last executing test programs: 2m19.772721686s ago: executing program 3 (id=828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) mlockall(0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r4, 0x0, 0x0, 0xfffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(0xffffffffffffffff, 0xa) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xa6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m19.115890867s ago: executing program 3 (id=843): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getpeername$tipc(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000001080)=""/4091, &(0x7f0000001040)=0xffb) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r7, 0x0, 0x9, &(0x7f0000000100)=""/78, &(0x7f0000000200)=0x4e) 2m19.108132198s ago: executing program 3 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000001040)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1) 2m19.058642492s ago: executing program 3 (id=845): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000500)="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", 0x18a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) timer_create(0x7, &(0x7f0000000180)={0x0, 0x2a, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000300)=ANY=[@ANYBLOB="b2db00001a0000008a01838e85838b02860184038d070f0a8c8404896052898a8a01"]) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x3, 0x2, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/24, 0x18, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) connect$can_bcm(r3, &(0x7f0000000000), 0x10) close_range(r5, r3, 0x2) fallocate(r4, 0x0, 0x0, 0x1001f0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0xa, 0x9, 0x403, 0x80, 0x7}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) read$FUSE(r4, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000000c0)={0x1, r4}) 2m19.057543402s ago: executing program 3 (id=846): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x6802) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x1, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3ebd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, r4, 0x0, 0x902, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) readv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1, 0x0, 0x7}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000340)=ANY=[], 0x28) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000000200)={'veth1_to_bridge\x00'}) r9 = eventfd2(0x8001, 0x800) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0xfffffffffffffffb, 0x4000, 0x0, r9, 0x2}) ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r10 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r10, 0x0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r11, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.974541009s ago: executing program 3 (id=848): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2081, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x11, 0x1, {0x3a, 0x28, 0x10, 0xc, 0x4, 0x6c, 0x4, 0x13e, 0x1}}) waitid(0x0, 0x0, &(0x7f0000000280), 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.944971771s ago: executing program 32 (id=848): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2081, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x11, 0x1, {0x3a, 0x28, 0x10, 0xc, 0x4, 0x6c, 0x4, 0x13e, 0x1}}) waitid(0x0, 0x0, &(0x7f0000000280), 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.320928061s ago: executing program 1 (id=3657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0xe, 0x80000001, 0x6, 0x2, 0x1041, 0xfffffffffffffff6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x2006a], 0x2, 0x1000d6}) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x2000c010) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.314378821s ago: executing program 1 (id=3658): ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003500), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003540)={0x34, r1, 0x101, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, 0x1, 0x3) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 4.81818325s ago: executing program 1 (id=3659): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140), 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x0, 0x3}, 0x10) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x6, 0x2, 0x4, 0x8}, {0x8000, 0x7, 0x2, 0x5}, {0x0, 0x5, 0xa, 0x9}, {0x5, 0x40, 0x3, 0x9}, {0x401, 0xf9, 0xd, 0x1000}]}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 4.783218483s ago: executing program 1 (id=3668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fadvise64(r1, 0xfff, 0x5, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x2103) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xfffd, @any, 0x2, 0x1}, 0xe) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) 4.585646219s ago: executing program 0 (id=3679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, 0x0, 0x0, 0xfffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(0xffffffffffffffff, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r4 = socket$inet6(0x10, 0x2, 0x4) close(r3) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) sendmmsg$unix(r6, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) r7 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0xa6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3.946702719s ago: executing program 1 (id=3694): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = gettid() mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x1}], {0x4, 0x1}, [], {0x10, 0x1}}, 0x2c, 0x3) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x11, 0xf, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="000403"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f0000003800)={0x2020}, 0x2020) 2.78243065s ago: executing program 0 (id=3707): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./cgroup/file0\x00', 0x6000, 0x800, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe25) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x1, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x18, 0xfffffffffffffffe, 0x6, {0x7ff}}, 0x0, &(0x7f0000000740)={0x20, 0xffffffffffffffda, 0x7d9, {0x0, 0x8}}, &(0x7f00000008c0)={0x78, 0x0, 0x1820, {0xf4, 0xd5, 0x0, {0x2, 0x1, 0x9, 0x0, 0x9, 0x8000000000000001, 0x6, 0x8, 0x0, 0x2000, 0x1, 0x0, r6, 0x8, 0x4}}}, &(0x7f0000000940)={0x90, 0x0, 0x5, {0x4, 0x2, 0x0, 0x40, 0x3, 0x2, {0x0, 0x0, 0x180000, 0xffffffffffffffff, 0x7f, 0x1, 0xffffffff, 0x2, 0x7fff, 0xc000, 0xffffffc0, r5, r6, 0x8000, 0x40}}}, &(0x7f0000000780)={0x108, 0x0, 0xddd, [{0x5, 0x6, 0x2, 0x3, '-&'}, {0x1, 0x8, 0x2c, 0x10001, 'S\xf3\b]\x1f\xe2\xd9\x9d\xb5)[\xb4\x10 sv~9\xaa\xdf\x87\xcbG\xe0\x041v\x1e\x88\xde\x12\xfc\xb3\v\x84#\xaa_\x1c\x80\xf5 \x0eZ'}, {0x4, 0x2, 0x10, 0x5, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x0, 0x3, 0xd, 0x80, '))-}.#\'#%),-#'}, {0x6, 0x1, 0x3, 0xc9, '$.:'}, {0x6, 0xfc, 0x3, 0x3, '[%.'}]}, &(0x7f0000000b00)={0x1e0, 0x0, 0xff, [{{0x1, 0x2, 0x10001, 0x2, 0x6, 0xa376, {0x1, 0x1, 0x80000001, 0x2000000002, 0x2, 0x6, 0x1, 0x4, 0xa60, 0x8000, 0x3, r5, r6, 0x0, 0x9}}, {0x2, 0x7, 0x2, 0x7, '}%'}}, {{0x5, 0x0, 0x80, 0x1, 0x5, 0x12, {0x0, 0xe, 0x8, 0xa, 0x1, 0x80, 0x1, 0xac93, 0x9, 0x1000, 0x7, r5, r6, 0x10, 0x7}}, {0x0, 0x6, 0x0, 0xd}}, {{0x2, 0x0, 0x3, 0xffffffffffffffff, 0x1, 0x9, {0x3, 0xc, 0x8, 0x8, 0x9, 0x0, 0xfffffffa, 0x40000000, 0x7d83bf73, 0x1000, 0x3, r5, 0x0, 0xa00000, 0x3}}, {0x2, 0x2, 0x0, 0xfffeffff}}]}, 0x0, &(0x7f0000000e40)={0x20, 0xffffffffffffffda, 0xfffffffffffffffd, {0x6, 0x0, 0x1, 0xa}}, &(0x7f0000001080)={0x130, 0x0, 0x4, {0x1, 0x4, 0x0, '\x00', {0x8, 0x4, 0xfffffffffffffff7, 0x8000, 0x0, 0x0, 0x6000, '\x00', 0x6, 0x6, 0x9, 0x1, {0xfffffffffffffffd, 0xbd}, {0x42, 0x600000}, {0x8, 0x4}, {0xb7}, 0xfff, 0x5, 0x8, 0x2}}}}) (async) stat(&(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="10"], 0x10) (async) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',privport,access=', @ANYRESDEC=r11]) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r13 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x2}, [{0x2, 0x2, r0}, {0x2, 0x3, r2}, {0x2, 0x0, r5}, {0x2, 0x4, r7}, {0x2, 0x2, r11}, {0x2, 0x4, r12}], {0x4, 0x4}, [{0x8, 0x5, r13}], {}, {0x20, 0x3}}, 0x5c, 0x1) 2.718791825s ago: executing program 0 (id=3708): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)) 2.66275856s ago: executing program 0 (id=3709): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4020aeb2, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0xfffffffd}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, "222fd25958af20ee", "ce4ac3051c3c94667fa81b9bc8a08dc9", "18b5e966", "31e942147c6ddae0"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @remote}, 0x1b, r5}) 2.637194642s ago: executing program 0 (id=3710): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) write$cgroup_pid(r7, &(0x7f0000000240), 0xfdef) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x800}) 990.766752ms ago: executing program 4 (id=3721): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, 0x0, 0x0, 0xfffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(0xffffffffffffffff, 0xa) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xa6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000003c0)={0x20, 0x13, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, 0x0) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000080)="b0") setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000b80)="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", 0x13d}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6566c8bd20f39915734b4a24e9b596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6861cd700b4f8c0f594861c0296", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb1aeeb70c4294fb9be03e73d06a9", 0x3a}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000002000)="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", 0xdca}, {&(0x7f0000000280)="aba1501aab68c98b25f2a20fd588ccbb9eb6a11a63c2af70c8d13d17203fcea6070b6cef7d3590e1fdb152e02a93faa1d6dbdc5521f78e31514c75", 0x3b}, {&(0x7f0000001040)="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", 0xf86}], 0x7) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r2, &(0x7f0000000180), 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 827.735864ms ago: executing program 1 (id=3722): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000104050000000000000000000000000a753b6ecb050001000300000007bef1d252c791b20a8a3b8acacde4dec807a771072caa276a2043fc33baef6dd634bb98d7888fc8fb985baa81e6fd4f9094566e5fce5288f34832e8ec650d7027369000c1f1e1c61bc1a7a06db75680719fae3d76ba95ebd5971bf734b63ce286a6"], 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @mcast2, 0xfffffffa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "d558ecf870ac6c5a", "1dc0ee0468d01a00745f16b1579e1296", '\x00', "16bc1ef5ddda2e2e"}, 0x28) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000080)=0x29) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @local}, 0x4, {0x2, 0x4e22, @multicast2}, 'geneve0\x00'}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101"], 0x0) close(0xffffffffffffffff) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x8, &(0x7f0000000000)=0x0) r6 = eventfd2(0x0, 0x80801) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x90, r6, &(0x7f0000000180)="d1e8624a6b0e53", 0x7, 0x4}]) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r7) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r7) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="ee07008fadf571a483a0c3e5e95ad1474bd52f6c24c995daea65b592163498a8eaf7bce4a11a62a4a0826abae2faa3112724bde3f36ea30141d7bfbb5541557499264cd7db8923de6be5f97a94df42f98f6c5bb769c92222bf77d99f08189a90ea6d2026cde29155aa2c9114d532cd5bc2bf45c07d140d50a19f5e58e12292c8cabaf70f8ae906cf524726d1", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc814) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r2, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 604.592072ms ago: executing program 0 (id=3723): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x7, 0x82, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x1, 0xb0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x0, 0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xd}, @network_terminal={0x7, 0x24, 0xa, 0xf, 0x0, 0xc0, 0x5}, @country_functional={0x8, 0x24, 0x7, 0x75, 0x2, [0x9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x6, 0x4}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x3, 0xff, 0x40, 0x1}, 0x3f, &(0x7f0000000080)={0x5, 0xf, 0x3f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x0, 0x4, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x4, 0xbf}, @ssp_cap={0x18, 0x10, 0xa, 0x1a, 0x3, 0x7fffff9, 0xf00f, 0x0, [0xc030, 0xc000, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x0, 0xa, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x99, 0x2, 0x42}]}, 0x1, [{0x81, &(0x7f0000000380)=@string={0x81, 0x3, "7dec4e7c779280a163a0435f6357112e859115bb5e1b75d26541bbb9ab1f231347b1b2372a4109aa674d9b0fc5fe3083a24f87f8a7cec42176e7c223522d55dd582f75b7a63b72a5716c4d0c48239df06977c1a5f11da31d17486bca1f6afeb3798086eb4d67da463403e53d927d1d56399cce11a7c84518b792b53f0c2d54"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x0, 0x22, 0xd, {0xd, 0x21, "1ea312aeddb3daef366788"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x40, 0xe, 0x76, "c4b8be7eeea120f94a30bda5715b210cbe393172be916889b93cb789e6410a8cad74c116d6353d591df7f109c9ea1817bbc80ca55e9015208da2bc6682bc692d6c5be346cb86dd010d218b641cecb9b8ce7bd7b7dbb112ccae1df4bd44cff84cd3552319c0ab5f56731e04d1adf7eec882b4cfbad5a6"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0xbddf, 0x7, 0x2, 0x40, 0xe, 0x9, 0x3a, 0xffffffff, 0x18, 0xfaf, 0x73c, 0xff}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0xba}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x7f}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0xa, 0x7, {0x7, 0x4, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80080, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 274.436348ms ago: executing program 4 (id=3734): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001040), 0x800000, 0x0) getsockopt$inet_buf(r3, 0x0, 0x2c, &(0x7f0000000000)=""/4091, &(0x7f0000001080)=0xffb) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000001000000000000005333ffff2e31d1d0f39d7a3d5800000007000000ffff00ff", @ANYRES64]) ioctl$ASHMEM_GET_NAME(r0, 0x40087708, 0x0) 271.029558ms ago: executing program 4 (id=3735): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) (async, rerun: 64) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0x275, 0x7, 0x0, 0x9}, {0xc, 0x7, 0x3, 0xfffffffe}, {0x9, 0xf, 0x2, 0xd78}, {0x5, 0x6, 0x9, 0x2}, {0x7, 0x7f, 0x3}, {0x0, 0x8, 0x6, 0x80000001}, {0x8, 0xe, 0x1, 0x4f}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x7, 0x4c, 0x2, 0xd}]}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 270.674638ms ago: executing program 4 (id=3736): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)) (async) mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000000)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) (async) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) 257.916249ms ago: executing program 4 (id=3737): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) timerfd_create(0x7, 0x800) ioprio_set$uid(0x3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r8 = syz_open_procfs$pagemap(r6, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000240)={0x60, 0x3, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4, 0x0, 0x0, 0x9, 0x40, 0x24, 0xd, 0x41}) sendmsg$nl_generic(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x41, 0x4, 0x70bd25, 0x25dfdbfb, {0x7}, [@typed={0xc, 0x1a, 0x0, 0x0, @str='pagemap\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000002140)='ns/cgroup\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) close_range(r0, 0xffffffffffffffff, 0x0) 194.455854ms ago: executing program 4 (id=3738): r0 = socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_generic(r0, &(0x7f0000006240)={0x0, 0x0, &(0x7f0000006200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001b0001e328bd7000fbdbdf25fe"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0}) 188.924905ms ago: executing program 2 (id=3739): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r0, 0x400, 0x1) (async) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103e40, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="0209000902"], 0x10}, 0x1, 0x300000000000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) ioprio_set$pid(0x1, 0x0, 0x0) (rerun: 64) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) (async) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setlease(r5, 0x400, 0x2) (async, rerun: 64) write$uinput_user_dev(r5, &(0x7f0000000580)={'syz1\x00', {0x4, 0x7, 0x4, 0x8}, 0x17, [0x0, 0x8001, 0x7d7, 0x7ea1a5ac, 0x100, 0x9, 0x6, 0xe, 0x20, 0x0, 0xfff, 0x35e7, 0x3, 0xb, 0x9, 0x0, 0xfffffffe, 0x7, 0x24, 0x1b, 0x3ff, 0x9, 0x8, 0x878a, 0x2, 0x0, 0x9, 0x4, 0xff, 0xc039, 0x7, 0x9, 0x7, 0xfffffffa, 0x9, 0xde, 0x4, 0xc33, 0xfffff6eb, 0x4, 0x50, 0x1ff, 0x1, 0x7ff, 0xffffffff, 0x3, 0x5, 0x80, 0xa6, 0x9, 0x8, 0x3, 0x8, 0xb, 0x8, 0x9, 0x3, 0x10000, 0x6, 0x81, 0x80, 0x3, 0x6, 0x9], [0x51, 0x2, 0x6, 0x7fffffff, 0x7, 0xa, 0x0, 0x8, 0x6, 0x7, 0x3ee, 0x7, 0x7, 0x6, 0x3, 0x400, 0x40, 0x400, 0xae, 0x3ff, 0x5, 0x2, 0x6, 0x7, 0xf2ce, 0x7f, 0x9, 0x57, 0x374b, 0xffffff00, 0x0, 0x0, 0x5000, 0x10, 0x8d0, 0x7, 0xd, 0x55b3, 0x3, 0x27, 0x3eaf9f9, 0x5, 0x7, 0x3, 0x6, 0x10, 0xf, 0x3125, 0x399, 0x4, 0xffff8000, 0xb21, 0x1, 0x200, 0x9, 0x1, 0x7, 0x3, 0x7, 0x1ff, 0x0, 0x0, 0x6, 0x9], [0x7e48, 0x8, 0x7, 0xd3, 0xb, 0x7, 0x3, 0x7fff, 0x3, 0x0, 0x9, 0x6, 0x10, 0x7, 0x4, 0x4, 0xffd0, 0xf, 0x101, 0xff, 0x1, 0x7fff, 0x7d58, 0x10, 0x1, 0x357e, 0x5, 0x7, 0x200, 0xffff7462, 0x10, 0x2, 0x3, 0x10, 0x5, 0x800, 0x0, 0x1000, 0x7fffffff, 0xffff, 0x800, 0x5, 0xffffffff, 0x100, 0x9, 0x1, 0x8000000, 0x5, 0xfff, 0x400, 0x3, 0x6, 0x5, 0x7, 0x3, 0x4, 0x10000, 0x0, 0x2, 0x6, 0x1000, 0x80000001, 0x2, 0x6], [0x9, 0x2, 0x0, 0x7, 0x8, 0x0, 0x4708, 0x8, 0x7fff, 0x7, 0x8, 0x1000, 0x8001, 0x8, 0x80, 0x2, 0xffffffff, 0x8, 0x8, 0x7, 0x800000, 0x6, 0x57, 0x1, 0x2, 0x1, 0x4, 0x4, 0x2, 0xc, 0xf0fc, 0x7, 0x5, 0x9, 0x0, 0x779e, 0x7, 0x8, 0x86, 0x3, 0xfffffff9, 0x9, 0x7, 0x0, 0x401, 0x4, 0x0, 0x6, 0x5, 0x4, 0x80, 0x0, 0xff, 0x7, 0xffff, 0x8, 0x101, 0x9, 0x2, 0x8000, 0xe, 0xff, 0x81, 0xffff606a]}, 0x45c) (rerun: 64) 113.014861ms ago: executing program 2 (id=3740): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xa0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) dup3(r1, r0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0xfffffe97}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], 0x138) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x3000) (async) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x10012, r4, 0xf5e2d000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1100, 0x3}, @fda={0x66646185, 0x4, 0x5, 0x15}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (async) r8 = dup3(r7, r6, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 97.024372ms ago: executing program 2 (id=3741): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c9) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x14, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, '(-$#'}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@flag='silent'}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') write$binfmt_misc(r0, &(0x7f0000000140)="723ceb09f4581462daaea0af191eb14584590f99032e9eb4cb56f9e09f53", 0x1e) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, &(0x7f0000000180)={r3}) read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) 37.802126ms ago: executing program 2 (id=3742): r0 = creat(&(0x7f0000000240)='./file0\x00', 0xd) (async) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x100000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000800)={r0, 0x6d4, {0x0, 0x0, 0x0, 0x0, 0x17c, 0x0, 0x0, 0x15, 0x18, "b13b706ce34d59202bf896f4441656598e3bf0b6ee13e175052fa30af662dcd95307a9f613e4d6862b87069f5ffe63756e6c0bfc340a43d9eb49aa44efce506e", "49288955990033d2763cad465367d9e1f606353c1ce77b7e6ebad9eabecd51a4130254e1000263809fe5ad200d3b991dbf0000000000000087cb726f256531e3", "df416e18399908cbe3be2b474902588da98994f0ecc9624560f51f29a925f711", [0x4, 0xfffffffffffffff9]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x8802) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000020000900020000ffdbdf250207"], 0x1c}, 0x1, 0x30000, 0x0, 0x4000000}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) (async) unshare(0x28000600) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x800) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x3fffffffffffffc, 0x800000000000000, 0x0, 0x1, 0x0, 0x15, "fe0200000000000000f8a0e91ddaaca7bd64c6a4b4e00d9283dca1f20c0af4e2b7fb0a0100000000000000000300000000000000000000ed00000000ffffff00", "2809e8dbe108598948174ad54afac11d875397bdb22d0000b420a1a93c5240f45f019e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x51ce, 0x6]}}) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x40000100000200) (async) timerfd_gettime(r0, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r7, &(0x7f0000002400)="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", 0x1000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r6, 0x22e7c000) 16.527178ms ago: executing program 2 (id=3743): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8a, 0xfffffffffffffff9, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) 0s ago: executing program 2 (id=3744): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000800110001000000e0a7000000000100040accbb9df023af7db0f1344fbcd546c1a6f9c91f48f50ac8103bc396d97dcf7d2c51636cd049170d5953e6cc4d544bfe91dfc982494f0d98cf58c32c39d8128a82e879f7a94cedf3ea510d12454e92f57bac252071963a7d3da4288893e0394f9ae5daa45400ed6c194546655a6e6e077b155238f8bcc66b08ab3f209f9c0ec5655f53669a6f26d4da3eea63e7f9f50db8bcd79c185cde7db982"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffffffff, 0x6480024c, 0x8c, 0x2, 0x3, 0x9, 0x0, 0x0, 0x20, 0xe9}}, 0x50) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) r3 = getpid() ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x10200, 0x6, 0x1101c000, 0x1000, &(0x7f00006c2000/0x1000)=nil}) r4 = socket$inet6(0xa, 0x800, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000240)) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, 0x0, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000000)={0x0, 0x50e}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000100)={0x7, {{0xa, 0x4e21, 0xabb, @mcast1, 0x1}}}, 0x88) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r7, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x87, 0x1}, 0x47, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff609, 0x3, 0x0, 0x4, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0xfffffffd, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x9, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x6, 0x2, 0x0, 0x9, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x35, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0xfffff303, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0xa, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0xfffffffc, 0x0, 0x1, 0xffff, 0x9, 0x441238c7, 0x0, 0x3, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x20, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0xdb, 0x40, 0x0, 0x21, 0x24000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x200000, 0x200, 0xcc0, 0x3fd, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0xfffffffd, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0xa, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x8, 0x0, 0x80000001, 0x3, 0x0, 0x400, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x9, 0x10800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x6, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) r9 = syz_pidfd_open(r3, 0x0) r10 = getpid() syz_open_procfs$namespace(r10, 0x0) io_setup(0x8f0, 0x0) setns(r9, 0x4000000) umount2(&(0x7f0000000040)='.\x00', 0x2) kernel console output (not intermixed with test programs): 5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.038728][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.047517][ T5982] bridge_slave_0: entered allmulticast mode [ 123.060852][ T5982] bridge_slave_0: entered promiscuous mode [ 123.068133][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.069355][ T375] usb 5-1: Using ep0 maxpacket: 16 [ 123.075396][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.088389][ T375] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 123.089221][ T5982] bridge_slave_1: entered allmulticast mode [ 123.102959][ T5982] bridge_slave_1: entered promiscuous mode [ 123.107248][ T375] usb 5-1: config 0 has no interface number 0 [ 123.115960][ T375] usb 5-1: config 0 interface 21 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.137229][ T375] usb 5-1: config 0 interface 21 has no altsetting 0 [ 123.144196][ T375] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 123.153433][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.165307][ T375] usb 5-1: config 0 descriptor?? [ 123.213449][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.220537][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.227813][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.234868][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.255934][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.263179][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.273554][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.280623][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.290046][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.297084][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.320481][ T5982] veth0_vlan: entered promiscuous mode [ 123.331452][ T5982] veth1_macvtap: entered promiscuous mode [ 123.442611][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1837'. [ 123.452169][ T6042] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 123.459493][ T6042] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 123.466531][ T6042] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 123.466546][ T6042] rust_binder: Read failure Err(EFAULT) in pid:17 [ 123.475078][ T6042] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 123.488740][ T6042] rust_binder: Write failure EINVAL in pid:17 [ 123.584055][ T375] usbhid 5-1:0.21: can't add hid device: -71 [ 123.598629][ T375] usbhid 5-1:0.21: probe with driver usbhid failed with error -71 [ 123.608458][ T375] usb 5-1: USB disconnect, device number 27 [ 123.729575][ T36] audit: type=1400 audit(1756388127.319:554): avc: denied { write } for pid=6056 comm="syz.4.1842" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 123.739376][ T421] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.843313][ T6062] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.920361][ T421] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.938885][ T421] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 123.948328][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 123.956429][ T421] usb 3-1: Product: syz [ 123.960945][ T421] usb 3-1: Manufacturer: syz [ 123.965520][ T421] usb 3-1: SerialNumber: syz [ 123.970891][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1847'. [ 124.184320][ T421] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 124.387983][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.396507][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.456839][ C0] usblp0: nonzero write bulk status received: -71 [ 124.463526][ T421] usb 3-1: USB disconnect, device number 6 [ 124.469983][ T421] usblp0: removed [ 124.603941][ T36] audit: type=1400 audit(1756388128.189:555): avc: denied { map } for pid=6106 comm="syz.1.1856" path="socket:[26574]" dev="sockfs" ino=26574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.653905][ T6113] rust_binder: Error while translating object. [ 124.653944][ T6113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.670184][ T6113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 124.685180][ T36] audit: type=1326 audit(1756388128.269:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.1.1857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4c6d8ebe9 code=0x0 [ 124.732809][ T6115] __vm_enough_memory: pid: 6115, comm: syz.4.1859, bytes: 18014402804453376 not enough memory for the allocation [ 124.744853][ T36] audit: type=1400 audit(1756388128.319:557): avc: denied { map } for pid=6114 comm="syz.4.1859" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.813144][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 124.841123][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 124.847396][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 124.853952][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 124.860935][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 124.867307][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 124.873676][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 124.880137][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 124.886370][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 124.893140][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 124.899488][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 124.905860][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 125.118437][ T36] audit: type=1400 audit(1756388128.699:558): avc: denied { mounton } for pid=6132 comm="syz.4.1865" path="/file0" dev="ramfs" ino=27180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 125.120105][ T6139] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 125.349493][ T435] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.362015][ T3049] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.493090][ T6155] netlink: 'syz.1.1871': attribute type 64 has an invalid length. [ 125.501033][ T6155] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1871'. [ 125.509941][ T435] usb 3-1: Using ep0 maxpacket: 32 [ 125.510226][ T6154] netlink: 'syz.1.1871': attribute type 64 has an invalid length. [ 125.516900][ T435] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 246, changing to 7 [ 125.522882][ T6154] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1871'. [ 125.542770][ T435] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 7 [ 125.555140][ T435] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.564220][ T435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.572230][ T435] usb 3-1: Product: 㵲嗉媆㱘噧傭걘뺗줘梐腍㱲㡬⊫袿㪦ᓏ贍ԃ鸵뽑멹谐 [ 125.582449][ T435] usb 3-1: Manufacturer: 鎡삝菪痈팻袦㲛輼삋퍛諆梁ᑟ첤ᳺۗ蔘辍롍ᐚ쎬厌ꞟ㬘蘽븣ᔑ볡ॢ◇擀ጡꢡ켻ꖟ없휉릧惝䕟锌쭭縁왁䁿ſ솔쇂⾢蝹噤珨⪚趻겟⪮拌 [ 125.605114][ T435] usb 3-1: SerialNumber: ф [ 125.815932][ T435] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 125.824486][ T435] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 125.833607][ T435] usb 3-1: USB disconnect, device number 7 [ 126.271848][ T6180] fuseblk: Unknown parameter 'user_id' [ 126.337209][ T6189] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 126.337227][ T6189] rust_binder: Error while translating object. [ 126.348917][ T6189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.355538][ T6189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 126.393073][ T6198] block device autoloading is deprecated and will be removed. [ 127.264696][ T6209] overlayfs: failed to resolve './file1': -2 [ 127.275795][ T6209] overlay: filesystem on ./bus not supported as upperdir [ 127.283177][ T6209] overlay: filesystem on ./bus not supported as upperdir [ 127.290420][ T6209] overlay: filesystem on ./bus not supported as upperdir [ 127.291097][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1891'. [ 127.306691][ T6209] overlay: filesystem on ./bus not supported as upperdir [ 127.314670][ T6209] overlay: filesystem on ./bus not supported as upperdir [ 127.321967][ T6209] overlay: filesystem on ./bus not supported as upperdir [ 127.329224][ T6209] overlay: filesystem on ./bus not supported as upperdir [ 127.379420][ T6151] Bluetooth: hci0: command 0x1003 tx timeout [ 127.379599][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.476440][ T6233] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 127.509991][ T6237] rust_binder: Error while translating object. [ 127.510022][ T6237] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 127.516399][ T6237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 127.546973][ T6240] rust_binder: Write failure EINVAL in pid:380 [ 127.573120][ T6242] fuse: Bad value for 'user_id' [ 127.584255][ T6242] fuse: Bad value for 'user_id' [ 127.903528][ T6264] overlayfs: failed to clone upperpath [ 127.927569][ T36] audit: type=1400 audit(1756388131.509:559): avc: denied { setattr } for pid=6272 comm="syz.2.1913" name="NETLINK" dev="sockfs" ino=28169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.965043][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 128.063415][ T6297] fuse: Bad value for 'fd' [ 128.479538][ T6314] rust_binder: Error while translating object. [ 128.479572][ T6314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.485736][ T6314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:387 [ 128.514327][ T6321] rust_binder: Error while translating object. [ 128.523691][ T6321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.530743][ T6321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:393 [ 128.581995][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.600441][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.623270][ T36] audit: type=1400 audit(1756388132.209:560): avc: denied { associate } for pid=6336 comm="syz.4.1935" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 128.987645][ T6354] 9pnet_fd: Insufficient options for proto=fd [ 129.028481][ T6363] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1943'. [ 129.178317][ T6392] netlink: 'syz.2.1952': attribute type 64 has an invalid length. [ 129.224443][ T36] audit: type=1400 audit(1756388132.789:561): avc: denied { setopt } for pid=6391 comm="syz.2.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.430748][ T36] audit: type=1400 audit(1756388133.019:562): avc: denied { listen } for pid=6396 comm="syz.2.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 129.650490][ T6408] rust_binder: Error while translating object. [ 129.650524][ T6408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 129.656741][ T6408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:418 [ 129.809940][ T6437] vfat: Bad value for 'check' [ 130.177981][ T6445] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1969'. [ 130.234880][ T6451] tmpfs: Unknown parameter '18446744073709551615' [ 130.242177][ T6452] tmpfs: Unknown parameter '18446744073709551615' [ 130.279656][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 130.563638][ T6480] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1983'. [ 130.819791][ T6502] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.837108][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.849359][ T6502] bridge_slave_0: entered allmulticast mode [ 130.859551][ T6502] bridge_slave_0: entered promiscuous mode [ 130.876252][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.886067][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.900434][ T6502] bridge_slave_1: entered allmulticast mode [ 130.912996][ T6502] bridge_slave_1: entered promiscuous mode [ 131.012574][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.019635][ T6502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.026905][ T6502] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.033944][ T6502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.044902][ T3049] bridge_slave_1: left allmulticast mode [ 131.050603][ T3049] bridge_slave_1: left promiscuous mode [ 131.056214][ T3049] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.064100][ T3049] bridge_slave_0: left allmulticast mode [ 131.069791][ T3049] bridge_slave_0: left promiscuous mode [ 131.075353][ T3049] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.135315][ T6525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1995'. [ 131.173337][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.181080][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.200745][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.207800][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.218228][ T3049] veth1_macvtap: left promiscuous mode [ 131.223879][ T3049] veth0_vlan: left promiscuous mode [ 131.276166][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.283494][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.293671][ T6528] netlink: 'syz.0.1996': attribute type 6 has an invalid length. [ 131.318685][ T6502] veth0_vlan: entered promiscuous mode [ 131.328593][ T6502] veth1_macvtap: entered promiscuous mode [ 131.464601][ T6546] binder: Unknown parameter '18446744073709551615' [ 131.480392][ T36] audit: type=1400 audit(1756388135.066:563): avc: denied { load_policy } for pid=6547 comm="syz.1.2001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.493554][ T6548] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 131.510354][ T6548] SELinux: failed to load policy [ 131.581899][ T6551] rust_binder: Error while translating object. [ 131.581949][ T6551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.588209][ T6551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 131.617418][ T6555] binder: Unknown parameter 'defcontext01777777777777777777777' [ 131.665923][ T36] audit: type=1400 audit(1756388135.246:564): avc: denied { associate } for pid=6563 comm="syz.2.2006" name="blkio.bfq.io_merged_recursive" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 131.855852][ T6583] tipc: Started in network mode [ 131.862009][ T6583] tipc: Node identity 52e8bc2c2b34, cluster identity 4711 [ 131.869222][ T6583] tipc: Enabled bearer , priority 0 [ 131.880134][ T6583] tipc: Disabling bearer [ 131.927908][ T36] audit: type=1400 audit(1756388135.506:565): avc: denied { unmount } for pid=6590 comm="syz.1.2015" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 132.021391][ T6598] binder: Unknown parameter 'stas' [ 132.113088][ T375] rust_binder: 6596: removing orphan mapping 0:8 [ 132.389370][ T375] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 132.539345][ T375] usb 5-1: Using ep0 maxpacket: 8 [ 132.545477][ T375] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.555635][ T375] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 218, using maximum allowed: 30 [ 132.566421][ T375] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 132.581084][ T375] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 132.590165][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.598151][ T375] usb 5-1: Product: syz [ 132.602334][ T375] usb 5-1: Manufacturer: syz [ 132.606919][ T375] usb 5-1: SerialNumber: syz [ 132.612476][ T375] usb 5-1: config 0 descriptor?? [ 132.618315][ T375] cdc_acm 5-1:0.0: skipping garbage [ 132.821826][ T6604] fuse: Bad value for 'fd' [ 132.824114][ T6618] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 132.844011][ T36] audit: type=1400 audit(1756388136.406:566): avc: denied { read append } for pid=6603 comm="syz.4.2019" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 132.895593][ T375] usb 5-1: USB disconnect, device number 28 [ 132.942060][ T36] audit: type=1400 audit(1756388136.526:567): avc: denied { unmount } for pid=6502 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 132.989671][ T36] audit: type=1400 audit(1756388136.566:568): avc: denied { watch } for pid=6629 comm="syz.4.2029" path="/142/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 133.056621][ T36] audit: type=1400 audit(1756388136.636:569): avc: denied { unmount } for pid=3037 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 133.162582][ T6649] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 133.281830][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 133.295686][ T6667] syz.4.2043(6667): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 133.299590][ T36] audit: type=1400 audit(1756388136.886:570): avc: denied { read } for pid=6664 comm="syz.2.2042" name="/" dev="configfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.362733][ T36] audit: type=1400 audit(1756388136.886:571): avc: denied { open } for pid=6664 comm="syz.2.2042" path="/" dev="configfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.560695][ T6704] overlayfs: failed to clone upperpath [ 133.579124][ T6714] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 133.587634][ T6715] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 134.114020][ T6774] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 134.114047][ T6774] rust_binder: Error while translating object. [ 134.126459][ T6774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 134.132936][ T6774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481 [ 134.919575][ T6810] 9pnet_fd: Insufficient options for proto=fd [ 135.347723][ T6821] overlayfs: conflicting options: userxattr,metacopy=on [ 135.454376][ T3049] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.556239][ T6835] fuse: Bad value for 'fd' [ 136.166870][ T6861] 9pnet_fd: Insufficient options for proto=fd [ 136.375577][ T36] audit: type=1326 audit(1756388399.964:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.1.2089" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e2d38ebe9 code=0x0 [ 136.440668][ T6883] fuse: Bad value for 'fd' [ 136.485061][ T6890] 9pnet_fd: Insufficient options for proto=fd [ 136.629453][ T6900] 9pnet_fd: Insufficient options for proto=fd [ 136.637397][ T6900] 9pnet_fd: Insufficient options for proto=fd [ 136.660102][ T6908] 9pnet_fd: Insufficient options for proto=fd [ 136.696201][ T6903] overlayfs: failed to clone upperpath [ 137.459214][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.459242][ T6151] Bluetooth: hci0: command 0x1003 tx timeout [ 137.485531][ T6988] sock: sock_set_timeout: `syz.1.2124' (pid 6988) tries to set negative timeout [ 137.497682][ T36] audit: type=1400 audit(1756388401.084:573): avc: denied { create } for pid=6993 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 137.868512][ T7001] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 138.289119][ T329] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 138.408586][ T36] audit: type=1400 audit(1756388401.994:574): avc: denied { create } for pid=7028 comm="syz.0.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.449075][ T329] usb 5-1: Using ep0 maxpacket: 16 [ 138.455415][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 138.466886][ T329] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.480041][ T329] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 138.490638][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.499957][ T7034] netlink: 'syz.0.2145': attribute type 4 has an invalid length. [ 138.503258][ T329] usb 5-1: config 0 descriptor?? [ 138.529335][ T7034] netlink: 'syz.0.2145': attribute type 4 has an invalid length. [ 138.917457][ T329] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 139.117485][ T329] playstation 0003:054C:0DF2.000D: Invalid byte count transferred, expected 20 got 0 [ 139.127056][ T329] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense pairing info: -22 [ 139.136312][ T329] playstation 0003:054C:0DF2.000D: Failed to get MAC address from DualSense [ 139.145074][ T329] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 139.153462][ T329] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -22 [ 139.322349][ T9] usb 5-1: USB disconnect, device number 29 [ 139.875438][ T36] audit: type=1400 audit(1756388403.464:575): avc: denied { map } for pid=7072 comm="syz.0.2157" path="socket:[31413]" dev="sockfs" ino=31413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 140.460930][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 140.669808][ T9] rust_binder: 7075: removing orphan mapping 0:24 [ 140.679907][ T7134] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 140.694360][ T36] audit: type=1400 audit(1756388404.284:576): avc: denied { mounton } for pid=7133 comm="syz.4.2178" path="/161/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 140.968782][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 140.990914][ T7148] fuse: Bad value for 'user_id' [ 140.995791][ T7148] fuse: Bad value for 'user_id' [ 141.023970][ T7158] overlayfs: failed to clone upperpath [ 141.118752][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 141.124978][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.136154][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.146101][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 141.159152][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 141.168227][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.177158][ T9] usb 5-1: config 0 descriptor?? [ 141.350598][ T7172] cgroup: Unknown subsys name 'io' [ 141.356353][ T7172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7172 comm=syz.2.2190 [ 141.368857][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2190'. [ 141.394672][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.403516][ T7172] bridge_slave_0 (unregistering): left allmulticast mode [ 141.410674][ T7172] bridge_slave_0 (unregistering): left promiscuous mode [ 141.417608][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.425745][ T7141] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2179'. [ 141.647816][ T9] hid (null): report_id 0 is invalid [ 141.661578][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000E/input/input13 [ 141.687346][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000E/input/input14 [ 141.695583][ T7228] fuse: Invalid rootmode [ 141.706058][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 141.727334][ T9] kye 0003:0458:5011.000E: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 141.839689][ T7141] rust_binder: Error while translating object. [ 141.839745][ T7141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.846152][ T7141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:517 [ 141.856244][ T9] usb 5-1: USB disconnect, device number 30 [ 142.682540][ T36] audit: type=1400 audit(1756388406.274:577): avc: denied { execute } for pid=7290 comm="syz.4.2228" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 142.899705][ T7318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7318 comm=syz.4.2236 [ 142.912181][ T7318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7318 comm=syz.4.2236 [ 142.926117][ T36] audit: type=1400 audit(1756388406.514:578): avc: denied { module_load } for pid=7311 comm="syz.4.2236" path="/bus" dev="ramfs" ino=32781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 142.926351][ T7318] Invalid ELF header magic: != ELF [ 142.961388][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 143.218013][ T7330] 9pnet_fd: Insufficient options for proto=fd [ 143.236433][ T7332] fuse: Bad value for 'fd' [ 143.241675][ T7332] overlayfs: failed to clone upperpath [ 143.353418][ T7343] netlink: 'syz.1.2247': attribute type 29 has an invalid length. [ 143.361391][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'. [ 143.461758][ T7356] fuse: Bad value for 'fd' [ 143.695816][ T7363] rust_binder: Error while translating object. [ 143.695844][ T7363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 143.702223][ T7364] rust_binder: Error while translating object. [ 143.702836][ T7363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:546 [ 143.711694][ T7364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 143.726911][ T7364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:546 [ 144.356480][ T36] audit: type=1400 audit(1756388407.945:579): avc: denied { map } for pid=7420 comm="syz.2.2272" path="socket:[32214]" dev="sockfs" ino=32214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.398580][ T7424] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2273'. [ 144.407616][ T7423] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2273'. [ 144.585690][ T36] audit: type=1326 audit(1756388408.175:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7438 comm="syz.0.2279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f314538ebe9 code=0x0 [ 144.618795][ T7442] rust_binder: Error while translating object. [ 144.618825][ T7442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 144.618945][ T7443] rust_binder: Error while translating object. [ 144.624996][ T7442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:556 [ 144.640560][ T7443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 144.649676][ T7443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:556 [ 144.687873][ T7446] overlayfs: failed to clone upperpath [ 144.948300][ T9] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 145.099311][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.110342][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.120080][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.133578][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 145.142648][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 145.150647][ T9] usb 5-1: SerialNumber: syz [ 145.155760][ T9] usb 5-1: config 0 descriptor?? [ 145.361579][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.370443][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.379406][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.387865][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.397286][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.405773][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.413827][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.422525][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.430597][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.439124][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.453972][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 145.460542][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 145.470996][ T9] usb 5-1: USB disconnect, device number 31 [ 145.477864][ T7472] rust_binder: Read failure Err(EAGAIN) in pid:566 [ 145.529547][ T7475] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.485016][ T36] audit: type=1326 audit(1756388410.075:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.2300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb23cd8ebe9 code=0x0 [ 147.166366][ T7520] tipc: Enabling of bearer rejected, failed to enable media [ 147.473464][ T7552] netlink: 57 bytes leftover after parsing attributes in process `syz.2.2319'. [ 147.557468][ T36] audit: type=1400 audit(1756388411.145:582): avc: denied { shutdown } for pid=7561 comm="syz.2.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.588354][ T7564] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2324'. [ 147.597969][ T375] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 147.727983][ T375] usb 5-1: device descriptor read/64, error -71 [ 147.785413][ T7566] overlayfs: failed to clone upperpath [ 147.967920][ T375] usb 5-1: device descriptor read/64, error -71 [ 148.207884][ T375] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 148.215627][ T7599] 9pnet_fd: Insufficient options for proto=fd [ 148.258663][ T7613] overlayfs: failed to clone upperpath [ 148.337871][ T375] usb 5-1: device descriptor read/64, error -71 [ 148.437760][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2353'. [ 148.577878][ T375] usb 5-1: device descriptor read/64, error -71 [ 148.688128][ T375] usb usb5-port1: attempt power cycle [ 149.027817][ T375] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 149.048988][ T375] usb 5-1: device descriptor read/8, error -71 [ 149.061929][ T7683] overlayfs: failed to clone upperpath [ 149.097928][ T7693] netlink: 'syz.0.2369': attribute type 4 has an invalid length. [ 149.107186][ T7693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7693 comm=syz.0.2369 [ 149.179318][ T375] usb 5-1: device descriptor read/8, error -71 [ 149.421421][ T375] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 149.448728][ T375] usb 5-1: device descriptor read/8, error -71 [ 149.569693][ T7768] batadv_slave_1: entered promiscuous mode [ 149.587036][ T7772] batadv_slave_1: left promiscuous mode [ 149.598707][ T375] usb 5-1: device descriptor read/8, error -71 [ 149.659711][ T7796] fuse: Bad value for 'user_id' [ 149.664567][ T7796] fuse: Bad value for 'user_id' [ 149.707825][ T375] usb usb5-port1: unable to enumerate USB device [ 149.775560][ T36] audit: type=1400 audit(1756388413.365:583): avc: denied { lock } for pid=7811 comm="syz.1.2412" path="socket:[33957]" dev="sockfs" ino=33957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.596831][ T7860] 9pnet_fd: Insufficient options for proto=fd [ 150.607227][ T7862] 9pnet_fd: Insufficient options for proto=fd [ 150.645144][ T7871] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 150.654118][ T7871] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 150.664277][ T7871] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 150.767588][ T375] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 150.918841][ T375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.930575][ T375] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.940187][ T375] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.949281][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.957256][ T375] usb 5-1: SerialNumber: syz [ 151.166632][ T7839] netlink: 'syz.4.2420': attribute type 58 has an invalid length. [ 151.173088][ T7916] overlayfs: failed to clone lowerpath [ 151.194533][ T375] usb 5-1: skipping empty audio interface (v1) [ 151.218417][ T375] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 151.234486][ T375] usb 5-1: USB disconnect, device number 36 [ 151.250138][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.557390][ T36] audit: type=1400 audit(1756388415.135:584): avc: denied { listen } for pid=7950 comm="syz.1.2456" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.853073][ T7986] overlayfs: failed to clone upperpath [ 152.089805][ T7999] 9pnet_fd: Insufficient options for proto=fd [ 152.229818][ T8004] overlayfs: conflicting options: userxattr,verity=require [ 152.712025][ T8036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:610 [ 152.750490][ T375] rust_binder: 8034: removing orphan mapping 0:24 [ 152.791444][ T8045] binder: Bad value for 'max' [ 152.805827][ T36] audit: type=1400 audit(1756388416.386:585): avc: denied { create } for pid=8047 comm="syz.4.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 152.859388][ T8050] 9p: Unknown access argument 00000000000000000000 : -22 [ 153.471122][ T8103] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8103 comm=syz.0.2506 [ 153.510037][ T8110] fuse: Bad value for 'fd' [ 154.463416][ T8166] overlayfs: failed to clone upperpath [ 154.497509][ T36] audit: type=1400 audit(1756388418.086:586): avc: denied { link } for pid=8146 comm="syz.4.2523" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 154.534236][ T8147] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 154.607326][ T8173] /dev/nullb0: Can't lookup blockdev [ 154.649357][ T8180] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 155.288479][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 155.914197][ T36] audit: type=1326 audit(1756388419.496:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.2.2552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fabf8ebe9 code=0x0 [ 156.064862][ T8255] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 156.065871][ T8254] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 156.082311][ T8254] can: request_module (can-proto-0) failed. [ 157.279316][ T8288] sit0: entered promiscuous mode [ 157.294873][ T8288] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 157.302751][ T8288] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2567'. [ 157.342877][ T6151] Bluetooth: hci0: command 0x1003 tx timeout [ 157.349116][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 157.418267][ T8290] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 157.434579][ T8296] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000030xffffffffffffffffƬ~]ם y#(L9<0mZB]VD~>m4埀' [ 157.457732][ T8296] bpf: Bad value for 'gid' [ 157.458539][ T8297] bpf: Bad value for 'gid' [ 157.527798][ T617] rust_binder: 8300: removing orphan mapping 0:24 [ 157.647735][ T36] audit: type=1400 audit(1756388421.236:588): avc: denied { listen } for pid=8333 comm="syz.4.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.865271][ T8363] tipc: Enabled bearer , priority 0 [ 157.882319][ T8363] syzkaller0: entered promiscuous mode [ 157.887833][ T8363] syzkaller0: entered allmulticast mode [ 157.893565][ T8363] tipc: Resetting bearer [ 157.900920][ T8363] tipc: Resetting bearer [ 157.911128][ T8363] tipc: Disabling bearer [ 158.127672][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.134747][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.141852][ T8372] bridge_slave_0: entered allmulticast mode [ 158.148206][ T8372] bridge_slave_0: entered promiscuous mode [ 158.156794][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.163838][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.170938][ T8372] bridge_slave_1: entered allmulticast mode [ 158.177252][ T8372] bridge_slave_1: entered promiscuous mode [ 158.216656][ T329] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 158.243105][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.250186][ T8372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.257489][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.264513][ T8372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.291718][ T3049] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.307988][ T3049] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.320612][ T3049] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.327691][ T3049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.338217][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.345255][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.377982][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.392113][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.402571][ T8372] veth0_vlan: entered promiscuous mode [ 158.411907][ T329] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 158.414770][ T8372] veth1_macvtap: entered promiscuous mode [ 158.420972][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.440323][ T329] usb 5-1: config 0 descriptor?? [ 158.476375][ T8411] 9pnet_fd: Insufficient options for proto=fd [ 158.518487][ T8425] 9pnet_fd: Insufficient options for proto=fd [ 158.525083][ T8425] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 158.556912][ T8437] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.565090][ T8437] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 158.572684][ T8446] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.2615'. [ 158.584348][ T8437] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.593095][ T8437] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 158.679078][ T36] audit: type=1400 audit(1756388422.266:589): avc: denied { read } for pid=8459 comm="syz.0.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.733652][ T8474] fuse: Unknown parameter '0x00000000000000050x0000000000000005' [ 158.856469][ T329] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 158.863975][ T329] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 158.904142][ T8494] 9pnet_fd: Insufficient options for proto=fd [ 158.943550][ T8513] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2635'. [ 158.953721][ T8516] overlayfs: failed to clone upperpath [ 158.966595][ T9] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 159.061128][ T329] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 159.097554][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'. [ 159.106603][ T9] usb 1-1: device descriptor read/64, error -71 [ 159.346533][ T9] usb 1-1: device descriptor read/64, error -71 [ 159.461557][ T8368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.461584][ T8368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694 [ 159.471650][ T329] cp2112 0003:10C4:EA90.000F: error setting SMBus config [ 159.488436][ T329] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -71 [ 159.498802][ T329] usb 5-1: USB disconnect, device number 37 [ 159.586500][ T9] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 159.655980][ T8574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8574 comm=syz.2.2660 [ 159.668898][ T8574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2660'. [ 159.716496][ T9] usb 1-1: device descriptor read/64, error -71 [ 159.956461][ T9] usb 1-1: device descriptor read/64, error -71 [ 159.984443][ T8576] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 159.993088][ T8576] rust_binder: Write failure EINVAL in pid:696 [ 160.009841][ T8578] tipc: Enabling of bearer rejected, failed to enable media [ 160.067258][ T9] usb usb1-port1: attempt power cycle [ 160.406419][ T9] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 160.427447][ T9] usb 1-1: device descriptor read/8, error -71 [ 160.557423][ T9] usb 1-1: device descriptor read/8, error -71 [ 160.796382][ T9] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 160.828327][ T9] usb 1-1: device descriptor read/8, error -71 [ 160.957388][ T9] usb 1-1: device descriptor read/8, error -71 [ 161.066414][ T9] usb usb1-port1: unable to enumerate USB device [ 161.146326][ T329] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 161.297308][ T329] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.308448][ T329] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.318391][ T329] usb 5-1: config 0 interface 0 has no altsetting 0 [ 161.325037][ T329] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 161.334108][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.342737][ T329] usb 5-1: config 0 descriptor?? [ 161.693631][ T8617] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 238) [ 161.693655][ T8617] rust_binder: Error while translating object. [ 161.704607][ T8617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 161.710928][ T8617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 161.750104][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.767670][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.802504][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.811078][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.076195][ T45] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 162.206280][ T45] usb 1-1: device descriptor read/64, error -71 [ 162.364582][ T8645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:715 [ 162.456131][ T45] usb 1-1: device descriptor read/64, error -71 [ 162.646103][ T36] audit: type=1400 audit(1756388426.227:590): avc: denied { lock } for pid=8654 comm="syz.2.2688" path="socket:[36983]" dev="sockfs" ino=36983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 162.727346][ T8660] overlayfs: failed to clone upperpath [ 162.746730][ T45] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 162.896081][ T45] usb 1-1: device descriptor read/64, error -71 [ 162.903384][ T36] audit: type=1400 audit(1756388426.487:591): avc: denied { name_bind } for pid=8651 comm="syz.4.2687" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 163.006013][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2693'. [ 163.091257][ T329] usbhid 5-1:0.0: can't add hid device: -71 [ 163.105172][ T329] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 163.119709][ T329] usb 5-1: USB disconnect, device number 38 [ 163.146054][ T45] usb 1-1: device descriptor read/64, error -71 [ 163.146533][ T8684] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 163.175209][ T8684] 9pnet_fd: Insufficient options for proto=fd [ 163.186283][ T8684] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 163.194981][ T8686] 9pnet_fd: Insufficient options for proto=fd [ 163.256139][ T45] usb usb1-port1: attempt power cycle [ 163.271428][ T8691] netlink: 'syz.1.2700': attribute type 12 has an invalid length. [ 163.351337][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2705'. [ 163.442522][ T8715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32787 sclass=netlink_route_socket pid=8715 comm=syz.2.2709 [ 163.487302][ T8716] overlay: ./file0 is not a directory [ 163.514513][ T36] audit: type=1400 audit(1756388427.097:592): avc: denied { watch } for pid=8725 comm="syz.4.2713" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.606013][ T45] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 163.626958][ T45] usb 1-1: device descriptor read/8, error -71 [ 163.665701][ T8730] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2715'. [ 163.780829][ T45] usb 1-1: device descriptor read/8, error -71 [ 164.025991][ T45] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 164.049636][ T45] usb 1-1: device descriptor read/8, error -71 [ 164.186891][ T45] usb 1-1: device descriptor read/8, error -71 [ 164.296537][ T45] usb usb1-port1: unable to enumerate USB device [ 164.743489][ T8789] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 164.743508][ T8789] rust_binder: Error while translating object. [ 164.752257][ T8789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.758576][ T8789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 164.785759][ T8793] FAT-fs (rnullb0): bogus number of reserved sectors [ 164.801562][ T8793] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 164.811750][ T8793] tipc: Enabling of bearer rejected, media not registered [ 164.926803][ T8809] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 164.934109][ T8809] rust_binder: 38: no such ref 1 [ 164.939233][ T8809] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 164.977336][ T8810] rust_binder: 8809 RLIMIT_NICE not set [ 164.977498][ T8809] rust_binder: Error while translating object. [ 164.983099][ T8809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 164.989478][ T8809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 165.005259][ T45] rust_binder: 8808: removing orphan mapping 0:1144 [ 165.040665][ T8827] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 165.080611][ T36] audit: type=1400 audit(1756388428.657:593): avc: denied { map } for pid=8823 comm="syz.2.2746" path="socket:[38089]" dev="sockfs" ino=38089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 165.165165][ T8846] __vm_enough_memory: pid: 8846, comm: syz.0.2753, bytes: 18014402804453376 not enough memory for the allocation [ 165.671661][ T9037] overlayfs: failed to clone upperpath [ 165.720114][ T9022] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 165.913752][ T9066] binder: Bad value for 'defcontext' [ 165.919728][ T36] audit: type=1400 audit(1756388429.517:594): avc: denied { read } for pid=9065 comm="syz.4.2781" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 165.943988][ T36] audit: type=1400 audit(1756388429.517:595): avc: denied { open } for pid=9065 comm="syz.4.2781" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 165.970123][ T36] audit: type=1400 audit(1756388429.517:596): avc: denied { ioctl } for pid=9065 comm="syz.4.2781" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 166.079343][ T9074] rust_binder: 776: no such ref 0 [ 166.355743][ T9088] fuse: Bad value for 'fd' [ 166.405653][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 166.565636][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 166.571744][ T9] usb 5-1: config 0 has no interfaces? [ 166.578543][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.587786][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.596571][ T9] usb 5-1: config 0 descriptor?? [ 166.637702][ T9092] rust_binder: Error while translating object. [ 166.637736][ T9092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.643917][ T9092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 166.803783][ T45] usb 5-1: USB disconnect, device number 39 [ 167.112410][ T9105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2796'. [ 167.259976][ T9127] 9pnet_fd: Insufficient options for proto=fd [ 167.273987][ T9130] 9pnet_fd: Insufficient options for proto=fd [ 167.331349][ T9147] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2811'. [ 167.503241][ T9173] rust_binder: Error while translating object. [ 167.503264][ T9173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 167.509508][ T9173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:791 [ 167.574359][ T9176] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 167.692964][ T9193] 9pnet_fd: Insufficient options for proto=fd [ 168.461529][ T9298] rust_binder: Failed to allocate buffer. len:1643119450540732720, is_oneway:true [ 168.461556][ T9298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 168.470910][ T9298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:215 [ 168.843860][ T9316] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 168.867508][ T36] audit: type=1400 audit(1756388432.458:597): avc: denied { relabelto } for pid=9315 comm="syz.2.2846" name="file0" dev="tmpfs" ino=1780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 168.894517][ T36] audit: type=1400 audit(1756388432.458:598): avc: denied { associate } for pid=9315 comm="syz.2.2846" name="file0" dev="tmpfs" ino=1780 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 168.924018][ T9320] rust_binder: 224: no such ref 2 [ 168.927004][ T36] audit: type=1400 audit(1756388432.488:599): avc: denied { unlink } for pid=5982 comm="syz-executor" name="file0" dev="tmpfs" ino=1780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 169.245316][ T329] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 169.396344][ T329] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.410561][ T329] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 169.419635][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 169.427730][ T329] usb 5-1: Product: syz [ 169.431872][ T329] usb 5-1: Manufacturer: syz [ 169.436478][ T329] usb 5-1: SerialNumber: syz [ 169.586440][ T36] audit: type=1326 audit(1756388433.178:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.2.2857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fabf8ebe9 code=0x0 [ 169.644463][ T329] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 169.689169][ T9349] 9pnet_fd: Insufficient options for proto=fd [ 169.808991][ T9351] netlink: 'syz.0.2858': attribute type 11 has an invalid length. [ 169.817170][ T9351] SELinux: Context ϧ is not valid (left unmapped). [ 169.824419][ T36] audit: type=1400 audit(1756388433.408:601): avc: denied { create } for pid=9350 comm="syz.0.2858" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 169.846523][ T36] audit: type=1400 audit(1756388433.408:602): avc: denied { associate } for pid=9350 comm="syz.0.2858" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE [ 169.852075][ T329] usb 5-1: USB disconnect, device number 40 [ 169.870126][ T36] audit: type=1400 audit(1756388433.438:603): avc: denied { rmdir } for pid=8372 comm="syz-executor" name="file1" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 169.876750][ T329] usblp0: removed [ 170.154816][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 170.325199][ T329] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 170.475221][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 170.481734][ T329] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.490078][ T329] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.501351][ T329] usb 1-1: config 1 interface 0 has no altsetting 0 [ 170.509780][ T329] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 170.523655][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.531747][ T329] usb 1-1: Product: syz [ 170.536027][ T329] usb 1-1: Manufacturer: syz [ 170.540655][ T329] usb 1-1: SerialNumber: syz [ 170.615906][ T9382] cgroup: fork rejected by pids controller in /syz4 [ 170.723773][ T9428] overlayfs: failed to clone upperpath [ 170.893429][ T329] usb 1-1: USB disconnect, device number 51 [ 171.030440][ T9456] binder: Bad value for 'stats' [ 171.260541][ T9463] 9pnet_fd: Insufficient options for proto=fd [ 171.487963][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.505238][ T329] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 171.635198][ T329] usb 5-1: device descriptor read/64, error -71 [ 171.836423][ T9485] tipc: Enabling of bearer rejected, failed to enable media [ 171.855705][ T9490] overlayfs: failed to clone upperpath [ 171.875200][ T329] usb 5-1: device descriptor read/64, error -71 [ 172.115222][ T329] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 172.245219][ T329] usb 5-1: device descriptor read/64, error -71 [ 172.429918][ T9518] fuse: Bad value for 'user_id' [ 172.434852][ T9518] fuse: Bad value for 'user_id' [ 172.485232][ T329] usb 5-1: device descriptor read/64, error -71 [ 172.595277][ T329] usb usb5-port1: attempt power cycle [ 172.658179][ T9528] overlayfs: failed to clone upperpath [ 172.945198][ T329] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 172.966329][ T329] usb 5-1: device descriptor read/8, error -71 [ 172.967320][ T36] audit: type=1400 audit(1756392788.565:604): avc: denied { create } for pid=9531 comm="syz.1.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.096585][ T329] usb 5-1: device descriptor read/8, error -71 [ 173.335201][ T329] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 173.356176][ T329] usb 5-1: device descriptor read/8, error -71 [ 173.458452][ T36] audit: type=1401 audit(1756392789.055:605): op=fscreate invalid_context=CFA7AE [ 173.486172][ T329] usb 5-1: device descriptor read/8, error -71 [ 173.535247][ T6151] Bluetooth: hci0: command 0x1003 tx timeout [ 173.535246][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.570991][ T9548] netlink: 'syz.0.2901': attribute type 16 has an invalid length. [ 173.578896][ T9548] netlink: 'syz.0.2901': attribute type 25 has an invalid length. [ 173.586763][ T9548] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.2901'. [ 173.596231][ T329] usb usb5-port1: unable to enumerate USB device [ 173.602597][ T36] audit: type=1400 audit(1756392789.195:606): avc: denied { read write } for pid=9547 comm="syz.0.2901" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.739717][ T9564] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 173.739735][ T9564] rust_binder: Error while translating object. [ 173.751863][ T9564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.758052][ T9564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 174.033164][ T9573] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 174.308908][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 174.308923][ T36] audit: type=1400 audit(1756392789.905:613): avc: denied { map } for pid=9588 comm="syz.4.2915" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.341801][ T9589] batadv_slave_1: entered promiscuous mode [ 174.359872][ T36] audit: type=1400 audit(1756392789.955:614): avc: denied { sys_module } for pid=9588 comm="syz.4.2915" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 174.386402][ T9590] batadv_slave_1: left promiscuous mode [ 174.412941][ T36] audit: type=1400 audit(1756392790.005:615): avc: denied { ioctl } for pid=9594 comm="syz.4.2916" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.455191][ T36] audit: type=1400 audit(1756392790.035:616): avc: denied { execute } for pid=9594 comm="syz.4.2916" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.632887][ T9603] FAT-fs (rnullb0): bogus number of reserved sectors [ 174.642801][ T9603] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 174.881063][ T9626] netlink: 'syz.1.2928': attribute type 4 has an invalid length. [ 174.900119][ T9626] netlink: 'syz.1.2928': attribute type 21 has an invalid length. [ 174.910964][ T9626] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2928'. [ 174.921286][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2928'. [ 175.019510][ T36] audit: type=1400 audit(1756392790.615:617): avc: denied { audit_write } for pid=9645 comm="syz.1.2934" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 175.563188][ T9657] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2938'. [ 175.590960][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2939'. [ 175.657545][ T9677] rust_binder: 289: no such ref 3 [ 175.680735][ T9680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9680 comm=syz.2.2946 [ 175.915191][ T45] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 175.945603][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.952664][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.960115][ T9712] bridge_slave_0: entered allmulticast mode [ 175.966873][ T9712] bridge_slave_0: entered promiscuous mode [ 175.974329][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.981544][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.988753][ T9712] bridge_slave_1: entered allmulticast mode [ 175.995058][ T9712] bridge_slave_1: entered promiscuous mode [ 176.056280][ T45] usb 1-1: device descriptor read/64, error -71 [ 176.115452][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.122513][ T9712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.129820][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.136863][ T9712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.169926][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.185275][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.201668][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.208759][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.228505][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.235595][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.297312][ T9712] veth0_vlan: entered promiscuous mode [ 176.325200][ T45] usb 1-1: device descriptor read/64, error -71 [ 176.326296][ T9712] veth1_macvtap: entered promiscuous mode [ 176.399219][ T36] audit: type=1400 audit(1756392791.995:618): avc: denied { bind } for pid=9785 comm="syz.4.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.462990][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2986'. [ 176.488381][ T9805] rust_binder: 7: no such ref 2 [ 176.565270][ T45] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 176.705212][ T45] usb 1-1: device descriptor read/64, error -71 [ 176.945239][ T45] usb 1-1: device descriptor read/64, error -71 [ 177.039624][ T36] audit: type=1400 audit(1756392792.635:619): avc: denied { create } for pid=9825 comm="syz.2.2997" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 177.056299][ T45] usb usb1-port1: attempt power cycle [ 177.066768][ T36] audit: type=1400 audit(1756392792.635:620): avc: denied { mounton } for pid=9825 comm="syz.2.2997" path="/372/file0" dev="tmpfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 177.067003][ T9830] overlayfs: failed to resolve './file1': -2 [ 177.138807][ T9848] overlay: ./file0 is not a directory [ 177.300559][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3007'. [ 177.365246][ T9872] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3014'. [ 177.370025][ T36] audit: type=1326 audit(1756392792.965:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.4.3013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad05d8ebe9 code=0x0 [ 177.374377][ T9872] 0M: renamed from gretap0 (while UP) [ 177.404413][ T9872] 0M: entered allmulticast mode [ 177.415346][ T9872] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 177.431272][ T36] audit: type=1400 audit(1756392793.015:622): avc: denied { setattr } for pid=9878 comm="syz.4.3015" name="file0" dev="incremental-fs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.464460][ T9884] netlink: 'syz.4.3016': attribute type 16 has an invalid length. [ 177.472395][ T45] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 177.472617][ T9884] netlink: 'syz.4.3016': attribute type 3 has an invalid length. [ 177.491042][ T9884] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.3016'. [ 177.496170][ T45] usb 1-1: device descriptor read/8, error -71 [ 177.538848][ T9897] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 177.612425][ T9904] fuse: Bad value for 'fd' [ 177.617862][ T9904] input: syz1 as /devices/virtual/input/input18 [ 177.646270][ T45] usb 1-1: device descriptor read/8, error -71 [ 177.875197][ T435] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 177.885334][ T45] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 177.906202][ T45] usb 1-1: device descriptor read/8, error -71 [ 178.025201][ T435] usb 5-1: Using ep0 maxpacket: 16 [ 178.031529][ T435] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.041834][ T435] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.051893][ T45] usb 1-1: device descriptor read/8, error -71 [ 178.058493][ T435] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.067844][ T435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.075996][ T435] usb 5-1: Product: syz [ 178.080208][ T435] usb 5-1: Manufacturer: syz [ 178.084795][ T435] usb 5-1: SerialNumber: syz [ 178.165870][ T45] usb usb1-port1: unable to enumerate USB device [ 178.230984][ T9942] tipc: Started in network mode [ 178.235936][ T9942] tipc: Node identity , cluster identity 4711 [ 178.242014][ T9942] tipc: Failed to obtain node identity [ 178.247569][ T9942] tipc: Enabling of bearer rejected, failed to enable media [ 178.491316][ T435] usb 5-1: cannot find UAC_HEADER [ 178.497772][ T435] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 178.511492][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.695623][ T9906] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 178.696555][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.713033][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.723687][ T435] usb 5-1: USB disconnect, device number 45 [ 179.014199][ T9986] overlayfs: failed to clone upperpath [ 179.065241][ T375] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 179.216480][ T375] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 179.225678][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.234449][ T375] usb 1-1: config 0 descriptor?? [ 179.442152][ T375] usb 1-1: Cannot read MAC address [ 179.450776][ T375] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 179.472169][ T375] usb 1-1: USB disconnect, device number 56 [ 179.488742][T10023] tipc: Started in network mode [ 179.493637][T10023] tipc: Node identity 2d000000400000000000000000000001, cluster identity 4711 [ 179.502592][T10023] tipc: Enabling of bearer rejected, failed to enable media [ 179.511742][T10023] 9pnet_fd: Insufficient options for proto=fd [ 179.756297][T10035] 9pnet_fd: Insufficient options for proto=fd [ 179.841915][T10041] tipc: Started in network mode [ 179.846940][T10041] tipc: Node identity 1e7df084abdc, cluster identity 4711 [ 179.854299][T10041] tipc: Enabled bearer , priority 0 [ 179.898658][T10041] syzkaller0: entered promiscuous mode [ 179.904340][T10041] syzkaller0: entered allmulticast mode [ 179.910281][T10041] tipc: Resetting bearer [ 179.923949][T10041] tipc: Resetting bearer [ 179.934473][T10041] tipc: Disabling bearer [ 179.974536][T10055] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.186873][T10084] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3087'. [ 180.255589][ T375] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 180.405187][ T375] usb 1-1: Using ep0 maxpacket: 8 [ 180.411572][ T375] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.420163][ T375] usb 1-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 180.431411][ T375] usb 1-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 180.441507][ T375] usb 1-1: config 12 interface 0 has no altsetting 0 [ 180.449435][ T375] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 180.458505][ T375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.466542][ T375] usb 1-1: Product: syz [ 180.470729][ T375] usb 1-1: Manufacturer: syz [ 180.475384][ T375] usb 1-1: SerialNumber: syz [ 180.481172][T10068] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.534373][T10103] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3094'. [ 180.691873][ T375] usb 1-1: selecting invalid altsetting 0 [ 180.699901][ T375] usb 1-1: USB disconnect, device number 57 [ 180.710071][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 181.300459][T10135] tipc: Started in network mode [ 181.305369][T10135] tipc: Node identity 6afd88839b0b, cluster identity 4711 [ 181.312628][T10135] tipc: Enabled bearer , priority 0 [ 181.360005][T10144] netlink: 'syz.2.3109': attribute type 7 has an invalid length. [ 181.480975][T10136] tipc: Resetting bearer [ 181.495185][ T375] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 181.510328][T10136] tipc: Disabling bearer [ 181.575193][ T456] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 181.606366][T10166] overlayfs: failed to resolve './cgroup': -2 [ 181.642594][T10174] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 181.656785][T10178] overlayfs: failed to clone upperpath [ 181.666406][ T375] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.681321][ T375] usb 5-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 181.692458][ T375] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.702387][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.712889][ T375] usb 5-1: invalid MIDI out EP 0 [ 181.725203][ T456] usb 1-1: Using ep0 maxpacket: 16 [ 181.728459][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 181.731226][ T375] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 181.765725][ T456] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.775757][ T456] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 181.794229][ T456] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 181.801150][T10197] overlayfs: failed to clone upperpath [ 181.810300][ T456] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.819615][ T456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.835129][ T456] usb 1-1: SerialNumber: syz [ 181.840749][T10138] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 181.917467][T10131] rust_binder: Read failure Err(EFAULT) in pid:71 [ 181.917791][ T329] usb 5-1: USB disconnect, device number 46 [ 181.968469][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 181.968485][ T36] audit: type=1326 audit(1756392797.565:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.2.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fabf8ebe9 code=0x7ffc0000 [ 181.994688][T10230] 9p: Unknown access argument 00000000000000000000f)i0x0000000000000000: -22 [ 181.998319][ T36] audit: type=1326 audit(1756392797.565:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.2.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fabf8ebe9 code=0x7ffc0000 [ 182.031697][ T36] audit: type=1326 audit(1756392797.565:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.2.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3fabf8ebe9 code=0x7ffc0000 [ 182.054920][ T36] audit: type=1326 audit(1756392797.565:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.2.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fabf8ebe9 code=0x7ffc0000 [ 182.082572][ T36] audit: type=1326 audit(1756392797.565:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.2.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3fabf8ebe9 code=0x7ffc0000 [ 182.098743][T10138] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 182.111207][ T36] audit: type=1326 audit(1756392797.565:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.2.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fabf8ebe9 code=0x7ffc0000 [ 182.154906][T10243] netlink: 'syz.1.3145': attribute type 28 has an invalid length. [ 182.156671][ T36] audit: type=1326 audit(1756392797.565:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.2.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f3fabf8ebe9 code=0x7ffc0000 [ 182.187674][ T36] audit: type=1326 audit(1756392797.565:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.2.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fabf8ebe9 code=0x7ffc0000 [ 182.211937][ T36] audit: type=1326 audit(1756392797.565:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.2.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fabf8ebe9 code=0x7ffc0000 [ 182.266610][T10252] tipc: Enabling of bearer rejected, failed to enable media [ 182.289233][T10261] overlayfs: failed to resolve './file1/file0': -2 [ 182.610654][ T36] audit: type=1400 audit(1756392798.205:634): avc: denied { view } for pid=10320 comm="syz.4.3171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 182.611672][T10321] bpf: Bad value for 'uid' [ 182.935221][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 183.086209][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 183.094411][ T9] usb 5-1: config 0 has no interface number 0 [ 183.101890][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 183.110959][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.118962][ T9] usb 5-1: Product: syz [ 183.123121][ T9] usb 5-1: Manufacturer: syz [ 183.127740][ T9] usb 5-1: SerialNumber: syz [ 183.132946][ T9] usb 5-1: config 0 descriptor?? [ 183.339581][T10325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.339620][T10325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 183.352116][ T9] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 183.367739][ T9] usb 5-1: No valid video chain found. [ 183.374555][ T9] usb 5-1: USB disconnect, device number 47 [ 183.413387][T10345] overlayfs: failed to clone upperpath [ 183.877858][T10362] binder: Unknown parameter '00000000000000000000003' [ 184.013485][T10375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.232607][T10408] netlink: 'syz.1.3200': attribute type 1 has an invalid length. [ 184.240383][T10408] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3200'. [ 184.247613][T10410] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 184.249596][T10408] netlink: 'syz.1.3200': attribute type 1 has an invalid length. [ 184.265488][T10408] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3200'. [ 184.334448][ T456] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 184.342600][ T456] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 184.353431][ T456] usb 1-1: USB disconnect, device number 58 [ 184.415874][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3207'. [ 184.459492][T10436] 9pnet_fd: p9_fd_create_tcp (10436): problem connecting socket to 127.0.0.1 [ 184.520643][T10452] 9p: Unknown access argument 00000000000000000000: -22 [ 184.773486][T10475] netlink: 'syz.1.3227': attribute type 1 has an invalid length. [ 184.791652][T10477] binder: Bad value for 'max' [ 184.818638][T10482] 9p: Unknown Cache mode or invalid value OZreadaheb귦kb Pؑ$F"B [ 185.099001][T10494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 185.101904][ T9] rust_binder: 10491: removing orphan mapping 0:24 [ 185.117373][T10498] overlay: filesystem on ./bus not supported as upperdir [ 185.124947][T10498] overlay: filesystem on ./bus not supported as upperdir [ 185.132235][T10498] overlay: filesystem on ./bus not supported as upperdir [ 185.139717][T10498] overlay: filesystem on ./bus not supported as upperdir [ 185.147081][T10498] overlay: filesystem on ./bus not supported as upperdir [ 185.154763][T10498] overlay: filesystem on ./bus not supported as upperdir [ 185.162098][T10498] overlay: filesystem on ./bus not supported as upperdir [ 185.163076][ T456] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 185.336175][ T456] usb 1-1: No LPM exit latency info found, disabling LPM. [ 185.349182][ T456] usb 1-1: config 11 has an invalid interface number: 108 but max is 3 [ 185.357506][ T456] usb 1-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 185.367691][ T456] usb 1-1: config 11 has 1 interface, different from the descriptor's value: 4 [ 185.376793][ T456] usb 1-1: config 11 has no interface number 0 [ 185.382960][ T456] usb 1-1: config 11 interface 108 altsetting 180 endpoint 0xF has invalid maxpacket 1023, setting to 8 [ 185.394088][ T456] usb 1-1: config 11 interface 108 altsetting 180 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 185.405222][ T456] usb 1-1: config 11 interface 108 altsetting 180 has a duplicate endpoint with address 0xE, skipping [ 185.416158][ T456] usb 1-1: config 11 interface 108 altsetting 180 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 185.427314][ T456] usb 1-1: config 11 interface 108 altsetting 180 has an invalid descriptor for endpoint zero, skipping [ 185.435195][ T329] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 185.438489][ T456] usb 1-1: config 11 interface 108 altsetting 180 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 185.456976][ T456] usb 1-1: config 11 interface 108 altsetting 180 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 185.470465][ T456] usb 1-1: config 11 interface 108 has no altsetting 0 [ 185.479263][ T456] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0166, bcdDevice=74.0e [ 185.488303][ T456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.496287][ T456] usb 1-1: Product: 룋鏦➻ೕ䁊ﰳ졃喬틢췧촋Ꚓ幻旘ퟛ곝襡ꋅැ噗䘌‒띋듯콶닳諨ꨴಜ㌡껓릂ᶢᆆᅏ⋀ﴪ鸎㦝좧ꦣ⇀缁֓홿퉱狎퟉湫脤ࢆ蒘ᶒꂌ酊斂蜝ꅆ彑䄃摋甎Ƃ㑻䜐莆龈䐙읯ା冠㏷캴凶ꑗ桐஍쓛冺ᬊ봨䦋卡耉悍횟厭酲 [ 185.526359][ T456] usb 1-1: Manufacturer: ч [ 185.530849][ T456] usb 1-1: SerialNumber: 䊵觗슩鹃ᛙ赎졆呒쟧⭈஛ힻ꜋设疼큤׭䃯㌀席免뺈桠鍪蜭ᷥ䡉趱๾邜퇈Դ箩鱠౯꽱䟥ɐޔࣺ䒶䞶撐꥙嘟☡飻܈ᅭ칬骋迻䬄堼﷢莴棬꾫픇슬偐훗舀ၧ [ 185.554206][T10487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.605196][ T329] usb 5-1: Using ep0 maxpacket: 16 [ 185.611418][ T329] usb 5-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 185.621717][ T329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.632239][ T329] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.641294][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.649299][ T329] usb 5-1: Product: syz [ 185.653453][ T329] usb 5-1: Manufacturer: syz [ 185.658042][ T329] usb 5-1: SerialNumber: syz [ 185.765718][ T456] ftdi_sio 1-1:11.108: FTDI USB Serial Device converter detected [ 185.773823][ T456] ftdi_sio ttyUSB0: unknown device type: 0x740e [ 185.783249][ T456] usb 1-1: USB disconnect, device number 59 [ 185.790622][ T456] ftdi_sio 1-1:11.108: device disconnected [ 185.861633][T10517] /dev/loop1: Can't lookup blockdev [ 185.988486][T10527] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10527 comm=syz.2.3245 [ 186.001311][T10527] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10527 comm=syz.2.3245 [ 186.027917][T10529] fuse: Unknown parameter 'a' [ 186.070224][ T329] usb 5-1: 0:2 : does not exist [ 186.515214][ T329] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 186.569558][T10561] 9pnet_fd: Insufficient options for proto=fd [ 186.601509][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3265'. [ 186.622772][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.627468][T10577] 9pnet_fd: Insufficient options for proto=fd [ 186.631675][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.666309][ T329] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.677251][ T329] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 186.688641][ T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.697697][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.705697][ T329] usb 1-1: Product: syz [ 186.709842][ T329] usb 1-1: Manufacturer: syz [ 186.714404][ T329] usb 1-1: SerialNumber: syz [ 186.720864][ T329] cdc_mbim 1-1:1.0: skipping garbage [ 186.921259][T10535] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.103873][T10587] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3271'. [ 187.113029][T10587] netlink: 'syz.2.3271': attribute type 6 has an invalid length. [ 187.120779][T10587] netlink: 'syz.2.3271': attribute type 5 has an invalid length. [ 187.128542][T10587] netlink: 'syz.2.3271': attribute type 4 has an invalid length. [ 187.163251][T10596] netlink: 'syz.2.3274': attribute type 13 has an invalid length. [ 187.589953][T10615] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.597338][ T329] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 187.604790][ T329] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 187.701781][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.702890][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 187.702905][ T36] audit: type=1400 audit(1756392803.292:642): avc: denied { setattr } for pid=10616 comm="syz.2.3279" name="RAWv6" dev="sockfs" ino=43872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.712066][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.776712][T10632] 9pnet_fd: p9_fd_create_tcp (10632): problem connecting socket to 127.0.0.1 [ 188.360425][T10654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=10654 comm=syz.2.3291 [ 188.441037][T10670] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3296'. [ 188.736684][ T36] audit: type=1400 audit(1756392804.332:643): avc: denied { create } for pid=10696 comm="syz.1.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 188.765360][ T456] usb 5-1: USB disconnect, device number 48 [ 188.807524][T10718] fuse: Bad value for 'group_id' [ 188.812494][T10718] fuse: Bad value for 'group_id' [ 188.818011][T10718] fuse: Bad value for 'group_id' [ 188.825187][T10718] fuse: Bad value for 'group_id' [ 188.830749][T10718] fuse: Bad value for 'group_id' [ 188.835760][T10718] fuse: Bad value for 'group_id' [ 188.840835][T10718] fuse: Bad value for 'group_id' [ 188.845807][T10718] fuse: Bad value for 'group_id' [ 188.851426][T10718] fuse: Bad value for 'group_id' [ 188.856477][T10718] fuse: Bad value for 'group_id' [ 188.861483][T10718] fuse: Bad value for 'group_id' [ 188.866507][T10718] fuse: Bad value for 'group_id' [ 188.871564][T10718] fuse: Bad value for 'group_id' [ 188.876517][T10718] fuse: Bad value for 'group_id' [ 188.881559][T10718] fuse: Bad value for 'group_id' [ 188.886519][T10718] fuse: Bad value for 'group_id' [ 188.892367][T10718] fuse: Bad value for 'group_id' [ 188.897442][T10718] fuse: Bad value for 'group_id' [ 188.902472][T10718] fuse: Bad value for 'group_id' [ 188.907438][T10718] fuse: Bad value for 'group_id' [ 188.913549][T10718] fuse: Bad value for 'group_id' [ 188.923399][T10718] fuse: Bad value for 'group_id' [ 188.928461][T10718] fuse: Bad value for 'group_id' [ 188.933399][T10718] fuse: Bad value for 'group_id' [ 188.938686][T10718] fuse: Bad value for 'group_id' [ 188.943664][T10718] fuse: Bad value for 'group_id' [ 188.948763][T10718] fuse: Bad value for 'group_id' [ 188.953875][T10718] fuse: Bad value for 'group_id' [ 188.959454][T10718] fuse: Bad value for 'group_id' [ 188.964406][T10718] fuse: Bad value for 'group_id' [ 188.969460][T10718] fuse: Bad value for 'group_id' [ 188.974392][T10718] fuse: Bad value for 'group_id' [ 188.982691][T10718] fuse: Bad value for 'group_id' [ 188.987743][T10718] fuse: Bad value for 'group_id' [ 188.992988][T10718] fuse: Bad value for 'group_id' [ 188.998426][T10718] fuse: Bad value for 'group_id' [ 189.003758][T10718] fuse: Bad value for 'group_id' [ 189.008842][T10718] fuse: Bad value for 'group_id' [ 189.013945][T10718] fuse: Bad value for 'group_id' [ 189.018937][T10718] fuse: Bad value for 'group_id' [ 189.023963][T10718] fuse: Bad value for 'group_id' [ 189.029031][T10718] fuse: Bad value for 'group_id' [ 189.034292][T10718] fuse: Bad value for 'group_id' [ 189.039401][T10718] fuse: Bad value for 'group_id' [ 189.044461][T10718] fuse: Bad value for 'group_id' [ 189.049461][T10718] fuse: Bad value for 'group_id' [ 189.054515][T10718] fuse: Bad value for 'group_id' [ 189.060496][T10718] fuse: Bad value for 'group_id' [ 189.065543][T10718] fuse: Bad value for 'group_id' [ 189.070477][T10718] fuse: Bad value for 'group_id' [ 189.075509][T10718] fuse: Bad value for 'group_id' [ 189.080441][T10718] fuse: Bad value for 'group_id' [ 189.085481][T10718] fuse: Bad value for 'group_id' [ 189.090418][T10718] fuse: Bad value for 'group_id' [ 189.095479][T10718] fuse: Bad value for 'group_id' [ 189.100418][T10718] fuse: Bad value for 'group_id' [ 189.105560][T10718] fuse: Bad value for 'group_id' [ 189.110491][T10718] fuse: Bad value for 'group_id' [ 189.115533][T10718] fuse: Bad value for 'group_id' [ 189.120466][T10718] fuse: Bad value for 'group_id' [ 189.125502][T10718] fuse: Bad value for 'group_id' [ 189.130438][T10718] fuse: Bad value for 'group_id' [ 189.135925][T10718] fuse: Bad value for 'group_id' [ 189.140857][T10718] fuse: Bad value for 'group_id' [ 189.145898][T10718] fuse: Bad value for 'group_id' [ 189.150837][T10718] fuse: Bad value for 'group_id' [ 189.155885][T10718] fuse: Bad value for 'group_id' [ 189.160818][T10718] fuse: Bad value for 'group_id' [ 189.165867][T10718] fuse: Bad value for 'group_id' [ 189.170800][T10718] fuse: Bad value for 'group_id' [ 189.175829][T10718] fuse: Bad value for 'group_id' [ 189.180758][T10718] fuse: Bad value for 'group_id' [ 189.185805][T10718] fuse: Bad value for 'group_id' [ 189.190742][T10718] fuse: Bad value for 'group_id' [ 189.195780][T10718] fuse: Bad value for 'group_id' [ 189.200719][T10718] fuse: Bad value for 'group_id' [ 189.205767][T10718] fuse: Bad value for 'group_id' [ 189.210704][T10718] fuse: Bad value for 'group_id' [ 189.215750][T10718] fuse: Bad value for 'group_id' [ 189.220687][T10718] fuse: Bad value for 'group_id' [ 189.225726][T10718] fuse: Bad value for 'group_id' [ 189.230658][T10718] fuse: Bad value for 'group_id' [ 189.235736][T10718] fuse: Bad value for 'group_id' [ 189.240705][T10718] fuse: Bad value for 'group_id' [ 189.245746][T10718] fuse: Bad value for 'group_id' [ 189.250686][T10718] fuse: Bad value for 'group_id' [ 189.255724][T10718] fuse: Bad value for 'group_id' [ 189.260663][T10718] fuse: Bad value for 'group_id' [ 189.265710][T10718] fuse: Bad value for 'group_id' [ 189.270645][T10718] fuse: Bad value for 'group_id' [ 189.275690][T10718] fuse: Bad value for 'group_id' [ 189.280634][T10718] fuse: Bad value for 'group_id' [ 189.285663][T10718] fuse: Bad value for 'group_id' [ 189.290600][T10718] fuse: Bad value for 'group_id' [ 189.293376][ T329] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 189.295643][T10718] fuse: Bad value for 'group_id' [ 189.306064][ T329] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 189.306383][T10718] fuse: Bad value for 'group_id' [ 189.313500][ T329] wwan wwan0: port wwan0mbim0 attached [ 189.317315][T10718] fuse: Bad value for 'group_id' [ 189.327559][T10718] fuse: Bad value for 'group_id' [ 189.332572][T10718] fuse: Bad value for 'group_id' [ 189.338372][T10718] fuse: Bad value for 'group_id' [ 189.340435][ T329] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, a2:d0:94:42:fb:dd [ 189.344974][T10718] fuse: Bad value for 'group_id' [ 189.356970][ T329] usb 1-1: USB disconnect, device number 60 [ 189.365129][ T329] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 189.365615][T10718] fuse: Bad value for 'group_id' [ 189.380767][T10718] fuse: Bad value for 'group_id' [ 189.386517][ T36] audit: type=1400 audit(1756392804.982:644): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 189.412655][T10718] fuse: Bad value for 'group_id' [ 189.420435][T10718] fuse: Bad value for 'group_id' [ 189.425441][T10718] fuse: Bad value for 'group_id' [ 189.430595][T10718] fuse: Bad value for 'group_id' [ 189.435971][T10718] fuse: Bad value for 'group_id' [ 189.441127][T10718] fuse: Bad value for 'group_id' [ 189.446150][T10718] fuse: Bad value for 'group_id' [ 189.451319][T10718] fuse: Bad value for 'group_id' [ 189.456406][T10718] fuse: Bad value for 'group_id' [ 189.459241][ T329] wwan wwan0: port wwan0mbim0 disconnected [ 189.461497][T10718] fuse: Bad value for 'group_id' [ 189.474595][T10718] fuse: Bad value for 'group_id' [ 189.479670][T10718] fuse: Bad value for 'group_id' [ 189.484587][T10718] fuse: Bad value for 'group_id' [ 189.489643][T10718] fuse: Bad value for 'group_id' [ 189.494571][T10718] fuse: Bad value for 'group_id' [ 189.499595][T10718] fuse: Bad value for 'group_id' [ 189.504521][T10718] fuse: Bad value for 'group_id' [ 189.509568][T10718] fuse: Bad value for 'group_id' [ 189.514503][T10718] fuse: Bad value for 'group_id' [ 189.519535][T10718] fuse: Bad value for 'group_id' [ 189.524465][T10718] fuse: Bad value for 'group_id' [ 189.529552][T10718] fuse: Bad value for 'group_id' [ 189.542324][T10718] fuse: Bad value for 'group_id' [ 189.547441][T10718] fuse: Bad value for 'group_id' [ 189.552380][T10718] fuse: Bad value for 'group_id' [ 189.566624][T10718] fuse: Bad value for 'group_id' [ 189.571668][T10718] fuse: Bad value for 'group_id' [ 189.577978][T10752] overlayfs: failed to clone upperpath [ 189.663496][T10762] 9pnet_fd: Insufficient options for proto=fd [ 189.734985][T10775] 9pnet_fd: Insufficient options for proto=fd [ 189.844793][T10792] fuse: Unknown parameter 'r000000000>040000' [ 189.855204][ T329] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 189.930371][T10803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.021283][ T329] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.056235][ T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 190.066016][T10815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3343'. [ 190.075207][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 190.083358][ T329] usb 1-1: Product: syz [ 190.088593][ T329] usb 1-1: Manufacturer: syz [ 190.093202][ T329] usb 1-1: SerialNumber: syz [ 190.116358][T10820] kvm: pic: level sensitive irq not supported [ 190.116427][T10820] kvm: pic: non byte read [ 190.200835][T10828] tipc: Enabled bearer , priority 10 [ 190.219338][T10827] tipc: Enabling of bearer rejected, already enabled [ 190.240724][T10831] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 190.259543][T10831] tipc: Enabled bearer , priority 10 [ 190.312946][ T329] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 190.564192][ C0] usblp0: nonzero write bulk status received: -71 [ 190.565548][ T329] usb 1-1: USB disconnect, device number 61 [ 190.582155][ T329] usblp0: removed [ 190.875211][ T329] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 190.915223][ T375] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 191.026327][ T329] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 191.037080][ T329] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.051171][ T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 191.060404][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 191.065180][ T375] usb 5-1: Using ep0 maxpacket: 8 [ 191.068525][ T329] usb 1-1: Product: syz [ 191.074038][ T375] usb 5-1: too many configurations: 28, using maximum allowed: 8 [ 191.077717][ T329] usb 1-1: Manufacturer: syz [ 191.086733][ T375] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 191.090031][ T329] usb 1-1: SerialNumber: syz [ 191.098085][ T375] usb 5-1: can't read configurations, error -61 [ 191.106459][T10749] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.235430][ T375] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 191.315201][ T456] tipc: Node number set to 2044509228 [ 191.322057][ T329] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 191.385239][ T375] usb 5-1: Using ep0 maxpacket: 8 [ 191.390694][ T375] usb 5-1: too many configurations: 28, using maximum allowed: 8 [ 191.399605][ T375] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 191.407278][ T375] usb 5-1: can't read configurations, error -61 [ 191.413627][ T375] usb usb5-port1: attempt power cycle [ 191.755214][ T375] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 191.775530][ T375] usb 5-1: Using ep0 maxpacket: 8 [ 191.780996][ T375] usb 5-1: too many configurations: 28, using maximum allowed: 8 [ 191.789818][ T375] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 191.797427][ T375] usb 5-1: can't read configurations, error -61 [ 191.925209][ T375] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 191.945535][ T375] usb 5-1: Using ep0 maxpacket: 8 [ 191.950952][ T375] usb 5-1: too many configurations: 28, using maximum allowed: 8 [ 191.959856][ T375] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 191.967459][ T375] usb 5-1: can't read configurations, error -61 [ 191.973839][ T375] usb usb5-port1: unable to enumerate USB device [ 192.426593][ T36] audit: type=1326 audit(1756392808.022:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.2.3369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fabf8ebe9 code=0x0 [ 192.498197][T10904] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3371'. [ 192.729427][ T375] usb 1-1: USB disconnect, device number 62 [ 192.736363][ T375] usblp0: removed [ 192.781834][ T36] audit: type=1400 audit(1756392808.372:646): avc: denied { append } for pid=10906 comm="syz.0.3372" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.185198][ T375] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 193.338433][ T375] usb 1-1: Using ep0 maxpacket: 16 [ 193.344734][ T375] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 193.352923][ T375] usb 1-1: config 0 has no interface number 0 [ 193.359559][ T375] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 193.369454][ T375] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 193.374393][ T36] audit: type=1400 audit(1756392808.962:647): avc: denied { create } for pid=10919 comm="syz.2.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 193.379528][ T375] usb 1-1: config 0 interface 41 has no altsetting 0 [ 193.407503][ T375] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 193.422291][ T375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.435763][ T375] usb 1-1: Product: syz [ 193.440062][ T375] usb 1-1: Manufacturer: syz [ 193.444753][ T375] usb 1-1: SerialNumber: syz [ 193.450503][ T375] usb 1-1: config 0 descriptor?? [ 193.457928][T10910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.465084][T10910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.514546][T10945] tipc: Enabling of bearer rejected, failed to enable media [ 193.672783][T10909] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.680240][T10909] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.697809][ T375] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 193.722849][ T375] usb 1-1: USB disconnect, device number 63 [ 193.770350][T10976] fuse: Unknown parameter '_id' [ 193.777063][T10976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:365 [ 193.777092][T10976] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 193.788726][T10976] rust_binder: Read failure Err(EFAULT) in pid:365 [ 193.819298][T10978] rust_binder: Error while translating object. [ 193.826105][T10978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 193.835588][T10978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 193.901322][T10994] random: crng reseeded on system resumption [ 193.974250][T11004] fuse: Bad value for 'group_id' [ 193.979271][T11004] fuse: Bad value for 'group_id' [ 193.999422][T11008] overlayfs: failed to clone lowerpath [ 194.113882][T11016] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3414'. [ 194.140479][T10994] rust_binder: Write failure EFAULT in pid:170 [ 194.167026][T11027] fuseblk: Bad value for 'group_id' [ 194.178508][T11027] fuseblk: Bad value for 'group_id' [ 194.190539][T11029] syz.1.3420 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.225178][ T617] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 194.375173][ T617] usb 1-1: Using ep0 maxpacket: 16 [ 194.381272][ T617] usb 1-1: config 3 has an invalid interface number: 126 but max is 2 [ 194.389580][ T617] usb 1-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 194.398303][ T617] usb 1-1: config 3 has an invalid interface number: 243 but max is 2 [ 194.406470][ T617] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 194.416572][ T617] usb 1-1: config 3 has 2 interfaces, different from the descriptor's value: 3 [ 194.425654][ T617] usb 1-1: config 3 has no interface number 0 [ 194.431720][ T617] usb 1-1: config 3 has no interface number 1 [ 194.437832][ T617] usb 1-1: config 3 interface 126 altsetting 158 has an invalid descriptor for endpoint zero, skipping [ 194.448874][ T617] usb 1-1: config 3 interface 126 altsetting 158 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 194.459996][ T617] usb 1-1: config 3 interface 126 altsetting 158 has a duplicate endpoint with address 0xA, skipping [ 194.470847][ T617] usb 1-1: config 3 interface 126 altsetting 158 has a duplicate endpoint with address 0xA, skipping [ 194.481693][ T617] usb 1-1: config 3 interface 126 altsetting 158 endpoint 0x2 has invalid maxpacket 1431, setting to 64 [ 194.492810][ T617] usb 1-1: config 3 interface 126 altsetting 158 has a duplicate endpoint with address 0x9, skipping [ 194.503664][ T617] usb 1-1: config 3 interface 126 altsetting 158 has an invalid descriptor for endpoint zero, skipping [ 194.514687][ T617] usb 1-1: config 3 interface 126 altsetting 158 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.524660][ T617] usb 1-1: config 3 interface 126 altsetting 158 has an invalid descriptor for endpoint zero, skipping [ 194.535685][ T617] usb 1-1: config 3 interface 126 altsetting 158 endpoint 0x7 has an invalid bInterval 142, changing to 11 [ 194.547066][ T617] usb 1-1: config 3 interface 243 altsetting 1 endpoint 0x5 has an invalid bInterval 245, changing to 7 [ 194.558202][ T617] usb 1-1: config 3 interface 243 altsetting 1 endpoint 0x5 has invalid maxpacket 26204, setting to 1024 [ 194.569423][ T617] usb 1-1: config 3 interface 243 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 194.582473][ T617] usb 1-1: config 3 interface 126 has no altsetting 0 [ 194.589252][ T617] usb 1-1: config 3 interface 243 has no altsetting 0 [ 194.597344][ T617] usb 1-1: New USB device found, idVendor=1472, idProduct=0009, bcdDevice=e5.2c [ 194.606430][ T617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.614406][ T617] usb 1-1: Product: Ъ [ 194.618487][ T617] usb 1-1: Manufacturer: Ⰺ [ 194.623069][ T617] usb 1-1: SerialNumber: ࡡ [ 194.628583][T11010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.855846][ T36] audit: type=1400 audit(1756392810.452:648): avc: denied { accept } for pid=11044 comm="syz.4.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.185193][ T329] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 195.335174][ T329] usb 5-1: Using ep0 maxpacket: 8 [ 195.341625][ T329] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.350043][ T329] usb 5-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.359804][ T329] usb 5-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 195.369555][ T329] usb 5-1: config 12 interface 0 has no altsetting 0 [ 195.377729][ T329] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 195.386834][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.394824][ T329] usb 5-1: Product: syz [ 195.399003][ T329] usb 5-1: Manufacturer: syz [ 195.403615][ T329] usb 5-1: SerialNumber: syz [ 195.610469][T11050] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 195.610510][T11050] rust_binder: Error while translating object. [ 195.622684][T11050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.628881][T11050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 195.640983][ T329] usb 5-1: selecting invalid altsetting 0 [ 195.658235][ T329] snd-usb-audio 5-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 195.668484][ T329] usb 5-1: USB disconnect, device number 53 [ 195.676465][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.066876][T11093] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 196.126786][T11094] incfs: Options parsing error. -22 [ 196.132018][T11094] incfs: mount failed -22 [ 196.161683][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'. [ 196.233518][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3451'. [ 196.311656][T11115] netlink: 'syz.1.3452': attribute type 63 has an invalid length. [ 196.319630][T11115] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3452'. [ 196.731094][ T329] hid-generic 0009:02D1:0504.0010: item fetching failed at offset 7/50 [ 196.739548][ T329] hid-generic 0009:02D1:0504.0010: probe with driver hid-generic failed with error -22 [ 197.006147][ T617] usb 1-1: USB disconnect, device number 64 [ 197.155294][ T456] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 197.320994][ T456] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 197.329148][ T456] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.340856][ T456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.352029][ T456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.368059][ T456] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.388525][ T456] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.397841][ T456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.410205][ T456] usb 5-1: config 0 descriptor?? [ 197.418964][T11137] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 197.547946][T11168] 9pnet_fd: Insufficient options for proto=fd [ 197.564817][ T36] audit: type=1326 audit(1756392813.152:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.2.3474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fabf8ebe9 code=0x0 [ 197.798379][T11180] overlayfs: failed to clone lowerpath [ 197.828079][ T456] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 197.836750][ T456] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 197.845716][ T456] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 198.138157][ T329] usb 5-1: USB disconnect, device number 54 [ 199.055209][ T617] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 199.206153][ T617] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.216570][ T617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 199.227759][ T617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 199.237513][ T617] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.250313][ T617] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 199.259342][ T617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.267836][ T617] usb 5-1: config 0 descriptor?? [ 199.273748][ T617] usb 5-1: MIDIStreaming interface descriptor not found [ 199.288593][ T617] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 199.952368][T11233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11233 comm=syz.1.3491 [ 199.981117][ T421] usb 5-1: USB disconnect, device number 55 [ 200.082050][T11245] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3495'. [ 200.490220][T11257] /dev/rnullb0: Can't lookup blockdev [ 200.628131][T11282] input: syz0 as /devices/virtual/input/input20 [ 200.676649][ T421] kernel write not supported for file /syz1 (pid: 421 comm: kworker/0:4) [ 200.676665][ T617] kernel write not supported for file /syz1 (pid: 617 comm: kworker/1:5) [ 201.023760][T11308] vcan0: entered allmulticast mode [ 201.547697][ T36] audit: type=1400 audit(1756392817.142:650): avc: denied { setcheckreqprot } for pid=11342 comm="syz.0.3529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 201.849466][T11369] syz.0.3537 (11369) used obsolete PPPIOCDETACH ioctl [ 201.877641][T11369] netlink: 'syz.0.3537': attribute type 4 has an invalid length. [ 202.592240][T11406] overlayfs: failed to clone upperpath [ 202.952412][T11411] input: syz1 as /devices/virtual/input/input21 [ 203.120567][ T36] audit: type=1400 audit(1756392818.712:651): avc: denied { mount } for pid=11416 comm="syz.1.3554" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 203.120990][T11417] overlayfs: failed to clone upperpath [ 203.228146][T11430] overlayfs: failed to clone upperpath [ 203.271780][T11427] rust_binder: Error while translating object. [ 203.271836][T11427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 203.278113][T11427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:438 [ 203.303071][T11445] rust_binder: 441: no such ref 3 [ 203.303430][T11444] fuse: Bad value for 'fd' [ 203.312361][T11445] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 203.329223][T11445] rust_binder: Read failure Err(EAGAIN) in pid:441 [ 203.354000][T11450] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 203.381344][ T36] audit: type=1400 audit(1756392818.972:652): avc: denied { listen } for pid=11451 comm="syz.1.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 203.445225][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 203.462841][ T36] audit: type=1400 audit(1756392819.052:653): avc: denied { create } for pid=11463 comm="/selinux/policy" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 203.855230][ T421] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 204.005177][ T421] usb 1-1: Using ep0 maxpacket: 8 [ 204.011323][ T421] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 204.020440][ T421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.029273][ T421] usb 1-1: config 0 descriptor?? [ 204.689296][ T421] usbhid 1-1:0.0: can't add hid device: -71 [ 204.695916][ T421] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 204.704578][ T421] usb 1-1: USB disconnect, device number 66 [ 204.766180][T11516] overlayfs: failed to clone upperpath [ 204.800741][ T36] audit: type=1400 audit(1756392820.392:654): avc: denied { watch watch_reads } for pid=11524 comm="syz.2.3592" path="/572/file0" dev="tmpfs" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 205.262457][T11535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11535 comm=syz.0.3594 [ 205.348611][T11543] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3597'. [ 205.404696][T11551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:474 [ 205.405261][T11552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.827398][T11603] rust_binder: Got transaction with invalid offset. [ 205.833899][T11603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.840548][T11603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495 [ 207.177291][T11669] 9pnet_fd: Insufficient options for proto=fd [ 207.193078][T11669] 9pnet_fd: Insufficient options for proto=fd [ 207.309239][ T36] audit: type=1400 audit(1756392822.902:655): avc: denied { shutdown } for pid=11688 comm="syz.4.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.362966][T11698] 9pnet_fd: Insufficient options for proto=fd [ 207.560185][T11706] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.569379][T11706] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.576682][T11706] bridge_slave_0: entered allmulticast mode [ 207.583033][T11706] bridge_slave_0: entered promiscuous mode [ 207.591444][T11706] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.606869][T11706] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.613995][T11706] bridge_slave_1: entered allmulticast mode [ 207.620584][T11706] bridge_slave_1: entered promiscuous mode [ 207.688598][T11706] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.695671][T11706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.702959][T11706] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.710008][T11706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.735656][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.743133][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.780319][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.787400][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.796759][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.803801][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.842719][T11706] veth0_vlan: entered promiscuous mode [ 207.854121][T11729] random: crng reseeded on system resumption [ 207.859043][T11706] veth1_macvtap: entered promiscuous mode [ 207.984946][T11749] rust_binder: Write failure EFAULT in pid:4 [ 208.063238][T11768] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 208.080468][T11770] overlayfs: failed to clone upperpath [ 208.118281][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 208.355332][ T617] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 208.506138][ T617] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 208.515860][ T617] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 208.525517][ T617] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.539658][ T617] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 208.548742][ T617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 208.556829][ T617] usb 1-1: Product: syz [ 208.560978][ T617] usb 1-1: Manufacturer: syz [ 208.565575][ T617] usb 1-1: SerialNumber: syz [ 208.776362][ T617] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 209.015665][ T456] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 209.092018][ T617] usb 1-1: USB disconnect, device number 67 [ 209.111309][ T617] usblp0: removed [ 209.178552][ T456] usb 2-1: Using ep0 maxpacket: 8 [ 209.199446][ T456] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 209.213751][ T456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.235633][ T456] usb 2-1: config 0 descriptor?? [ 209.376772][T11838] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.385057][T11838] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.404871][T11838] bridge_slave_0: entered allmulticast mode [ 209.411532][T11838] bridge_slave_0: entered promiscuous mode [ 209.419057][T11838] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.427087][T11838] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.434154][T11838] bridge_slave_1: entered allmulticast mode [ 209.436552][T11854] fuse: Bad value for 'rootmode' [ 209.440726][T11838] bridge_slave_1: entered promiscuous mode [ 209.488055][ T13] bridge_slave_1: left allmulticast mode [ 209.493729][ T13] bridge_slave_1: left promiscuous mode [ 209.499385][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.581378][T11838] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.588459][T11838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.595737][T11838] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.602749][T11838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.610896][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.618336][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.641695][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.648747][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.658425][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.665498][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.672891][ T13] tipc: Left network mode [ 209.679077][ T13] veth1_macvtap: left promiscuous mode [ 209.684613][ T13] veth0_vlan: left promiscuous mode [ 209.732376][T11838] veth0_vlan: entered promiscuous mode [ 209.743335][T11838] veth1_macvtap: entered promiscuous mode [ 209.940997][T11871] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 209.948970][T11871] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 209.953979][ T456] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 209.957500][T11871] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 209.967957][ T456] asix 2-1:0.0: probe with driver asix failed with error -61 [ 209.975900][T11871] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 210.035211][ T329] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 210.087182][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.093863][T11881] rust_binder: Write failure EFAULT in pid:562 [ 210.196295][ T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.212559][ T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.222212][ T329] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.231318][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.239363][ T329] usb 3-1: SerialNumber: syz [ 210.446105][T11869] netlink: 'syz.2.3706': attribute type 58 has an invalid length. [ 210.587723][ T329] usb 3-1: skipping empty audio interface (v1) [ 210.596254][ T329] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 210.607576][ T329] usb 3-1: USB disconnect, device number 8 [ 210.613805][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 211.045236][ T329] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 211.196195][ T329] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.205962][ T329] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.215634][ T329] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.229858][ T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 211.238925][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.246921][ T329] usb 3-1: Product: syz [ 211.251062][ T329] usb 3-1: Manufacturer: syz [ 211.255665][ T329] usb 3-1: SerialNumber: syz [ 211.261705][ T329] hub 3-1:1.0: bad descriptor, ignoring hub [ 211.267817][ T329] hub 3-1:1.0: probe with driver hub failed with error -5 [ 211.462663][ T329] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 211.765252][ T456] usb 3-1: USB disconnect, device number 9 [ 211.771659][ T456] usblp0: removed [ 211.887243][ T329] usb 2-1: USB disconnect, device number 8 [ 211.901470][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3722'. [ 212.095214][ T6151] Bluetooth: hci0: command 0x1003 tx timeout [ 212.095567][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 212.215196][ T329] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.317261][T11934] /dev/sg0: Can't lookup blockdev [ 212.355243][ T45] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 212.357484][T11938] tipc: Started in network mode [ 212.367689][T11938] tipc: Node identity c2d09f03652, cluster identity 4711 [ 212.374732][T11938] tipc: Enabled bearer , priority 0 [ 212.375178][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 212.387219][T11938] tipc: Disabling bearer [ 212.387653][ T329] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 212.401155][ T329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.411282][ T329] usb 2-1: config 0 has no interface number 0 [ 212.418864][ T329] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 212.428280][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.429607][T11948] overlayfs: failed to clone upperpath [ 212.436311][ T329] usb 2-1: Product: syz [ 212.436329][ T329] usb 2-1: Manufacturer: syz [ 212.450586][ T329] usb 2-1: SerialNumber: syz [ 212.458861][ T329] usb 2-1: config 0 descriptor?? [ 212.467318][ T329] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 212.477010][ T329] usb 2-1: No valid video chain found. [ 212.510931][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.512659][T11956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 212.523184][T11956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 212.525202][ T45] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 212.565185][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.582480][ T45] usb 1-1: config 0 descriptor?? [ 212.590569][T11915] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.638949][T11967] Invalid logical block size (1748) [ 212.644616][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3742'. [ 212.659278][T11967] __vm_enough_memory: pid: 11967, comm: syz.2.3742, bytes: 18014402804453376 not enough memory for the allocation [ 212.673142][T11913] /dev/rnullb0: Can't open blockdev [ 212.684028][ T456] usb 2-1: USB disconnect, device number 9 [ 212.736874][T11974] ------------[ cut here ]------------ [ 212.742481][T11974] WARNING: CPU: 1 PID: 11974 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 212.752012][T11974] Modules linked in: [ 212.755954][T11974] CPU: 1 UID: 0 PID: 11974 Comm: syz.2.3744 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 212.767623][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.777714][T11974] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 212.783639][T11974] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f1 25 ee 05 00 0f 85 be 00 00 00 c6 05 e4 25 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 212.803326][T11974] RSP: 0018:ffffc90003fe75a0 EFLAGS: 00010246 [ 212.809435][T11974] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 212.817615][T11974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003fe7658 [ 212.825630][T11974] RBP: ffffc90003fe76c8 R08: ffffc90003fe7657 R09: 0000000000000000 [ 212.833620][T11974] R10: ffffc90003fe7640 R11: fffff520007fcecb R12: ffffc90003fe75e0 [ 212.841639][T11974] R13: dffffc0000000000 R14: 1ffff920007fceb8 R15: 0000000000000000 [ 212.849654][T11974] FS: 00007f10a69e36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 212.858627][T11974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.865246][T11974] CR2: 0000200000001000 CR3: 000000011376a000 CR4: 00000000003526b0 [ 212.873238][T11974] Call Trace: [ 212.876560][T11974] [ 212.879521][T11974] ? do_syscall_64+0x58/0xf0 [ 212.884118][T11974] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 212.890204][T11974] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 212.896094][T11974] ? hashtab_init+0xdb/0x1f0 [ 212.900678][T11974] ___kmalloc_large_node+0x9c/0x1d0 [ 212.905981][T11974] ? hashtab_init+0xdb/0x1f0 [ 212.910577][T11974] __kmalloc_large_node_noprof+0x1e/0xe0 [ 212.916223][T11974] ? hashtab_init+0xdb/0x1f0 [ 212.920815][T11974] __kmalloc_noprof+0x26d/0x450 [ 212.925676][T11974] hashtab_init+0xdb/0x1f0 [ 212.930097][T11974] ? common_read+0x16d/0x480 [ 212.934675][T11974] symtab_init+0x44/0x70 [ 212.938939][T11974] common_read+0x1de/0x480 [ 212.943366][T11974] ? __cfi_common_read+0x10/0x10 [ 212.948326][T11974] ? hashtab_init+0x105/0x1f0 [ 212.953001][T11974] policydb_read+0xaab/0x28c0 [ 212.957695][T11974] ? kasan_save_alloc_info+0x40/0x50 [ 212.962988][T11974] ? __cfi_policydb_read+0x10/0x10 [ 212.968116][T11974] ? security_load_policy+0x128/0x12f0 [ 212.973578][T11974] security_load_policy+0x162/0x12f0 [ 212.978987][T11974] ? irqentry_exit+0x4a/0x60 [ 212.983569][T11974] ? exc_page_fault+0x66/0xc0 [ 212.988315][T11974] ? asm_exc_page_fault+0x2b/0x30 [ 212.993352][T11974] ? __cfi_security_load_policy+0x10/0x10 [ 212.999079][T11974] ? rep_movs_alternative+0x4a/0xa0 [ 213.004284][T11974] sel_write_load+0x298/0x5e0 [ 213.008987][T11974] ? __cfi_sel_write_load+0x10/0x10 [ 213.014201][T11974] ? kasan_save_alloc_info+0x40/0x50 [ 213.019502][T11974] ? bpf_lsm_file_permission+0xd/0x20 [ 213.024880][T11974] ? __cfi_sel_write_load+0x10/0x10 [ 213.030086][T11974] vfs_write+0x3c0/0xe80 [ 213.034347][T11974] ? __cfi_vfs_write+0x10/0x10 [ 213.039111][T11974] ? __kasan_check_write+0x18/0x20 [ 213.044234][T11974] ? mutex_lock+0x92/0x1c0 [ 213.048654][T11974] ? __cfi_mutex_lock+0x10/0x10 [ 213.053500][T11974] ? __fget_files+0x2c5/0x340 [ 213.058365][T11974] ksys_write+0x141/0x250 [ 213.062684][T11974] ? xfd_validate_state+0x68/0x150 [ 213.067884][T11974] ? __cfi_ksys_write+0x10/0x10 [ 213.072741][T11974] ? __kasan_check_write+0x18/0x20 [ 213.077881][T11974] ? fpregs_restore_userregs+0x11d/0x260 [ 213.083517][T11974] __x64_sys_write+0x7f/0x90 [ 213.088113][T11974] x64_sys_call+0x271c/0x2ee0 [ 213.092796][T11974] do_syscall_64+0x58/0xf0 [ 213.097218][T11974] ? clear_bhb_loop+0x50/0xa0 [ 213.101897][T11974] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 213.107805][T11974] RIP: 0033:0x7f10a7f8ebe9 [ 213.112222][T11974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.131855][T11974] RSP: 002b:00007f10a69e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.140458][T11974] RAX: ffffffffffffffda RBX: 00007f10a81b5fa0 RCX: 00007f10a7f8ebe9 [ 213.148523][T11974] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 213.156514][T11974] RBP: 00007f10a8011e19 R08: 0000000000000000 R09: 0000000000000000 [ 213.164474][T11974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.172444][T11974] R13: 00007f10a81b6038 R14: 00007f10a81b5fa0 R15: 00007ffd5babd9b8 [ 213.180432][T11974] [ 213.183437][T11974] ---[ end trace 0000000000000000 ]--- [ 213.189121][T11974] SELinux: failed to load policy [ 213.192022][ T45] hid-generic 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 215.055977][ T10] usb 1-1: USB disconnect, device number 68