810dae7bbdb2a1adbc509738bf68d552f1dab082fedf38ec0fda06c1d8e24236991377a8b1666da387f499f8380ae0b3d63464c7eaf8d1cec4138bf42d4f369af5fda77d7ede9035ebfb54f5cf5d42abc3775ca1a48b55d4f1fa51acbf42dda8c03145383c9e10011ef5edc4f340dea1d76b47cf8f8884637f746647aa50f9906fb32d92c70f53e34fa7c9fab34d86b0424f12af629909af3a03db1da925117acdc944ee89c2c33ab2d4e771df84e7477abdd8d0f6f00eec6f5386efe4a38f796d98e237426733744fb0a66bb0f98e671dc8802b5a86e7349da0100f5048684ea107fae09ada8417fd5c00d0ff9efcbf29fee44b71c3fc1df60bd2cdc038840721533733ffcef96ac0da7649005d32c12d3d24da907d6364f090ed2df4c0cb09e6984f8e336537ee5d14fc7d8e4732e8958f56dfffc7ff457f9efe76b2dec0614e73f525e6030a25249fba04d3c89cd0ab73abbd1e8d814092eb0045d4689df67bd188867a36b566e8a9633edb0f746f2e611abf062c0de0c702c10293b8c5b0ea675aa57c3ec377a860dcf8ff1ae16d5544aa09e3fbf4d23d3fb0c6601bdd933d496adacc85a71fcefa336d17e0a1d2af949d462b45d2babc6f9e6047a5b24beba847c43c5c2a3012378b4dd81694cd4e24256cfa354cb97108fa1d02454cecd8318f5a1e4ba84b50c44f507194b468d82dbfab4df139b8f6d20219f21402ce123d9f7036d253317df754ddb3389f0cfe20ddbffa4f9d99c9eacead84abe8003df6ae23e97aa335c5a5386ac394d59ef301da0784017805c2b059e6ccc54ed381f1d7919fb033ebc1bd1f0c2f6c50d9b5262331bfae36d5fdb619f61b0dd01edd5aee6970c03b3d912924bfaea9ba8fd12b538665b223c541ee6b3b211e460d83a50acc2674cf94d460fbf90c736b9be44e2f459e4e0d888b33540a4836b5d66afcc128e77331e0ce92347f24a2c6a00b9aeb0f65225a981920a6f3b0f5886103f5cdd9e53c47f1b0a93492a1254689b73377d64dc1bfaaa4797f359dd2a604817bb6ec7c4d199b613a03ad6a89f58e3ceae1f1f328fae24e2ce2f976820e81311d1b486d112cec8dde43e29dda5c7c8cea0d956044bfc38403e6398142b20ca5e05820262ec4ec496f567fa6131206c8bd2109aad1ae41d6d6b489b32be376a5ede174e109197561c2805984c88578d2663d48559ccd29f6948ae044b473722cec5a2300b818f6b074001a544dcefe5c02347ee6d3252bce7f56188079b3a02721ba87ec9da181d93e6cfa825406db9dd9840a9325b94f33d2d7add8ccd4b90fda741548a8733127453828d2e406614915b9e0b569b4c3cbcfd708e7c2994172942065451b8942427c5e82022464b7c31eb5d405f21c0ef371acc74a66d631f112d9f4141038670a80717f507f3ffc482b859ae7702056da110163c8471d33d7a7c5ae779a47c9dc819afad91755be16ce63478e40cce95c2c3f8b874f264825d3af4af28b75d1fa1051bf4f15100031ca4c525573e735f5438c59c4f2ffea3857184055521cff062627261d6793bba464982f661bc10f4763db736e869797b671d6731ba8cd4a204b723e19e4c171920aac54739d51e1e17e2185c63d4e0bf50a251ef88a09ebd106e919ad5517a7a101283f8864a26331332438bfd12788cc746b24bac7117a0c52de071929a68ae0330b33c37f7e71e8413c5335a302e4bb387e29a0f0a646ecef8f85b2a2516b6dc51b861869e0ca31adb780a04832e85dceeadc48d587f06fee6bb83ab602bb80205778422299c39b5e8ab9b50555aaf809546d0d1850efe90f9126058fe728cdc3b62bd0d13361ea83744aef627859b4e4a84984d5317c9390bee0b1ced9dd7b9caafc0bb135194b7a45ee92f619917ce8b6c9a06e0e4970f8f1f7e3ba813bd519490b6850356a2be81f9da92ce9c4d8c0ad064193074fee8b45784eca032382c30737b8da6b514e0785f381cbf16652eb2ad382378a9b5138fdc898d84316c91714d0efa7cbe0c185909d4591ccbd9483760948a2da0426b28ca901454afaee0abcc0c087f1080e973323bc8d9cd3773a560cecdc762ee6e85c90a103a25ee6efb665fdc51c74c543080fff6643798c274d0724b9eaba089da73ad4a723cfc2e2d87e020125bac3469c44850f6f1195f436a020b653c109d3875d9ebc669fbfb2e90ad6c2db1cbec11879e99ed15abcee29fc46591375dd4805766f54193c7769b8ae3ca0e424ee3f57094688ffcbef5591bf0d44183f9abcf9966dd1f261bc01829e39c0c5e95a725bba3e00ed59e29ac8c1a6af1a12ecc6e2f9b4feeb00933c083b460d7d637b2d17cdc8751228f7310df9c22dac66619fc7d40991cb22319f3d7f466a6d7fdfde92c2bb97c37c6ee1576a220ca7d206e8acae04d84c71222cb2dd2409b221680126fb3099dc006bc57dd8688dd2115481d54c077dff2fdd238ec9a93ebe58ad086d22cdef0f97690c0daff007b0ed7baf5cb665170de57ab466d66cc71d1ced2dd6670cfb2ff0442d069245137c310da24eb66d2b995044a128fa209e283b034527bc00a0a021d73edc8afb7d09c80b4d46cb1b3a093e20d77541652624452295c9a5bfa13c770a62450083c391531359f891bf49437fec47cdd4e1a607b49e2576af9bc37ceb6b116e90b78ab0aef8ec9961492629bb1c98c69892d91004956010d25c2d589fe43b868c11778a10f33a0dc89ba2528ec5a12d19abf847f7e0a78e59cb2322480be868ddee54b3de78d0d5757c3cd29896b8edbfba5777d3ba268655daee9d2531cf33f3712c59a0adae7a75c533bd5fc473fd36b2d4df2019d9745617f9e4511a08f6110134d91091abd005fa1106d9ae7edcfd57bbe772730c4ca24732d5a268f1bdaf7847cb44ce7ad7d8ac56f51efa00edc71a361c8bc940c50a4309ff108a9bad15d797cd0e245fd6c8bfa2ff87118ea4d94f17f1ce0b145d46325fb395666ddf99fb50e02de2cacf9d4ce271fe59e3e04702a97d549ab09d7ea12f5ad87422e8ee8a346810872583146b01623b9d551b455393a76e6f116582ff1b80e6a945940cf2a64fee4d9bd77f26766acf089ceac22cf69c78504b4354519b6d42e356603b5dc437e2b4da3efc2bbe85df4a8d86a29eb43e0e50d38b14766995b4335e79946fd56963999d203b53c5ee3162390b7900ee90d4cdc47b43ead85bb490d26dc0635f3a41c0e0ae7de8e31b15f057883c7b6eb4b9ee236d8c9dbd8d74bb06e8ff09fe8eee5b1fba517a94a3f7cf1bcee2b92a683446f5750771885661e478d95654ec48710c9e8dcd874338dc331964575395ef7a169182a4b8cf3a68941e3d94e000056d7e68cac25e3f442e49cd434c60186dce5ab931db997cd3b52b5f76265b7fdb8bf7e8660baa3b7f9e7a9d1c098db3706b56afe183b50c233a7a79df16c25c5bb2bcb6dc81bc0959a0be1e86fa3316eb72831641972163ed74324d9d6e85be49b0d249dc039d941a598ab12b42e16578d5082b89d9c0a7a9f0f0b81e3d2c4e6337fae934d53b9f24b24df9f70b6d80d9ffc4aa707c68ab65d26de8c51df18bff830edb8d17e53d672156beeb19b8ab571be94f3a7aa10b2c26fd583576912f4c2c8ac499e9c96f56232ca8c5a35781d24814e174953f18bad4c6020e400e12cb16e3c06a3b3a2ee81bd5e1af8b2b340d624b81f5a4c66b9453e42a2a658b2da58125e7977db5bea8e8e6711c9550c872797aca0a11f433e2ad1f077cbc932c5d3c493191dd328f9bceb61926905d780aa4cbbcf2aa14a94b0a3927b2f4a05ac194ca2d77a126b49334c81e532f2eb42b67c619fd0ee0709fc00e9db8814b1443ce3c53b38e7a936146581395a0170312e4606fc87e33f86d8f7c739fb676497600fa8b40f4db22e347460cfe71d0d3bdd348606b34f0bc85cef7e105e9b2bd6e269a9c2a96f2d27b6d6f57abf2138e0350ce522fdeb252804b78b7f948ddef8d0cf5274c663826ea76b483fad42bcf3e9d0015d80f535e248982a63c3578c1e46be6341cc85b2e4a1c0ed27c0f2e9ee698da5e04541396e379ed42a112eb6576ce43faffdd88e28084ab6d66a6d43f", 0x2000, &(0x7f0000001a40)={&(0x7f0000000800)={0x50, 0xfffffffffffffff5, 0xff, {0x7, 0x2b, 0x0, 0x10020200, 0xffff, 0xdae, 0x7, 0xfff, 0x0, 0x0, 0x2, 0x80000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x60, 0x0, 0x7, {{0xffffffff00000001, 0x6, 0x7c1, 0x9df60000000000, 0xff80000000000000, 0x1a00000, 0x5, 0x9}}}, 0x0, &(0x7f0000000ec0)={0x13, 0x0, 0x0, {'}^\x00'}}, &(0x7f0000000f00)={0x20, 0x0, 0x8000000000000001, {0x0, 0x10}}, 0x0, &(0x7f0000000fc0)={0x90, 0x0, 0x2, {0x3, 0x1, 0x0, 0x3, 0xe, 0xb75, {0x2, 0x9, 0x8, 0x0, 0x7, 0x1, 0x3ff, 0x6, 0xfff, 0xa000, 0x8, r3, r4, 0x7fff, 0xe1e}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)={0x130, 0x0, 0xfb7, {0x9, 0xffff, 0x0, '\x00', {0x4, 0xfffffffc, 0xde2, 0x9, r3, 0x0, 0x6000, '\x00', 0x2, 0x7ff, 0x401, 0x3, {0xffff, 0x26cd}, {0x0, 0xf9}, {0xf8, 0xa}, {0x9, 0x4221f714}, 0x1ff, 0x6, 0x5, 0x8}}}}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x24, 0x0, &(0x7f0000000040)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000100)=0x21000) dup2(r6, r1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000980)={0x0, 0x39, 0x918d, 0x1}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x24, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x80}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f0000002280)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0xc000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc9"], 0x28}], 0x1}, 0x40) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) 45.993026ms ago: executing program 1 (id=850): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xc004) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x5, 0xf, 0x4, 0x5}, 'syz1\x00', 0xc}) r3 = memfd_create(&(0x7f0000000c00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x01\x00\x00\x00.\xd4\xee\xbb\b\x85c\xc0G$hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\xe9c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\b\x00\x00\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\a\x00\x00\x00,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, "a605afa07545b6566365a80ce0b940ac"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000180)={{r2}, {@val={r1}, @max}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) inotify_init1(0x800) (async) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x3000426) (async) utime(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1200000, &(0x7f00000002c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0x7ff}}]}) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000003c0)={0x0, "a605afa07545b6566365a80ce0b940ac"}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000180)={{r2}, {@val={r1}, @max}}) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 23.495930][ T36] audit: type=1400 audit(1760296810.480:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.497397][ T282] cgroup: Unknown subsys name 'net' [ 23.518848][ T36] audit: type=1400 audit(1760296810.490:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.546160][ T36] audit: type=1400 audit(1760296810.510:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.546603][ T282] cgroup: Unknown subsys name 'devices' [ 23.708399][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.714073][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.850325][ T36] audit: type=1400 audit(1760296810.840:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.873545][ T36] audit: type=1400 audit(1760296810.840:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.898429][ T36] audit: type=1400 audit(1760296810.840:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.909717][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.930545][ T36] audit: type=1400 audit(1760296810.920:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.956105][ T36] audit: type=1400 audit(1760296810.920:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.996541][ T36] audit: type=1400 audit(1760296810.990:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.997155][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.022080][ T36] audit: type=1400 audit(1760296810.990:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.816645][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.823729][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.846082][ T289] bridge_slave_0: entered allmulticast mode [ 24.852597][ T289] bridge_slave_0: entered promiscuous mode [ 24.876814][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.883891][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.905962][ T289] bridge_slave_1: entered allmulticast mode [ 24.912352][ T289] bridge_slave_1: entered promiscuous mode [ 24.957854][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.964918][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.972033][ T290] bridge_slave_0: entered allmulticast mode [ 24.978386][ T290] bridge_slave_0: entered promiscuous mode [ 24.991430][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.998517][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.005583][ T290] bridge_slave_1: entered allmulticast mode [ 25.012018][ T290] bridge_slave_1: entered promiscuous mode [ 25.117512][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.124591][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.131820][ T295] bridge_slave_0: entered allmulticast mode [ 25.138181][ T295] bridge_slave_0: entered promiscuous mode [ 25.153467][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.160686][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.168038][ T295] bridge_slave_1: entered allmulticast mode [ 25.174292][ T295] bridge_slave_1: entered promiscuous mode [ 25.209344][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.216475][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.223563][ T298] bridge_slave_0: entered allmulticast mode [ 25.230005][ T298] bridge_slave_0: entered promiscuous mode [ 25.245143][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.252223][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.259364][ T298] bridge_slave_1: entered allmulticast mode [ 25.265663][ T298] bridge_slave_1: entered promiscuous mode [ 25.290995][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.298100][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.305497][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.312714][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.382047][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.389157][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.396459][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.403599][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.448002][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.455489][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.493581][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.500787][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.517563][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.524773][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.561344][ T289] veth0_vlan: entered promiscuous mode [ 25.571452][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.578585][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.595513][ T289] veth1_macvtap: entered promiscuous mode [ 25.603827][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.610938][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.641363][ T290] veth0_vlan: entered promiscuous mode [ 25.673334][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.680468][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.690398][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.694284][ T290] veth1_macvtap: entered promiscuous mode [ 25.717771][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.724831][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.740140][ T295] veth0_vlan: entered promiscuous mode [ 25.779127][ T295] veth1_macvtap: entered promiscuous mode [ 25.842807][ T298] veth0_vlan: entered promiscuous mode [ 25.860647][ T340] can0: slcan on ptm0. [ 25.884179][ T298] veth1_macvtap: entered promiscuous mode [ 25.900190][ T344] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.961732][ T351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.961842][ T351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 25.969259][ T351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.979683][ T339] can0 (unregistered): slcan off ptm0. [ 25.989524][ T351] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 26.045165][ T359] rust_binder: Error while translating object. [ 26.073643][ T359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.080885][ T359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 26.152976][ T369] syzkaller0: create flow: hash 2003729455 index 0 [ 26.196225][ T62] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 26.357282][ T62] usb 4-1: No LPM exit latency info found, disabling LPM. [ 26.365698][ T62] usb 4-1: config 64 has an invalid interface number: 174 but max is 2 [ 26.374385][ T62] usb 4-1: config 64 has an invalid interface number: 252 but max is 2 [ 26.383390][ T62] usb 4-1: config 64 has an invalid interface descriptor of length 2, skipping [ 26.405657][ T369] syzkaller0 (unregistered): delete flow: hash 2003729455 index 0 [ 26.418155][ T62] usb 4-1: config 64 has an invalid interface number: 140 but max is 2 [ 26.445931][ T62] usb 4-1: config 64 has no interface number 0 [ 26.472478][ T62] usb 4-1: config 64 has no interface number 1 [ 26.490788][ T62] usb 4-1: config 64 has no interface number 2 [ 26.511596][ T62] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 26.543830][ T62] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 26.558605][ T62] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 26.570459][ T62] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 26.582023][ T62] usb 4-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 26.593419][ T62] usb 4-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 26.610901][ T62] usb 4-1: config 64 interface 174 has no altsetting 0 [ 26.632295][ T62] usb 4-1: config 64 interface 252 has no altsetting 0 [ 26.640942][ T62] usb 4-1: config 64 interface 140 has no altsetting 0 [ 26.650865][ T62] usb 4-1: string descriptor 0 read error: -22 [ 26.657517][ T62] usb 4-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 26.667068][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.681142][ T62] usb-storage 4-1:64.174: USB Mass Storage device detected [ 26.774648][ T62] usb-storage 4-1:64.252: USB Mass Storage device detected [ 26.826751][ T62] usb-storage 4-1:64.140: USB Mass Storage device detected [ 26.887730][ T62] usb 4-1: USB disconnect, device number 2 [ 26.984909][ T409] rust_binder: got new transaction with bad transaction stack [ 26.984934][ T409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 27.001116][ T412] ======================================================= [ 27.001116][ T412] WARNING: The mand mount option has been deprecated and [ 27.001116][ T412] and is ignored by this kernel. Remove the mand [ 27.001116][ T412] option from the mount to silence this warning. [ 27.001116][ T412] ======================================================= [ 27.050410][ T412] overlay: ./file0 is not a directory [ 27.101160][ T420] kvm: pic: non byte write [ 27.151155][ T423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20'. [ 27.245942][ T414] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.395942][ T414] usb 3-1: Using ep0 maxpacket: 8 [ 27.402760][ T414] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 27.412445][ T414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.424726][ T414] usb 3-1: config 0 descriptor?? [ 27.481171][ T432] rust_binder: Got transaction with invalid offset. [ 27.481323][ T432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.488099][ T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 27.496188][ T62] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 27.589594][ T434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=434 comm=syz.3.24 [ 27.666467][ T436] netlink: 'syz.1.25': attribute type 27 has an invalid length. [ 27.676055][ T62] usb 1-1: device descriptor read/64, error -71 [ 27.718505][ T436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25'. [ 27.839266][ T414] magicmouse 0003:05AC:0324.0001: hidraw0: USB HID v0.05 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 27.925981][ T62] usb 1-1: device descriptor read/64, error -71 [ 27.952128][ T445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=445 comm=syz.1.28 [ 28.130852][ T446] usb 3-1: USB disconnect, device number 2 [ 28.177646][ T62] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 28.205939][ T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 28.289871][ T469] rust_binder: Write failure EFAULT in pid:22 [ 28.315921][ T62] usb 1-1: device descriptor read/64, error -71 [ 28.349970][ T473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:26 [ 28.366468][ T475] overlayfs: missing 'lowerdir' [ 28.381809][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 28.397613][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 28.408834][ T475] Zero length message leads to an empty skb [ 28.418683][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 28.420938][ T477] overlayfs: failed to clone lowerpath [ 28.427929][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.442012][ T45] usb 2-1: Product: syz [ 28.446388][ T45] usb 2-1: Manufacturer: syz [ 28.451017][ T45] usb 2-1: SerialNumber: syz [ 28.458368][ T45] usb 2-1: config 0 descriptor?? [ 28.533744][ T480] rust_binder: 479 RLIMIT_NICE not set [ 28.534017][ T479] rust_binder: Error while translating object. [ 28.539662][ T479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 28.546168][ T479] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 28.555709][ T479] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:30 [ 28.585808][ T482] rust_binder: Error while translating object. [ 28.594402][ T62] usb 1-1: device descriptor read/64, error -71 [ 28.594841][ T482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.607135][ T482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 28.639242][ T484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 28.666745][ T445] rust_binder: Write failure EINVAL in pid:27 [ 28.681186][ T45] usb 2-1: USB disconnect, device number 2 [ 28.707500][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.723650][ T62] usb usb1-port1: attempt power cycle [ 28.896032][ T414] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 29.047244][ T414] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 29.057567][ T414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.066021][ T62] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 29.074483][ T414] usb 3-1: config 0 descriptor?? [ 29.087291][ T62] usb 1-1: device descriptor read/8, error -71 [ 29.216968][ T62] usb 1-1: device descriptor read/8, error -71 [ 29.264318][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.273203][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.282063][ T36] kauditd_printk_skb: 115 callbacks suppressed [ 29.282082][ T36] audit: type=1400 audit(1760296816.270:189): avc: denied { write } for pid=532 comm="syz.1.57" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 29.284060][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.320750][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.330494][ T534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.57'. [ 29.340609][ T36] audit: type=1326 audit(1760296816.330:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=532 comm="syz.1.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed0d78eec9 code=0x0 [ 29.363514][ T36] audit: type=1326 audit(1760296816.330:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=532 comm="syz.1.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed0d78eec9 code=0x0 [ 29.465985][ T62] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 29.486941][ T62] usb 1-1: device descriptor read/8, error -71 [ 29.515938][ T446] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.519360][ T36] audit: type=1400 audit(1760296816.510:192): avc: denied { write } for pid=538 comm="syz.1.58" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 29.524185][ T539] rust_binder: 34: no such ref 3 [ 29.551774][ T539] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 29.559010][ T539] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 29.566120][ T539] rust_binder: Write failure EFAULT in pid:34 [ 29.586243][ T541] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 29.601933][ T36] audit: type=1400 audit(1760296816.590:193): avc: denied { unlink } for pid=540 comm="syz.1.59" name="#1" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 29.602171][ T541] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 29.632881][ T36] audit: type=1400 audit(1760296816.620:194): avc: denied { mount } for pid=540 comm="syz.1.59" name="/" dev="overlay" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.654625][ T36] audit: type=1400 audit(1760296816.620:195): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.674694][ T62] usb 1-1: device descriptor read/8, error -71 [ 29.694851][ T36] audit: type=1400 audit(1760296816.680:196): avc: denied { connect } for pid=542 comm="syz.1.60" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.719891][ T36] audit: type=1400 audit(1760296816.680:197): avc: denied { ioctl } for pid=542 comm="syz.1.60" path="socket:[4686]" dev="sockfs" ino=4686 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.744754][ T36] audit: type=1400 audit(1760296816.680:198): avc: denied { create } for pid=544 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.786087][ T62] usb usb1-port1: unable to enumerate USB device [ 29.823954][ T548] input: syz1 as /devices/virtual/input/input5 [ 30.101776][ T570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.69'. [ 30.126163][ T574] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.208770][ T590] rust_binder: Write failure EFAULT in pid:25 [ 30.299625][ T607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.299662][ T607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 30.319088][ T486] /dev/rnullb0: Can't open blockdev [ 30.334904][ T414] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 30.347888][ T414] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 30.358287][ T414] asix 3-1:0.0: probe with driver asix failed with error -71 [ 30.369208][ T414] usb 3-1: USB disconnect, device number 3 [ 30.390688][ T621] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 30.399581][ T622] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 30.447115][ T631] overlay: Unknown parameter '/' [ 30.565973][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.581201][ T642] overlayfs: missing 'lowerdir' [ 30.624687][ T654] incfs: Options parsing error. -22 [ 30.630060][ T654] incfs: mount failed -22 [ 30.735955][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 30.742267][ T10] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 30.754425][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.767360][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.776617][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.784902][ T10] usb 1-1: Product: syz [ 30.790368][ T10] usb 1-1: Manufacturer: syz [ 30.795152][ T10] usb 1-1: SerialNumber: syz [ 30.919445][ T684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10913 sclass=netlink_route_socket pid=684 comm=syz.3.103 [ 31.005120][ T10] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 31.017286][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 31.029793][ T10] usb 1-1: USB disconnect, device number 6 [ 31.042441][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.232827][ T688] rust_binder: Error while translating object. [ 31.232907][ T688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.239320][ T688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 31.274349][ T691] input: syz0 as /devices/virtual/input/input6 [ 31.680064][ T712] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=712 comm=syz.1.114 [ 31.691657][ T710] kvm: emulating exchange as write [ 31.700777][ T710] rust_binder: Write failure EFAULT in pid:32 [ 31.782597][ T719] SELinux: security_context_str_to_sid () failed with errno=-22 [ 31.786330][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.955910][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 31.962659][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 31.972143][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.986617][ T733] rust_binder: inc_ref_done called when no active inc_refs [ 31.999454][ T10] usb 3-1: config 0 descriptor?? [ 32.029944][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 32.122880][ T757] rust_binder: Write failure EFAULT in pid:105 [ 32.256537][ T705] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 32.265906][ T705] rust_binder: Error while translating object. [ 32.285944][ T705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.302421][ T705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 32.392746][ T10] usb 3-1: Detected FT232A [ 32.416111][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 32.427159][ T10] usb 3-1: USB disconnect, device number 4 [ 32.434158][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 32.444375][ T10] ftdi_sio 3-1:0.0: device disconnected [ 32.696962][ T771] process 'syz.3.131' launched '/dev/fd/7' with NULL argv: empty string added [ 32.886211][ T793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.887689][ T794] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 32.913829][ T796] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 32.929560][ T796] rust_binder: Write failure EINVAL in pid:42 [ 33.045673][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.095121][ T818] can0: slcan on ptm1. [ 33.155076][ T822] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 33.171620][ T824] incfs: Error accessing: /dev/rnullb0. [ 33.185789][ T824] incfs: mount failed -20 [ 33.186312][ T826] rust_binder: 72: no such ref 3 [ 33.195481][ T826] rust_binder: 72: no such ref 0 [ 33.201438][ T818] can0 (unregistered): slcan off ptm1. [ 33.208867][ T826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 33.213211][ T828] binder: Bad value for 'max' [ 33.268219][ T836] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.268355][ T836] rust_binder: Error in use_page_slow: ESRCH [ 33.274899][ T836] rust_binder: use_range failure ESRCH [ 33.281160][ T836] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 33.287075][ T836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.296487][ T836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:131 [ 33.480228][ T852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.156'. [ 33.574693][ T860] tc_dump_action: action bad kind [ 33.805916][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.885929][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.955910][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 33.966774][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.986425][ T10] usb 2-1: config 6 has an invalid interface number: 100 but max is 0 [ 34.000164][ T10] usb 2-1: config 6 has no interface number 0 [ 34.012891][ T10] usb 2-1: config 6 interface 100 has no altsetting 0 [ 34.025910][ T31] usb 3-1: device descriptor read/64, error -71 [ 34.027856][ T10] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=42.9d [ 34.055902][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.063976][ T10] usb 2-1: Product: syz [ 34.075944][ T10] usb 2-1: Manufacturer: syz [ 34.080611][ T10] usb 2-1: SerialNumber: syz [ 34.265947][ T31] usb 3-1: device descriptor read/64, error -71 [ 34.354405][ T10] usb 2-1: USB disconnect, device number 4 [ 34.505986][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.636017][ T31] usb 3-1: device descriptor read/64, error -71 [ 34.870570][ T880] netlink: 'syz.1.165': attribute type 6 has an invalid length. [ 34.879962][ T31] usb 3-1: device descriptor read/64, error -71 [ 34.961437][ T893] vlan0: entered promiscuous mode [ 34.966814][ T893] vlan0: entered allmulticast mode [ 34.972090][ T893] veth0_vlan: entered allmulticast mode [ 34.996024][ T31] usb usb3-port1: attempt power cycle [ 35.105928][ T815] Bluetooth: hci0: command 0x1003 tx timeout [ 35.105953][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.235660][ T910] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.251086][ T910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 35.316388][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 35.316408][ T36] audit: type=1400 audit(1760296822.310:259): avc: denied { mount } for pid=913 comm="syz.1.177" name="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 35.347204][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.355627][ T36] audit: type=1400 audit(1760296822.330:260): avc: denied { search } for pid=913 comm="syz.1.177" name="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.377995][ T36] audit: type=1400 audit(1760296822.330:261): avc: denied { mounton } for pid=913 comm="syz.1.177" path="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.400404][ T36] audit: type=1400 audit(1760296822.340:262): avc: denied { setopt } for pid=913 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.401118][ T31] usb 3-1: device descriptor read/8, error -71 [ 35.506852][ T922] capability: warning: `syz.3.179' uses deprecated v2 capabilities in a way that may be insecure [ 35.538815][ T36] audit: type=1400 audit(1760296822.514:263): avc: denied { watch watch_reads } for pid=921 comm="syz.3.179" path="/77/file0" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.575332][ T31] usb 3-1: device descriptor read/8, error -71 [ 35.830080][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.863146][ T31] usb 3-1: device descriptor read/8, error -71 [ 36.001678][ T31] usb 3-1: device descriptor read/8, error -71 [ 36.128500][ T31] usb usb3-port1: unable to enumerate USB device [ 36.454012][ T36] audit: type=1400 audit(1760296823.378:264): avc: denied { lock } for pid=930 comm="syz.1.182" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.478301][ T36] audit: type=1400 audit(1760296823.396:265): avc: denied { bind } for pid=930 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.503259][ T36] audit: type=1400 audit(1760296823.396:266): avc: denied { setopt } for pid=930 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.523988][ T446] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.600162][ T36] audit: type=1400 audit(1760296823.518:267): avc: denied { load_policy } for pid=935 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.621745][ T936] SELinux: failed to load policy [ 36.627129][ T36] audit: type=1400 audit(1760296823.537:268): avc: denied { write } for pid=935 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 36.655667][ T939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:180 [ 36.655772][ T938] rust_binder: 180: no such ref 1 [ 36.682657][ T446] usb 1-1: Using ep0 maxpacket: 8 [ 36.689706][ T446] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 36.698341][ T446] usb 1-1: config 0 has no interface number 0 [ 36.704708][ T446] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ee.0c [ 36.713868][ T446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.729174][ T446] usb 1-1: config 0 descriptor?? [ 36.731789][ T949] syz.1.188 uses obsolete (PF_INET,SOCK_PACKET) [ 36.765573][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.765604][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.772170][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.778676][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.778673][ T953] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 36.785200][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.799770][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.806419][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.812954][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.819482][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.826075][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.832557][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.839100][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.845679][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.852153][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.858830][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.865357][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.871818][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.878642][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.885234][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.891702][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.898212][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.904684][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.911172][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.917792][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.924414][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.931068][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.937540][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.944159][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.950684][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.957173][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.963244][ T927] overlayfs: failed to get index nlink (file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, err=-61) [ 36.963677][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.999671][ T446] usb 1-1: string descriptor 0 read error: -71 [ 37.001199][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.007002][ T446] usb 1-1: unsupported MDLM descriptors [ 37.012753][ T62] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.020559][ T446] usb 1-1: USB disconnect, device number 7 [ 37.028542][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.038043][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.044722][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.051453][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.057965][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.064534][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.071037][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.077831][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.084271][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.090753][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.097479][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.103978][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.110462][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.116923][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.123622][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.130179][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.136688][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.143174][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.149634][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.156131][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.162621][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.169064][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.175551][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.181994][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.188542][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.195151][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.201594][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.208090][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.214541][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.221090][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.227610][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.234200][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.240899][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.247959][ T62] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 37.265544][ T62] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 37.276620][ T62] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 37.286447][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.305080][ T62] usb 2-1: invalid MIDI out EP 0 [ 37.311761][ T955] tipc: Trying to set illegal importance in message [ 37.335383][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.351946][ T62] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 37.689290][ T62] usb 2-1: USB disconnect, device number 5 [ 37.812343][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.898948][ T965] rust_binder: Error while translating object. [ 37.898996][ T965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 37.905438][ T965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:90 [ 37.972217][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 37.989077][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 37.998538][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.006900][ T31] usb 1-1: Product: syz [ 38.011146][ T31] usb 1-1: Manufacturer: syz [ 38.012268][ T967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 38.016080][ T31] usb 1-1: SerialNumber: syz [ 38.125972][ T981] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 38.126004][ T981] rust_binder: Error while translating object. [ 38.138230][ T981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.144672][ T981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 38.165860][ T983] tipc: Can't bind to reserved service type 2 [ 38.237601][ T985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.237904][ T985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 38.246647][ T31] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 38.382750][ T998] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 38.515282][ C1] usblp0: nonzero write bulk status received: -71 [ 38.523865][ T31] usb 1-1: USB disconnect, device number 8 [ 38.531703][ T31] usblp0: removed [ 38.535862][ T963] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 38.923225][ T1002] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.207'. [ 39.027207][ T1010] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 6 [ 39.125964][ T1013] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 39.144021][ T1013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 39.154683][ T1013] random: crng reseeded on system resumption [ 39.384235][ T1034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.394068][ T1034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.405151][ T1033] input: syz0 as /devices/virtual/input/input7 [ 39.464252][ T62] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 39.494990][ T1044] netlink: 'syz.0.220': attribute type 27 has an invalid length. [ 39.625570][ T62] usb 3-1: config 16 has an invalid interface number: 236 but max is 1 [ 39.634018][ T62] usb 3-1: config 16 has an invalid interface number: 175 but max is 1 [ 39.642940][ T62] usb 3-1: config 16 has no interface number 0 [ 39.649498][ T62] usb 3-1: config 16 has no interface number 1 [ 39.655714][ T62] usb 3-1: config 16 interface 175 altsetting 3 endpoint 0x1 has an invalid bInterval 201, changing to 4 [ 39.667570][ T62] usb 3-1: config 16 interface 175 altsetting 3 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 39.678607][ T62] usb 3-1: config 16 interface 175 has no altsetting 0 [ 39.686104][ T62] usb 3-1: language id specifier not provided by device, defaulting to English [ 39.701011][ T62] usb 3-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 39.710783][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.805267][ T414] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.967394][ T414] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 39.976832][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.986805][ T414] usb 2-1: config 0 descriptor?? [ 39.993097][ T414] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 40.001228][ T414] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 40.014161][ T62] usb 3-1: bad CDC descriptors [ 40.021041][ T62] usb 3-1: USB disconnect, device number 9 [ 40.209680][ T1039] mmap: syz.1.218 (1039) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.224844][ T62] usb 2-1: USB disconnect, device number 6 [ 40.232852][ T62] ftdi_sio 2-1:0.0: device disconnected [ 40.584376][ T1058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 40.594381][ T1058] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 40.675150][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.686577][ T1066] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.695035][ T1066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.695071][ T1066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 40.723144][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 40.726479][ T1070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 40.787558][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 40.787578][ T36] audit: type=1400 audit(1760296827.450:290): avc: denied { connect } for pid=1076 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.815445][ T36] audit: type=1400 audit(1760296827.469:291): avc: denied { write } for pid=1076 comm="syz.1.231" path="socket:[7455]" dev="sockfs" ino=7455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.847617][ T1077] rust_binder: Error in use_page_slow: ESRCH [ 40.847641][ T1077] rust_binder: use_range failure ESRCH [ 40.854013][ T1077] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 40.859620][ T1077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.869016][ T1077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:219 [ 40.942625][ T1086] capability: warning: `syz.3.234' uses 32-bit capabilities (legacy support in use) [ 41.025864][ T36] audit: type=1400 audit(1760296827.666:292): avc: denied { ioctl } for pid=1103 comm="syz.0.242" path="socket:[8475]" dev="sockfs" ino=8475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.077422][ T36] audit: type=1400 audit(1760296827.703:293): avc: denied { connect } for pid=1103 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.318618][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 41.335217][ T36] audit: type=1400 audit(1760296827.957:294): avc: denied { setopt } for pid=1119 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.453070][ T1136] netlink: 37 bytes leftover after parsing attributes in process `syz.0.253'. [ 41.490265][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 41.503761][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 41.534627][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 41.545028][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.553426][ T10] usb 2-1: Product: syz [ 41.557750][ T10] usb 2-1: Manufacturer: syz [ 41.562800][ T10] usb 2-1: SerialNumber: syz [ 41.575244][ T10] usb 2-1: config 0 descriptor?? [ 41.583664][ T10] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 41.961008][ T36] audit: type=1400 audit(1760296828.548:295): avc: denied { getopt } for pid=1146 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.008575][ T1106] rust_binder: Error while translating object. [ 42.008627][ T1106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.015094][ T1106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 42.025090][ T31] usb 2-1: USB disconnect, device number 7 [ 42.223100][ T36] audit: type=1400 audit(1760296828.792:296): avc: denied { create } for pid=1191 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 42.678231][ T1198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 42.678264][ T1198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:225 [ 42.760513][ T1209] netlink: 'syz.3.278': attribute type 27 has an invalid length. [ 42.796760][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.804118][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.838303][ T1209] vlan0: left promiscuous mode [ 42.842675][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.843268][ T1209] vlan0: left allmulticast mode [ 42.849280][ T815] Bluetooth: hci0: command 0x1003 tx timeout [ 42.854564][ T1209] veth0_vlan: left allmulticast mode [ 42.881963][ T36] audit: type=1400 audit(1760296829.411:297): avc: denied { create } for pid=1222 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 42.913052][ T1228] tmpfs: Bad value for 'nr_blocks' [ 43.047490][ T36] audit: type=1400 audit(1760296829.570:298): avc: denied { ioctl } for pid=1248 comm="syz.2.288" path="socket:[7843]" dev="sockfs" ino=7843 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.047579][ T1249] rust_binder: Write failure EFAULT in pid:127 [ 43.099206][ T36] audit: type=1400 audit(1760296829.617:299): avc: denied { create } for pid=1252 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 43.147229][ T1259] 9pnet: p9_errstr2errno: server reported unknown error [ 43.149695][ T1256] SELinux: security_context_str_to_sid () failed with errno=-22 [ 43.162756][ T1260] rust_binder: Got transaction with invalid offset. [ 43.162798][ T1260] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.169616][ T1260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 43.173107][ T1262] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 43.248433][ T1276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=1276 comm=syz.0.297 [ 43.471379][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.639031][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 43.659378][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 43.668774][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.681132][ T10] usb 3-1: config 0 descriptor?? [ 43.901696][ T1265] rust_binder: Error while translating object. [ 43.901766][ T1265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.908058][ T1265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:135 [ 46.420764][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 46.436143][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 46.444975][ T10] usb 3-1: USB disconnect, device number 10 [ 67.226929][ T1339] rust_binder: Write failure EINVAL in pid:139 [ 67.257324][ T1350] 9pnet_fd: Insufficient options for proto=fd [ 67.354217][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 67.354235][ T36] audit: type=1400 audit(1760296852.372:301): avc: denied { bind } for pid=1340 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.482323][ T1336] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 67.642208][ T1336] usb 3-1: Using ep0 maxpacket: 8 [ 67.650198][ T1336] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.659497][ T1336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.667565][ T1336] usb 3-1: Product: syz [ 67.671772][ T1336] usb 3-1: Manufacturer: syz [ 67.676428][ T1336] usb 3-1: SerialNumber: syz [ 67.834969][ T1365] 9pnet_fd: Insufficient options for proto=fd [ 67.896610][ T1336] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 68.020247][ T36] audit: type=1400 audit(1760296853.000:302): avc: denied { getopt } for pid=1376 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.110914][ T1339] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 68.117050][ T1336] usb 3-1: USB disconnect, device number 11 [ 68.118278][ T1339] rust_binder: Write failure EINVAL in pid:139 [ 68.126976][ T1336] usblp0: removed [ 68.409543][ T1363] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 68.437952][ T1394] syz.3.328 (1394): attempted to duplicate a private mapping with mremap. This is not supported. [ 68.498508][ T1403] raw_sendmsg: syz.3.332 forgot to set AF_INET. Fix it! [ 68.519417][ T1407] /dev/rnullb0: Can't lookup blockdev [ 68.569363][ T1363] usb 2-1: Using ep0 maxpacket: 16 [ 68.575863][ T1363] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.586063][ T1363] usb 2-1: config 0 has no interfaces? [ 68.593103][ T1363] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 68.605446][ T1363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.613918][ T1363] usb 2-1: Product: syz [ 68.618211][ T1363] usb 2-1: Manufacturer: syz [ 68.622897][ T1363] usb 2-1: SerialNumber: syz [ 68.628678][ T1363] usb 2-1: config 0 descriptor?? [ 68.684116][ T36] audit: type=1400 audit(1760296853.620:303): avc: denied { map } for pid=1416 comm="syz.2.338" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.708597][ T36] audit: type=1400 audit(1760296853.620:304): avc: denied { read write } for pid=1416 comm="syz.2.338" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.851066][ T1385] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.860620][ T36] audit: type=1400 audit(1760296853.789:305): avc: denied { compute_member } for pid=1384 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.076969][ T1435] netlink: 'syz.3.344': attribute type 27 has an invalid length. [ 69.260619][ T36] audit: type=1400 audit(1760296854.154:306): avc: denied { accept } for pid=1446 comm="syz.3.348" path="socket:[9002]" dev="sockfs" ino=9002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.381401][ T1458] syz.0.352 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.848258][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 70.009247][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 70.015610][ T1477] fuse: Bad value for 'fd' [ 70.031791][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 70.051028][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.070179][ T10] usb 3-1: config 0 descriptor?? [ 70.161157][ T36] audit: type=1400 audit(1760296855.008:307): avc: denied { setopt } for pid=1490 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.180172][ T1493] fuse: Bad value for 'rootmode' [ 70.505719][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 70.519738][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 70.536563][ T10] usb 3-1: USB disconnect, device number 12 [ 71.071512][ T1518] devpts: called with bogus options [ 71.155690][ T1522] rust_binder: Write failure EFAULT in pid:154 [ 71.194864][ T36] audit: type=1400 audit(1760296855.975:308): avc: denied { create } for pid=1526 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.334961][ T1531] incfs: Options parsing error. -22 [ 71.340322][ T1531] incfs: mount failed -22 [ 71.353024][ T1531] rust_binder: Write failure EFAULT in pid:159 [ 71.481327][ T1534] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 71.517953][ T36] audit: type=1400 audit(1760296856.275:309): avc: denied { create } for pid=1537 comm="syz.2.379" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.557377][ T36] audit: type=1400 audit(1760296856.303:310): avc: denied { mounton } for pid=1537 comm="syz.2.379" path="/57/file0" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.753523][ T1556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'. [ 71.764047][ T1558] tmpfs: Unsupported parameter 'mpol' [ 71.913262][ T1363] usb 2-1: USB disconnect, device number 8 [ 72.026306][ T1579] bridge0: entered allmulticast mode [ 72.032117][ T1579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 72.041238][ T1579] bridge_slave_1: left allmulticast mode [ 72.049262][ T1581] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 72.052254][ T1579] bridge_slave_1: left promiscuous mode [ 72.057053][ T1336] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 72.063223][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.070001][ T1581] rust_binder: 282: no such ref 2 [ 72.098556][ T1579] bridge_slave_0: left allmulticast mode [ 72.104386][ T1579] bridge_slave_0: left promiscuous mode [ 72.110370][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.122303][ T1579] bridge0 (unregistering): left allmulticast mode [ 72.236592][ T1336] usb 3-1: Using ep0 maxpacket: 16 [ 72.243645][ T1336] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 72.255481][ T1336] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 72.266786][ T1336] usb 3-1: config 1 interface 0 has no altsetting 0 [ 72.275212][ T1336] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.40 [ 72.284563][ T1336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.292720][ T1336] usb 3-1: Product: 䀊 [ 72.296975][ T1336] usb 3-1: Manufacturer: 罈⮿ꇚ헝ⓠ菺ᾔ䷫㜡궏临蹉듢ᨘ歱䣒옘㡒䌻춵㽷步쩓䞸䝳퍸曯鰳䙶밸ኝ蓕單ྒﻍ螵췦騧 [ 72.312228][ T1336] usb 3-1: SerialNumber: ὓ壜᫵ȶ롒㺚鯟你敩妉鞫ॄ鼩鎓軱鬑ᅾꢒ륋꟨ఛ踉䅺﷮잺싛۰ⶶ돺豨莇釫Гޒ₶氘뽃枳덍㩤齓嶪鵑骎쀰♞皣㤀뺨ኘ◪㪅裃ﰚ鉧묣ㇻ쭺匉蔻fi짮癉䋛등쟵듈坐嚴 [ 72.369071][ T1616] 9pnet_fd: Insufficient options for proto=fd [ 72.491272][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 72.555759][ T1571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.564534][ T1571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.577416][ T1336] usbhid 3-1:1.0: can't add hid device: -71 [ 72.583558][ T1336] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 72.594578][ T1336] usb 3-1: USB disconnect, device number 13 [ 72.652269][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.663288][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 72.669921][ T10] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 72.679084][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.687941][ T10] usb 2-1: config 0 descriptor?? [ 72.769615][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 72.769632][ T36] audit: type=1400 audit(1760296857.457:317): avc: denied { create } for pid=1628 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 72.796423][ T36] audit: type=1400 audit(1760296857.457:318): avc: denied { sys_admin } for pid=1628 comm="syz.3.409" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 72.818183][ T36] audit: type=1400 audit(1760296857.467:319): avc: denied { associate } for pid=1632 comm="syz.3.409" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 72.839869][ T36] audit: type=1400 audit(1760296857.495:320): avc: denied { remount } for pid=1628 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 72.917722][ T10] nintendo 0003:057E:2009.0002: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 72.953374][ T1639] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 72.970328][ T36] audit: type=1400 audit(1760296857.636:321): avc: denied { accept } for pid=1638 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.003000][ T10] nintendo 0003:057E:2009.0002: Failed to get joycon info; ret=-38 [ 73.010965][ T10] nintendo 0003:057E:2009.0002: Failed to retrieve controller info; ret=-38 [ 73.024258][ T10] nintendo 0003:057E:2009.0002: Failed to initialize controller; ret=-38 [ 73.070532][ T10] nintendo 0003:057E:2009.0002: probe - fail = -38 [ 73.088554][ T10] nintendo 0003:057E:2009.0002: probe with driver nintendo failed with error -38 [ 73.115807][ T10] usb 2-1: USB disconnect, device number 9 [ 73.162064][ T1655] FAT-fs (rnullb0): bogus number of reserved sectors [ 73.173416][ T1655] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 73.195304][ T1655] rust_binder: Error while translating object. [ 73.195448][ T1655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.201891][ T1655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 73.243807][ T1661] rust_binder: Error while translating object. [ 73.253045][ T1661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.259300][ T1661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 73.383680][ T1666] rust_binder: Write failure EFAULT in pid:313 [ 73.417226][ T36] audit: type=1400 audit(1760296858.058:322): avc: denied { setattr } for pid=1671 comm="syz.1.422" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.448561][ T36] audit: type=1400 audit(1760296858.077:323): avc: denied { getopt } for pid=1673 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.471780][ T1363] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 73.517937][ T1680] netlink: 182 bytes leftover after parsing attributes in process `syz.1.426'. [ 73.520177][ T1679] rust_binder: Write failure EFAULT in pid:317 [ 73.527190][ T1680] netlink: 182 bytes leftover after parsing attributes in process `syz.1.426'. [ 73.542925][ T1680] netlink: 182 bytes leftover after parsing attributes in process `syz.1.426'. [ 73.552387][ T1680] netlink: 182 bytes leftover after parsing attributes in process `syz.1.426'. [ 73.561608][ T1680] netlink: 182 bytes leftover after parsing attributes in process `syz.1.426'. [ 73.570740][ T1680] netlink: 182 bytes leftover after parsing attributes in process `syz.1.426'. [ 73.579798][ T1680] netlink: 182 bytes leftover after parsing attributes in process `syz.1.426'. [ 73.588971][ T1680] netlink: 182 bytes leftover after parsing attributes in process `syz.1.426'. [ 73.611313][ T1683] binder: Unknown parameter 'fscontext?}' [ 73.631601][ T1363] usb 3-1: Using ep0 maxpacket: 32 [ 73.638418][ T1363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.655010][ T1363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.664998][ T1363] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 73.675959][ T1363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.682340][ T1688] rust_binder: Error while translating object. [ 73.684095][ T1688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.690519][ T1688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:325 [ 73.692417][ T1363] usb 3-1: config 0 descriptor?? [ 73.718678][ T1363] hub 3-1:0.0: USB hub found [ 73.770157][ T1705] netlink: 'syz.3.435': attribute type 4 has an invalid length. [ 73.779708][ T1705] netlink: 'syz.3.435': attribute type 4 has an invalid length. [ 73.851550][ T1719] overlayfs: failed to clone upperpath [ 73.931513][ T1363] hub 3-1:0.0: 1 port detected [ 74.047644][ T1336] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 74.060451][ T36] audit: type=1400 audit(1760296858.668:324): avc: denied { bind } for pid=1723 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.079956][ T36] audit: type=1400 audit(1760296858.668:325): avc: denied { write } for pid=1723 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.155359][ T1363] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 74.162148][ T1363] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 74.171394][ T1363] usbhid 3-1:0.0: can't add hid device: -71 [ 74.177655][ T1363] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 74.207092][ T1336] usb 2-1: Using ep0 maxpacket: 16 [ 74.213193][ T1363] usb 3-1: USB disconnect, device number 14 [ 74.221668][ T1336] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 33620, setting to 1024 [ 74.236624][ T1336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.243626][ T1336] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 74.252917][ T1336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.263777][ T1336] usb 2-1: config 0 descriptor?? [ 74.320460][ T1730] netlink: 'syz.0.445': attribute type 27 has an invalid length. [ 74.708060][ T1336] wacom 0003:056A:00CC.0003: hidraw0: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.1-1/input0 [ 74.734334][ T1734] input: syz1 as /devices/virtual/input/input11 [ 74.830450][ T36] audit: type=1400 audit(1760296859.390:326): avc: denied { read } for pid=1735 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.925359][ T1707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=1707 comm=syz.1.436 [ 75.002350][ T1744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.020638][ T1744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.062958][ T1748] netlink: 'syz.0.450': attribute type 27 has an invalid length. [ 75.101273][ T1748] veth0_vlan: left promiscuous mode [ 75.107063][ T1748] veth0_vlan: entered promiscuous mode [ 75.116425][ T1748] veth1_macvtap: left promiscuous mode [ 75.123476][ T1748] veth1_macvtap: entered promiscuous mode [ 76.072173][ T413] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 76.233071][ T413] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.244055][ T413] usb 3-1: config 0 interface 0 has no altsetting 0 [ 76.251062][ T413] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 76.260183][ T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.269545][ T413] usb 3-1: config 0 descriptor?? [ 76.703911][ T413] hid (null): invalid report_count 22533 [ 76.711451][ T413] nintendo 0003:057E:2009.0004: invalid report_count 22533 [ 76.718967][ T413] nintendo 0003:057E:2009.0004: item 0 2 1 9 parsing failed [ 76.726538][ T413] nintendo 0003:057E:2009.0004: HID parse failed [ 76.739136][ T413] nintendo 0003:057E:2009.0004: probe - fail = -22 [ 76.745922][ T413] nintendo 0003:057E:2009.0004: probe with driver nintendo failed with error -22 [ 76.918601][ T1785] /dev/rnullb0: Can't open blockdev [ 76.924428][ T1363] usb 3-1: USB disconnect, device number 15 [ 76.991765][ T413] usb 2-1: USB disconnect, device number 10 [ 77.070454][ T1813] rust_binder: Error while translating object. [ 77.070489][ T1813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.076935][ T1813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 77.578555][ T1843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.596790][ T1843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.684879][ T1854] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 77.712243][ T329] syzkaller0: tun_net_xmit 76 [ 77.715518][ T1858] syzkaller0: create flow: hash 2003729455 index 0 [ 77.720496][ T329] syzkaller0: tun_net_xmit 48 [ 77.737429][ T1336] syzkaller0: tun_net_xmit 76 [ 77.778665][ T1858] syzkaller0 (unregistered): delete flow: hash 2003729455 index 0 [ 77.830632][ T1363] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 77.991710][ T1363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 78.002728][ T1363] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 78.015817][ T1363] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 78.024967][ T1363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.033962][ T1363] usb 3-1: config 0 descriptor?? [ 78.039766][ T1842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.048272][ T1363] usbhid 3-1:0.0: can't add hid device: -22 [ 78.054275][ T1363] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 78.062288][ T1336] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 78.236730][ T1336] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 78.245906][ T1336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.254737][ T1336] usb 2-1: config 0 descriptor?? [ 78.261735][ T1363] usb 3-1: USB disconnect, device number 16 [ 78.543326][ T1890] netlink: 'syz.0.503': attribute type 29 has an invalid length. [ 78.552815][ T1892] netlink: 'syz.0.503': attribute type 29 has an invalid length. [ 78.628930][ T1895] 9pnet_fd: Insufficient options for proto=fd [ 78.688280][ T1336] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 78.698419][ T1336] asix 2-1:0.0: probe with driver asix failed with error -32 [ 78.785297][ T1903] overlayfs: failed to clone lowerpath [ 78.791628][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 78.791645][ T36] audit: type=1400 audit(1760296863.106:335): avc: denied { listen } for pid=1902 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.859181][ T36] audit: type=1400 audit(1760296863.172:336): avc: denied { write } for pid=1914 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.890741][ T36] audit: type=1400 audit(1760296863.190:337): avc: denied { ioctl } for pid=1914 comm="syz.2.510" path="socket:[11152]" dev="sockfs" ino=11152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.173417][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 79.213206][ T1927] sock: sock_timestamping_bind_phc: sock not bind to device [ 79.333288][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 79.339839][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.350011][ T10] usb 3-1: config 0 has no interfaces? [ 79.356966][ T10] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 79.366283][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.374383][ T10] usb 3-1: Product: syz [ 79.378578][ T10] usb 3-1: Manufacturer: syz [ 79.383189][ T10] usb 3-1: SerialNumber: syz [ 79.388504][ T10] usb 3-1: config 0 descriptor?? [ 79.457566][ T36] audit: type=1400 audit(1760296863.725:338): avc: denied { create } for pid=1928 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 79.609120][ T1915] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.619859][ T1915] can0: slcan on ptm0. [ 79.624870][ T1336] usb 3-1: USB disconnect, device number 17 [ 79.631550][ T36] audit: type=1400 audit(1760296863.894:339): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.653744][ T36] audit: type=1400 audit(1760296863.894:340): avc: denied { read } for pid=149 comm="dhcpcd" name="n17" dev="tmpfs" ino=1759 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.675534][ T36] audit: type=1400 audit(1760296863.894:341): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=1759 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.698705][ T36] audit: type=1400 audit(1760296863.894:342): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=1759 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.718696][ T1914] can0 (unregistered): slcan off ptm0. [ 79.727835][ T36] audit: type=1400 audit(1760296863.941:343): avc: denied { read } for pid=1935 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.751010][ T36] audit: type=1400 audit(1760296863.941:344): avc: denied { open } for pid=1935 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.229838][ T1983] /dev/sr0: Can't lookup blockdev [ 80.236409][ T1983] /dev/sr0: Can't lookup blockdev [ 80.291943][ T1994] /dev/rnullb0: Can't lookup blockdev [ 80.314091][ T1996] 9pnet_fd: Insufficient options for proto=fd [ 80.483071][ T2002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 80.483111][ T2002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:212 [ 80.653879][ T2012] __nla_validate_parse: 28 callbacks suppressed [ 80.653898][ T2012] netlink: 57 bytes leftover after parsing attributes in process `syz.2.533'. [ 80.704304][ T2015] tipc: Started in network mode [ 80.709420][ T2015] tipc: Node identity aaae3db04243, cluster identity 4711 [ 80.716971][ T2015] tipc: Enabled bearer , priority 10 [ 80.724860][ T2015] rust_binder: Write failure EFAULT in pid:224 [ 80.741784][ T2018] can0: slcan on ttyS3. [ 80.775645][ T2018] can0 (unregistered): slcan off ttyS3. [ 80.781410][ T2018] Falling back ldisc for ttyS3. [ 81.008170][ T1336] usb 2-1: USB disconnect, device number 11 [ 81.028547][ T2054] fuseblk: Unknown parameter '0x0000000000000005' [ 81.064540][ T2060] netlink: 'syz.3.541': attribute type 4 has an invalid length. [ 81.229864][ T2065] 9pnet_fd: Insufficient options for proto=fd [ 81.239655][ T2065] tmpfs: Unknown parameter 'id' [ 81.246155][ T2065] overlayfs: failed to resolve './file1': -2 [ 81.526029][ T2090] overlayfs: failed to resolve './file0': -2 [ 81.533236][ T2088] overlayfs: overlapping lowerdir path [ 81.667644][ T2099] __vm_enough_memory: pid: 2099, comm: syz.2.555, bytes: 18014402804453376 not enough memory for the allocation [ 81.682318][ T2103] __vm_enough_memory: pid: 2103, comm: syz.2.555, bytes: 18014402804453376 not enough memory for the allocation [ 81.781697][ T2109] netlink: 'syz.2.557': attribute type 27 has an invalid length. [ 81.880407][ T413] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 81.912392][ T10] tipc: Node number set to 3907861936 [ 82.041359][ T413] usb 2-1: No LPM exit latency info found, disabling LPM. [ 82.049570][ T413] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 82.058652][ T413] usb 2-1: config 1 has no interface number 1 [ 82.064859][ T413] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 82.078335][ T413] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 82.091153][ T413] usb 2-1: string descriptor 0 read error: -22 [ 82.098082][ T413] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.107163][ T413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.117252][ T413] usb 2-1: low speed audio streaming not supported [ 82.232146][ T1336] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 82.276805][ T2116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.560'. [ 82.315948][ T2120] 9pnet_fd: Insufficient options for proto=fd [ 82.334738][ T2096] rust_binder: Error while translating object. [ 82.334799][ T2096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 82.341716][ T2096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:394 [ 82.351927][ T413] usb 2-1: USB disconnect, device number 12 [ 82.391917][ T1336] usb 3-1: Using ep0 maxpacket: 8 [ 82.403912][ T1336] usb 3-1: config 128 has an invalid interface number: 89 but max is 0 [ 82.420792][ T1336] usb 3-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 82.431536][ T1336] usb 3-1: config 128 has an invalid descriptor of length 100, skipping remainder of the config [ 82.442723][ T1336] usb 3-1: config 128 has no interface number 0 [ 82.449623][ T1336] usb 3-1: config 128 interface 89 altsetting 9 endpoint 0x8E has an invalid bInterval 94, changing to 10 [ 82.461345][ T1336] usb 3-1: config 128 interface 89 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.480215][ T1336] usb 3-1: config 128 interface 89 has no altsetting 0 [ 82.489674][ T1336] usb 3-1: string descriptor 0 read error: -22 [ 82.496013][ T1336] usb 3-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=99.4d [ 82.508663][ T1336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.742364][ T1336] usb 3-1: USB disconnect, device number 18 [ 82.915117][ T2164] netlink: 188 bytes leftover after parsing attributes in process `syz.1.576'. [ 82.924660][ T2164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 83.314611][ T2193] netlink: 'syz.3.585': attribute type 4 has an invalid length. [ 83.322350][ T2193] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.585'. [ 83.377367][ T2201] erofs: dax options not supported [ 83.585738][ T413] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 83.763367][ T413] usb 3-1: Using ep0 maxpacket: 32 [ 83.770800][ T413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 83.782273][ T413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.792154][ T413] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.805660][ T413] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 83.806524][ T2232] SELinux: policydb magic number 0x20766264 does not match expected magic number 0xf97cff8c [ 83.814785][ T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.834342][ T413] usb 3-1: config 0 descriptor?? [ 83.841651][ T2232] SELinux: failed to load policy [ 84.270526][ T413] kye 0003:0458:5016.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 84.310315][ T413] kye 0003:0458:5016.0005: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 84.365838][ T413] kye 0003:0458:5016.0005: tablet-enabling feature report not found [ 84.392824][ T413] kye 0003:0458:5016.0005: tablet enabling failed [ 84.516232][ T2273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2273 comm=syz.3.612 [ 84.929282][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 84.929302][ T36] audit: type=1400 audit(1760296868.867:367): avc: denied { mounton } for pid=2277 comm="syz.1.614" path="/proc/422/task" dev="proc" ino=11612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 85.030143][ T10] usb 3-1: USB disconnect, device number 19 [ 85.179097][ T2302] syzkaller0: entered promiscuous mode [ 85.184834][ T2302] syzkaller0: entered allmulticast mode [ 85.191565][ T12] syzkaller0: tun_net_xmit 48 [ 85.193674][ T2302] syzkaller0: create flow: hash 2003729455 index 0 [ 85.227427][ T413] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 85.258518][ T2302] syzkaller0 (unregistered): delete flow: hash 2003729455 index 0 [ 85.285615][ T36] audit: type=1400 audit(1760296869.195:368): avc: denied { relabelfrom } for pid=2307 comm="syz.3.621" name="NETLINK" dev="sockfs" ino=12827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.314960][ T36] audit: type=1400 audit(1760296869.195:369): avc: denied { relabelto } for pid=2307 comm="syz.3.621" name="NETLINK" dev="sockfs" ino=12827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 85.397923][ T413] usb 2-1: Using ep0 maxpacket: 8 [ 85.404385][ T413] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 85.415959][ T413] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 85.427167][ T413] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 85.439418][ T413] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 85.448806][ T413] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 85.456971][ T413] usb 2-1: Manufacturer: syz [ 85.466780][ T413] hub 2-1:32.0: Invalid hub with more than one config or interface [ 85.475038][ T413] hub 2-1:32.0: probe with driver hub failed with error -22 [ 85.681325][ T36] audit: type=1400 audit(1760296869.570:370): avc: denied { write } for pid=2287 comm="syz.1.616" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.706923][ T413] usb 2-1: USB disconnect, device number 13 [ 85.736941][ T36] audit: type=1400 audit(1760296869.570:371): avc: denied { remove_name } for pid=2287 comm="syz.1.616" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.766424][ T36] audit: type=1400 audit(1760296869.570:372): avc: denied { unlink } for pid=2287 comm="syz.1.616" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.125053][ T2326] !@: renamed from xfrm0 [ 86.281063][ T2330] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 86.323607][ T2334] rust_binder: Got transaction with invalid offset. [ 86.323655][ T2334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.339102][ T1345] udevd[1345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.367105][ T2334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:440 [ 86.733317][ T2356] rust_binder: Error while translating object. [ 86.742741][ T2356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.749185][ T2356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 87.103614][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 87.274159][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 87.280432][ T10] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.290561][ T10] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.300438][ T10] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.313638][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 87.321710][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 87.330804][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.338883][ T10] usb 2-1: Product: syz [ 87.343141][ T10] usb 2-1: Manufacturer: syz [ 87.347772][ T10] usb 2-1: SerialNumber: syz [ 87.510365][ T2383] netlink: 'syz.2.650': attribute type 4 has an invalid length. [ 87.518384][ T2382] netlink: 'syz.2.650': attribute type 4 has an invalid length. [ 87.542476][ T2386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 87.569435][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 87.678718][ T36] audit: type=1400 audit(1760296871.437:373): avc: denied { search } for pid=2400 comm="syz.0.656" name="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.685581][ T2402] overlayfs: failed to clone lowerpath [ 87.701098][ T2401] overlayfs: failed to clone lowerpath [ 87.706700][ T36] audit: type=1400 audit(1760296871.437:374): avc: denied { write } for pid=2400 comm="syz.0.656" name="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.784806][ T1336] usb 2-1: USB disconnect, device number 14 [ 87.925928][ T36] audit: type=1400 audit(1760296871.681:375): avc: denied { bind } for pid=2403 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.933592][ T2406] rust_binder: Write failure EFAULT in pid:258 [ 88.004992][ T2364] usblp0: removed [ 88.035069][ T36] audit: type=1400 audit(1760296871.775:376): avc: denied { mounton } for pid=2411 comm="syz.2.660" path="/89/file0" dev="tmpfs" ino=499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.077982][ T2417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 88.147891][ T2426] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 88.147923][ T2426] rust_binder: Error while translating object. [ 88.156915][ T2426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.163373][ T2426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:264 [ 88.277880][ T2438] overlayfs: conflicting options: userxattr,redirect_dir=on [ 88.474924][ T2442] 9pnet_fd: Insufficient options for proto=fd [ 88.579563][ T2458] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 88.586805][ T2458] rust_binder: Write failure EINVAL in pid:460 [ 88.593705][ T2460] netlink: 'syz.3.675': attribute type 28 has an invalid length. [ 88.883785][ T1336] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 89.033036][ T1336] usb 2-1: device descriptor read/64, error -71 [ 89.059433][ T2479] /dev/loop0: Can't lookup blockdev [ 89.246242][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 89.288885][ T1336] usb 2-1: device descriptor read/64, error -71 [ 89.406157][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 89.412807][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.423935][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.433793][ T45] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 89.458404][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.468440][ T45] usb 3-1: config 0 descriptor?? [ 89.544715][ T1336] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 89.683348][ T1336] usb 2-1: device descriptor read/64, error -71 [ 89.907348][ T45] hid-multitouch 0003:0EEF:72C4.0006: item fetching failed at offset 4/5 [ 89.916246][ T45] hid-multitouch 0003:0EEF:72C4.0006: probe with driver hid-multitouch failed with error -22 [ 89.939135][ T1336] usb 2-1: device descriptor read/64, error -71 [ 90.056558][ T1336] usb usb2-port1: attempt power cycle [ 90.120637][ T45] usb 3-1: USB disconnect, device number 20 [ 90.418890][ T1336] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 90.441354][ T1336] usb 2-1: device descriptor read/8, error -71 [ 90.579941][ T1336] usb 2-1: device descriptor read/8, error -71 [ 90.597569][ T2528] overlayfs: failed to clone upperpath [ 90.720614][ T2533] fuse: Bad value for 'fd' [ 90.751271][ T2541] usb usb9: usbfs: process 2541 (syz.2.701) did not claim interface 6 before use [ 90.767178][ T2543] fuse: Bad value for 'fd' [ 90.775377][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 90.775396][ T36] audit: type=1400 audit(1760296874.345:379): avc: denied { watch_reads } for pid=2542 comm="syz.0.702" path="/200" dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.829286][ T2548] binder: Unknown parameter '/dev/fuse' [ 90.834995][ T1336] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 90.857169][ T1336] usb 2-1: device descriptor read/8, error -71 [ 90.995599][ T1336] usb 2-1: device descriptor read/8, error -71 [ 91.111885][ T1336] usb usb2-port1: unable to enumerate USB device [ 91.165048][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 91.324950][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 91.331425][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.342572][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.352414][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.365975][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.375222][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.389193][ T45] usb 3-1: config 0 descriptor?? [ 91.404395][ T2570] overlayfs: failed to resolve './file0': -2 [ 91.481056][ T2588] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.521218][ T36] audit: type=1400 audit(1760296875.049:380): avc: denied { mount } for pid=2589 comm="syz.0.716" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 91.575888][ T2600] 9pnet_fd: Insufficient options for proto=fd [ 91.828040][ T45] microsoft 0003:045E:07DA.0007: unknown main item tag 0x2 [ 91.837781][ T45] microsoft 0003:045E:07DA.0007: unknown main item tag 0xe [ 91.845130][ T45] microsoft 0003:045E:07DA.0007: unknown main item tag 0xd [ 91.852562][ T45] microsoft 0003:045E:07DA.0007: item fetching failed at offset 32/34 [ 91.873912][ T45] microsoft 0003:045E:07DA.0007: parse failed [ 91.880217][ T45] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 92.050987][ T2556] rust_binder: 287: no such ref 0 [ 92.056151][ T2556] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 92.063241][ T2556] rust_binder: 287: no such ref 2 [ 92.068334][ T2556] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 92.068824][ T414] usb 3-1: USB disconnect, device number 21 [ 92.134227][ T2620] rust_binder: 477: no such ref 0 [ 92.139594][ T2619] rust_binder: 477: no such ref 2 [ 92.157694][ T2622] SELinux: policydb version 2023300901 does not match my version range 15-33 [ 92.166842][ T2622] SELinux: failed to load policy [ 92.186728][ T36] audit: type=1400 audit(1760296875.668:381): avc: denied { setopt } for pid=2629 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.218851][ T2634] netlink: 44 bytes leftover after parsing attributes in process `syz.3.730'. [ 92.228404][ T2634] netlink: 35 bytes leftover after parsing attributes in process `syz.3.730'. [ 92.237377][ T2634] netlink: 'syz.3.730': attribute type 6 has an invalid length. [ 92.245279][ T2634] netlink: 'syz.3.730': attribute type 5 has an invalid length. [ 92.257667][ T2634] netlink: 35 bytes leftover after parsing attributes in process `syz.3.730'. [ 92.282145][ T36] audit: type=1400 audit(1760296875.762:382): avc: denied { getopt } for pid=2638 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.361222][ T2654] input: syz1 as /devices/virtual/input/input13 [ 92.646798][ T45] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 92.696089][ T2673] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.704183][ T2673] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 92.712819][ T2673] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.720912][ T2673] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 92.796083][ T45] usb 2-1: device descriptor read/64, error -71 [ 92.980027][ T2688] overlayfs: failed to clone upperpath [ 93.051907][ T45] usb 2-1: device descriptor read/64, error -71 [ 93.318393][ T45] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 93.400996][ T36] audit: type=1400 audit(1760296876.803:383): avc: denied { create } for pid=2709 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 93.467614][ T45] usb 2-1: device descriptor read/64, error -71 [ 93.734117][ T45] usb 2-1: device descriptor read/64, error -71 [ 93.862152][ T45] usb usb2-port1: attempt power cycle [ 94.224478][ T45] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 94.246909][ T45] usb 2-1: device descriptor read/8, error -71 [ 94.385598][ T45] usb 2-1: device descriptor read/8, error -71 [ 94.409624][ T36] audit: type=1400 audit(1760296877.760:384): avc: denied { create } for pid=2758 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 94.640232][ T45] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 94.662611][ T45] usb 2-1: device descriptor read/8, error -71 [ 94.801361][ T45] usb 2-1: device descriptor read/8, error -71 [ 94.917970][ T45] usb usb2-port1: unable to enumerate USB device [ 94.998460][ T2781] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 95.035462][ T2790] netlink: 'syz.3.783': attribute type 27 has an invalid length. [ 95.156963][ T2812] fuseblk: Bad value for 'fd' [ 95.158658][ T2814] tipc: Enabling of bearer rejected, failed to enable media [ 95.210292][ T2826] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 95.219704][ T2826] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 95.231564][ T2826] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 95.332476][ T2847] overlayfs: failed to clone upperpath [ 95.338353][ T2846] overlayfs: failed to clone upperpath [ 95.339792][ T2848] overlay: Bad value for 'nfs_export' [ 95.623825][ T36] audit: type=1400 audit(1760296878.895:385): avc: denied { bind } for pid=2855 comm="syz.0.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.651777][ T2858] netlink: 'syz.0.808': attribute type 46 has an invalid length. [ 95.673803][ T36] audit: type=1400 audit(1760296878.942:386): avc: denied { mounton } for pid=2859 comm="syz.0.810" path="/file0" dev="ramfs" ino=14706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 95.831578][ T36] audit: type=1400 audit(1760296879.092:387): avc: denied { read } for pid=2893 comm="syz.2.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.792311][ T36] audit: type=1400 audit(1760296879.983:388): avc: denied { sqpoll } for pid=2923 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.842946][ T2927] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 96.854019][ T2927] tipc: Started in network mode [ 96.859033][ T2927] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 96.868175][ T2927] tipc: Enabling of bearer rejected, failed to enable media [ 97.051426][ T2931] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 97.190292][ T2939] fuse: Bad value for 'fd' [ 97.299903][ T2945] overlayfs: missing 'lowerdir' [ 97.363308][ T2945] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 97.526263][ T2960] fuse: Bad value for 'fd' [ 97.550893][ T2964] netlink: 'syz.0.845': attribute type 10 has an invalid length. [ 97.558972][ T2963] mmap: syz.0.845 (2963): VmData 29208576 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 97.571404][ T2964] netlink: 17 bytes leftover after parsing attributes in process `syz.0.845'. [ 97.658944][ T2971] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 97.673225][ T2935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.673263][ T2935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:521 [ 97.729572][ T2973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 97.749723][ T2976] input: syz1 as /devices/virtual/input/input14 [ 97.801007][ T2982] binder: Bad value for 'stats' [ 97.811884][ T2982] ------------[ cut here ]------------ [ 97.817473][ T2982] WARNING: CPU: 1 PID: 2982 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 97.826933][ T2982] Modules linked in: [ 97.830945][ T2982] CPU: 1 UID: 0 PID: 2982 Comm: syz.1.852 Not tainted syzkaller #0 1f5813a52420658c51670c32aa0b3f2b32c06bdf [ 97.842483][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.852613][ T2982] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 97.858560][ T2982] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 82 0e ee 05 00 0f 85 be 00 00 00 c6 05 75 0e ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 97.878243][ T2982] RSP: 0018:ffffc900102e7860 EFLAGS: 00010246 [ 97.884389][ T2982] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 97.892410][ T2982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900102e7918 [ 97.900418][ T2982] RBP: ffffc900102e7988 R08: ffffc900102e7917 R09: 0000000000000000 [ 97.908469][ T2982] R10: ffffc900102e7900 R11: fffff5200205cf23 R12: ffffc900102e78a0 [ 97.916583][ T2982] R13: dffffc0000000000 R14: 1ffff9200205cf10 R15: 0000000000000000 [ 97.924622][ T2982] FS: 00007fed0e5df6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 97.933599][ T2982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.940243][ T2982] CR2: 0000200000001000 CR3: 0000000113a60000 CR4: 00000000003526b0 [ 97.948280][ T2982] Call Trace: [ 97.951678][ T2982] [ 97.954640][ T2982] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.960870][ T2982] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 97.966690][ T2982] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 97.972414][ T2982] ___kmalloc_large_node+0x81/0x220 [ 97.977695][ T2982] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 97.983376][ T2982] __kmalloc_large_node_noprof+0x1e/0xe0 [ 97.989077][ T2982] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 97.994752][ T2982] __kmalloc_noprof+0x336/0x530 [ 97.999697][ T2982] ? __cfi_lockref_get+0x10/0x10 [ 98.004683][ T2982] incfs_realloc_mount_info+0xa7/0x4d0 [ 98.010337][ T2982] ? incfs_add_sysfs_node+0x118/0x240 [ 98.015752][ T2982] incfs_alloc_mount_info+0x479/0x600 [ 98.021206][ T2982] incfs_mount_fs+0x3ca/0x960 [ 98.025932][ T2982] ? __cfi_incfs_mount_fs+0x10/0x10 [ 98.031219][ T2982] ? vfs_parse_fs_string+0x102/0x170 [ 98.036642][ T2982] ? selinux_capable+0x38/0x50 [ 98.041494][ T2982] legacy_get_tree+0x106/0x1b0 [ 98.046292][ T2982] ? __cfi_incfs_mount_fs+0x10/0x10 [ 98.051573][ T2982] vfs_get_tree+0x9e/0x290 [ 98.056037][ T2982] do_new_mount+0x251/0xb40 [ 98.060570][ T2982] ? security_capable+0xcf/0xf0 [ 98.065521][ T2982] path_mount+0x688/0x1050 [ 98.069996][ T2982] ? putname+0x113/0x150 [ 98.074364][ T2982] __se_sys_mount+0x2bd/0x480 [ 98.079074][ T2982] ? __x64_sys_mount+0xf0/0xf0 [ 98.083920][ T2982] ? __kasan_check_write+0x18/0x20 [ 98.089177][ T2982] ? fpregs_restore_userregs+0x11d/0x260 [ 98.094903][ T2982] __x64_sys_mount+0xc3/0xf0 [ 98.099535][ T2982] x64_sys_call+0x2021/0x2ee0 [ 98.104274][ T2982] do_syscall_64+0x58/0xf0 [ 98.108782][ T2982] ? clear_bhb_loop+0x50/0xa0 [ 98.113588][ T2982] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.119563][ T2982] RIP: 0033:0x7fed0d78eec9 [ 98.124028][ T2982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.143991][ T2982] RSP: 002b:00007fed0e5df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.152486][ T2982] RAX: ffffffffffffffda RBX: 00007fed0d9e5fa0 RCX: 00007fed0d78eec9 [ 98.160614][ T2982] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 98.168625][ T2982] RBP: 00007fed0d811f91 R08: 00002000000002c0 R09: 0000000000000000 [ 98.176672][ T2982] R10: 0000000001200000 R11: 0000000000000246 R12: 0000000000000000 [ 98.184739][ T2982] R13: 00007fed0d9e6038 R14: 00007fed0d9e5fa0 R15: 00007fff88ad2ee8 [ 98.192768][ T2982] [ 98.195812][ T2982] ---[ end trace 0000000000000000 ]--- [ 98.201436][ T2982] incfs: Error allocating mount info. -12 [ 98.207297][ T2982] incfs: mount failed -12