last executing test programs: 2.361230268s ago: executing program 0 (id=1084): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2.3345777s ago: executing program 0 (id=1085): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$VT_DISALLOCATE(r0, 0x5608) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, {0xa, 0x4e20, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}, 0x1, {[0xc0000000, 0x4, 0x2, 0x2, 0x400, 0x3, 0x8, 0xb]}}, 0x5c) ioctl$TCSBRKP(r0, 0x5425, 0x7f) fcntl$setflags(r0, 0x2, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r0}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x81) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0xe, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x6, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) r3 = dup2(r0, r0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "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", "26aea8e88a463e72a5de27eacb8ed5a515cbf19622556de42877fd92a940d1960777e1b00037481b0cc49b6157d8be64608bf99adfb468d04a8ab5e80077f2dbdcc49f75da4757c4dede65553f0bdba35fab7269ade05a45bac3a0e1c7fa2ceb18437b1ee68dfca98133c12912542301ea6f17023cbbc41f412842e40a1d53ca37e1d09561d5856434304ab29147cf9106abdda68b5fffa277b56f4cb2f2644c7f810d7a325cb9b7646e3255e0e652ff8988572e3b7dbe4c8f34f9ef3af82f813c14215e65da39bb197e86bb567c5a61e8b1072929d7741cfc4a11d3d86b03613e483b68105014e31fc6bd249c8f752e40701533af734d88a8d579f9347ff72557137e20f463034a8de1b72190d00b8a38c50221ec6170e64c6656a189e90470df70f8e58962a74eabf373f53a6adb06d4ae2cc0a1dffbaa1fb4aab32f6454f347c12bb783ff8b45bb2705b69bd347e934c9db76b4011a829de9be64756194793248e2c8e3944d56fa30e21aac251bc9d04b6b7f58e33f775143141b6325a29dda2ca0a2f1f519d6eb20d5ca4b344e399c1489be409a11c58bf2354b0e4572f29857e9cf03d43dcd1faa48f8d5c9ea62cc07fe5d0c76c91da785cd31d8c11780792b3caf671fe73556694d8c8e5f43f431740d0a4688bef79ebeb46da92986b6569fbbda1d5d6842c4cd32ba385ab00797b08fd6cf7bb8e267eea3d1dc2c20bc48e79b3e95048734ea48606ba4c59990ccdff9d8918dd4073f56c4e957f4aff56fd437c644d9c089c8818d2360840bb97bd75bff92ffd8d0222834dab24e27fd62ea1a4f20d57e9b0ea4a5b9510f47746d68bcca888dcb0d7005011475182b6e98ddb266bdf373bf61c4d389f34b06aa4523de051d517976cdf7c28c5a7ebb2241b1fb6cb6a1fe4c3beca46cf421890228d3c77f5759c66361a008d6423d0f2afe3c896306975ff0a3f1477456e9e9d29e0bc096af5d19f891c08c10f302b503a64825e4eb08204a5168aedf86fbc202f0912d786b2b3f295e994d58aae1297bd6020a6ee0ccedf327e97145b479bb8d61344646391d00dff7331ae5ad9ca72f89a52bc23389331c51994484b82f2ca9459f15d7bc53501768e4389a64d346d6a4ee3d5fb3cb49ee86c5121b65b25598a776fd609db9f6bdd4da55668e63e54902b7406b50a7e3f896df4cd069287c676d781dc9c36e5e2671879ed93849359f87ec88b12e8bd759ee282792e580a264339afe9ec72dd9c026b7655d73f8bce51a3d086767c49f246a41edfdf635848fd06d719c4cb24c1d00e69fd3d14815d0c4548b4a7fe29f828b6757a4a98a2743f4d9b23e64201afdd96156bdd5eb631c1a80d3a42bfdb4142874da39350ecc854e12c77ec72b80718d6684110428999d2f90331f6e84022a493464998cf81bc68f5fc04a09f29179e55c357f8b276c54e54b03491b76ea208a402cefae97ff733787033739fca6daa11ecb1c45d0afa6d5814f7cf6a389a780b670c6faa8c8784ab1f983e772c2e8ac3b33bc45ec68ac3762501abe05fbba8a07958dc03e6a7dfa928d0fe708894ae63ab129fd8ae4c54f09b7b2cd4ba2486fd1f3429fd2d9027e81c41a3e029317b0b3117e86957612386b60437888b7a241b3dac5e27eb237bc753d9b673f95c14c9e1ba04b1d33e779eabc9272ca4e5ac2a69ff1e319bc8238811e14d84bef0f888d7bccbdd5f9c020a63f6f31d8df7cc1adeb4a09db95a840f885f1f6a473820beb0034b7f0310d36497e7e1fc677bb5e32d278338d2bc271f6108a7835e863cb520ba7d69b22190319c2c7e269e2356a2dd18b6875f90a60a6e1b3a7346f7ce016501ff2639ba5bb5c6bee405946f8424ffe521808d2a03703fabaa835cde841ce0e1ba824239e7b5520d950d565e9d21d81e8350179cae07da98937bee5f2eea4ec422a676ef3222554c0981a24dbe42bbe695829332a6564e073061e620a2ca76c5716e6a87ef0bbe178e588f01addc2ce7730dc2d1d8835ccfdfc6f458b7c96196929c7c8b5eefde18d434a372ca1996f85c8c885a15f97b48000d0f1bfe16080d73a18b8446ec1324c9fb0a5de37af1f614c5f392d5a1f45079d0b980533270b5f42c5c0b0e54960edb695c9dec3f9e8f66a3c80027aa8e6cb316ce478a2fe05a4c1485ef016fc40906c17b773cb22f7b431fedf16f2b55727e7fd66bc97c1eba677cc91148b344a0cb05c4998f0bb50862ebee8eab883db3319c0cad45ec761037bb1a501306a22683fab60171ca5679b13c3ebb3fe3ca029cbe24e4b46079c0c10a1555f15e4c7c40022de70321a949bda2adba57a255c8dbc3ff4c5faaf48033908d009acb4e1d61790c6e2c19c6d66ffde5ef22fea3fc8eaa8709c55107e14639989647fd9508b03f729cf931124daa89345c2477c0cc995cc951e6652c26d0fad8dd4aa174982cba2186091d5a21faa141a36c633db714f33c75591492da6f6c2717298bb63bd8f54addab90eededddf4fd7d2622e4c82c4b57167cde9933139d23f9ed373b58957fc6a61e41efe8bd7dca9671351019dc5c273f0047efb48a2abe00bd32258900c779276a830bf4820d75d10d112541b124de5583f0ef07775fcb1f343702fbf9917c290631409491a67417f741f59b9d270f2b69274c3e3636dceeccc1038392ae17b8781793058209acb605f7986ef9709fbf87833a86fe75d09702e6149de703383715f802600c0ca8070da66f8a0ce57808b1cfb7158b237dd94850c3909d509242bad6f9b415dd6369e12963884ae9ea18747f534f42168767e79c3da5e3baa8794925bc1a9643d7f2388a8b50a02dad4407fd2cb90552920bf2a7acc1f93f4da41860c05e8223e0faa865b9602cd4e02a71d37816b5a5a9ec7b08b027126477f8afec6462fb993e8390a1b73b29873fa8069f192a0075c23957a382b0c9813a5eee1fa83c14c358191f0239c39599cdad4f75e24eba43be5b1a6efedcd67a03a14e6be75a44f76146c71a023367dd091e270cd501dcef978a1438d261b2559ada4e60dc7e3d164dcfa324e8eb80f86bae7a63be0ad2131e37ea500449cb4208907ad7096845e75f881bde192e5eb1d896fe76fb7d12b20dd9712f0eaf356cfc94ae186acbd976d77b15e9798f72eb9bd94957e309566b3c794ea8ee64ab29591d32091a2d7a1ebc028d442afae5d77fa2299129f523674c84a71a61a2e067106ee175642c976445c2f5326f966a69dca3b5977423f70c885fd4f9f1bd5756a4733c96ad20aafa68f16887d145f4a782de4b7159730f896de99ada2383de41e7d07da9bec33f1bab886d3314d1e391d7cba71cc69efe8636f1d483c0c817427487bb3d63bf42b7c1e47eff362a282e907f80e79ffbf767f14e7d037397b32d83286017f4927ea78608c02451aebdd9949a213e1566a9fb160a02c9ade9b2fa20d5318558411747e52b481091b56da9978b816adf80c8100793bf1ed912bfdadbdfc83e0a8c2486c9041b66caacd6459865bcfb56a101b664a33c196c0b3e89a414f0dd5d651303214170e617e8d44ae8e0a06c9019a34ab5bee8a1e111fd1d0f949a2bf23501cb6e592a16a46e885870c23e998bef50153e8d12b8c20de6fcac977aae4c89005a76698937813ba6426e18f28fe6f03732614f8da52db5009d21cc04078cf0b6e77ba674252ac4b18b86efcdaa62c415d1269e2f19f40d103135ef2b677a48c2de80de568de3ed9df76de55a34531865eca33ced2e27488ea026406ce5499a9436eb82f0353e9c1ef2d68ac77941f50741e1ddab42d51b30f83883bac97a292a0115360c3c8d428280a7704b14d31285d5a2009946ed6830714be6f668c423782957cfaec15240f0c9f902eb9d40e77cbb11dd3dedc87d01711fe6c6997994b74e8608c72504ed04a9381f77afe72f79313a0c91752fe22adcdb63b8aad5d50103d2d19c02cf3fc3d6b40d0b96a804e70fa5e08939c6dadb84ed1edaa9646466279054768c4834f982d5f5ee5db8a3f53cd3c412779c2d64005fa1220dbd600ef334ee93b79f138c7f3f4a5d2dfdaf57036b23c1d6c80b2bc2fa676432d6fa285b941bd09fb05f77edd5eb87a08b72554a3e55d7474a3b44416aa97c0754fe13cede0cc4bf741cf0117f72b2c5585924021f865c13b81dde06c25333863d8010b3c94f11bf13b9ac07c4e0a0806879af60f2e9b9cd04a485f60763adaed416ca46ba2000cf711596c0f1cccd9563bc8b6978d4d22259056e73f15919e030bf8f02c3d1028e9c8657960c4024dbff238fce5888d2750eb7e7257e6aa5d0f0ff775e5d831d232a9d8cc2685ccd972b9de6089792ef76158e1a9eb57c4c1522cc8bb114c04753e59c1f73eaa919314a661acacbcd6de39786be9e96c6d34cc3cba6167e44ab2a6070784ce1000eb22761aac3b21d9075c99d309b14da755063fe7bc55d963a654450639c843800ef22270f66e8a7d492ac965b23844f9ad3298bcdcbb4c88c5982f17db35a5d3962f78c30741d6cb2f27474b912dd83793eb50f409fa893ac87d76aa964f590fd954a53523751f86906cd24ebe2f7f0481ac92a58303f49779cbaa19bf2dc629701c73a036d83a84f271800b5bd015db11730f8f276eb680a11be78f744fdb9d35bd5380071e06e14d7aacd7e8f1ac70a9f052a25a50465c45fb791378e95c97e78e275d51a5ff6ca0a8b5b0ed8a85fc492baa3c73dd8455441b6055814a1a0198cfd9e889d8f51ae0fd1e60e3f5ab14293c502b4a0d293f371d09c2ff6bd0e75ba7c3cfde02310b9da0c8b4d53af99abe38829647d954f205fb58c74e4a91f701e554b0e20a5e6cf00401fd550ba5fe26554884fa0ba5f331dc6a619311973ac52771ec8a18fc7402886e7f1dd547c6bf6c2057f6563b124510501f3f95c3bb176ee0c13acc369697492032ca3cb5ac2d48f72aee752229819654512c0cd7f90d38c1e7597851791c2d7fee3069c5869ecffda08e27a4867c3440911342fb3220a7054fa12fd487bc32e9c7fba98313f10dce6ebc9c0f12e289156d44270ba477318b48b178fbd32c9033d883ff14278528facbc903b5fc63b1f211cffa476f5284e460c3f12aa68ad462579496dbb804a4c8ca14b6f91e04a96287d1a807f8d42b655d00d29a4090228b7c1ae6162de66baf39b5a644033e478994db5af7d31d7816e32fc0f84c535eed02a2960f63593ebe1fd22e1ec3ab49d6093bffad3912dcb6e521a6d2743cba38444aff7ecbf701d1d3546e53af1a099fe33d3de632f92586dc93282f427edef369c08d3d28b14756ad27042fdcfaec5f69fb1dccc49e5fc9fd9978e27b444b0c168960f6753ba5f5ae92a5f127014b355b13d64d5bb6178304f264e2c3adc37fe1beeb8a8f1d719b1f4a2a6a9"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001480)={{r4, 0xffff, 0x5, 0x1000, 0x3, 0x40000000000, 0x1, 0xf5, 0x400, 0x7, 0x1, 0x8001, 0x7fffffffffffffff, 0x81, 0x3aae}}) r5 = syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000002480)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0xfb, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "572f7f0f"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x8001, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0x2}, [@acm={0x4, 0x24, 0x2, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x5, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7f, 0x5, 0x5}}}}}}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x110, 0x5, 0x81, 0x3, 0x20, 0x7}, 0xc, &(0x7f0000002540)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x5, 0xfffa}]}, 0x5, [{0x3, &(0x7f0000002580)=@string={0x3, 0x3, 'Q'}}, {0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0xc45}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000002640)=@lang_id={0x4, 0x3, 0xc53}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000027c0)={0x14, &(0x7f0000002740)={0x20, 0x21, 0xc, {0xc, 0x22, "18c61f6cfe7f1eac008d"}}, &(0x7f0000002780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002ac0)={0x44, &(0x7f0000002800)={0x0, 0x14, 0xd6, "487562998a838e97799c01609e61c826eeb9fae347d842ada48d7b3d5cd7dcc15da66c6491c69a70615b402da1ebfc0cc065adbc3a8ce8ff3078ea6dc82cd7e70e6ee0b4e240d4f62f791169e96224eb312a18a7ff5f6d757a33cb4bb47e954bb69da0b5dcbee458f60b579918f367f6d6aaa498149ff31eaaf54c6e9f7debbc193d687b52077c879d8c0aa1796dee7369bbc4c1c27c85ca043bc1b7c2577aae6fbdfa6310770dc0c41a44996fcdb5215bacd8e76ae6f9761ab98ae1263b9ca82bc25590ec9323a72e8141c1dc31bfff88d858d3e1f6"}, &(0x7f0000002900)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002980)={0x20, 0x80, 0x1c, {0x7ff, 0xb, 0x7ff, 0x7f, 0x987, 0x2, 0x7f, 0x800, 0x3e, 0x63e, 0x2, 0x6}}, &(0x7f00000029c0)={0x20, 0x85, 0x4, 0x54dd}, &(0x7f0000002a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002a40)={0x20, 0x87, 0x2, 0x7f}, &(0x7f0000002a80)={0x20, 0x89, 0x2}}) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000002b40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x100, 0x40, 0x1, {0x22, 0x70e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xae, 0xfb}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf7, 0xd}}]}}}]}}]}}, &(0x7f0000002d00)={0xa, &(0x7f0000002b80)={0xa, 0x6, 0x310, 0x8, 0x9c, 0x8, 0x10, 0x2}, 0x7c, &(0x7f0000002bc0)={0x5, 0xf, 0x7c, 0x2, [@generic={0x6d, 0x10, 0x2, "deff1501d2a8c2d6e4ed3268a6dfd57613c24919ebeeadca4710869dddfa4e2a1e9d1eddbb12cdbc639991ada570b665c819e3f7a3bb904edd102e076dd5f4d27a0d2ebbcafdb3a51b0955afcb71171a1d3e5798d22a76332267480050035877e5584a7484fc79c60c9a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x5, 0x6}]}, 0x3, [{0x4, &(0x7f0000002c40)=@lang_id={0x4}}, {0x15, &(0x7f0000002c80)=@string={0x15, 0x3, "99c835ff506482984711488b3f329bcb0d303b"}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x43e}}]}) syz_usb_control_io$hid(r6, &(0x7f0000002fc0)={0x24, &(0x7f0000002d40)={0x0, 0x6, 0xf3, {0xf3, 0xb, "c865cac473922b02456bbca072dc6420d21de6d14eff90a3ca594485ed1810f650d6a51dfe579db9ba2593b50f39df2276a677e32d0b860bbb46a71b94ed0cd0ccc91b59f889a744a49ab23b610a63314917f8da9789f7280d446b01a743c35539027ca595040af61caead5320695a7fd4a08dea97818ad8eccf6dabe3ca6d1e76a90270f4ad76954602ab0c32899f8e4bc79bbf2ab6d8465ae9ad4df1097c7d4368392b9c3814da2fda6770652ed9e499c66e80550ac0e40fd88a9904962e1db7a7c51befb702be47f16a9625d83ef423da946b3ca75d13b61c44df072cf27b2be6800aee6b52aecc0ef236cc471811f1"}}, &(0x7f0000002e40)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "66bed05974b797bedcc06e707f0895409c05af8784c420385e909255e569148fa8f6b9a61ef20a144240b05ddaf7fd4d08b80d216cfb181c21c74053f95fc144310bb0900d9cd2a3711e25d058396093365dadf6edb3435ef78d429a3256ebe1dcab0b6e62ea076d3e8ef8716fabfc9cd765b079f31b964b8b1c73b874c9a0d45141166802227180637b2cb392d6b9e0e556d097a66055a42029780b87477fc9845b2625b8de88f9edbd0f0ba69bd42c88800931cd9b7f59af5b53ba7cfc75b5240288f9"}}, &(0x7f0000002f40)={0x0, 0x22, 0x15, {[@local=@item_4={0x3, 0x2, 0x0, "33c6d3b2"}, @local=@item_4={0x3, 0x2, 0x8, "6fdffee6"}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_4={0x3, 0x2, 0x7, "c65c384d"}, @global=@item_4={0x3, 0x1, 0x9, "873d7d24"}]}}, &(0x7f0000002f80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3fc3, 0x1, 0x1, {0x22, 0xb0e}}}}, &(0x7f0000003280)={0x2c, &(0x7f0000003000)={0x0, 0x9, 0xa4, "05c34306b3bed7deee42bf49924da9be7cc836d631f134053f180ff296153db85d85ee94602d6a537f86952acf746c9d92961fbe973508cc9da43dc629addfc99be831602004c0f30d5fa5e917e42117c70ed5c76c8e10acdf42bdab8c40a2bef5fee134a742dbf319d672213d8e0c67a91d125c50a3d922a396c0e13feba19c78b23a4d6174ecf393657fd1260e28f5d9611ae8ec2a36d407e63d25cc5596c5743375de"}, &(0x7f00000030c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000003100)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000003140)={0x20, 0x1, 0xbf, "5182e074c0ae7c8d280bb2a21f781fef98d0b248d68d648c757ca2c1faa2010464ba90db85b47f58723ecc4474aa2957b1343acccd71a0f776616c578c70968858b231e2d9e9f0aa929e163bc2316aa4b6286818c313dd96185140758a9ce91b44a8e1b1725a7e66a6a504c6025ccf62c8ad1c1b854a067b4545e24cab945236ac711e1f9b07cc17918e45c6124a2edd9b57a4784ba53a7e632f5c674e600969bfb19615d8767335910d9dc835ba19ea09ad3e6e86d6400bb3454dc32bf116"}, &(0x7f0000003240)={0x20, 0x3, 0x1, 0x6}}) socket$inet(0x2, 0x800, 0xf5f) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fff) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000032c0)='/sys/power/wake_unlock', 0x2000, 0x132) readv(r7, &(0x7f0000004840)=[{&(0x7f0000003300)=""/82, 0x52}, {&(0x7f0000003380)=""/170, 0xaa}, {&(0x7f0000003440)=""/190, 0xbe}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/6, 0x6}, {&(0x7f0000004540)=""/92, 0x5c}, {&(0x7f00000045c0)=""/220, 0xdc}, {&(0x7f00000046c0)=""/127, 0x7f}, {&(0x7f0000004740)=""/15, 0xf}, {&(0x7f0000004780)=""/190, 0xbe}], 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000004900)) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000004b00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x50, 0x6, [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x3, 0x1, 0x2, 0x3d, {0x9, 0x21, 0x5, 0x32, 0x1, {0x22, 0xfb9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x5, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9a, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000004d00)={0xa, &(0x7f0000004b40)={0xa, 0x6, 0x110, 0xf8, 0x8, 0x7, 0x8, 0x10}, 0x26, &(0x7f0000004b80)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x1, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8b, "d416382702ea015e6f1a9feffb0e9ac5"}, @ptm_cap={0x3}]}, 0x2, [{0x98, &(0x7f0000004bc0)=@string={0x98, 0x3, "bb3e745f296bc7c5b40f661eee522ac678a747151a54fc82cd2e37fbb4dc234fee323d39c67c2994c1172528f7d182bf45550178b8bb3287ee6d32f06b57555ac966025d2a1fb4bce6b91c74a0a5a34473b02f2208705a95d5f4ed939fd212ec2f874194979a794609c4d0f233168b856c67b4a545df0a28a642bc95f80dd2bf3a24ef251bf653148d6bd1ffabb571a9e46c24342f88"}}, {0x5e, &(0x7f0000004c80)=@string={0x5e, 0x3, "f82418af45c1d21fb65dd8fe14adab65094701e0d6fe66aa8601cd7660ce58f7f85a37c98d100e1c033da93f9b5031e849de5e09819935f57286f81b61729fe08e4e870b8935074f5d5fb4958a234bc7341bbb3b5a006575e2971f9b"}}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000004d40), r8) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000004d80)={0x4, 0x0, [{0x80000001, 0x8ff5, 0x6, 0x8, 0x2}, {0x80000007, 0x600, 0x10001, 0x101, 0xfffffffe}, {0x4, 0x0, 0x1, 0x2, 0xfffffff8}, {0x40000001, 0x374, 0x6, 0x8e4, 0xfffffffa}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004e00)) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000004e40)='$!]&-k\'(\x00', &(0x7f0000004e80)='./file0\x00', 0xffffffffffffff9c) 1.392018223s ago: executing program 2 (id=1107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan0\x00', 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) poll(&(0x7f00000002c0)=[{r4, 0x4040}], 0x1, 0x5) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'pim6reg\x00', 0x6}) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000400)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, '\xa1,+&\xf0', 0x3a, '-)]{', 0x3a, './file0'}, 0x30) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 1.310456541s ago: executing program 2 (id=1110): setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.244089218s ago: executing program 2 (id=1113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a00", 0xfffffffffffffffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.22574897s ago: executing program 2 (id=1116): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000600)) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x1) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x1) madvise(&(0x7f000020f000/0x3000)=nil, 0x3000, 0x1) (async) madvise(&(0x7f000020f000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getpid() (async) r6 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000e40)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000867000/0x4000)=nil, &(0x7f0000345000/0x4000)=nil, &(0x7f0000427000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f000070b000/0x3000)=nil, &(0x7f0000670000/0x2000)=nil, &(0x7f0000959000/0x4000)=nil, &(0x7f0000517000/0x6000)=nil, &(0x7f00009d9000/0x1000)=nil, &(0x7f0000ae3000/0x4000)=nil, &(0x7f0000000dc0)="260580de03f6979aa887ee85aea1cc6cf9858b418c268da1e1278aa8150611ec950882fd57089295536e7a61f153f72e871a4ef6ce05f828c478a5370973f24cf82b0be97f41ba3382ab175c83d1b36ef7be3d49119908f6", 0x58, r4}, 0x68) r7 = syz_pidfd_open(r6, 0x0) process_mrelease(r7, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r0, 0xfa0, {0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x20, 0xc, "0b45fb455279f4a483d0722dff1c18afee922ac822db0d632ba625cb91c04ba302be1b50653c9e95fb6f561669f1d653272f4a037d4956f50893a88d19a02fa8", "e24ff4bdbd62e396a72db39af7d6b52cd37c99c00f055e128f17b82ed8499b3bc9924f7d36ad1d96c0a7092d3a70c57c40b9871e1b34bd8fec6829a456ad7a34", "f106f2573958411b8970a15c12ef2bb148398581a976d825f923869308d00450", [0x7fff]}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000ec0)=0x3) process_vm_writev(r6, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/228, 0xe4}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f00000006c0)=""/242, 0xf2}], 0x7, &(0x7f0000000d40)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000840)=""/219, 0xdb}, {&(0x7f0000000940)=""/185, 0xb9}, {&(0x7f0000000a00)=""/190, 0xbe}, {&(0x7f0000000ac0)=""/59, 0x3b}, {&(0x7f0000000b00)=""/207, 0xcf}, {&(0x7f0000000c00)=""/84, 0x54}, {&(0x7f0000000c80)=""/176, 0xb0}], 0x8, 0x0) 1.171756975s ago: executing program 2 (id=1118): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x2c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x4, 0x0, 0x2, [0xff0000, 0xff0000]}]}}) listen(r1, 0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 827.521519ms ago: executing program 3 (id=1131): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x18, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x3b}, {@in6=@private2={0xfc, 0x2, '\x00', 0x41}, 0x2, 0x32}, @in6=@remote, {0x7, 0xc, 0xfffffffffffeffff, 0x0, 0x4, 0x7, 0x9}, {0xfffffffffffff461, 0x0, 0x0, 0x40000010000}, {0x3, 0x2}, 0x70bd2a, 0x0, 0xa, 0x0, 0x0, 0x30}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) write(r1, &(0x7f0000000400)="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", 0xfffffcf1) 826.921329ms ago: executing program 0 (id=1132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x84402, 0x10e) write$vga_arbiter(r1, &(0x7f0000000700)=@target={'target ', {'PCI:', '10', ':', '5', ':', '17', '.', '10'}}, 0x16) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x1}) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000900)={0x9f, 0x0, 0x1}) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) request_key(&(0x7f00000000c0)='big_key\x00', 0x0, 0x0, 0xfffffffffffffff8) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000180)="7a03ad0b326833254bf18a852e8101dcc9ab7e0e07312a58e79233107f337a90cef5005808a4065a59e61aa7d2ec4b511827db6704db861830afc88a239bb70fac7d323342e87acfad1f67a566531342d689722d8b745c2f6aa4b850402daf0308671c7ff3a0f6cd91c172b2416734e21359216d721422fa32ce027d0ac4cb06cecedadeae43d2798ac92ed9cf59920157189733dd05fd646d6669d0509619914c5566", 0xa3}, {&(0x7f0000000300)="1751a1fefda337b9433ae3032f6bb2494fc08346ba258dca7b17ef6db287c6ac6cd73e8eb328a8c65a367054665c5ec5a9ac90e885d2e48c5bc5a6f6cd9aaf17ad66630e2e121b4f80f8a0d379da91f3f50d67a506d66e66cdc8d92069c70fff41bedf2fe78eb9cd7246ac85308d7918717ddd7e7349d15e5307fd8c48c898820bbce80fee9b70c10115d3efa164eda45db78165e2d11ff21d92f953f4dc99ca2646ddb0e25af083", 0xa8}, {&(0x7f0000000440)="92352b1939157ba9a8374791644cc732f0e174261d0bb2c2c4318dd5e989b27bbd9e54fca73ebd0a03a83df3384f75476faec5ef26fd00131b44317333877792d8023495c896953eeb170a847241bc14603bc459082d0eadf0b1fd50a4c28cb647bec4320eb1f8012c681215cbd9a2f0bdcedbb2c1a9bac113125447a9d0ccd69182452e9db9eeb5", 0x88}, {&(0x7f0000000240)="6ca9eb06a578dfce9e24f3a821ae9dda9d489f2a2012231b85308726741d6f037c5fc99bc5a88c37a3c985fbc8392a01195dff1079a7deb3c575442182315caf1eb1347b34417f6c256359e9", 0x4c}, {&(0x7f0000000500)="302894eabcaa15bcd13c25c17bfe413647e4b60465bbf64a4edc09606403b965881623aaa708b5576f94359e468fce6860a59026db60369d67944d5f606c332e66c892401572", 0x46}, {&(0x7f0000000580)="a65075f244f5d5b1c0507957a87c16a6f9020298a324ab7b293e89679d22d6b2a0753e2eafdba667cc2a4234f4c50c441c109744b5a6917d5e98b41846878ec639b53798b36540f12affa8caf3d2c6b16428dc43b974dfaa7a4aadecfc112a41efd5bbdc88c3911d1913b09e9bb16f3089011744b8e465f9a6ffaa421e3cabbcd49c89600e8a7eee70b7daec80873c42c39d82292472c0a6bcbf9aad9ef5143e80f28a0841835fb7cb9474ef7e2c2ea560314c82b03559057578e7a4cf9b9ede32cf0fe9d2f6572bbc845a91b377af6ce9e98b248a2c53519664aea53835d0db41d116c70a0a90d4", 0xe8}], 0x6}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x855}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@cipso={0x86, 0x63, 0x0, [{0x2, 0x3, 'F'}, {0x5, 0xe, "fd85f6ca6d46d083ba91ff70"}, {0x2, 0xc, "97eb2d87cbc629f1267e"}, {0x2, 0x9, "e1aa5fe60827fc"}, {0x5, 0x9, "f216dbb3b22488"}, {0x1, 0xd, "4762b1d2e2c9c0f55baad7"}, {0x7, 0x7, "f50550a08a"}, {0x2, 0xa, "96562fcfeeea6be7"}, {0x6, 0x10, "91333e4b6f51759583568d84d672"}]}, @timestamp_prespec={0x44, 0xc, 0xa2, 0x3, 0x7, [{@remote, 0x80}]}, @generic={0x83, 0x4, "0fd9"}, @ssrr={0x89, 0x13, 0x57, [@private=0xa010100, @private=0xa010102, @broadcast, @private=0xa010102]}, @timestamp={0x44, 0x24, 0xe9, 0x0, 0x4, [0x7, 0x1, 0xfffffbff, 0x6e, 0x2, 0x7, 0x7, 0x4]}, @generic={0x7, 0xe, "772721439097bd0cabbcbe3d"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb10}}], 0x128}}], 0x2, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 819.43922ms ago: executing program 0 (id=1133): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) socket$inet(0x2, 0x4, 0x1) (async) r0 = socket$inet(0x2, 0x4, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x6}) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000005c0)={0x2c, 0xc, r4}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e22, 0x8, 0x4e22, 0x8, 0x2, 0x20, 0xa0, 0x0, r4, r5}, {0xfe, 0x3, 0xd3a4, 0x10001, 0x3, 0x3, 0x94dd, 0x3c9}, {0x7, 0xdedc, 0xba5, 0x3}, 0x281, 0x6e6bb2, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x3c}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x0, 0x46, 0x101, 0x8, 0xfffffff8}}, 0xe8) 716.54804ms ago: executing program 3 (id=1135): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190019000400ad000d000000000000060400000000", 0x35}], 0x1) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) (async) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x100000, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1000, 0xff, {{0x5, 0x4, 0x3, 0x3, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @local}}}}) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0xc7ba3) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1b, 0x8, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cce0a1fcaed1e831fa79a", "67523760fd40f7da2cfc03d81a8ca55ba139c01802c4dae4162e43039cb7ad33", [0x4, 0x7]}}) (async) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0xc000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010200000000ddf958b00eb62f83060003"], 0x1c}}, 0x8004) (async) r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000240)=0x4e6f, 0x4) r5 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000100)={0x0}) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) (async) r8 = socket$inet(0x2, 0xa, 0xfffffffd) sendmmsg$inet(r8, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44090) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x2cac1, &(0x7f0000000040)={[{}]}) 712.38348ms ago: executing program 0 (id=1136): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000e0001000500000000000072080003000500030000", 0x39}], 0x5a) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4cc52, &(0x7f0000000000)=ANY=[@ANYRES16=r0]) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100)=0x4, 0x4) 692.222962ms ago: executing program 3 (id=1138): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) rt_sigprocmask(0x1, &(0x7f0000000040)={[0x7]}, 0x0, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES32=0x0, @ANYBLOB="05", @ANYRES16=r2, @ANYRES8, @ANYRES16=r3, @ANYRES16=r4], 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000140)={@id={0x2, 0x0, @auto="f5d9c547ea54f02eaf9eb6d67d331ef7"}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) write$P9_RVERSION(r3, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0xbf2, 0x6, '9P2000'}, 0x13) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$netlink(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) (async) rt_sigprocmask(0x1, &(0x7f0000000040)={[0x7]}, 0x0, 0x8) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (async) openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) pipe2(&(0x7f0000000040), 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES32=0x0, @ANYBLOB="05", @ANYRES16=r2, @ANYRES8, @ANYRES16=r3, @ANYRES16=r4], 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000140)={@id={0x2, 0x0, @auto="f5d9c547ea54f02eaf9eb6d67d331ef7"}}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) write$P9_RVERSION(r3, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0xbf2, 0x6, '9P2000'}, 0x13) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async) socket$netlink(0x10, 0x3, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 628.443908ms ago: executing program 0 (id=1139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, 0x0) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x502d41, 0xd5) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xffffffff, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0x7, 0x0, 0x8, 0x1, 0x6, 0x1, 0x7f}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x56, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0x0, 0x2, 0x34}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xb}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000380)}, 0x40}], 0x0, 0x0, 0x0}) 626.189338ms ago: executing program 1 (id=1141): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x100a, 0x0, 0x13}, @flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfffffffffffffffe}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 615.66561ms ago: executing program 1 (id=1142): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9}) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x124, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x333}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc2}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35f1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8080}, 0x10) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r5, 0x1, 0xe5, 0x6, @local}, 0x14) r6 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendto$packet(r0, &(0x7f0000000000)="2a2c1d2a9210940a4ba6f64e9398ccf2376cc1aa66c77ac5147c30db0368880bb3ad8fc277f297d9dc0a4398af193a8d3d130dbdad07", 0x36, 0x4000, &(0x7f0000000080)={0x11, 0xf8, r5, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 601.277461ms ago: executing program 1 (id=1143): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/246, 0xf6}], 0x1) r3 = syz_clone3(&(0x7f00000002c0)={0x100000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_MM_EXE_FILE(0x36, 0xd, 0xffffffffffffffff) syz_pidfd_open(r3, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xf0, 0x97, 0x60, 0x8, 0x452e, 0xa3be, 0xd48d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xe8, 0x8, 0x0, 0x8, 0x4, 0x50, 0x5}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f806000100"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000000c0)={[{@lowerdir, 0x5c}]}) r5 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40442, 0x71) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000340)="d82021e4b54056858b652f83d587116d", 0x10) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x24, 0xe, "85020da9caa62fe214a6adb7e4322d93ab6de630836e774905efdba8a228957362f12c439e18a59e93fb287e5c27eaaef9385e18c62056b8e25f763ce4f975", 0x3c}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) write(r1, &(0x7f0000000400)="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", 0x1f000) syz_pidfd_open(r3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x200400, 0x0) 128.615428ms ago: executing program 3 (id=1144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8000005b) preadv2(r1, 0x0, 0x0, 0xa07, 0x9, 0x3) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r4 = dup(r3) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0104db"], 0x14}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000300)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x20040054) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40043d14, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') move_mount(r7, &(0x7f0000000280)='./cgroup\x00', r7, &(0x7f00000002c0)='./cgroup\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) setfsuid(0xee00) setresuid(0x0, 0x0, 0xee00) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000002c0)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) splice(r0, &(0x7f0000000100)=0x8, r0, &(0x7f0000000280)=0x4, 0x7fff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000800)=[@wr_crn={0x46, 0x20, {0xe, 0x58c2}}, @wrmsr={0x1e, 0x20, {0xb99, 0x5}}, @wr_drn={0x6e, 0x20, {0x6, 0x7fffffffffffffff}}, @rdmsr={0x32, 0x18, {0x9df}}, @cpuid={0x14, 0x18, {0x1, 0x7f}}, @cpuid={0x14, 0x18, {0x80000001, 0x1}}, @uexit={0x0, 0x18, 0xffffffff}, @in_dx={0x82, 0x20, {0x9194, 0x2}}, @code={0xa, 0x65, {"460f22033e430f23b0c402c9dd0f66bad104b07dee66baf80cb85d4cdb81ef66bafc0cb00eee0f20e035080000000f22e0460f01d164440f015900460f01f866baf80cb890e47988ef4605bafc0c0cb802e566ef"}}, @out_dx={0xaa, 0x28, {0xa55c, 0x4, 0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x3178d9ba}}, @code={0xa, 0x65, {"b805000000b91bdabe610f01d948b822ee0000000000000f23c80f21f8350c0040000f23f80fc7b2064400000f58d466ba4300b8789b0000efc402f8f7f80f01c30f20c035000004000f22c026f243af450f01f8"}}, @code={0xa, 0x6c, {"66b8cb000f00d8c4417851e12e660f38228e000000008830410f01c5c4a1c0588c103300000066baf80cb850efea80ef66bafc0c66b8d57f66ef0f3808610848b88d180000000000000f23c80f21f8350c00b0000f23f80f005910"}}, @wrmsr={0x1e, 0x20, {0x893, 0x4}}], 0x27e}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x4000, 0xa000000, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 127.571998ms ago: executing program 3 (id=1145): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) (async) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@access_any}, {@rq={'rq', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0x8}}, {@timeout={'timeout', 0x3d, 0x5}}, {@sq={'sq', 0x3d, 0x40}}, {@rq}], [{@pcr={'pcr', 0x3d, 0x3a}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}]}}) 127.384918ms ago: executing program 3 (id=1146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x11, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') pread64(r4, &(0x7f0000000480)=""/102400, 0x19000, 0x10000c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) syz_usb_connect(0x3, 0x57, &(0x7f0000000280)=ANY=[@ANYBLOB="12011000f05f8210d2196510577401b2e26a1002450001062230010904207f040a76131009050c0000040749b9090501004000001a40090507000800f50505072501020002000905024a0004020405080b1009ad646c9ea65842f52aa3ddd967ab4011dc8b905c72235a2a5ff9630db54a20c076ddeaaddacb977c4d1405873b31a337bdb2051785cc2385259662b03e8e0d59"], &(0x7f0000001cc0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x3, 0x4, 0x10, 0x10, 0xb2}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/20, @ANYRESHEX=0x0, @ANYBLOB=',\x00']) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) r7 = accept4(r6, 0x0, &(0x7f0000000000), 0x180800) setsockopt$sock_void(r7, 0x1, 0x24, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 78.356943ms ago: executing program 1 (id=1147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001b40)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x2, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xb5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000041) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000300)={0x74, 0x0, 0x8}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e23, @remote}, {0x2, 0x4, @multicast1}, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xbcd}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x80) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$inet(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}, 0x4000001) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40010122) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x40, &(0x7f0000000480)='lo\x00', 0x0, 0x4000000, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 55.529595ms ago: executing program 1 (id=1148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x54, 0x0, &(0x7f0000000400)=[@request_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5a, 0x0, &(0x7f00000005c0)="70ecc00b398fc2d305dbb8580b48d26fe73063b83c3d675b5567218fb4f08adabd83e0bd58480cf25d17c8e12984ecbf5032b43666f9d797fa58257111c4b96f2d2d70754c704fb01586622812793868a399348a39d27f4f16f0"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000740)="32780f643983", 0x6, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) syz_open_dev$hiddev(&(0x7f00000003c0), 0x2, 0x420000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1, 0x91, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 787.321µs ago: executing program 1 (id=1149): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x2, 0x61, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xab, 0x59, 0x7d, 0x10, 0x3731, 0x10d, 0xda77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4e, 0x2, 0x2, 0xff, 0xff, 0x40, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x7, 0x4, 0x7}, {0x6, 0x24, 0x1a, 0x8, 0x2a}, [@dmm={0x7, 0x24, 0x14, 0x400}]}], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x2}]}}]}}]}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) pread64(r0, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 0s ago: executing program 2 (id=1150): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000002c0)) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r4, &(0x7f0000000040)=""/207, 0xcf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r5, 0x7fffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000200)={'sit0\x00', 0x0}) getdents64(r4, 0xfffffffffffffffe, 0x39) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=18446744\x00\x00\x00\x0029682432,\x00']) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000001000000000000000141000000030017"], 0x34}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) read$FUSE(r7, &(0x7f00000009c0)={0x2020}, 0x2020) r8 = socket(0xa, 0x2400000001, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189882, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x421e, 0x2, 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0xf, {{0xa, 0x4e26, 0x100, @mcast1, 0x10000003}}}, 0x88) getsockopt$inet6_buf(r8, 0x29, 0x10000000000030, &(0x7f00000001c0)=""/137, &(0x7f0000e5f000)=0x89) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d03000000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030400000000000924050000f8211cfd0924030500000004000724050401d0"], 0x0) kernel console output (not intermixed with test programs): omm="syz.2.104" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.241580][ T670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 35.249628][ T670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:99 [ 35.274943][ T672] fuse: Bad value for 'rootmode' [ 35.301238][ T515] usb 1-1: Using ep0 maxpacket: 16 [ 35.308605][ T515] usb 1-1: config 5 has an invalid interface number: 253 but max is 2 [ 35.317169][ T515] usb 1-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 35.327459][ T515] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 35.336472][ T515] usb 1-1: config 5 has no interface number 0 [ 35.342694][ T515] usb 1-1: config 5 interface 253 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 35.355896][ T515] usb 1-1: config 5 interface 253 has no altsetting 0 [ 35.364441][ T515] usb 1-1: New USB device found, idVendor=2040, idProduct=d8e3, bcdDevice=ef.cc [ 35.373596][ T515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.381255][ T333] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.381635][ T515] usb 1-1: Product: syz [ 35.393511][ T515] usb 1-1: Manufacturer: ఉ [ 35.398353][ T515] usb 1-1: SerialNumber: syz [ 35.500149][ T681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.532790][ T333] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 35.547423][ T333] usb 2-1: config 1 has no interface number 0 [ 35.553575][ T333] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 35.564899][ T333] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 35.574148][ T333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.582374][ T333] usb 2-1: Product: syz [ 35.586572][ T333] usb 2-1: Manufacturer: syz [ 35.591256][ T333] usb 2-1: SerialNumber: syz [ 35.597350][ T661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.661248][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.791335][ T66] usb 3-1: device descriptor read/64, error -71 [ 35.806743][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.817541][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.827710][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.837108][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.848015][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.857665][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.871118][ T515] usb 1-1: USB disconnect, device number 4 [ 35.957598][ T332] usb 2-1: USB disconnect, device number 8 [ 36.002175][ T36] audit: type=1400 audit(1760590798.120:236): avc: denied { ioctl } for pid=686 comm="syz.1.112" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.041316][ T66] usb 3-1: device descriptor read/64, error -71 [ 36.090647][ T692] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.281294][ T66] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.395243][ T36] audit: type=1400 audit(1760590798.510:237): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.415590][ T66] usb 3-1: device descriptor read/64, error -71 [ 36.431294][ T332] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.547435][ T703] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 36.560641][ T707] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.583005][ T332] usb 2-1: Using ep0 maxpacket: 8 [ 36.589251][ T332] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 36.597929][ T332] usb 2-1: config 179 has no interface number 0 [ 36.605658][ T332] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 36.607063][ T709] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.617110][ T332] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 36.619004][ T709] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 36.623749][ T332] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 36.635595][ T709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 36.642726][ T332] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 36.655191][ T709] raw_sendmsg: syz.0.119 forgot to set AF_INET. Fix it! [ 36.662235][ T332] usb 2-1: config 179 interface 65 has no altsetting 0 [ 36.662271][ T332] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 36.678112][ T709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:97 [ 36.682814][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.689797][ T66] usb 3-1: device descriptor read/64, error -71 [ 36.831473][ T66] usb usb3-port1: attempt power cycle [ 36.850998][ T718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60624 sclass=netlink_route_socket pid=718 comm=syz.0.121 [ 36.865041][ T36] audit: type=1400 audit(1760590798.980:238): avc: denied { lock } for pid=717 comm="syz.0.121" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.898723][ T720] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 36.906197][ T720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 36.907427][ T720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 36.916659][ T720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:108 [ 36.925116][ T515] usb 2-1: USB disconnect, device number 9 [ 37.164986][ T36] audit: type=1400 audit(1760590799.280:239): avc: denied { setopt } for pid=742 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.191469][ T66] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.212416][ T66] usb 3-1: device descriptor read/8, error -71 [ 37.342527][ T66] usb 3-1: device descriptor read/8, error -71 [ 37.386274][ T36] audit: type=1400 audit(1760590799.500:240): avc: denied { create } for pid=742 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.406235][ T36] audit: type=1400 audit(1760590799.500:241): avc: denied { getopt } for pid=742 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.430858][ T36] audit: type=1400 audit(1760590799.540:242): avc: denied { bind } for pid=747 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.450290][ T36] audit: type=1400 audit(1760590799.550:243): avc: denied { write } for pid=747 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.575009][ T36] audit: type=1400 audit(1760590799.690:244): avc: denied { append } for pid=756 comm="syz.1.134" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.601341][ T66] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 37.632575][ T66] usb 3-1: device descriptor read/8, error -71 [ 37.644735][ T769] capability: warning: `syz.3.138' uses deprecated v2 capabilities in a way that may be insecure [ 37.668424][ T771] batadv_slave_0: entered promiscuous mode [ 37.727625][ T770] batadv_slave_0: left promiscuous mode [ 37.745962][ T774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=774 comm=syz.3.140 [ 37.762322][ T66] usb 3-1: device descriptor read/8, error -71 [ 37.773642][ T776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 37.807125][ T780] overlayfs: failed to clone upperpath [ 37.821240][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.847355][ T785] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 37.855314][ T785] netlink: 72 bytes leftover after parsing attributes in process `syz.3.144'. [ 37.864404][ T515] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 37.881324][ T66] usb usb3-port1: unable to enumerate USB device [ 37.902769][ T792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=792 comm=syz.3.146 [ 37.971319][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 37.977697][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.987539][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 37.996618][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.005561][ T45] usb 1-1: config 0 descriptor?? [ 38.031243][ T515] usb 2-1: Using ep0 maxpacket: 16 [ 38.037557][ T515] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 38.048907][ T515] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 38.060115][ T515] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.073010][ T515] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.082298][ T515] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.091033][ T515] usb 2-1: config 0 descriptor?? [ 38.414589][ T45] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 38.421701][ T45] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 38.429946][ T45] wacom 0003:056A:0084.0001: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.0-1/input0 [ 38.500363][ T515] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 38.525343][ T515] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 38.539609][ T515] microsoft 0003:045E:07DA.0002: implement() called with n (152) > 32! (kworker/0:4) [ 38.614114][ T750] netlink: 'syz.0.132': attribute type 58 has an invalid length. [ 38.624151][ T750] binder: Unknown parameter '' [ 38.634017][ T66] usb 1-1: USB disconnect, device number 5 [ 38.697586][ T515] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 38.706156][ T515] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 38.714601][ T515] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 38.726119][ T515] microsoft 0003:045E:07DA.0002: no inputs found [ 38.734087][ T515] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 38.971280][ T332] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 39.122357][ T332] usb 3-1: config 201 has an invalid interface number: 249 but max is 0 [ 39.130880][ T332] usb 3-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 39.141229][ T332] usb 3-1: config 201 has no interface number 0 [ 39.147620][ T332] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 39.159683][ T332] usb 3-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 39.172870][ T332] usb 3-1: config 201 interface 249 has no altsetting 0 [ 39.181307][ T332] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 39.190491][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.198574][ T332] usb 3-1: Product: syz [ 39.203115][ T332] usb 3-1: Manufacturer: syz [ 39.207904][ T332] usb 3-1: SerialNumber: syz [ 39.399848][ T836] Zero length message leads to an empty skb [ 39.423149][ T838] rust_binder: Error while translating object. [ 39.423196][ T838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 39.429410][ T838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:142 [ 39.443921][ T838] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.731299][ T66] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.861291][ T66] usb 1-1: device descriptor read/64, error -71 [ 40.101273][ T66] usb 1-1: device descriptor read/64, error -71 [ 40.341313][ T66] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.471309][ T66] usb 1-1: device descriptor read/64, error -71 [ 40.628856][ T9] usb 2-1: USB disconnect, device number 10 [ 40.711243][ T66] usb 1-1: device descriptor read/64, error -71 [ 40.734938][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.756025][ T857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.762853][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 40.762873][ T36] audit: type=1400 audit(1760590802.870:260): avc: denied { mount } for pid=854 comm="syz.3.169" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 40.764304][ T857] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 32 [ 40.831344][ T66] usb usb1-port1: attempt power cycle [ 40.871005][ T872] netlink: 152 bytes leftover after parsing attributes in process `syz.3.174'. [ 40.880098][ T873] netlink: 152 bytes leftover after parsing attributes in process `syz.3.174'. [ 40.918386][ T36] audit: type=1400 audit(1760590803.030:261): avc: denied { read write } for pid=877 comm="syz.1.175" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.946223][ T36] audit: type=1400 audit(1760590803.030:262): avc: denied { open } for pid=877 comm="syz.1.175" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.969436][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 40.970322][ T36] audit: type=1400 audit(1760590803.030:263): avc: denied { ioctl } for pid=877 comm="syz.1.175" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 41.006224][ T36] audit: type=1400 audit(1760590803.030:264): avc: denied { read } for pid=877 comm="syz.1.175" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.195191][ T888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 41.241797][ T66] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.272335][ T66] usb 1-1: device descriptor read/8, error -71 [ 41.412310][ T66] usb 1-1: device descriptor read/8, error -71 [ 41.439324][ T36] audit: type=1400 audit(1760590803.550:265): avc: denied { ioctl } for pid=891 comm="syz.3.179" path="socket:[6452]" dev="sockfs" ino=6452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.651274][ T66] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 41.682337][ T66] usb 1-1: device descriptor read/8, error -71 [ 41.690815][ T332] usb 3-1: USB disconnect, device number 9 [ 41.832264][ T66] usb 1-1: device descriptor read/8, error -71 [ 41.941349][ T66] usb usb1-port1: unable to enumerate USB device [ 42.032564][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.060836][ T915] SELinux: failed to load policy [ 42.153181][ T36] audit: type=1400 audit(1760590804.270:266): avc: denied { accept } for pid=924 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 42.176168][ T925] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 42.302074][ T927] rust_binder: 131: no such ref 126 [ 42.315424][ T927] rust_binder: 131: no such ref 1 [ 42.320486][ T927] rust_binder: 131: no such ref 0 [ 42.331407][ T36] audit: type=1326 audit(1760590804.440:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=895 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4cd8eec9 code=0x7fc00000 [ 42.428330][ T36] audit: type=1400 audit(1760590804.540:268): avc: denied { connect } for pid=939 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.471225][ T36] audit: type=1400 audit(1760590804.540:269): avc: denied { map } for pid=939 comm="syz.2.193" path="socket:[7669]" dev="sockfs" ino=7669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.565871][ T942] rust_binder: Write failure EFAULT in pid:146 [ 42.945241][ T987] rust_binder: Error while translating object. [ 42.952916][ T987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 42.959830][ T987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:151 [ 42.969826][ T994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.978184][ T1000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 43.033950][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.088829][ T1007] cgroup: Bad value for 'name' [ 43.088852][ T1006] cgroup: Bad value for 'name' [ 43.098847][ T1006] rust_binder: Error in use_page_slow: ESRCH [ 43.098870][ T1006] rust_binder: use_range failure ESRCH [ 43.105167][ T1006] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 43.110806][ T1006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.119098][ T1006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:179 [ 43.128841][ T1005] rust_binder: Error in use_page_slow: ESRCH [ 43.138126][ T1005] rust_binder: use_range failure ESRCH [ 43.144714][ T1005] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 43.150219][ T1005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.158375][ T1005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:179 [ 43.291238][ T677] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.389126][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.389156][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.396361][ T1024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:195 [ 43.403140][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.412561][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.419097][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.426013][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.432981][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.439961][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.446708][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.453462][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.459976][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.465360][ T677] usb 3-1: Using ep0 maxpacket: 32 [ 43.469596][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.481684][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.484799][ T677] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.488425][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.503551][ T677] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 43.505400][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.520406][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.521217][ T677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.534455][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.541603][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.548148][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.551313][ T677] usb 3-1: Product: syz [ 43.555248][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.565457][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.571321][ T677] usb 3-1: Manufacturer: syz [ 43.572389][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.578316][ T677] usb 3-1: SerialNumber: syz [ 43.581354][ T677] usb 3-1: config 0 descriptor?? [ 43.583441][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.599336][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.601471][ T677] cdc_ether 3-1:0.0: skipping garbage [ 43.606159][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.618181][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.621257][ T677] usb 3-1: bad CDC descriptors [ 43.625123][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.636124][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.641478][ T677] usb 3-1: unsupported MDLM descriptors [ 43.642924][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.654967][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.662139][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.668921][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.675821][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.682732][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.700896][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.707903][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.714703][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.721608][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.728146][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.734678][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.741273][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.747799][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.754306][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.760815][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.767339][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.773858][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.780355][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.787205][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.793930][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.800495][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.800659][ T1009] binder: Bad value for 'max' [ 43.807271][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.818165][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.822615][ T330] usb 3-1: USB disconnect, device number 10 [ 43.824701][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.837896][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.844544][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.851128][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.861682][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.868241][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.874735][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.881468][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.887917][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.894497][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.900945][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.907467][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.931893][ T1050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.228'. [ 43.954913][ T1050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.101257][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.101292][ T921] Bluetooth: hci0: command 0x1003 tx timeout [ 44.146308][ T1061] __vm_enough_memory: pid: 1061, comm: syz.1.232, bytes: 18014402804453376 not enough memory for the allocation [ 44.158776][ T1061] ======================================================= [ 44.158776][ T1061] WARNING: The mand mount option has been deprecated and [ 44.158776][ T1061] and is ignored by this kernel. Remove the mand [ 44.158776][ T1061] option from the mount to silence this warning. [ 44.158776][ T1061] ======================================================= [ 44.331246][ T333] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.461263][ T333] usb 1-1: device descriptor read/64, error -71 [ 44.702620][ T333] usb 1-1: device descriptor read/64, error -71 [ 44.727529][ T1069] mmap: syz.1.234 (1069) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.755518][ T1074] Invalid ELF header len 1 [ 44.820215][ T1081] x_tables: duplicate entry at hook 2 [ 44.941330][ T333] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 44.946436][ T1103] fuse: Bad value for 'user_id' [ 44.954043][ T1103] fuse: Bad value for 'user_id' [ 45.014899][ T1107] fuse: Invalid gid '00000000000037777777777' [ 45.021231][ T677] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 45.029152][ T1106] fuse: Invalid gid '00000000000037777777777' [ 45.041247][ T1106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.091285][ T333] usb 1-1: device descriptor read/64, error -71 [ 45.182405][ T677] usb 3-1: config 0 interface 0 has no altsetting 0 [ 45.189084][ T677] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 45.198210][ T677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.207088][ T677] usb 3-1: config 0 descriptor?? [ 45.299894][ T1120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.300585][ T1120] netlink: 'syz.1.252': attribute type 16 has an invalid length. [ 45.315154][ T1120] netlink: 'syz.1.252': attribute type 2 has an invalid length. [ 45.323374][ T1120] netlink: 64110 bytes leftover after parsing attributes in process `syz.1.252'. [ 45.332880][ T1120] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.332900][ T1120] rust_binder: Read failure Err(EFAULT) in pid:161 [ 45.333580][ T1121] binder: Unknown parameter 'context[7' [ 45.353575][ T333] usb 1-1: device descriptor read/64, error -71 [ 45.461799][ T333] usb usb1-port1: attempt power cycle [ 45.508339][ T1139] __vm_enough_memory: pid: 1139, comm: syz.1.258, bytes: 18014402804453376 not enough memory for the allocation [ 45.555933][ T1148] netlink: 308 bytes leftover after parsing attributes in process `syz.1.261'. [ 45.570975][ T1148] rust_binder: Error in use_page_slow: ESRCH [ 45.571008][ T1148] rust_binder: use_range failure ESRCH [ 45.577068][ T1148] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 45.582642][ T1148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 45.590693][ T1148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:178 [ 45.614219][ T1151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.616106][ T677] hid (null): invalid report_size 1869505638 [ 45.645545][ T1151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.645581][ T1151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 45.651296][ T677] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0003/input/input9 [ 45.655649][ T1151] rust_binder: 181: no such ref 0 [ 45.680831][ T677] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0003/input/input10 [ 45.680894][ T1151] rust_binder: 181: no such ref 6 [ 45.711301][ T677] kye 0003:0458:5019.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 45.719017][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.776166][ T1155] rust_binder: Error in use_page_slow: ESRCH [ 45.782720][ T1155] rust_binder: use_range failure ESRCH [ 45.788805][ T1155] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 45.794423][ T1155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 45.802508][ T333] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 45.809165][ T1155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:183 [ 45.825176][ T677] usb 3-1: USB disconnect, device number 11 [ 45.843727][ T333] usb 1-1: device descriptor read/8, error -71 [ 45.895479][ T1158] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 45.903122][ T1158] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 45.937676][ T1160] rust_binder: inc_ref_done called when no active inc_refs [ 45.972387][ T333] usb 1-1: device descriptor read/8, error -71 [ 46.061413][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 46.061432][ T36] audit: type=1400 audit(1760590808.180:304): avc: denied { connect } for pid=1169 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.204500][ T36] audit: type=1400 audit(1760590808.320:305): avc: denied { write } for pid=1179 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.223934][ T333] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 46.247149][ T36] audit: type=1400 audit(1760590808.360:306): avc: denied { write } for pid=1183 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.266644][ T677] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 46.275434][ T333] usb 1-1: device descriptor read/8, error -71 [ 46.412450][ T333] usb 1-1: device descriptor read/8, error -71 [ 46.421390][ T677] usb 3-1: Using ep0 maxpacket: 32 [ 46.427910][ T677] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.439770][ T677] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 46.448963][ T677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.457072][ T677] usb 3-1: Product: syz [ 46.461291][ T677] usb 3-1: Manufacturer: syz [ 46.465912][ T677] usb 3-1: SerialNumber: syz [ 46.473913][ T677] usb 3-1: config 0 descriptor?? [ 46.479706][ T677] usb 3-1: bad CDC descriptors [ 46.484827][ T677] usb 3-1: unsupported MDLM descriptors [ 46.521427][ T333] usb usb1-port1: unable to enumerate USB device [ 46.681290][ T330] usb 3-1: USB disconnect, device number 12 [ 46.775712][ T1193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 46.784846][ T1193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.278'. [ 46.801266][ T333] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 46.941308][ T333] usb 2-1: device descriptor read/64, error -71 [ 47.119376][ T1207] syz.0.283 uses obsolete (PF_INET,SOCK_PACKET) [ 47.191524][ T333] usb 2-1: device descriptor read/64, error -71 [ 47.206202][ T36] audit: type=1400 audit(1760590809.320:307): avc: denied { getattr } for pid=1210 comm="syz.2.285" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.206244][ T1211] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 47.242021][ T36] audit: type=1400 audit(1760590809.360:308): avc: denied { mounton } for pid=1210 comm="syz.2.285" path="/61/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.242257][ T1211] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 47.298053][ T36] audit: type=1400 audit(1760590809.410:309): avc: denied { read } for pid=1210 comm="syz.2.285" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.321054][ T36] audit: type=1400 audit(1760590809.410:310): avc: denied { open } for pid=1210 comm="syz.2.285" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.358527][ T1215] rust_binder: 215: no such ref 2 [ 47.363780][ T1215] rust_binder: 215: no such ref 2 [ 47.407788][ T36] audit: type=1400 audit(1760590809.520:311): avc: denied { ioctl } for pid=1222 comm="syz.3.289" path="socket:[9487]" dev="sockfs" ino=9487 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.441397][ T333] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 47.493877][ T36] audit: type=1400 audit(1760590809.610:312): avc: denied { bind } for pid=1234 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.531403][ T1238] rust_binder: Error while translating object. [ 47.531463][ T1238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 47.537770][ T1238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:220 [ 47.558428][ T1243] rust_binder: Write failure EFAULT in pid:205 [ 47.581227][ T333] usb 2-1: device descriptor read/64, error -71 [ 47.601732][ T1251] 9pnet_fd: Insufficient options for proto=fd [ 47.841289][ T333] usb 2-1: device descriptor read/64, error -71 [ 47.951349][ T333] usb usb2-port1: attempt power cycle [ 48.291250][ T333] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 48.309596][ T36] audit: type=1400 audit(1760590810.420:313): avc: denied { read write } for pid=1257 comm="syz.0.302" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.313207][ T333] usb 2-1: device descriptor read/8, error -71 [ 48.459620][ T1261] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 48.462294][ T333] usb 2-1: device descriptor read/8, error -71 [ 48.658344][ T1268] bridge0: port 3(veth0_vlan) entered blocking state [ 48.665214][ T1268] bridge0: port 3(veth0_vlan) entered disabled state [ 48.672159][ T1268] veth0_vlan: entered allmulticast mode [ 48.678255][ T1268] bridge0: port 3(veth0_vlan) entered blocking state [ 48.685027][ T1268] bridge0: port 3(veth0_vlan) entered forwarding state [ 48.711301][ T333] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 48.731233][ T332] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 48.736513][ T333] usb 2-1: device descriptor read/8, error -71 [ 48.866667][ T1285] tipc: Started in network mode [ 48.871686][ T1285] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 48.872658][ T333] usb 2-1: device descriptor read/8, error -71 [ 48.881054][ T1285] tipc: Enabled bearer , priority 10 [ 48.893093][ T332] usb 3-1: Using ep0 maxpacket: 8 [ 48.899983][ T332] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 118, changing to 10 [ 48.912245][ T1287] netlink: 'syz.3.314': attribute type 4 has an invalid length. [ 48.912307][ T332] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.933077][ T332] usb 3-1: config 1 interface 0 has no altsetting 0 [ 48.941375][ T332] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.40 [ 48.950517][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.958787][ T332] usb 3-1: Product: ఁ [ 48.963324][ T332] usb 3-1: Manufacturer: ј [ 48.964552][ T1289] overlayfs: failed to clone upperpath [ 48.967863][ T332] usb 3-1: SerialNumber: 䵏坒爫꺯鑆맯♵멖䚄裾✥ग़訄꨸䣺㏾ↅ맓휆荡 [ 48.991369][ T333] usb usb2-port1: unable to enumerate USB device [ 49.186125][ T332] usbhid 3-1:1.0: can't add hid device: -71 [ 49.194573][ T1299] netlink: 'syz.0.320': attribute type 4 has an invalid length. [ 49.197956][ T332] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 49.216375][ T332] usb 3-1: USB disconnect, device number 13 [ 49.511300][ T333] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 49.681245][ T333] usb 1-1: Using ep0 maxpacket: 32 [ 49.693855][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 49.714527][ T333] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 49.727670][ T333] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 49.736801][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.750718][ T333] usb 1-1: config 0 descriptor?? [ 49.991276][ T332] tipc: Node number set to 4269801494 [ 50.276027][ T1331] netlink: 44 bytes leftover after parsing attributes in process `syz.1.331'. [ 50.291908][ T1331] rust_binder: Error in use_page_slow: ESRCH [ 50.291927][ T1331] rust_binder: use_range failure ESRCH [ 50.298031][ T1331] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 50.303716][ T1331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.311634][ T1331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:193 [ 50.335585][ T1333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.346048][ T1333] rust_binder: Error in use_page_slow: ESRCH [ 50.346072][ T1334] rust_binder: Error in use_page_slow: ESRCH [ 50.352888][ T1333] rust_binder: use_range failure ESRCH [ 50.358894][ T1334] rust_binder: use_range failure ESRCH [ 50.364884][ T1333] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 50.380251][ T1333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.384422][ T1334] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 50.388582][ T1333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:195 [ 50.405817][ T1334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.405853][ T1334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:195 [ 50.439820][ T1336] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.449989][ T1336] rust_binder: Error in use_page_slow: ESRCH [ 50.458191][ T1336] rust_binder: use_range failure ESRCH [ 50.464291][ T1336] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 50.469845][ T1336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.477911][ T1336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:198 [ 50.487841][ T1337] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.497403][ T1338] rust_binder: Error in use_page_slow: ESRCH [ 50.504014][ T1338] rust_binder: use_range failure ESRCH [ 50.506374][ T333] usbhid 1-1:0.0: can't add hid device: -71 [ 50.510116][ T1338] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 50.517353][ T333] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 50.523207][ T1338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.531839][ T333] usb 1-1: USB disconnect, device number 14 [ 50.549482][ T1338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:198 [ 50.567662][ T1340] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.665383][ T1342] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 50.685103][ T1344] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.699303][ T1344] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 50.707209][ T1344] 8021q: VLANs not supported on ip_vti0 [ 50.721574][ T1344] rust_binder: Write failure EFAULT in pid:221 [ 50.782093][ T1340] rust_binder: Error in use_page_slow: ESRCH [ 50.788326][ T1340] rust_binder: use_range failure ESRCH [ 50.794419][ T1340] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 50.799914][ T1340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.808022][ T1340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:202 [ 51.189831][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 51.189852][ T36] audit: type=1400 audit(1760590813.300:324): avc: denied { accept } for pid=1358 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.225248][ T333] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.251197][ T36] audit: type=1400 audit(1760590813.360:325): avc: denied { create } for pid=1363 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.271462][ T36] audit: type=1400 audit(1760590813.390:326): avc: denied { ioctl } for pid=1363 comm="syz.0.343" path="socket:[8755]" dev="sockfs" ino=8755 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.362219][ T333] usb 3-1: device descriptor read/64, error -71 [ 51.511217][ T332] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 51.601394][ T333] usb 3-1: device descriptor read/64, error -71 [ 51.661225][ T332] usb 1-1: Using ep0 maxpacket: 8 [ 51.661226][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 51.675349][ T332] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 51.683749][ T332] usb 1-1: config 179 has no interface number 0 [ 51.690093][ T332] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 51.701375][ T332] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 51.713420][ T332] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 51.723549][ T332] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 51.736886][ T332] usb 1-1: config 179 interface 65 has no altsetting 0 [ 51.743808][ T332] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 51.752874][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.821246][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 51.827619][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 51.838585][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.847631][ T333] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 51.856016][ T45] usb 2-1: config 0 descriptor?? [ 51.962523][ T677] usb 1-1: USB disconnect, device number 15 [ 51.991230][ T333] usb 3-1: device descriptor read/64, error -71 [ 52.231309][ T333] usb 3-1: device descriptor read/64, error -71 [ 52.263571][ T45] kye 0003:0458:5016.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 52.274955][ T45] kye 0003:0458:5016.0004: hidraw0: USB HID v1.05 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 52.286149][ T45] kye 0003:0458:5016.0004: tablet-enabling feature report not found [ 52.294428][ T45] kye 0003:0458:5016.0004: tablet enabling failed [ 52.341312][ T333] usb usb3-port1: attempt power cycle [ 52.463879][ T1369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.466361][ T36] audit: type=1326 audit(1760590814.580:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 52.487785][ T1369] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 52.496153][ T1369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 52.504538][ T1369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:208 [ 52.505500][ T36] audit: type=1326 audit(1760590814.580:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 52.515337][ T36] audit: type=1326 audit(1760590814.600:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 52.571082][ T36] audit: type=1326 audit(1760590814.600:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 52.594536][ T36] audit: type=1326 audit(1760590814.600:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 52.617761][ T36] audit: type=1326 audit(1760590814.600:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 52.641825][ T36] audit: type=1326 audit(1760590814.600:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 52.684611][ T1380] overlayfs: missing 'lowerdir' [ 52.691328][ T333] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 52.712259][ T333] usb 3-1: device descriptor read/8, error -71 [ 52.733041][ T332] usb 2-1: USB disconnect, device number 15 [ 52.842259][ T333] usb 3-1: device descriptor read/8, error -71 [ 52.957343][ T1405] overlayfs: missing 'lowerdir' [ 53.015006][ T1407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.358'. [ 53.104356][ T333] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 53.149302][ T333] usb 3-1: device descriptor read/8, error -71 [ 53.298918][ T333] usb 3-1: device descriptor read/8, error -71 [ 53.373809][ T1429] overlayfs: failed to clone upperpath [ 53.384479][ T1431] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.391553][ T1431] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 53.401285][ T1431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 53.409347][ T1431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:215 [ 53.422124][ T333] usb usb3-port1: unable to enumerate USB device [ 53.772676][ T1437] overlayfs: failed to resolve './file1': -2 [ 53.788877][ T1447] No source specified [ 54.033373][ T1460] rust_binder: Write failure EINVAL in pid:235 [ 54.048306][ T1462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.054938][ T1462] rust_binder: Error in use_page_slow: ESRCH [ 54.061757][ T1462] rust_binder: use_range failure ESRCH [ 54.067859][ T1462] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 54.075171][ T1462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.083276][ T1462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:237 [ 54.114894][ T1464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 54.155931][ T1464] binder: Unknown parameter '0x000000000000000400000000000000000000010' [ 54.711301][ T330] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 54.723209][ T1480] syz.2.384 (1480): attempted to duplicate a private mapping with mremap. This is not supported. [ 54.862460][ T330] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 54.874883][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.885097][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 54.899357][ T330] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 54.908468][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.916535][ T330] usb 2-1: Product: syz [ 54.920703][ T330] usb 2-1: Manufacturer: syz [ 54.925443][ T330] usb 2-1: SerialNumber: syz [ 54.930724][ T330] usb 2-1: config 0 descriptor?? [ 54.937894][ T330] usb-storage 2-1:0.0: USB Mass Storage device detected [ 54.946163][ T330] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 55.115839][ T1488] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 55.123261][ T1488] rust_binder: Write failure EINVAL in pid:282 [ 55.138980][ T330] usb 2-1: USB disconnect, device number 16 [ 55.155967][ T1491] binder: Unknown parameter 'zq§YsX&%BaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaHӭxVtx}@(x [ 55.155967][ T1491] cd8}3M' [ 55.315288][ T1495] binder: Bad value for 'max' [ 55.552337][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 55.557263][ T1497] rust_binder: Error while translating object. [ 55.560112][ T1497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.566766][ T1497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 55.589415][ T1499] 9pnet_fd: Insufficient options for proto=fd [ 55.682309][ T1503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.682670][ T1503] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 55.689166][ T1503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 55.697310][ T1503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:251 [ 55.711229][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 55.737476][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.751197][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 55.761127][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.769399][ T9] usb 1-1: Product: syz [ 55.774016][ T9] usb 1-1: Manufacturer: syz [ 55.778680][ T9] usb 1-1: SerialNumber: syz [ 55.784308][ T9] usb 1-1: config 0 descriptor?? [ 55.790445][ T9] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 55.799725][ T9] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 55.886848][ T1509] rust_binder: Error in use_page_slow: ESRCH [ 55.886874][ T1509] rust_binder: use_range failure ESRCH [ 55.896179][ T1509] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 55.902030][ T1509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 55.910240][ T1509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:256 [ 55.946428][ T1517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 55.946744][ T1518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 55.967008][ T1517] netlink: 388 bytes leftover after parsing attributes in process `syz.1.396'. [ 56.132413][ T1533] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.133122][ T1533] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 56.139698][ T1533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 56.141437][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 56.148026][ T1533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:273 [ 56.312809][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 56.332119][ T9] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 56.343073][ T9] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.356021][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 56.364396][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=00ed, bcdDevice= 0.40 [ 56.373579][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.381646][ T9] usb 3-1: Product: И [ 56.385799][ T9] usb 3-1: Manufacturer: 톄↯飼窂៙廮栈闙떘퓮樰켊ӎ螏맿槳酡᫅땟藕ᵖ䓃냐觔噠鿛跭∌䀟⩁蛚ﹸƬ఍햺ꒋ᳥셪醇嚌䆯᠟᛫⾑훲迻鼔ඨ㹦컻儢ⱷ䡯ﭩ瑒릿ᄆꥋ箮㣊舱墬⚒轩䐺႑뛡⇞ㇸ豅댭鈪䷔偹鯥뒺쨚ᒒ惓ꭵ앆㿐⸖⡖␎셯㈫쨗蚺掃玺몖΂쁓橖狼뀜鉈 [ 56.417239][ T9] usb 3-1: SerialNumber: 㐊 [ 56.422886][ T1511] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 56.530182][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 56.530201][ T36] audit: type=1400 audit(1760590818.640:369): avc: denied { mounton } for pid=1537 comm="syz.3.402" path="/133/file0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 56.621322][ T677] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 56.632974][ T1512] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 56.641908][ T1540] futex_wake_op: syz.3.402 tries to shift op by 144; fix this program [ 56.647817][ T1511] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 56.663418][ T1512] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 56.678755][ T1512] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 56.801229][ T677] usb 2-1: Using ep0 maxpacket: 32 [ 56.808550][ T677] usb 2-1: config 121 has an invalid interface number: 255 but max is 2 [ 56.817045][ T677] usb 2-1: config 121 has an invalid interface number: 4 but max is 2 [ 56.825301][ T677] usb 2-1: config 121 has an invalid interface number: 135 but max is 2 [ 56.833913][ T677] usb 2-1: config 121 contains an unexpected descriptor of type 0x1, skipping [ 56.842825][ T677] usb 2-1: config 121 has no interface number 0 [ 56.849102][ T677] usb 2-1: config 121 has no interface number 1 [ 56.855410][ T677] usb 2-1: config 121 has no interface number 2 [ 56.861745][ T677] usb 2-1: config 121 interface 255 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 56.873007][ T677] usb 2-1: config 121 interface 4 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 56.883905][ T677] usb 2-1: config 121 interface 4 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 56.895539][ T677] usb 2-1: config 121 interface 4 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 56.896658][ T1511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.907138][ T677] usb 2-1: config 121 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 56.915925][ T1511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.926567][ T677] usb 2-1: config 121 interface 4 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 56.934452][ T9] usb 3-1: USB disconnect, device number 18 [ 56.945080][ T677] usb 2-1: config 121 interface 4 altsetting 0 endpoint 0x87 has invalid maxpacket 60137, setting to 64 [ 56.962298][ T677] usb 2-1: config 121 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 56.973253][ T677] usb 2-1: config 121 interface 4 altsetting 0 endpoint 0xB has an invalid bInterval 50, changing to 7 [ 56.984431][ T677] usb 2-1: config 121 interface 4 altsetting 0 endpoint 0xB has invalid maxpacket 42385, setting to 1024 [ 56.995788][ T677] usb 2-1: config 121 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 57.006688][ T677] usb 2-1: config 121 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 57.017593][ T677] usb 2-1: config 121 interface 4 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 57.028344][ T677] usb 2-1: config 121 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 57.039268][ T677] usb 2-1: config 121 interface 4 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 57.050015][ T677] usb 2-1: config 121 interface 4 altsetting 0 endpoint 0x8 has an invalid bInterval 121, changing to 10 [ 57.061549][ T677] usb 2-1: config 121 interface 4 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 57.072539][ T677] usb 2-1: config 121 interface 4 altsetting 0 has 18 endpoint descriptors, different from the interface descriptor's value: 16 [ 57.086066][ T677] usb 2-1: config 121 interface 135 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 57.097064][ T677] usb 2-1: config 121 interface 135 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 57.108146][ T677] usb 2-1: config 121 interface 135 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 57.119241][ T677] usb 2-1: config 121 interface 135 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 57.130336][ T677] usb 2-1: config 121 interface 135 altsetting 13 has a duplicate endpoint with address 0x9, skipping [ 57.141375][ T677] usb 2-1: config 121 interface 135 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 57.152365][ T677] usb 2-1: config 121 interface 135 altsetting 13 bulk endpoint 0xA has invalid maxpacket 1024 [ 57.162746][ T677] usb 2-1: config 121 interface 135 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 57.173987][ T677] usb 2-1: config 121 interface 135 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 57.185102][ T677] usb 2-1: config 121 interface 135 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 57.196088][ T677] usb 2-1: config 121 interface 135 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 57.207250][ T677] usb 2-1: config 121 interface 135 altsetting 13 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 57.220789][ T677] usb 2-1: config 121 interface 255 has no altsetting 0 [ 57.228364][ T677] usb 2-1: config 121 interface 135 has no altsetting 0 [ 57.236848][ T677] usb 2-1: New USB device found, idVendor=413c, idProduct=8116, bcdDevice=31.48 [ 57.246057][ T677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.254121][ T677] usb 2-1: Product: 樬浝턨⇃㼚ꐵ詍섶ꜳ輑䱪英헬ඐ⚤뱧橰듫饑홣ⅉ쾴㕔炈䫄⎗霦篜쫳⪼焈쫨ﱌ劕㺡ཛྷ⤢檞᳟⸑쬉܃磸⵮満汩毫鏂ꆈ䘜ᐝ⶟烹쵺䩄븯蚖꓌䷹蔠⦊ࡸ῱ၱ풝ᠡ鵧ꈾ褂e࢐⡁䅊璓袊핢뱛䤟硊벌ᠳ穛ᠾ冀䈯促ங鷦懧䘠ⱐܴ䒇쏯婅㵭 [ 57.285586][ T677] usb 2-1: Manufacturer: 쀡䉎차턤촚嗚屷䦼晴꺊޻夅珹梵훳糓힖㎭딣ㅈ䥕㚖쉍袝탌ᑷ뾠颲琁脆鬆薬姹掖癑첈琠䲲렙냝㮷됃㦵ⲛ՛言뷰뛱뙵왾䯇秔矽눯㢠鏎趻쵚읂 [ 57.307602][ T677] usb 2-1: SerialNumber: h [ 57.513436][ T36] audit: type=1400 audit(1760590819.630:370): avc: denied { create } for pid=1573 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 57.539897][ T36] audit: type=1400 audit(1760590819.650:371): avc: denied { create } for pid=1535 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.564876][ T677] usb 2-1: bad CDC descriptors [ 57.573818][ T677] usb 2-1: USB disconnect, device number 17 [ 57.678802][ T1580] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 57.724273][ T36] audit: type=1400 audit(1760590819.840:372): avc: denied { connect } for pid=1588 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.752317][ T36] audit: type=1400 audit(1760590819.840:373): avc: denied { write } for pid=1588 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.823785][ T1593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1593 comm=syz.2.419 [ 57.836791][ T1593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.419'. [ 58.157593][ T1610] __vm_enough_memory: pid: 1610, comm: syz.2.423, bytes: 18014402804453376 not enough memory for the allocation [ 58.194227][ T1614] netlink: 104 bytes leftover after parsing attributes in process `syz.1.424'. [ 58.320918][ T9] usb 1-1: USB disconnect, device number 16 [ 58.500257][ T36] audit: type=1400 audit(1760590820.610:374): avc: denied { mounton } for pid=1639 comm="syz.0.432" path="/98/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 58.524294][ T36] audit: type=1400 audit(1760590820.610:375): avc: denied { remount } for pid=1639 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 58.546013][ T36] audit: type=1400 audit(1760590820.640:376): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 58.570675][ T1645] overlayfs: missing 'workdir' [ 58.596639][ T36] audit: type=1400 audit(1760590820.710:377): avc: denied { write } for pid=1647 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 58.616004][ T36] audit: type=1400 audit(1760590820.710:378): avc: denied { read } for pid=1647 comm="syz.2.436" path="socket:[11104]" dev="sockfs" ino=11104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.625553][ T1654] syz.2.437: attempt to access beyond end of device [ 58.625553][ T1654] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 58.653560][ T1654] FAT-fs (loop2): unable to read boot sector [ 58.709361][ T677] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 58.716938][ T333] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.725462][ T677] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.814001][ T1666] 9pnet_fd: Insufficient options for proto=fd [ 58.821063][ T1666] netlink: 68 bytes leftover after parsing attributes in process `syz.2.440'. [ 58.891274][ T333] usb 2-1: Using ep0 maxpacket: 32 [ 58.900271][ T333] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 58.909663][ T333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.917929][ T333] usb 2-1: Product: syz [ 58.922158][ T333] usb 2-1: Manufacturer: syz [ 58.927176][ T333] usb 2-1: SerialNumber: syz [ 58.933093][ T333] usb 2-1: config 0 descriptor?? [ 58.936068][ T1678] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 58.959219][ T1680] overlayfs: missing 'workdir' [ 59.080493][ T1705] overlayfs: failed to clone upperpath [ 59.101291][ T677] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 59.113128][ T1709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=1709 comm=syz.3.455 [ 59.186850][ T332] usb 2-1: USB disconnect, device number 18 [ 59.261351][ T677] usb 3-1: Using ep0 maxpacket: 8 [ 59.268133][ T677] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 59.275776][ T677] usb 3-1: can't read configurations, error -61 [ 59.411363][ T677] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 59.561273][ T677] usb 3-1: Using ep0 maxpacket: 8 [ 59.567879][ T677] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 59.575626][ T677] usb 3-1: can't read configurations, error -61 [ 59.582059][ T677] usb usb3-port1: attempt power cycle [ 59.710544][ T1736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.765640][ T1740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.823391][ T1750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 59.838905][ T1750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'. [ 59.921335][ T677] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 59.941796][ T677] usb 3-1: Using ep0 maxpacket: 8 [ 59.952264][ T677] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 59.959890][ T677] usb 3-1: can't read configurations, error -61 [ 60.061269][ T31] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 60.091275][ T677] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 60.111703][ T677] usb 3-1: Using ep0 maxpacket: 8 [ 60.118334][ T677] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 60.126294][ T677] usb 3-1: can't read configurations, error -61 [ 60.132766][ T677] usb usb3-port1: unable to enumerate USB device [ 60.212606][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.223626][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.233519][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 60.242633][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.251557][ T31] usb 2-1: config 0 descriptor?? [ 60.257596][ T31] usbhid 2-1:0.0: can't add hid device: -22 [ 60.263741][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 60.502662][ T333] usb 2-1: USB disconnect, device number 19 [ 60.721293][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 60.851348][ T31] usb 1-1: device descriptor read/64, error -71 [ 61.091229][ T31] usb 1-1: device descriptor read/64, error -71 [ 61.171435][ T1794] 9pnet_fd: Insufficient options for proto=fd [ 61.195228][ T1799] rust_binder: Write failure EFAULT in pid:305 [ 61.214255][ T1803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.220645][ T1803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.227600][ T1803] rust_binder: Error in use_page_slow: ESRCH [ 61.229539][ T1806] rust_binder: Error in use_page_slow: ESRCH [ 61.234177][ T1803] rust_binder: use_range failure ESRCH [ 61.244610][ T1806] rust_binder: use_range failure ESRCH [ 61.247085][ T1803] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 61.257780][ T1806] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 61.259761][ T1803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.270930][ T1806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.274969][ T1803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:307 [ 61.283743][ T1806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:307 [ 61.308843][ T1811] 9pnet: Could not find request transport: fB [ 61.336062][ T1813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 61.351288][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 61.481388][ T31] usb 1-1: device descriptor read/64, error -71 [ 61.541343][ T333] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 61.691371][ T333] usb 2-1: Using ep0 maxpacket: 8 [ 61.698328][ T333] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 61.709906][ T333] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 61.721251][ T333] usb 2-1: config 1 interface 0 has no altsetting 0 [ 61.728324][ T31] usb 1-1: device descriptor read/64, error -71 [ 61.736031][ T333] usb 2-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.40 [ 61.745302][ T333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.753490][ T333] usb 2-1: Product: syz [ 61.757781][ T333] usb 2-1: Manufacturer: 㠁 [ 61.762468][ T333] usb 2-1: SerialNumber: syz [ 61.841365][ T31] usb usb1-port1: attempt power cycle [ 61.895210][ T1820] capability: warning: `syz.2.496' uses 32-bit capabilities (legacy support in use) [ 61.923880][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 61.923898][ T36] audit: type=1400 audit(1760590824.038:384): avc: denied { read } for pid=1823 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.950558][ T36] audit: type=1400 audit(1760590824.038:385): avc: denied { ioctl } for pid=1823 comm="syz.3.498" path="socket:[12014]" dev="sockfs" ino=12014 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.973084][ T1831] netlink: 64 bytes leftover after parsing attributes in process `syz.2.500'. [ 62.008263][ T1839] 9pnet_fd: Insufficient options for proto=fd [ 62.180399][ T333] usbhid 2-1:1.0: can't add hid device: -71 [ 62.186658][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 62.194375][ T333] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 62.203429][ T333] usb 2-1: USB disconnect, device number 20 [ 62.222286][ T31] usb 1-1: device descriptor read/8, error -71 [ 62.281311][ T332] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 62.352364][ T31] usb 1-1: device descriptor read/8, error -71 [ 62.442667][ T332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.452914][ T332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.463341][ T332] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.472460][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.481015][ T332] usb 3-1: Product: syz [ 62.485300][ T332] usb 3-1: Manufacturer: syz [ 62.490091][ T332] usb 3-1: SerialNumber: syz [ 62.591273][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 62.612467][ T31] usb 1-1: device descriptor read/8, error -71 [ 62.718128][ T332] usb 3-1: 0:2 : does not exist [ 62.726525][ T332] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 62.740237][ T332] usb 3-1: USB disconnect, device number 23 [ 62.748832][ T31] usb 1-1: device descriptor read/8, error -71 [ 62.749262][ T1851] loop2: detected capacity change from 0 to 8388607 [ 62.776566][ T344] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 62.871324][ T31] usb usb1-port1: unable to enumerate USB device [ 63.016993][ T1867] /dev/rnullb0: Can't open blockdev [ 63.039382][ T1869] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.039585][ T1869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 63.046188][ T1869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:328 [ 63.301282][ T333] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 63.408278][ T1873] 9pnet_fd: Insufficient options for proto=fd [ 63.468722][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.481302][ T333] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 63.489659][ T1887] rust_binder: 334: no such ref 3 [ 63.492237][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.497034][ T1887] rust_binder: 334: no such ref 1 [ 63.507982][ T333] usb 2-1: config 0 descriptor?? [ 63.512924][ T1887] rust_binder: Write failure EFAULT in pid:334 [ 63.558731][ T36] audit: type=1400 audit(1760590825.668:386): avc: denied { remount } for pid=1896 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.710939][ T36] audit: type=1400 audit(1760590825.818:387): avc: denied { setopt } for pid=1909 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.762265][ T36] audit: type=1400 audit(1760590825.878:388): avc: denied { read write } for pid=1911 comm="syz.0.527" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.787059][ T36] audit: type=1400 audit(1760590825.878:389): avc: denied { open } for pid=1911 comm="syz.0.527" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.869676][ T36] audit: type=1400 audit(1760590825.978:390): avc: denied { getopt } for pid=1915 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.914001][ T1923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.530'. [ 63.923288][ T1923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.923315][ T1923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 63.934520][ T1923] netlink: 44 bytes leftover after parsing attributes in process `syz.0.530'. [ 64.013609][ T1934] ./file0: Can't lookup blockdev [ 64.033454][ T36] audit: type=1400 audit(1760590826.148:391): avc: denied { read write } for pid=1935 comm="syz.0.534" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.058035][ T36] audit: type=1400 audit(1760590826.148:392): avc: denied { open } for pid=1935 comm="syz.0.534" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.136893][ T333] usbhid 2-1:0.0: can't add hid device: -71 [ 64.142975][ T333] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 64.152099][ T333] usb 2-1: USB disconnect, device number 21 [ 64.474477][ T1940] __vm_enough_memory: pid: 1940, comm: syz.2.536, bytes: 18014402804453376 not enough memory for the allocation [ 64.861257][ T330] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 64.881200][ T1987] rust_binder: 371: no such ref 0 [ 65.021247][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 65.027750][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.038780][ T330] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 65.047952][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.057352][ T330] usb 3-1: config 0 descriptor?? [ 65.341240][ T31] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 65.466353][ T330] elo 0003:04E7:0009.0006: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.2-1/input0 [ 65.492403][ T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.500780][ T31] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 65.511331][ T31] usb 1-1: config 179 has no interface number 0 [ 65.517667][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 65.528091][ T31] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 65.541565][ T31] usb 1-1: config 179 interface 65 has no altsetting 0 [ 65.548626][ T31] usb 1-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 65.554003][ T36] audit: type=1400 audit(1760590827.658:393): avc: denied { ioctl } for pid=2009 comm="syz.1.559" path="/111/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.558255][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.667403][ T333] usb 3-1: USB disconnect, device number 24 [ 65.796215][ T1998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.804798][ T1998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.813294][ T677] usb 1-1: USB disconnect, device number 21 [ 65.858522][ T2013] overlayfs: failed to clone upperpath [ 66.104234][ T2026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.105238][ T2026] rust_binder: 341: no such ref 0 [ 66.116984][ T2026] rust_binder: 341: no such ref 2 [ 66.291361][ T333] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.311383][ T333] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.390109][ T2037] hid-generic 0000:0000:0000.0007: pid 2037 passed too short report [ 66.398603][ T2037] 9pnet_fd: Insufficient options for proto=fd [ 66.455126][ T2052] rust_binder: 394: no such ref 126 [ 66.460460][ T2052] rust_binder: 394: no such ref 1 [ 66.465879][ T2052] rust_binder: 394: no such ref 0 [ 66.485373][ T2054] rust_binder: Write failure EFAULT in pid:396 [ 66.513642][ T2059] binder: Unknown parameter 'fscontext?}' [ 66.526766][ T2059] binder: Unknown parameter '' [ 66.531791][ T2059] binder: Unknown parameter '' [ 66.536790][ T2059] binder: Unknown parameter '' [ 66.541882][ T2059] binder: Unknown parameter '' [ 66.546872][ T2059] binder: Unknown parameter '' [ 66.552038][ T2059] binder: Unknown parameter '' [ 66.557135][ T2059] binder: Unknown parameter '' [ 66.562170][ T2059] binder: Unknown parameter '' [ 66.567135][ T2059] binder: Unknown parameter '' [ 66.572120][ T2059] binder: Unknown parameter '' [ 66.577242][ T2059] binder: Unknown parameter '' [ 66.582328][ T2059] binder: Unknown parameter '' [ 66.587299][ T2059] binder: Unknown parameter '' [ 66.592329][ T2059] binder: Unknown parameter '' [ 66.597300][ T2059] binder: Unknown parameter '' [ 66.602333][ T2059] binder: Unknown parameter '' [ 66.607296][ T2059] binder: Unknown parameter '' [ 66.612284][ T2059] binder: Unknown parameter '' [ 66.617524][ T2059] binder: Unknown parameter '' [ 66.622514][ T2059] binder: Unknown parameter '' [ 66.627566][ T2059] binder: Unknown parameter '' [ 66.632565][ T2059] binder: Unknown parameter '' [ 66.637511][ T2059] binder: Unknown parameter '' [ 66.642533][ T2059] binder: Unknown parameter '' [ 66.647516][ T2059] binder: Unknown parameter '' [ 66.652535][ T2059] binder: Unknown parameter '' [ 66.657515][ T2059] binder: Unknown parameter '' [ 66.662602][ T2059] binder: Unknown parameter '' [ 66.667668][ T2059] binder: Unknown parameter '' [ 66.672718][ T2059] binder: Unknown parameter '' [ 66.677790][ T2059] binder: Unknown parameter '' [ 66.682801][ T2059] binder: Unknown parameter '' [ 66.700825][ T2063] rust_binder: Error while translating object. [ 66.700863][ T2063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.707154][ T2063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:405 [ 66.743521][ T2065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.755151][ T2068] overlayfs: failed to clone upperpath [ 66.760333][ T2065] IPv6: NLM_F_CREATE should be set when creating new route [ 66.760357][ T2065] IPv6: NLM_F_CREATE should be set when creating new route [ 66.761073][ T2065] rust_binder: Error while translating object. [ 66.780539][ T2065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.787052][ T2065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:407 [ 66.826857][ T2075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 66.866460][ T2080] netlink: 'syz.3.583': attribute type 27 has an invalid length. [ 67.015597][ T2095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.016138][ T2095] rust_binder: 421: no such ref 0 [ 67.028190][ T2095] rust_binder: pid 2095 performed invalid decrement on ref [ 67.035581][ T2094] rust_binder: 421: no such ref 0 [ 67.041265][ T2094] rust_binder: pid 2094 performed invalid decrement on ref [ 67.051898][ T2100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.590'. [ 67.097142][ T2094] rust_binder: Write failure EFAULT in pid:421 [ 67.097192][ T2094] rust_binder: Write failure EFAULT in pid:421 [ 67.187252][ T2108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 67.193553][ T2108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:426 [ 67.221411][ T330] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 67.367424][ T2119] rust_binder: Error while translating object. [ 67.367470][ T2119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.373779][ T2119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:437 [ 67.382467][ T330] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 67.403482][ T330] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.419690][ T330] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 67.431303][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.447110][ T330] usb 2-1: Product: syz [ 67.451568][ T330] usb 2-1: Manufacturer: syz [ 67.467338][ T330] usb 2-1: SerialNumber: syz [ 67.474850][ T330] rtl8150 2-1:1.0: couldn't find required endpoints [ 67.491248][ T330] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 67.550261][ T2146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.604'. [ 67.559468][ T2146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 67.676582][ T2092] rust_binder: Write failure EFAULT in pid:347 [ 67.677085][ T677] usb 2-1: USB disconnect, device number 22 [ 68.121315][ T332] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 68.260504][ T2182] netlink: 'syz.3.618': attribute type 27 has an invalid length. [ 68.273839][ T332] usb 3-1: not running at top speed; connect to a high speed hub [ 68.284283][ T2184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.286052][ T332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 68.304506][ T332] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 68.317025][ T332] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.326467][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.334693][ T332] usb 3-1: Product: syz [ 68.338995][ T332] usb 3-1: Manufacturer: syz [ 68.344759][ T332] usb 3-1: SerialNumber: syz [ 68.350795][ T2176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.434415][ T2199] rust_binder: Write failure EFAULT in pid:461 [ 68.522580][ T677] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 68.562892][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 68.562910][ T36] audit: type=1400 audit(1760590830.678:398): avc: denied { create } for pid=2175 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 68.590263][ T332] cdc_ncm 3-1:1.0: bind() failure [ 68.596362][ T332] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 68.603415][ T332] cdc_ncm 3-1:1.1: bind() failure [ 68.611278][ T332] usb 3-1: USB disconnect, device number 25 [ 68.692437][ T677] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.702659][ T677] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.712372][ T677] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.721263][ T330] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 68.721518][ T677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.737073][ T677] usb 2-1: SerialNumber: syz [ 68.851285][ T330] usb 1-1: device descriptor read/64, error -71 [ 68.945171][ T36] audit: type=1400 audit(1760590831.058:399): avc: denied { append } for pid=2183 comm="syz.1.619" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.945660][ T2184] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 68.968555][ T2184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 68.976762][ T2184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:351 [ 68.990470][ T677] usb 2-1: 0:2 : does not exist [ 69.006998][ T677] usb 2-1: USB disconnect, device number 23 [ 69.093384][ T330] usb 1-1: device descriptor read/64, error -71 [ 69.225016][ T2228] netlink: 'syz.3.634': attribute type 3 has an invalid length. [ 69.247703][ T2230] : renamed from lo (while UP) [ 69.319698][ T2243] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 69.329189][ T2243] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 69.341360][ T330] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 69.424657][ T36] audit: type=1400 audit(1760590831.538:400): avc: denied { create } for pid=2246 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 69.454209][ T2249] fuse: Unknown parameter 'ff' [ 69.460117][ T36] audit: type=1400 audit(1760590831.568:401): avc: denied { ioctl } for pid=2248 comm="syz.2.643" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 69.485225][ T330] usb 1-1: device descriptor read/64, error -71 [ 69.552710][ T2261] netlink: 'syz.2.648': attribute type 12 has an invalid length. [ 69.731256][ T330] usb 1-1: device descriptor read/64, error -71 [ 69.841332][ T330] usb usb1-port1: attempt power cycle [ 69.921224][ T45] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 70.072427][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 70.080699][ T45] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 70.089832][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.097873][ T45] usb 3-1: Product: syz [ 70.102121][ T45] usb 3-1: Manufacturer: syz [ 70.106742][ T45] usb 3-1: SerialNumber: syz [ 70.181268][ T330] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 70.222427][ T330] usb 1-1: device descriptor read/8, error -71 [ 70.322130][ T45] usb 3-1: USB disconnect, device number 26 [ 70.353612][ T330] usb 1-1: device descriptor read/8, error -71 [ 70.601274][ T330] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 70.622245][ T330] usb 1-1: device descriptor read/8, error -71 [ 70.671241][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 70.752488][ T330] usb 1-1: device descriptor read/8, error -71 [ 70.832983][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.844072][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.853956][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 70.863207][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.871467][ T330] usb usb1-port1: unable to enumerate USB device [ 70.878293][ T31] usb 2-1: config 0 descriptor?? [ 70.893941][ T2310] /dev/sg0: Can't lookup blockdev [ 71.097026][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 71.106726][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 71.119410][ T31] usb 2-1: USB disconnect, device number 24 [ 71.707314][ T36] audit: type=1400 audit(1760590833.818:402): avc: denied { unmount } for pid=2365 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.859096][ T2390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 71.868167][ T2390] erspan0: entered promiscuous mode [ 71.873806][ T2388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 71.906601][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 72.009848][ T2400] 9pnet_fd: Insufficient options for proto=fd [ 72.061244][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 72.067833][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 72.076362][ T9] usb 1-1: config 179 has no interface number 0 [ 72.082834][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 72.095426][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 72.107199][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 72.117502][ T9] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 72.130955][ T9] usb 1-1: config 179 interface 65 has no altsetting 0 [ 72.138115][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 72.147262][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.359181][ T333] usb 1-1: USB disconnect, device number 26 [ 72.499407][ T36] audit: type=1400 audit(1760590834.608:403): avc: denied { lock } for pid=2419 comm="syz.1.697" path="socket:[16401]" dev="sockfs" ino=16401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 72.547911][ T2428] bridge0: entered allmulticast mode [ 72.875062][ T36] audit: type=1400 audit(1760590834.988:404): avc: denied { setopt } for pid=2436 comm="syz.0.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.897177][ T36] audit: type=1326 audit(1760590835.008:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2436 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5598eec9 code=0x7ffc0000 [ 72.922664][ T36] audit: type=1326 audit(1760590835.008:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2436 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5598eec9 code=0x7ffc0000 [ 72.946119][ T36] audit: type=1326 audit(1760590835.008:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2436 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1a5598eec9 code=0x7ffc0000 [ 73.285170][ T2447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 73.349725][ T2448] fuse: Unknown parameter 'group_ I{DlxE]ndKbM]jWZh [ 73.349725][ T2448] uk'e\}5"D;!mt>(m<8rej*' [ 73.531402][ T2462] 9pnet_fd: Insufficient options for proto=fd [ 73.553117][ T2468] /dev/loop0: Can't lookup blockdev [ 73.558591][ T2468] /dev/loop0: Can't lookup blockdev [ 73.564183][ T2468] /dev/loop0: Can't lookup blockdev [ 73.569593][ T2468] /dev/loop0: Can't lookup blockdev [ 73.575071][ T2468] /dev/loop0: Can't lookup blockdev [ 73.580458][ T2468] /dev/loop0: Can't lookup blockdev [ 73.585966][ T2468] /dev/loop0: Can't lookup blockdev [ 73.591449][ T2468] /dev/loop0: Can't lookup blockdev [ 73.596982][ T2468] /dev/loop0: Can't lookup blockdev [ 73.602473][ T2468] /dev/loop0: Can't lookup blockdev [ 73.670889][ T2478] netlink: 92 bytes leftover after parsing attributes in process `syz.3.715'. [ 73.680473][ T2478] bridge0: entered allmulticast mode [ 73.718917][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 73.718936][ T36] audit: type=1400 audit(1760590835.828:432): avc: denied { sqpoll } for pid=2481 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.765331][ T2487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32771 sclass=netlink_route_socket pid=2487 comm=syz.3.719 [ 73.841856][ T36] audit: type=1400 audit(1760590835.958:433): avc: denied { accept } for pid=2499 comm="syz.3.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 74.078751][ T36] audit: type=1400 audit(1760590836.188:434): avc: denied { mount } for pid=2515 comm="syz.3.729" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 74.118185][ T2518] rust_binder: 484: no such ref 2 [ 74.156185][ T2520] rust_binder: Error while translating object. [ 74.156246][ T2520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 74.171256][ T2520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:486 [ 74.820768][ T36] audit: type=1400 audit(1760590836.928:435): avc: denied { bind } for pid=2532 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.850008][ T36] audit: type=1400 audit(1760590836.928:436): avc: denied { name_bind } for pid=2532 comm="syz.1.737" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 74.870808][ T36] audit: type=1400 audit(1760590836.928:437): avc: denied { node_bind } for pid=2532 comm="syz.1.737" saddr=fc01:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 74.911058][ T36] audit: type=1400 audit(1760590837.018:438): avc: denied { search } for pid=2536 comm="syz.1.739" name="/" dev="configfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.933191][ T36] audit: type=1400 audit(1760590837.018:439): avc: denied { read } for pid=2536 comm="syz.1.739" name="/" dev="configfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.955159][ T36] audit: type=1400 audit(1760590837.028:440): avc: denied { open } for pid=2536 comm="syz.1.739" path="/" dev="configfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.977740][ T36] audit: type=1400 audit(1760590837.028:441): avc: denied { mounton } for pid=2536 comm="syz.1.739" path="/" dev="configfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.021041][ T2555] SELinux: security_context_str_to_sid (systuGй&*R :) failed with errno=-22 [ 75.464939][ T2583] SELinux: failed to load policy [ 75.471127][ T2583] netlink: 68 bytes leftover after parsing attributes in process `syz.2.753'. [ 75.560381][ T2608] netlink: 68 bytes leftover after parsing attributes in process `syz.3.762'. [ 75.619536][ T2615] tipc: Can't bind to reserved service type 2 [ 75.654648][ T2623] overlayfs: failed to clone upperpath [ 75.895908][ T2652] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 75.931870][ T2652] fuse: Unknown parameter 'g' [ 76.090721][ T2669] rust_binder: Error while translating object. [ 76.090773][ T2669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.107490][ T2669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 76.171947][ T2675] overlayfs: failed to clone upperpath [ 76.219844][ T2677] overlay: ./file0 is not a directory [ 76.313399][ T2688] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 76.591623][ T31] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 76.621245][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 76.742716][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 76.751387][ T31] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 76.761579][ T31] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.774593][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 76.782388][ T9] usb 1-1: config 1 interface 0 altsetting 199 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.783515][ T31] usb 3-1: language id specifier not provided by device, defaulting to English [ 76.796051][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 76.805852][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.813270][ T9] usb 1-1: New USB device found, idVendor=1130, idProduct=3101, bcdDevice= 0.40 [ 76.820378][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.829860][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.837476][ T31] usb 3-1: Product: syz [ 76.846022][ T9] usb 1-1: Product: ࠄ [ 76.849815][ T31] usb 3-1: Manufacturer: syz [ 76.854737][ T9] usb 1-1: Manufacturer: ﳿ [ 76.859068][ T31] usb 3-1: SerialNumber: syz [ 76.864124][ T9] usb 1-1: SerialNumber: 杁﵂ⶤ弲ۺꛭ娚鬖洓瑿䶍틷㒧綌棍듰쎦ܰ%멏ˀ텯㣮♮罩贑當ꋀ성囅ᄫ쿖귥芈㢍干骝茒얞ﴵ鲭듻㷠饖슛Ჾꫥ㘐赓孇 [ 77.280773][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 77.291441][ T31] usb 3-1: USB disconnect, device number 27 [ 77.378217][ T2726] overlay: Unknown parameter 'uid' [ 77.936960][ T2741] SELinux: Context ϧ is not valid (left unmapped). [ 77.977843][ T2747] 9pnet_fd: Insufficient options for proto=fd [ 78.065872][ T2757] /dev/rnullb0: Can't open blockdev [ 78.141893][ T2765] erofs: dax options not supported [ 78.293222][ T2783] tipc: Enabled bearer , priority 0 [ 78.303525][ T2782] tipc: Disabling bearer [ 78.873493][ T2806] 9pnet_fd: Insufficient options for proto=fd [ 78.905786][ T2809] 9pnet_fd: Insufficient options for proto=fd [ 79.183824][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 79.183843][ T36] audit: type=1326 audit(1777368286.299:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 79.213374][ T36] audit: type=1326 audit(1777368286.299:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 79.237119][ T36] audit: type=1326 audit(1777368286.299:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 79.260574][ T36] audit: type=1326 audit(1777368286.299:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 79.284193][ T36] audit: type=1326 audit(1777368286.299:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 79.307532][ T36] audit: type=1326 audit(1777368286.299:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 79.331090][ T36] audit: type=1326 audit(1777368286.299:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 79.354439][ T36] audit: type=1326 audit(1777368286.299:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 79.377876][ T36] audit: type=1326 audit(1777368286.299:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 79.408213][ T36] audit: type=1326 audit(1777368286.309:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2833 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1258eec9 code=0x7ffc0000 [ 79.431249][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 79.437499][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 79.455323][ T9] usb 1-1: USB disconnect, device number 27 [ 79.470381][ T2836] rust_binder: Write failure EFAULT in pid:507 [ 79.793776][ T2861] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 79.822069][ T2863] overlayfs: failed to clone upperpath [ 79.828028][ T2863] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 79.953592][ T2878] 9pnet_fd: Insufficient options for proto=fd [ 80.439106][ T2906] overlayfs: failed to clone lowerpath [ 80.452817][ T2906] rust_binder: Write failure EFAULT in pid:525 [ 80.544594][ T2925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 80.550829][ T2925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:535 [ 80.602813][ T2927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'. [ 80.663611][ T2934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 80.669120][ T2934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:544 [ 80.691218][ T45] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 80.845354][ T2949] fuse: Unknown parameter 'bd"0x0000000000000006' [ 80.851900][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 80.858495][ T45] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 80.870130][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 145, changing to 11 [ 80.881433][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.888073][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 80.899453][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.908851][ T45] usb 3-1: config 0 descriptor?? [ 80.917844][ T2950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.886'. [ 81.321279][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.329114][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.562647][ T2964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 81.562703][ T2964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:551 [ 81.624736][ T2966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 81.634189][ T2966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:553 [ 81.778664][ T2988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.806809][ T2992] binder: Unknown parameter 'obj_user' [ 81.840561][ T2999] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 82.363325][ T3002] netlink: 'syz.3.905': attribute type 16 has an invalid length. [ 82.725293][ T3027] netlink: 96 bytes leftover after parsing attributes in process `syz.0.914'. [ 82.734883][ T3027] rust_binder: Error while translating object. [ 82.734911][ T3027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 82.741306][ T3027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:582 [ 82.813641][ T3031] rust_binder: 586: no such ref 0 [ 82.828307][ T3031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:586 [ 83.381213][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.381271][ T921] Bluetooth: hci0: command 0x1003 tx timeout [ 83.443701][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 83.450142][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 83.459320][ T45] usb 3-1: USB disconnect, device number 28 [ 83.499992][ T3047] 9pnet_fd: Insufficient options for proto=fd [ 83.619762][ T3051] netlink: 'syz.3.922': attribute type 27 has an invalid length. [ 83.749222][ T3053] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 84.087657][ T3074] netlink: 'syz.1.929': attribute type 11 has an invalid length. [ 84.313450][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 84.313470][ T36] audit: type=1400 audit(1777368291.429:517): avc: denied { read } for pid=3081 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.364352][ T36] audit: type=1326 audit(1777368291.479:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3085 comm="syz.3.933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a4cd8eec9 code=0x0 [ 84.461334][ T3096] binder: Unknown parameter ' ' [ 84.480980][ T36] audit: type=1400 audit(1777368291.589:519): avc: denied { mounton } for pid=3097 comm="syz.3.936" path="/326/file0" dev="tmpfs" ino=1809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.797994][ T3118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3118 comm=syz.0.942 [ 84.813247][ T3120] netlink: 'syz.1.943': attribute type 4 has an invalid length. [ 84.926569][ T3132] bridge0: port 3(erspan0) entered blocking state [ 84.933437][ T3132] bridge0: port 3(erspan0) entered disabled state [ 84.940094][ T3132] erspan0: entered allmulticast mode [ 84.946571][ T3132] erspan0: entered promiscuous mode [ 84.952444][ T3132] bridge0: port 3(erspan0) entered blocking state [ 84.958985][ T3132] bridge0: port 3(erspan0) entered forwarding state [ 85.201210][ T45] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 85.356624][ T36] audit: type=1400 audit(1777368292.469:520): avc: denied { setopt } for pid=3152 comm="syz.3.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.388192][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 85.395882][ T45] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 85.411216][ T45] usb 1-1: config 0 has no interface number 0 [ 85.426564][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 85.436911][ T3160] No source specified [ 85.447531][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.462940][ T45] usb 1-1: Product: syz [ 85.471205][ T45] usb 1-1: Manufacturer: syz [ 85.479366][ T45] usb 1-1: SerialNumber: syz [ 85.486624][ T45] usb 1-1: config 0 descriptor?? [ 85.513955][ T3169] x_tables: unsorted underflow at hook 4 [ 85.531262][ T36] audit: type=1400 audit(1777368292.639:521): avc: denied { mount } for pid=3166 comm="syz.1.962" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 85.561477][ T36] audit: type=1400 audit(1777368292.669:522): avc: denied { bind } for pid=3172 comm="syz.1.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.562365][ T3175] sit0: entered promiscuous mode [ 85.588046][ T3175] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 85.595814][ T3175] netlink: 1 bytes leftover after parsing attributes in process `syz.2.965'. [ 85.608976][ T36] audit: type=1400 audit(1777368292.719:523): avc: denied { create } for pid=3172 comm="syz.1.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 85.643635][ T36] audit: type=1400 audit(1777368292.719:524): avc: denied { ioctl } for pid=3174 comm="syz.2.965" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.693429][ T36] audit: type=1400 audit(1777368292.809:525): avc: denied { mount } for pid=3131 comm="syz.0.948" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 85.694253][ T45] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 85.722579][ T45] usb 1-1: No valid video chain found. [ 85.735544][ T45] usb 1-1: USB disconnect, device number 28 [ 85.805761][ T36] audit: type=1400 audit(1777368292.919:526): avc: denied { create } for pid=3181 comm="syz.1.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 86.036411][ T3209] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 86.046816][ T3209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.681234][ T330] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 86.842335][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 86.858410][ T330] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 86.868631][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 86.882638][ T330] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 86.894063][ T330] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 86.902184][ T3289] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1004'. [ 86.903252][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.920665][ T330] usb 1-1: Product: syz [ 86.921876][ T3289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3289 comm=syz.3.1004 [ 86.925120][ T330] usb 1-1: Manufacturer: syz [ 86.942792][ T330] usb 1-1: SerialNumber: syz [ 86.948331][ T330] usb 1-1: config 0 descriptor?? [ 86.955407][ T330] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 87.071240][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 87.156255][ T330] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 87.231325][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 87.237777][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.246140][ T9] usb 3-1: config 179 has no interface number 0 [ 87.252464][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 87.263754][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 87.275218][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 87.285349][ T9] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.298699][ T9] usb 3-1: config 179 interface 65 has no altsetting 0 [ 87.306206][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 87.315438][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.359961][ T3228] rust_binder: Write failure EFAULT in pid:626 [ 87.360344][ T45] usb 1-1: USB disconnect, device number 29 [ 87.528482][ T9] usb 3-1: USB disconnect, device number 29 [ 87.950255][ T3345] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1022'. [ 87.959444][ T3345] 0{X: renamed from bridge_slave_1 (while UP) [ 87.967082][ T3345] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 88.039006][ T3355] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1025'. [ 88.051920][ T3357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.051950][ T3357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.058541][ T3357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.075699][ T329] syzkaller0: tun_net_xmit 76 [ 88.088635][ T329] syzkaller0: tun_net_xmit 48 [ 88.088888][ T3355] syzkaller0: create flow: hash 3602685952 index 1 [ 88.101464][ T31] syzkaller0: tun_net_xmit 76 [ 88.105105][ T3355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 88.121260][ T3355] /dev/rnullb0: Can't open blockdev [ 88.129183][ T3354] syzkaller0: delete flow: hash 3602685952 index 1 [ 88.352483][ T3381] netlink: 'syz.0.1033': attribute type 4 has an invalid length. [ 88.364921][ T3381] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 88.457802][ T3386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.483927][ T3398] rust_binder: Got transaction with invalid offset. [ 88.490923][ T3398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.503839][ T3398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:681 [ 88.538594][ T3409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:659 [ 88.630726][ T3415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'. [ 88.676066][ T3420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.676141][ T3420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.682761][ T3420] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 88.709106][ T3429] rust_binder: Error while translating object. [ 88.717321][ T3429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.723681][ T3429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:669 [ 88.784016][ T3436] 9p: Unknown Cache mode or invalid value mmap [ 88.811228][ T515] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 88.941262][ T515] usb 3-1: device descriptor read/64, error -71 [ 89.141428][ T31] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 89.181219][ T515] usb 3-1: device descriptor read/64, error -71 [ 89.292550][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.302841][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.311955][ T31] usb 1-1: config 1 has no interface number 1 [ 89.318186][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 89.331133][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 89.343678][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.352849][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.360883][ T31] usb 1-1: Product: syz [ 89.365150][ T31] usb 1-1: Manufacturer: syz [ 89.369795][ T31] usb 1-1: SerialNumber: syz [ 89.379916][ T3440] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 89.380291][ T3442] tipc: Enabling of bearer rejected, already enabled [ 89.421732][ T515] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 89.551298][ T515] usb 3-1: device descriptor read/64, error -71 [ 89.576687][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 89.576707][ T36] audit: type=1400 audit(1777368303.687:539): avc: denied { ioctl } for pid=3448 comm="syz.1.1057" path="socket:[19914]" dev="sockfs" ino=19914 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.780637][ T31] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 89.790326][ T31] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 89.801253][ T515] usb 3-1: device descriptor read/64, error -71 [ 89.810038][ T31] usb 1-1: USB disconnect, device number 30 [ 89.831819][ T414] udevd[414]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.911551][ T515] usb usb3-port1: attempt power cycle [ 89.916497][ T3470] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 89.926451][ T3470] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 89.945017][ T36] audit: type=1400 audit(1777368304.057:540): avc: denied { create } for pid=3474 comm="syz.3.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.981792][ T36] audit: type=1400 audit(1777368304.097:541): avc: denied { ioctl } for pid=3408 comm="syz.2.1041" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.048411][ T36] audit: type=1400 audit(1777368304.157:542): avc: denied { getopt } for pid=3485 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.206288][ T36] audit: type=1400 audit(1777368304.317:543): avc: denied { listen } for pid=3491 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 90.251241][ T515] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 90.272461][ T515] usb 3-1: device descriptor read/8, error -71 [ 90.359675][ T3490] rust_binder: Read failure Err(EFAULT) in pid:679 [ 90.374097][ T3496] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 90.402295][ T515] usb 3-1: device descriptor read/8, error -71 [ 90.551734][ T3506] GUP no longer grows the stack in syz.0.1075 (3506): 200000005000-200000008000 (200000004000) [ 90.562396][ T3506] CPU: 0 UID: 0 PID: 3506 Comm: syz.0.1075 Not tainted syzkaller #0 ad4feab416e89c88ed6525c0702811b15fc9e1bf [ 90.562432][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.562452][ T3506] Call Trace: [ 90.562459][ T3506] [ 90.562468][ T3506] __dump_stack+0x21/0x30 [ 90.562507][ T3506] dump_stack_lvl+0x10c/0x190 [ 90.562534][ T3506] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.562562][ T3506] ? futex_lock_pi_atomic+0xdd/0xc70 [ 90.562591][ T3506] dump_stack+0x19/0x20 [ 90.562618][ T3506] fixup_user_fault+0x63d/0x6d0 [ 90.562644][ T3506] fault_in_user_writeable+0x76/0xe0 [ 90.562663][ T3506] futex_lock_pi+0x258/0xa10 [ 90.562687][ T3506] ? __cfi_futex_lock_pi+0x10/0x10 [ 90.562711][ T3506] ? __kasan_check_write+0x18/0x20 [ 90.562740][ T3506] ? wake_up_q+0x10f/0x1c0 [ 90.562771][ T3506] ? __cfi_futex_wake_mark+0x10/0x10 [ 90.562797][ T3506] ? mas_find+0x358/0x5f0 [ 90.562815][ T3506] ? __kasan_check_write+0x18/0x20 [ 90.562844][ T3506] do_futex+0x25c/0x500 [ 90.562864][ T3506] ? __cfi_do_futex+0x10/0x10 [ 90.562882][ T3506] ? __vm_munmap+0x2c7/0x370 [ 90.562903][ T3506] __se_sys_futex+0x28f/0x300 [ 90.562925][ T3506] ? __x64_sys_futex+0x110/0x110 [ 90.562946][ T3506] ? __kasan_check_write+0x18/0x20 [ 90.562978][ T3506] __x64_sys_futex+0xe9/0x110 [ 90.562998][ T3506] x64_sys_call+0x227f/0x2ee0 [ 90.563027][ T3506] do_syscall_64+0x58/0xf0 [ 90.563049][ T3506] ? clear_bhb_loop+0x50/0xa0 [ 90.563069][ T3506] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.563101][ T3506] RIP: 0033:0x7f1a5598eec9 [ 90.563117][ T3506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.563134][ T3506] RSP: 002b:00007f1a5686d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.563155][ T3506] RAX: ffffffffffffffda RBX: 00007f1a55be5fa0 RCX: 00007f1a5598eec9 [ 90.563170][ T3506] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 90.563184][ T3506] RBP: 00007f1a55a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 90.563196][ T3506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.563209][ T3506] R13: 00007f1a55be6038 R14: 00007f1a55be5fa0 R15: 00007ffcbb4c0cd8 [ 90.563235][ T3506] [ 90.864963][ T515] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 90.879605][ T3538] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 90.892357][ T515] usb 3-1: device descriptor read/8, error -71 [ 90.905832][ T36] audit: type=1400 audit(1777368305.017:544): avc: denied { read write } for pid=3539 comm="syz.0.1085" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.929446][ T36] audit: type=1400 audit(1777368305.017:545): avc: denied { open } for pid=3539 comm="syz.0.1085" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.023186][ T515] usb 3-1: device descriptor read/8, error -71 [ 91.131317][ T515] usb usb3-port1: unable to enumerate USB device [ 91.141991][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 91.291259][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 91.298791][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 91.310030][ T31] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 91.320567][ T31] usb 1-1: language id specifier not provided by device, defaulting to English [ 91.330764][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.339884][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.347920][ T31] usb 1-1: Product: Ђ [ 91.352055][ T31] usb 1-1: Manufacturer: ౅ [ 91.356692][ T31] usb 1-1: SerialNumber: ౓ [ 91.455588][ T36] audit: type=1400 audit(1777368305.567:546): avc: denied { create } for pid=3572 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 91.684302][ T3594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1102'. [ 91.711696][ T3596] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 91.711801][ T3598] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 91.744455][ T3600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.744489][ T3600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.752022][ T3600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.758559][ T3600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.765281][ T3600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.765842][ T3540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.772736][ T3600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.788711][ T3600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.795445][ T3540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.806999][ T3600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.818967][ T3540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.835152][ T3540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.858479][ T31] cdc_ncm 1-1:1.0: bind() failure [ 91.865078][ T3612] block device autoloading is deprecated and will be removed. [ 91.872347][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 91.879509][ T31] cdc_ncm 1-1:1.1: bind() failure [ 91.891310][ T31] usb 1-1: USB disconnect, device number 31 [ 91.924054][ T3618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.926418][ T3618] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 91.963079][ T3627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.971960][ T3629] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 91.980625][ T3631] 9pnet_fd: Insufficient options for proto=fd [ 92.028398][ T3639] 9pnet_fd: Insufficient options for proto=fd [ 92.060677][ T36] audit: type=1400 audit(1777368306.167:547): avc: denied { accept } for pid=3642 comm="syz.3.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.164380][ T36] audit: type=1400 audit(1777368306.277:548): avc: denied { connect } for pid=3656 comm="syz.3.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.281250][ T45] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 92.399227][ T3677] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 92.431415][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 92.444005][ T45] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.457840][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 92.474559][ T45] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 92.483904][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.484975][ T3687] overlayfs: failed to clone lowerpath [ 92.492791][ T45] usb 3-1: Product: syz [ 92.507553][ T45] usb 3-1: Manufacturer: syz [ 92.512409][ T45] usb 3-1: SerialNumber: syz [ 92.523650][ T3691] sit0: entered promiscuous mode [ 92.531019][ T3691] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 92.542868][ T3691] netlink: 'syz.0.1136': attribute type 3 has an invalid length. [ 92.724386][ T45] usbhid 3-1:1.0: can't add hid device: -71 [ 92.730469][ T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 92.739439][ T45] usb 3-1: USB disconnect, device number 34 [ 93.244056][ T3724] ------------[ cut here ]------------ [ 93.249612][ T3724] WARNING: CPU: 1 PID: 3724 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 93.259139][ T3724] Modules linked in: [ 93.263120][ T3724] CPU: 1 UID: 0 PID: 3724 Comm: syz.2.1150 Not tainted syzkaller #0 ad4feab416e89c88ed6525c0702811b15fc9e1bf [ 93.275004][ T3724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.285127][ T3724] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 93.291294][ T3724] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 52 16 ee 05 00 0f 85 be 00 00 00 c6 05 45 16 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 93.311270][ T3724] RSP: 0018:ffffc9000baa7860 EFLAGS: 00010246 [ 93.317395][ T3724] RAX: 0000000000000000 RBX: 0000000000000019 RCX: 0000000000000000 [ 93.325502][ T3724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000baa7918 [ 93.333635][ T3724] RBP: ffffc9000baa7988 R08: ffffc9000baa7917 R09: 0000000000000000 [ 93.341673][ T3724] R10: ffffc9000baa7900 R11: fffff52001754f23 R12: ffffc9000baa78a0 [ 93.349818][ T3724] R13: dffffc0000000000 R14: 1ffff92001754f10 R15: 0000000000000000 [ 93.357850][ T3724] FS: 00007fdb543a36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 93.366852][ T3724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.373614][ T3724] CR2: 0000200000001000 CR3: 000000011c1e4000 CR4: 00000000003526b0 [ 93.381721][ T3724] Call Trace: [ 93.385029][ T3724] [ 93.388054][ T3724] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.394242][ T3724] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 93.400017][ T3724] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 93.405744][ T3724] ___kmalloc_large_node+0x81/0x220 [ 93.411207][ T3724] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 93.416888][ T3724] __kmalloc_large_node_noprof+0x1e/0xe0 [ 93.422610][ T3724] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 93.428283][ T3724] __kmalloc_noprof+0x336/0x530 [ 93.433195][ T3724] ? __cfi_lockref_get+0x10/0x10 [ 93.438202][ T3724] incfs_realloc_mount_info+0xa7/0x4d0 [ 93.443836][ T3724] ? incfs_add_sysfs_node+0x118/0x240 [ 93.449346][ T3724] incfs_alloc_mount_info+0x479/0x600 [ 93.454802][ T3724] incfs_mount_fs+0x3ca/0x960 [ 93.459541][ T3724] ? __cfi_incfs_mount_fs+0x10/0x10 [ 93.464809][ T3724] ? vfs_parse_fs_string+0x102/0x170 [ 93.470134][ T3724] ? selinux_capable+0x38/0x50 [ 93.474967][ T3724] legacy_get_tree+0x106/0x1b0 [ 93.479786][ T3724] ? __cfi_incfs_mount_fs+0x10/0x10 [ 93.485340][ T3724] vfs_get_tree+0x9e/0x290 [ 93.490042][ T3724] do_new_mount+0x251/0xb40 [ 93.494614][ T3724] ? security_capable+0xcf/0xf0 [ 93.499529][ T3724] path_mount+0x688/0x1050 [ 93.504110][ T3724] ? putname+0x113/0x150 [ 93.508391][ T3724] __se_sys_mount+0x2bd/0x480 [ 93.513151][ T3724] ? __x64_sys_mount+0xf0/0xf0 [ 93.517951][ T3724] ? __kasan_check_write+0x18/0x20 [ 93.523124][ T3724] ? fpregs_restore_userregs+0x11d/0x260 [ 93.528803][ T3724] __x64_sys_mount+0xc3/0xf0 [ 93.533708][ T3724] x64_sys_call+0x2021/0x2ee0 [ 93.538510][ T3724] do_syscall_64+0x58/0xf0 [ 93.542991][ T3724] ? clear_bhb_loop+0x50/0xa0 [ 93.547704][ T3724] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.553767][ T3724] RIP: 0033:0x7fdb5358eec9 [ 93.558385][ T3724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.561222][ T330] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 93.578154][ T3724] RSP: 002b:00007fdb543a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.594244][ T3724] RAX: ffffffffffffffda RBX: 00007fdb537e5fa0 RCX: 00007fdb5358eec9 [ 93.602387][ T3724] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 93.610400][ T3724] RBP: 00007fdb53611f91 R08: 0000200000000280 R09: 0000000000000000 [ 93.618425][ T3724] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 93.626926][ T3724] R13: 00007fdb537e6038 R14: 00007fdb537e5fa0 R15: 00007fff044a2128 [ 93.635129][ T3724] [ 93.638268][ T3724] ---[ end trace 0000000000000000 ]--- [ 93.643967][ T3724] incfs: Error allocating mount info. -12 [ 93.649968][ T3724] incfs: mount failed -12 [ 93.722622][ T330] usb 3-1: device descriptor read/64, error -71 [ 93.961248][ T330] usb 3-1: device descriptor read/64, error -71 [ 94.201249][ T330] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 94.331290][ T330] usb 3-1: device descriptor read/64, error -71 [ 94.571283][ T330] usb 3-1: device descriptor read/64, error -71 [ 94.681337][ T330] usb usb3-port1: attempt power cycle [ 95.021247][ T330] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 95.042398][ T330] usb 3-1: device descriptor read/8, error -71 [ 95.172341][ T330] usb 3-1: device descriptor read/8, error -71 [ 95.411274][ T330] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 95.432406][ T330] usb 3-1: device descriptor read/8, error -71 [ 95.562524][ T330] usb 3-1: device descriptor read/8, error -71 [ 95.671366][ T330] usb usb3-port1: unable to enumerate USB device