last executing test programs: 5.076307935s ago: executing program 2 (id=1143): ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{0x7, 0xe7, &(0x7f0000000100)="d0f8bcc9e31202525fd085a0201f1be0a41f31d66cccdfce31747f2909f9142183e273aa84bbc1c9d508378a430bec254bd3387182845f2f2a82c69fc2e6eebd71f40db0b8b72753a420aba17a1aadfdff54fce43218e36d3cff0544ccf5caf79d8eb9431eab3e20508a6cb5857e35a53ae309b0bae27e2390b898596e07cc36b12ed7acf108e4d0baab3b9a375f5c00849e13e8319394b411b872e632a45b1502dfc0dff4427b39d07fc89a26a53651fff49a502ab21d2ed5539d79c9b7f5ef404d76e986b4f7f2d7392ad596ed49d1e0ae1e457ed684393d41875ad4d18a2123ea6bc393e669", 0x0, 0x1}, {0x1176963e, 0xd1, &(0x7f0000000200)="635457799e7e8e8d585bfd6e255e976681a0f0bad8ee0b436a15c9a29a66d48da82afe14cb8732e15383f1e0687b0e4b19d2ef83289e2a773208efc7e0a48ab04334fc33e67eb4194d6575cb3f38a05380e589ed613b0f7fafac40ce3467ad8e828e653e3b09dd7f9f9435d47540717508f8c5cabe2b605854e84a2082654c50bc0f0328d29278c8f4a12524b33eb14c6e5764298f913173844d1021ac1ab3c9a3d17b749597255bd0b747c46a69f787e3e443c693492ed400cfecd2eb22271de71c537d8f00bca2821b5285764fad7085", 0x1, 0x1}, {0x2, 0x37, &(0x7f00000003c0)="f8118fecb93235d4e6188f39a512574c0324a91fe6662c030441ec718bd475ee0b7a8bc29cf11399310319642d4878c2ccecaab9b82bc7", 0x2, 0x1}]}) (async) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{0x7, 0xe7, &(0x7f0000000100)="d0f8bcc9e31202525fd085a0201f1be0a41f31d66cccdfce31747f2909f9142183e273aa84bbc1c9d508378a430bec254bd3387182845f2f2a82c69fc2e6eebd71f40db0b8b72753a420aba17a1aadfdff54fce43218e36d3cff0544ccf5caf79d8eb9431eab3e20508a6cb5857e35a53ae309b0bae27e2390b898596e07cc36b12ed7acf108e4d0baab3b9a375f5c00849e13e8319394b411b872e632a45b1502dfc0dff4427b39d07fc89a26a53651fff49a502ab21d2ed5539d79c9b7f5ef404d76e986b4f7f2d7392ad596ed49d1e0ae1e457ed684393d41875ad4d18a2123ea6bc393e669", 0x0, 0x1}, {0x1176963e, 0xd1, &(0x7f0000000200)="635457799e7e8e8d585bfd6e255e976681a0f0bad8ee0b436a15c9a29a66d48da82afe14cb8732e15383f1e0687b0e4b19d2ef83289e2a773208efc7e0a48ab04334fc33e67eb4194d6575cb3f38a05380e589ed613b0f7fafac40ce3467ad8e828e653e3b09dd7f9f9435d47540717508f8c5cabe2b605854e84a2082654c50bc0f0328d29278c8f4a12524b33eb14c6e5764298f913173844d1021ac1ab3c9a3d17b749597255bd0b747c46a69f787e3e443c693492ed400cfecd2eb22271de71c537d8f00bca2821b5285764fad7085", 0x1, 0x1}, {0x2, 0x37, &(0x7f00000003c0)="f8118fecb93235d4e6188f39a512574c0324a91fe6662c030441ec718bd475ee0b7a8bc29cf11399310319642d4878c2ccecaab9b82bc7", 0x2, 0x1}]}) setuid(0xee00) (async) setuid(0xee00) socket$inet(0x2, 0x800, 0x1) (async) r0 = socket$inet(0x2, 0x800, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@private=0xa050100, @dev={0xac, 0x14, 0x14, 0x3c}, r2}, 0xc) prctl$PR_SET_MM_MAP(0x3a, 0xe, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x3a, 0xe, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00'}) socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, r3, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, r3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0x15, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet_int(r5, 0x0, 0x15, &(0x7f0000000000)=0x4, 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x8, 0x8, 0xfffc, 0xe, 0x2, 0x0, 0x80}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x8, 0x8, 0xfffc, 0xe, 0x2, 0x0, 0x80}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x94901, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xfd7f2000) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 5.076054645s ago: executing program 2 (id=1144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) mkdir(0x0, 0x3) socket$netlink(0x10, 0x3, 0x0) futex(&(0x7f0000000040), 0x9, 0x1, &(0x7f0000000180), &(0x7f0000000200), 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xa, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x9, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 4.953854504s ago: executing program 2 (id=1145): openat$ashmem(0xffffffffffffff9c, 0x0, 0x680040, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="2d7069647320f5"], 0x1f) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000040)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0xffff, "00f6ff", 0x1, 0x2}) 2.336487633s ago: executing program 2 (id=1169): socket(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="05809bf7cbf8906e16000000000000fb000000840d9430a0db5128c9d762b7b9606d3a2545b7327c042a7bc335538a4d2e1525c694bfeb74770d17ea3895e6bc05cdb8411503065067ed6326ada5928e83a3fdc117148e9cf5928e792b366b13be58c1a885e3d64855036a293cbe4a4124f69d123dbc18d584", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1, 0x8, 0x2, {}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "68c76dee16687b11"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000940)={0x2020}, 0x2020) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x80000000]}}, 0x5c) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x24) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01feffffff0000000000062c1a00000009058103ff04010000090401"], 0x0) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) sendto(r5, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000000700)=""/228, 0xe4}, {&(0x7f0000000b00)=""/4101, 0x1005}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000380)=""/163, 0xa3}], 0x8}, 0x1}], 0x1, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup(r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 2.044341437s ago: executing program 0 (id=1175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000200)=ANY=[@ANYBLOB='=', @ANYBLOB=',']) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x270c, @host}, 0x10) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"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"}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) setfsgid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.040261557s ago: executing program 0 (id=1176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x2002, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.946188615s ago: executing program 0 (id=1177): pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)="c61c010ba000", 0x6}], 0x1, 0xa) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x1140, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.912077277s ago: executing program 0 (id=1178): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r4 = getpgrp(0x0) r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0xb, &(0x7f00000000c0)={0x1a, 0xe, 0x3}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r6, &(0x7f0000002bc0)={0x2020}, 0x2020) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x11) syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0xb7, 0x33, 0x45, 0x8, 0x19d2, 0x6a61, 0xb0c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xd, 0x90, 0x6c, [{{0x9, 0x4, 0x51, 0x0, 0x0, 0x2, 0x6, 0x0, 0x8e}}]}}]}}, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, &(0x7f00000003c0)={0x24, 0x8, 0x80}) io_setup(0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812003208380300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) io_submit(0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.076283964s ago: executing program 0 (id=1188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12803, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12803, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x400, 0x80) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x400, 0x80) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x62}, 0x14) (async) sendto$packet(r4, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x62}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648e000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648e000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000040c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000040) dup3(r8, r7, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000004140), r2) sendmsg$TIPC_CMD_SHOW_STATS(r8, &(0x7f0000004200)={&(0x7f0000004100), 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x1c, r9, 0x4, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4024000}, 0x4000000) (async) sendmsg$TIPC_CMD_SHOW_STATS(r8, &(0x7f0000004200)={&(0x7f0000004100), 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x1c, r9, 0x4, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4024000}, 0x4000000) write$UHID_DESTROY(r6, &(0x7f00000001c0), 0x4) (async) write$UHID_DESTROY(r6, &(0x7f00000001c0), 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) (async) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) 965.199973ms ago: executing program 1 (id=1189): mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='fuse\x00', 0x2240020, 0x0) 950.792594ms ago: executing program 0 (id=1190): ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f0000000400)={[{@none}, {@name={'name', 0x3d, 'cgroup\x00'}}]}) setitimer(0x3, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5}) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) ptrace$setsig(0x4203, r0, 0x2, &(0x7f0000000100)={0x20, 0x7, 0x5}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_audit(0x10, 0x3, 0x9) write(r4, &(0x7f0000000140)="c0547acd933e12a16d7f54eb6279545627dfc5bed9b18fccecb241fb2be5e90e5551f93803effb9b6878e5703ab6737c51628e657420065ffdc3287cbc89deefc8f950cb40a32a84f743db0fe9310b4da05a089d5005354fc55c2fbcbc06c3f93b943dfe18bd66dc7516b11483e8257d8f1977341f8588b5935fdf3fe95588bca0c890", 0x83) getsockopt(r4, 0x1, 0xc, 0x0, &(0x7f0000000240)) keyctl$read(0xb, r3, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003740)={0x8, 0x0, [{0xffff1000, 0x67, &(0x7f00000002c0)=""/103}, {0xdddd1000, 0xc4, &(0x7f0000002480)=""/196}, {0xffff1002, 0x1000, &(0x7f0000002580)=""/4096}, {0xd000, 0x26, &(0x7f0000000200)=""/38}, {0x8000000, 0xa3, &(0x7f0000000340)=""/163}, {0xdddd0000, 0x1c, &(0x7f0000003580)=""/28}, {0xdddd1000, 0x67, &(0x7f00000035c0)=""/103}, {0x0, 0xc7, &(0x7f0000003640)=""/199}]}) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) mremap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1000, 0x5850dacc4e5078d6, &(0x7f0000ff3000/0x1000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) r6 = memfd_create(&(0x7f0000000080)='K\xd4\x00\x04\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00 ', 0x2) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x4000, 0x1000000000000}) 896.537238ms ago: executing program 1 (id=1191): openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xfffffe2e) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/6, 0x6}, 0x1}], 0x1, 0x40000002, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 891.217679ms ago: executing program 2 (id=1192): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4, 0x0, {0x5, 0x0, 0x10007, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x4000, 0x10000, 0x0, r2, 0x734, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_ima(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 317.100544ms ago: executing program 3 (id=1194): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001100)={{r1}, "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"}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000dc0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35\xef\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\xfel\xf1\xc8\x0f8\xdb%W\x87\xd0\xbc\xbf\x97\xa9\x97\v\xbe%\x81\xbf[\x05\x9d\x1au\xc1\nG%(.\x19\xa8\xbcF%\x17#[\xbb\x99U\x92\'\xb6\xbe6\x8f\xc9%\xd9\xce\x91r\xfch\xf5\xf5*h\x1e\x0e\xbcD\xc4\xb9\x93e\x84\xb11\xae\xb8\x06\x81\x96g\x17h\a\x02\xfe\xa0\x1a\xfd\xb3e8\xa5\xd0\xb1\xa1\x8c\xd2\x9f\xd3\xc3?\xf9J\xf4\x85\xa9L\x1b\x18\x01A\x18\xae\xc9B\x00\x00\x00\x00\x00\x00\x00\x00\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18\xe6\v\x00\x00=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\t\x00\x00\x00\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00'/712) 260.542259ms ago: executing program 3 (id=1195): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000003003e00ecffffff9a030000000000004000000000000000560000000000000000000000000038000100020002000000030000000500000004000000000000000d20000000400000c801000000000000e20000000000000004000000000000000200000000000000097ae9620e7dd5fa29a74a6ad4afaa24ddb85b0fed4351a419a4c43700000000e65900000000aa235733806147fdbb5a23345e64114f9ec13e2fdaa6c095910ac96e28083d47b4e93e1b451e8fad10cb91c4474f20db82196ceb37d42c9cbb55cd75a081562692bdde8615d61f41"], 0x12f) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x5411, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 260.290359ms ago: executing program 3 (id=1196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x110, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0xa}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @dead_binder_done, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @fda={0x66646185, 0x2, 0x1, 0x16}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/16, 0x10, 0x1, 0xb}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}, @acquire_done={0x40106309, 0x1}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/133, 0x85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1104}}, &(0x7f00000005c0)={0x0, 0x28, 0x40}}}], 0x7d, 0x0, &(0x7f00000007c0)="b21366a513be7a3d6e34bf78b54d619af4654a2932df8a323fce14504e941b4a0acdc9ae542d81be0897c89de4439359fb6189d380130bb2805ac1b0533618bfc0ab4310c274a73c547af7953728f648fe410bd2dcd047632dd4617e38a71f441c282b3792af3cf251f4832ec31ab03761f6d1fdb74bc9ecdccb95448b"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1bec39af700e7306}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r3, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@known='user.incfs.id\x00') syz_open_dev$evdev(&(0x7f0000000880), 0x200, 0x218000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)={0xb0, 0x24, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@generic="e6d8b421fb3b01243e81e2efb67c07759d1e91378946fc52df9604160e47503f12f7143e55d7b41f6178dea5dc9ecaad67a2d3bffa89d5eb29ad4aea2a4295474e5d1ece10d40318ab558021f8322be97ff21c62e6c51d2d64077a09deee1dc069815c98eb69c416d1409347deab3c0bd7a0e88845a8e663f3f1416da97313a66ebc997a5c7a4db0d97087092323c2d758b6a36987bbb80d58a30aa6056ce180"]}, 0xb0}], 0x1}, 0x8080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r4}, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 215.761363ms ago: executing program 3 (id=1197): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tee(r0, r1, 0xf3a, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x400000004}, @fda={0x66646185, 0x2000000001, 0x0, 0xe}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'veth0_to_bond\x00'}) 106.037271ms ago: executing program 3 (id=1198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x40, @remote}, 0x2, 0x1}}, 0x2e) (async) getsockopt(r3, 0x111, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 61.952195ms ago: executing program 3 (id=1199): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) open(0x0, 0x80ff, 0x36) pipe2$9p(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000080)={0x80}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140), 0xc, &(0x7f0000000b00)={&(0x7f00000013c0)={0x854, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4201ed66}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x9, 0xfb}, {0x8, 0x5, 0x9, 0x5484}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8383, 0x9, 0x93, 0x6}, {0xfffa, 0x3d, 0x7d, 0xe}, {0x4e6, 0x4e, 0x9, 0x3}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7788}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x854}, 0x1, 0x0, 0x0, 0x881}, 0x48851) writev(r3, &(0x7f0000001380)=[{&(0x7f0000001240)="0f", 0x1}], 0x1) 59.695585ms ago: executing program 1 (id=1200): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x8000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x72c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) dup3(r1, r2, 0x80000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 59.461615ms ago: executing program 1 (id=1201): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='fdinfo/4\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x154}) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0xff, &(0x7f0000000180)=0x1) lsetxattr$system_posix_acl(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x2f, 0x0, &(0x7f0000000300)=0x700) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000076f000/0x4000)=nil, 0x4000}, 0x1}) timer_create(0x6, &(0x7f0000000140)={0x0, 0x3d, 0x2, @thr={0x0, &(0x7f00000001c0)="c83de0d19f2ded7581ead87a40326b17048315"}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x43, 0x0, &(0x7f00000029c0)) fsetxattr$system_posix_acl(r2, &(0x7f0000000a40)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0x2020) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 59.114375ms ago: executing program 2 (id=1202): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x314, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf250000000000000000000000000000000100000000000000000000ffffe0000002000000004e210002020000206c0000006adcd5456d2669b77e45f43d949bfcec83143749412bb812e6", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendto(r0, &(0x7f0000000740)="120000", 0x3, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x0, 0x0, 0x900, 0x1, 0x2000008}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x800) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000200000004000040000000000000000008000000050000000000000000000000688a00"/56]) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r8, 0x57789000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) 471.52µs ago: executing program 1 (id=1203): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, 0x1e, 0xd, 0x2, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB]) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) 0s ago: executing program 1 (id=1204): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006000)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000100)=[{&(0x7f0000001400)=""/186, 0xba}, {&(0x7f00000014c0)=""/90, 0x5a}, {&(0x7f0000001540)=""/227, 0xe3}], 0x3, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f0000001780)=""/244, 0xf4}, {&(0x7f0000001880)=""/247, 0xf7}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000001a80)=""/103, 0x67}, {&(0x7f0000001b00)=""/116, 0x74}], 0x6, &(0x7f0000001c00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000006240)=[{&(0x7f0000001cc0)=""/13, 0xd}], 0x1, &(0x7f0000001d40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001d80), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/174, 0xae}, {&(0x7f0000001ec0)=""/62, 0x3e}, {&(0x7f0000001f40)=""/243, 0xf3}], 0x3, &(0x7f0000002080)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002100), 0x6e, &(0x7f0000004680)=[{&(0x7f0000002180)=""/225, 0xe1}, {&(0x7f0000002280)=""/77, 0x4d}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/234, 0xea}, {&(0x7f0000003400)=""/61, 0x3d}, {&(0x7f0000003440)=""/237, 0xed}, {&(0x7f0000003540)=""/189, 0xbd}, {&(0x7f0000003600)=""/101, 0x65}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x9, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000004880)=@abs, 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004900)=""/221, 0xdd}], 0x1, &(0x7f0000004a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004ac0)=""/195, 0xc3}, {&(0x7f0000004bc0)=""/142, 0x8e}], 0x2, &(0x7f0000004cc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004d00)=@abs, 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/106, 0x6a}, {&(0x7f0000005e00)=""/120, 0x78}, {&(0x7f0000005e80)=""/29, 0x1d}], 0x4, &(0x7f0000005f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}], 0x8, 0x60, &(0x7f0000006200)={0x0, 0x3938700}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="f3c2b597acfd5a0f4d16d1ff9eb0fc22b124bf84c5d3e8155d3e346d21bdce762656b5884123a3a781bbdab9fb3b3d212fca866b9686602c42cc7eb11ef55cf21bc320dda6a75eb29166018875702a9e5bcfbaf6fba0162e6edc", 0x5a, 0x2004c080, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x180) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x2, 0xfffffffd, 0x2}) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) sendfile(r0, r4, &(0x7f0000000040)=0x3, 0x77) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r5, &(0x7f0000000400)="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", 0x1f000) kernel console output (not intermixed with test programs): different from the interface descriptor's value: 2 [ 71.220490][ T465] usb 2-1: config 0 interface 214 has no altsetting 0 [ 71.228819][ T465] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 71.238085][ T465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.246086][ T465] usb 2-1: Product: syz [ 71.250221][ T465] usb 2-1: Manufacturer: syz [ 71.254826][ T465] usb 2-1: SerialNumber: syz [ 71.259815][ T465] usb 2-1: config 0 descriptor?? [ 71.265680][ T465] ax88179_178a 2-1:0.214: probe with driver ax88179_178a failed with error -22 [ 71.351148][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 71.466487][ T1880] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.469268][ T417] usb 2-1: USB disconnect, device number 14 [ 71.501062][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 71.507474][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 71.516293][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.526632][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.542204][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.551734][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.560943][ T10] usb 1-1: Product: syz [ 71.565279][ T10] usb 1-1: Manufacturer: syz [ 71.569866][ T10] usb 1-1: SerialNumber: syz [ 71.790173][ T417] rust_binder: 1895: removing orphan mapping 0:24 [ 71.976207][ T10] usb 1-1: 0:2 : does not exist [ 72.041031][ T417] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 72.191001][ T417] usb 2-1: Using ep0 maxpacket: 16 [ 72.197352][ T417] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.207602][ T417] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 72.216865][ T417] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 72.227742][ T417] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.237693][ T417] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.248773][ T417] usb 2-1: config 1 interface 1 has no altsetting 0 [ 72.257205][ T417] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.266428][ T417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.274916][ T417] usb 2-1: Product: syz [ 72.279341][ T417] usb 2-1: Manufacturer: syz [ 72.283954][ T417] usb 2-1: SerialNumber: syz [ 72.584016][ T10] usb 1-1: USB disconnect, device number 16 [ 72.901119][ T604] Bluetooth: hci0: command 0x1003 tx timeout [ 72.901339][ T603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.063771][ T36] audit: type=1400 audit(1754629675.064:327): avc: denied { module_load } for pid=1911 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 73.063783][ T1912] Invalid ELF header type: 2 != 1 [ 73.161007][ T465] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 73.307184][ T1935] /dev/nullb0: Can't lookup blockdev [ 73.312629][ T465] usb 4-1: device descriptor read/64, error -71 [ 73.386709][ T1939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.395270][ T1939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.560812][ T465] usb 4-1: device descriptor read/64, error -71 [ 73.810804][ T465] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 73.941246][ T465] usb 4-1: device descriptor read/64, error -71 [ 74.180814][ T465] usb 4-1: device descriptor read/64, error -71 [ 74.301976][ T465] usb usb4-port1: attempt power cycle [ 74.341957][ T1963] netlink: 'syz.0.515': attribute type 13 has an invalid length. [ 74.395237][ T1967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 74.583832][ T1974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.583874][ T1974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 74.660747][ T465] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 74.691936][ T465] usb 4-1: device descriptor read/8, error -71 [ 74.699464][ T1977] fuse: Bad value for 'fd' [ 74.821816][ T465] usb 4-1: device descriptor read/8, error -71 [ 75.002257][ T1980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1980 comm=syz.2.521 [ 75.060660][ T465] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 75.091772][ T465] usb 4-1: device descriptor read/8, error -71 [ 75.133398][ T1982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 75.231779][ T465] usb 4-1: device descriptor read/8, error -71 [ 75.321458][ T2000] fuse: Bad value for 'fd' [ 75.350721][ T465] usb usb4-port1: unable to enumerate USB device [ 76.272134][ T36] audit: type=1400 audit(1754629678.275:328): avc: denied { mounton } for pid=2013 comm="syz.3.532" path="/146/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 76.519961][ T2029] FAULT_INJECTION: forcing a failure. [ 76.519961][ T2029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.533653][ T2029] CPU: 0 UID: 0 PID: 2029 Comm: syz.1.537 Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 76.533689][ T2029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.533701][ T2029] Call Trace: [ 76.533707][ T2029] [ 76.533716][ T2029] __dump_stack+0x21/0x30 [ 76.533744][ T2029] dump_stack_lvl+0x10c/0x190 [ 76.533773][ T2029] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.533797][ T2029] ? unwind_get_return_address+0x51/0x90 [ 76.533818][ T2029] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 76.533844][ T2029] dump_stack+0x19/0x20 [ 76.533866][ T2029] should_fail_ex+0x3d9/0x530 [ 76.533891][ T2029] should_fail+0xf/0x20 [ 76.533924][ T2029] should_fail_usercopy+0x1e/0x30 [ 76.533950][ T2029] _copy_from_user+0x22/0xb0 [ 76.533969][ T2029] ___sys_recvmsg+0x12f/0x510 [ 76.533992][ T2029] ? __sys_recvmsg+0x280/0x280 [ 76.534013][ T2029] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 76.534037][ T2029] ? selinux_file_permission+0x309/0xb30 [ 76.534059][ T2029] ? __fget_files+0x2c5/0x340 [ 76.534080][ T2029] do_recvmmsg+0x326/0x770 [ 76.534101][ T2029] ? __sys_recvmmsg+0x290/0x290 [ 76.534121][ T2029] ? __cfi_vfs_write+0x10/0x10 [ 76.534148][ T2029] ? fput+0x1a5/0x240 [ 76.534167][ T2029] __x64_sys_recvmmsg+0x191/0x240 [ 76.534189][ T2029] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 76.534218][ T2029] ? __kasan_check_read+0x15/0x20 [ 76.534233][ T2029] x64_sys_call+0x292c/0x2ee0 [ 76.534248][ T2029] do_syscall_64+0x58/0xf0 [ 76.534265][ T2029] ? clear_bhb_loop+0x50/0xa0 [ 76.534279][ T2029] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.534292][ T2029] RIP: 0033:0x7ff7f998ebe9 [ 76.534304][ T2029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.534314][ T2029] RSP: 002b:00007ff7fa7a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 76.534330][ T2029] RAX: ffffffffffffffda RBX: 00007ff7f9bb5fa0 RCX: 00007ff7f998ebe9 [ 76.534339][ T2029] RDX: 0000000000000002 RSI: 0000200000009080 RDI: 0000000000000003 [ 76.534347][ T2029] RBP: 00007ff7fa7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 76.534355][ T2029] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 76.534366][ T2029] R13: 00007ff7f9bb6038 R14: 00007ff7f9bb5fa0 R15: 00007ffc923afce8 [ 76.534382][ T2029] [ 77.132284][ T36] audit: type=1400 audit(1754629679.135:329): avc: denied { create } for pid=2041 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.302829][ T2050] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1672075570 (214025672960 ns) > initial count (178945245824 ns). Using initial count to start timer. [ 77.354702][ T36] audit: type=1400 audit(1754629679.355:330): avc: denied { setattr } for pid=2051 comm="syz.2.547" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.367844][ T2052] syzkaller0: entered promiscuous mode [ 77.384174][ T2052] syzkaller0: entered allmulticast mode [ 77.395936][ T2052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.396173][ T2052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.454606][ T2053] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 77.627699][ T417] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 77.643978][ T417] usb 2-1: 2:1 : format type 9 is not supported yet [ 77.644285][ T2058] netlink: 'syz.0.549': attribute type 13 has an invalid length. [ 77.659702][ T1092] udevd[1092]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.697153][ T36] audit: type=1400 audit(1754629679.695:331): avc: denied { map } for pid=2059 comm="syz.0.550" path="socket:[14833]" dev="sockfs" ino=14833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.755807][ T2067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.766348][ T2067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.954710][ T36] audit: type=1400 audit(1754629679.955:332): avc: denied { write } for pid=2076 comm="syz.0.556" path="socket:[14944]" dev="sockfs" ino=14944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.444248][ T2097] can0: slcan on ptm4. [ 78.482641][ T2097] can0 (unregistered): slcan off ptm4. [ 78.529468][ T2117] incfs: Can't find or create .index dir in ./cgroup [ 78.536928][ T2117] incfs: mount failed -22 [ 78.542299][ T2117] rust_binder: Error in use_page_slow: ESRCH [ 78.542321][ T2117] rust_binder: use_range failure ESRCH [ 78.548432][ T2117] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 78.556436][ T2117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 78.565515][ T2117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:399 [ 78.575661][ T2121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.576713][ T2122] incfs: Can't find or create .incomplete dir in ./cgroup [ 78.599544][ T2122] incfs: mount failed -22 [ 78.622603][ T465] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 78.636872][ T36] audit: type=1400 audit(1754629680.635:333): avc: denied { write } for pid=2129 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 78.669470][ T2135] fuse: Unknown parameter 'group_id00000000000000000000' [ 78.708662][ T2140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.717779][ T2140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.781230][ T465] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 78.792184][ T465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.811529][ T465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.821670][ T465] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 78.835623][ T465] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 78.845029][ T465] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 78.853378][ T465] usb 4-1: Manufacturer: syz [ 78.858658][ T465] usb 4-1: config 0 descriptor?? [ 79.050227][ T417] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 79.145921][ T36] audit: type=1400 audit(1754629681.135:334): avc: denied { getopt } for pid=2153 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.178457][ T2158] FAULT_INJECTION: forcing a failure. [ 79.178457][ T2158] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 79.192555][ T2158] CPU: 0 UID: 0 PID: 2158 Comm: syz.2.573 Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 79.192586][ T2158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.192597][ T2158] Call Trace: [ 79.192601][ T2158] [ 79.192607][ T2158] __dump_stack+0x21/0x30 [ 79.192640][ T2158] dump_stack_lvl+0x10c/0x190 [ 79.192662][ T2158] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.192682][ T2158] dump_stack+0x19/0x20 [ 79.192698][ T2158] should_fail_ex+0x3d9/0x530 [ 79.192717][ T2158] should_fail_alloc_page+0xeb/0x110 [ 79.192739][ T2158] __alloc_pages_noprof+0x19b/0x7b0 [ 79.192757][ T2158] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 79.192775][ T2158] ? rtnl_fill_link_af+0x3fa/0x470 [ 79.192795][ T2158] __folio_alloc_noprof+0x14/0x80 [ 79.192811][ T2158] folio_prealloc+0x46/0x240 [ 79.192826][ T2158] do_pte_missing+0x16fd/0x4230 [ 79.192840][ T2158] ? if_nlmsg_size+0x7b0/0x7b0 [ 79.192858][ T2158] ? pte_marker_clear+0x1b0/0x1b0 [ 79.192873][ T2158] ? __pte_offset_map+0x1b0/0x230 [ 79.192890][ T2158] ? pte_offset_map_rw_nolock+0xba/0x110 [ 79.192918][ T2158] handle_mm_fault+0x1166/0x1b90 [ 79.192941][ T2158] ? __cfi_handle_mm_fault+0x10/0x10 [ 79.192962][ T2158] ? find_vma+0xcd/0x110 [ 79.192982][ T2158] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 79.193004][ T2158] do_user_addr_fault+0x4ca/0x1200 [ 79.193025][ T2158] exc_page_fault+0x59/0xc0 [ 79.193048][ T2158] asm_exc_page_fault+0x2b/0x30 [ 79.193069][ T2158] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 79.193095][ T2158] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 cf 5d 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 79.193112][ T2158] RSP: 0018:ffffc9000fc574b8 EFLAGS: 00050202 [ 79.193132][ T2158] RAX: ffffffff82a31601 RBX: ffff888113ca2000 RCX: 0000000000000ba8 [ 79.193148][ T2158] RDX: 0000000000000000 RSI: ffff888113ca2000 RDI: 0000200000001580 [ 79.193162][ T2158] RBP: ffffc9000fc57610 R08: ffff888113ca2ba7 R09: 1ffff11022794574 [ 79.193177][ T2158] R10: dffffc0000000000 R11: ffffed1022794575 R12: 0000200000001580 [ 79.193192][ T2158] R13: 0000000000000000 R14: 0000000000000ba8 R15: ffffc9000fc57d48 [ 79.193207][ T2158] ? _copy_to_iter+0x391/0x14b0 [ 79.193235][ T2158] ? _copy_to_iter+0x444/0x14b0 [ 79.193265][ T2158] ? __cfi__copy_to_iter+0x10/0x10 [ 79.193293][ T2158] ? check_stack_object+0x82/0x140 [ 79.193319][ T2158] ? __virt_addr_valid+0x2a6/0x380 [ 79.193337][ T2158] ? __check_object_size+0x455/0x620 [ 79.193362][ T2158] __skb_datagram_iter+0x103/0x930 [ 79.193383][ T2158] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 79.193403][ T2158] skb_copy_datagram_iter+0x44/0x160 [ 79.193421][ T2158] netlink_recvmsg+0x2c5/0xdf0 [ 79.193442][ T2158] ? __cfi_netlink_recvmsg+0x10/0x10 [ 79.193463][ T2158] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 79.193483][ T2158] ? security_socket_recvmsg+0x3a/0xf0 [ 79.193669][ T2158] ? __cfi_netlink_recvmsg+0x10/0x10 [ 79.193681][ T2158] sock_recvmsg+0x216/0x270 [ 79.193701][ T2158] ____sys_recvmsg+0x1ca/0x460 [ 79.193718][ T2158] ? __sys_recvmsg_sock+0x60/0x60 [ 79.193735][ T2158] ? import_iovec+0x81/0xb0 [ 79.193750][ T2158] ___sys_recvmsg+0x1b6/0x510 [ 79.193767][ T2158] ? __sys_recvmsg+0x280/0x280 [ 79.193781][ T2158] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 79.193793][ T2158] ? selinux_file_permission+0x309/0xb30 [ 79.193874][ T2158] ? __fget_files+0x2c5/0x340 [ 79.193948][ T2158] do_recvmmsg+0x326/0x770 [ 79.193963][ T2158] ? __sys_recvmmsg+0x290/0x290 [ 79.193973][ T2158] ? __cfi_vfs_write+0x10/0x10 [ 79.193986][ T2158] ? fput+0x1a5/0x240 [ 79.194001][ T2158] __x64_sys_recvmmsg+0x191/0x240 [ 79.194019][ T2158] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 79.194036][ T2158] ? __kasan_check_read+0x15/0x20 [ 79.194055][ T2158] x64_sys_call+0x292c/0x2ee0 [ 79.194074][ T2158] do_syscall_64+0x58/0xf0 [ 79.194095][ T2158] ? clear_bhb_loop+0x50/0xa0 [ 79.194112][ T2158] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.194125][ T2158] RIP: 0033:0x7f8aed98ebe9 [ 79.194136][ T2158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.194145][ T2158] RSP: 002b:00007f8aee792038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 79.194160][ T2158] RAX: ffffffffffffffda RBX: 00007f8aedbb5fa0 RCX: 00007f8aed98ebe9 [ 79.194175][ T2158] RDX: 0000000000000002 RSI: 0000200000009080 RDI: 0000000000000003 [ 79.194189][ T2158] RBP: 00007f8aee792090 R08: 0000000000000000 R09: 0000000000000000 [ 79.194202][ T2158] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 79.194214][ T2158] R13: 00007f8aedbb6038 R14: 00007f8aedbb5fa0 R15: 00007ffef2f8e558 [ 79.194231][ T2158] [ 79.266894][ T465] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 79.270535][ T417] usb 1-1: Using ep0 maxpacket: 32 [ 79.279997][ T465] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 79.284029][ T417] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.287496][ T465] appleir 0003:05AC:8243.0007: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 79.290829][ T417] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.362720][ T2163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2163 comm=syz.2.575 [ 79.377286][ T417] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 79.510671][ T2168] fuse: Bad value for 'user_id' [ 79.516187][ T417] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 79.520339][ T2168] fuse: Bad value for 'user_id' [ 79.524718][ T417] usb 1-1: Product: syz [ 79.541331][ T465] usb 4-1: USB disconnect, device number 18 [ 79.546101][ T417] usb 1-1: Manufacturer: syz [ 79.548104][ T417] hub 1-1:4.0: USB hub found [ 79.561570][ T2170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.803879][ T2170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.902493][ T417] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 79.932225][ T417] usb 1-1: USB disconnect, device number 17 [ 80.333930][ T36] audit: type=1400 audit(1754629682.330:335): avc: denied { read append } for pid=2182 comm="syz.1.582" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.359443][ T36] audit: type=1400 audit(1754629682.330:336): avc: denied { open } for pid=2182 comm="syz.1.582" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.384139][ T36] audit: type=1400 audit(1754629682.350:337): avc: denied { mount } for pid=2182 comm="syz.1.582" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.406402][ T36] audit: type=1400 audit(1754629682.350:338): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.456700][ T36] audit: type=1400 audit(1754629682.440:339): avc: denied { wake_alarm } for pid=2188 comm="syz.0.585" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.514977][ T2194] fuse: Bad value for 'user_id' [ 80.521673][ T36] audit: type=1400 audit(1754629682.520:340): avc: denied { getopt } for pid=2186 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.530187][ T2194] fuse: Bad value for 'user_id' [ 80.555866][ T36] audit: type=1400 audit(1754629682.540:341): avc: denied { ioctl } for pid=2186 comm="syz.1.584" path="socket:[15217]" dev="sockfs" ino=15217 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.607262][ T2198] binder: Unknown parameter 'defcontext01777777777777777777777' [ 80.627973][ T2204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.650371][ T2204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.695781][ T2207] SELinux: policydb magic number 0x76ebc3aa does not match expected magic number 0xf97cff8c [ 80.706049][ T2207] SELinux: failed to load policy [ 80.714051][ T36] audit: type=1400 audit(1754629682.710:342): avc: denied { connect } for pid=2206 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.864758][ T2212] rust_binder: Write failure EFAULT in pid:453 [ 81.180534][ T2221] fuse: Bad value for 'user_id' [ 81.191618][ T2221] fuse: Bad value for 'user_id' [ 81.359504][ T2238] random: crng reseeded on system resumption [ 81.620228][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 81.770168][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 81.776459][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.786802][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.797358][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.806618][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.814881][ T10] usb 3-1: Product: syz [ 81.819346][ T10] usb 3-1: Manufacturer: syz [ 81.824158][ T10] usb 3-1: SerialNumber: syz [ 81.843973][ T2244] kvm: emulating exchange as write [ 81.890120][ T417] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 81.952780][ T2247] fuse: Bad value for 'fd' [ 82.034018][ T10] usb 3-1: 0:2 : does not exist [ 82.040164][ T417] usb 1-1: Using ep0 maxpacket: 16 [ 82.047543][ T10] usb 3-1: USB disconnect, device number 18 [ 82.059848][ T417] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.080132][ T417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.098626][ T417] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.109556][ T417] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.120447][ T2253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.122062][ T417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.134069][ T2253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.138661][ T417] usb 1-1: Product: syz [ 82.150501][ T2253] can0: slcan on ptm1. [ 82.152369][ T417] usb 1-1: Manufacturer: syz [ 82.156878][ T2253] netlink: 340 bytes leftover after parsing attributes in process `syz.1.608'. [ 82.160994][ T417] usb 1-1: SerialNumber: syz [ 82.280121][ T465] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 82.293721][ T2252] can0 (unregistered): slcan off ptm1. [ 82.430101][ T465] usb 4-1: Using ep0 maxpacket: 16 [ 82.436460][ T465] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.445471][ T465] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.455649][ T465] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 82.465094][ T465] usb 4-1: config 1 has no interface number 1 [ 82.471607][ T465] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 82.484653][ T465] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.497319][ T465] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.506890][ T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.515018][ T465] usb 4-1: Product: syz [ 82.519195][ T465] usb 4-1: Manufacturer: syz [ 82.523840][ T465] usb 4-1: SerialNumber: syz [ 82.568778][ T2284] rust_binder: Read failure Err(EAGAIN) in pid:394 [ 82.580484][ T417] usb 1-1: 0:2 : does not exist [ 82.732466][ T2251] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 83.197857][ T417] usb 1-1: USB disconnect, device number 18 [ 83.218271][ T1092] udevd[1092]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.234671][ T465] usb 4-1: USB disconnect, device number 19 [ 83.798972][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 83.798990][ T36] audit: type=1400 audit(1754629685.790:352): avc: denied { create } for pid=2308 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.829546][ T2309] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=2309 comm=syz.1.616 [ 83.951384][ T2319] FAULT_INJECTION: forcing a failure. [ 83.951384][ T2319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.964693][ T2319] CPU: 1 UID: 0 PID: 2319 Comm: syz.0.621 Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 83.964724][ T2319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.964733][ T2319] Call Trace: [ 83.964737][ T2319] [ 83.964744][ T2319] __dump_stack+0x21/0x30 [ 83.964768][ T2319] dump_stack_lvl+0x10c/0x190 [ 83.964785][ T2319] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.964803][ T2319] dump_stack+0x19/0x20 [ 83.964820][ T2319] should_fail_ex+0x3d9/0x530 [ 83.964839][ T2319] should_fail+0xf/0x20 [ 83.964857][ T2319] should_fail_usercopy+0x1e/0x30 [ 83.964876][ T2319] _copy_to_user+0x24/0xa0 [ 83.964919][ T2319] simple_read_from_buffer+0xed/0x160 [ 83.964935][ T2319] proc_fail_nth_read+0x19e/0x210 [ 83.964952][ T2319] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 83.964968][ T2319] ? __kasan_check_write+0x18/0x20 [ 83.964988][ T2319] ? bpf_lsm_file_permission+0xd/0x20 [ 83.965006][ T2319] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 83.965027][ T2319] vfs_read+0x27b/0xb60 [ 83.965048][ T2319] ? __sys_recvmmsg+0x290/0x290 [ 83.965061][ T2319] ? __cfi_vfs_read+0x10/0x10 [ 83.965076][ T2319] ? __kasan_check_write+0x18/0x20 [ 83.965089][ T2319] ? mutex_lock+0x92/0x1c0 [ 83.965102][ T2319] ? __cfi_mutex_lock+0x10/0x10 [ 83.965114][ T2319] ? __fget_files+0x2c5/0x340 [ 83.965126][ T2319] ksys_read+0x141/0x250 [ 83.965144][ T2319] ? __cfi_ksys_read+0x10/0x10 [ 83.965158][ T2319] ? __x64_sys_recvmmsg+0x191/0x240 [ 83.965171][ T2319] ? __kasan_check_read+0x15/0x20 [ 83.965185][ T2319] __x64_sys_read+0x7f/0x90 [ 83.965200][ T2319] x64_sys_call+0x2638/0x2ee0 [ 83.965215][ T2319] do_syscall_64+0x58/0xf0 [ 83.965231][ T2319] ? clear_bhb_loop+0x50/0xa0 [ 83.965246][ T2319] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.965258][ T2319] RIP: 0033:0x7f03af18d5fc [ 83.965270][ T2319] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 83.965281][ T2319] RSP: 002b:00007f03b0012030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.965295][ T2319] RAX: ffffffffffffffda RBX: 00007f03af3b5fa0 RCX: 00007f03af18d5fc [ 83.965305][ T2319] RDX: 000000000000000f RSI: 00007f03b00120a0 RDI: 0000000000000004 [ 83.965313][ T2319] RBP: 00007f03b0012090 R08: 0000000000000000 R09: 0000000000000000 [ 83.965321][ T2319] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 83.965328][ T2319] R13: 00007f03af3b6038 R14: 00007f03af3b5fa0 R15: 00007ffd2544ec58 [ 83.965338][ T2319] [ 84.255411][ T2317] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 84.265111][ T2317] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 84.283395][ T2323] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 84.458284][ T2335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.466911][ T2335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.500113][ T417] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 84.650088][ T417] usb 1-1: Using ep0 maxpacket: 16 [ 84.656481][ T417] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 84.665632][ T417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.677417][ T417] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.688681][ T417] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.698230][ T417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.707361][ T417] usb 1-1: Product: syz [ 84.711738][ T417] usb 1-1: Manufacturer: syz [ 84.716452][ T417] usb 1-1: SerialNumber: syz [ 85.110637][ T2339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 85.110676][ T2339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:460 [ 85.123782][ T417] usb 1-1: 0:2 : does not exist [ 85.183619][ T36] audit: type=1400 audit(1754629687.180:353): avc: denied { shutdown } for pid=2342 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.204638][ T36] audit: type=1400 audit(1754629687.200:354): avc: denied { connect } for pid=2342 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.226064][ T2344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:445 [ 85.226149][ T2343] rust_binder: Write failure EINVAL in pid:445 [ 85.246257][ T2348] /dev/rnullb0: Can't open blockdev [ 85.419770][ T2354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.428617][ T2354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.437908][ T36] audit: type=1400 audit(1754629687.440:355): avc: denied { write } for pid=2353 comm="syz.1.632" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.460354][ T36] audit: type=1400 audit(1754629687.440:356): avc: denied { remove_name } for pid=2353 comm="syz.1.632" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.483325][ T36] audit: type=1400 audit(1754629687.440:357): avc: denied { unlink } for pid=2353 comm="syz.1.632" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.520178][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 85.670182][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 85.678689][ T45] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 85.688320][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.696647][ T45] usb 4-1: Product: syz [ 85.700886][ T45] usb 4-1: Manufacturer: syz [ 85.705880][ T45] usb 4-1: SerialNumber: syz [ 85.711675][ T45] usb 4-1: config 0 descriptor?? [ 85.718404][ T45] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 85.726586][ T45] usb 4-1: Detected FT4233HP [ 85.744339][ T417] usb 1-1: USB disconnect, device number 19 [ 85.753542][ T1092] udevd[1092]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.863623][ T2360] netlink: 37 bytes leftover after parsing attributes in process `syz.2.634'. [ 85.873489][ T2360] binder: Unknown parameter 'spats' [ 85.919448][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 85.927345][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 85.940278][ T45] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 85.955344][ T45] usb 4-1: USB disconnect, device number 20 [ 85.962673][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 85.973415][ T45] ftdi_sio 4-1:0.0: device disconnected [ 86.062122][ T2367] bridge0: port 3(dummy0) entered blocking state [ 86.074445][ T2367] bridge0: port 3(dummy0) entered disabled state [ 86.081137][ T2367] dummy0: entered allmulticast mode [ 86.087146][ T2367] dummy0: entered promiscuous mode [ 86.092486][ T2367] bridge0: port 3(dummy0) entered blocking state [ 86.098847][ T2367] bridge0: port 3(dummy0) entered forwarding state [ 86.107135][ T36] audit: type=1400 audit(1754629688.100:358): avc: denied { create } for pid=2366 comm="syz.1.637" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.157400][ T36] audit: type=1400 audit(1754629688.110:359): avc: denied { write } for pid=2366 comm="syz.1.637" name="file2" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.193055][ T36] audit: type=1400 audit(1754629688.110:360): avc: denied { open } for pid=2366 comm="syz.1.637" path="/162/file2" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.193211][ T2371] 9pnet_fd: Insufficient options for proto=fd [ 86.232323][ T36] audit: type=1400 audit(1754629688.110:361): avc: denied { ioctl } for pid=2366 comm="syz.1.637" path="/162/file2" dev="tmpfs" ino=907 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.292689][ T2374] usb usb1: check_ctrlrecip: process 2374 (syz.0.639) requesting ep 01 but needs 81 [ 86.305436][ T2374] usb usb1: usbfs: process 2374 (syz.0.639) did not claim interface 0 before use [ 86.310370][ T2376] fuse: Bad value for 'rootmode' [ 86.627624][ T2402] fuse: Bad value for 'rootmode' [ 86.800124][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 86.915345][ T2420] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.922626][ T2420] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.939643][ T2424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.961870][ T2424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.964802][ T2430] fuse: Bad value for 'rootmode' [ 86.984397][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 86.991451][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 87.006177][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.017166][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.029811][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.039290][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.050143][ T45] usb 4-1: Product: syz [ 87.054565][ T45] usb 4-1: Manufacturer: syz [ 87.059366][ T45] usb 4-1: SerialNumber: syz [ 87.151771][ T2447] /dev/rnullb0: Can't open blockdev [ 87.450095][ T465] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 87.470834][ T45] usb 4-1: 0:2 : does not exist [ 87.601111][ T465] usb 1-1: config 0 has no interfaces? [ 87.608059][ T465] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=61.d8 [ 87.617379][ T465] usb 1-1: New USB device strings: Mfr=123, Product=105, SerialNumber=3 [ 87.625965][ T465] usb 1-1: Product: syz [ 87.630260][ T465] usb 1-1: Manufacturer: syz [ 87.634884][ T465] usb 1-1: SerialNumber: syz [ 87.640682][ T465] usb 1-1: config 0 descriptor?? [ 87.886491][ T417] usb 1-1: USB disconnect, device number 20 [ 87.973648][ T2452] overlayfs: cannot append lower layer [ 87.980412][ T2452] fuse: Unknown parameter '0x00000000000000060177777777777777777777700000000000000000000' [ 88.007020][ T2456] fuse: Unknown parameter 'use00000000000000000000' [ 88.058702][ T2460] can0: slcan on ptm1. [ 88.064253][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.075929][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.078215][ T45] usb 4-1: USB disconnect, device number 21 [ 88.084406][ T2458] rust_binder: 429: no such ref 3 [ 88.095826][ T2458] rust_binder: Write failure EFAULT in pid:429 [ 88.219056][ T2460] can0 (unregistered): slcan off ptm1. [ 88.539780][ T2509] fuse: Unknown parameter 'use00000000000000000000' [ 88.757700][ T2529] can0: slcan on ptm2. [ 88.763279][ T2529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.777251][ T2529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.822198][ T2529] can0 (unregistered): slcan off ptm2. [ 88.960150][ T417] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 89.111200][ T417] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 89.119780][ T417] usb 4-1: config 16 has no interface number 0 [ 89.128509][ T417] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 89.138202][ T417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.146397][ T417] usb 4-1: Product: syz [ 89.150786][ T417] usb 4-1: Manufacturer: syz [ 89.155487][ T417] usb 4-1: SerialNumber: syz [ 89.355020][ T2562] fuse: Unknown parameter 'use00000000000000000000' [ 89.363947][ T2525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.377100][ T2525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.396502][ T2566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.405801][ T2566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.482174][ T2569] binder: Unknown parameter 'fscontext?}S ' [ 89.590846][ T2581] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.590986][ T2581] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.621695][ T2585] rust_binder: Write failure EINVAL in pid:464 [ 89.929835][ T2596] fuse: Unknown parameter 'user_i00000000000000000000' [ 89.971361][ T2598] SELinux: failed to load policy [ 90.024534][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.034541][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.044559][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.053455][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.063366][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 90.063387][ T36] audit: type=1400 audit(1754629692.050:372): avc: denied { shutdown } for pid=2601 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.103278][ T2608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.262104][ T2620] fuse: Unknown parameter 'user_i00000000000000000000' [ 90.334566][ T2624] netlink: 'syz.2.707': attribute type 4 has an invalid length. [ 90.470980][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 90.631100][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 90.641815][ T2640] netlink: 104 bytes leftover after parsing attributes in process `syz.2.713'. [ 90.641816][ T36] audit: type=1400 audit(1754629692.640:373): avc: denied { nlmsg_read } for pid=2639 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.642152][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 90.692531][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.704456][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.719514][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.730560][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.744910][ T31] usb 1-1: Product: syz [ 90.749183][ T31] usb 1-1: Manufacturer: syz [ 90.754712][ T2644] fuse: Unknown parameter 'user_i00000000000000000000' [ 90.761920][ T31] usb 1-1: SerialNumber: syz [ 90.972952][ T2652] syzkaller0: entered promiscuous mode [ 90.978472][ T2652] syzkaller0: entered allmulticast mode [ 91.172250][ T2660] netlink: 'syz.2.719': attribute type 3 has an invalid length. [ 91.180694][ T2660] netlink: 944 bytes leftover after parsing attributes in process `syz.2.719'. [ 91.210384][ T2665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.211434][ T2665] rust_binder: Error in use_page_slow: ESRCH [ 91.218172][ T2665] rust_binder: use_range failure ESRCH [ 91.224943][ T2665] rust_binder: Failed to allocate buffer. len:1104, is_oneway:true [ 91.231269][ T2665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 91.239350][ T2665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:528 [ 91.249296][ T2665] tipc: Enabled bearer , priority 0 [ 91.266737][ T2665] tipc: Disabling bearer [ 91.344353][ T36] audit: type=1400 audit(1754629693.340:374): avc: denied { remount } for pid=2667 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.402670][ T2674] fuse: Unknown parameter 'user_id00000000000000000000' [ 91.537205][ T2685] input: syz1 as /devices/virtual/input/input11 [ 91.600665][ T2690] binder: Unknown parameter 'm' [ 91.615549][ T2690] binder: Unknown parameter 'm' [ 91.632655][ T2690] binder: Unknown parameter 'm' [ 91.638067][ T2690] binder: Unknown parameter 'm' [ 91.643929][ T2690] binder: Unknown parameter 'm' [ 91.649161][ T2690] binder: Unknown parameter 'm' [ 91.654509][ T2690] binder: Unknown parameter 'm' [ 91.659928][ T2690] binder: Unknown parameter 'm' [ 91.665273][ T2690] binder: Unknown parameter 'm' [ 91.670996][ T2690] binder: Unknown parameter 'm' [ 91.676678][ T2690] binder: Unknown parameter 'm' [ 91.682001][ T36] audit: type=1326 audit(1754629693.670:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cd58ebe9 code=0x7fc00000 [ 91.682390][ T2690] binder: Unknown parameter 'm' [ 91.713813][ T2690] binder: Unknown parameter 'm' [ 91.735040][ T417] usb 4-1: USB disconnect, device number 22 [ 91.753812][ T1092] udevd[1092]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.770247][ T2690] binder: Unknown parameter 'm' [ 91.775710][ T2690] binder: Unknown parameter 'm' [ 91.785828][ T2690] binder: Unknown parameter 'm' [ 91.798052][ T2690] binder: Unknown parameter 'm' [ 91.810033][ T2690] binder: Unknown parameter 'm' [ 91.815338][ T2690] binder: Unknown parameter 'm' [ 91.820525][ T2690] binder: Unknown parameter 'm' [ 91.825583][ T2690] binder: Unknown parameter 'm' [ 91.830888][ T2690] binder: Unknown parameter 'm' [ 91.835907][ T2690] binder: Unknown parameter 'm' [ 91.841379][ T2690] binder: Unknown parameter 'm' [ 91.846967][ T2690] binder: Unknown parameter 'm' [ 91.852522][ T2690] binder: Unknown parameter 'm' [ 91.859384][ T2690] binder: Unknown parameter 'm' [ 91.867344][ T2690] binder: Unknown parameter 'm' [ 91.874789][ T2690] binder: Unknown parameter 'm' [ 91.879974][ T2690] binder: Unknown parameter 'm' [ 91.895095][ T2690] binder: Unknown parameter 'm' [ 91.910172][ T2690] binder: Unknown parameter 'm' [ 91.915168][ T2690] binder: Unknown parameter 'm' [ 92.094184][ T2715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:476 [ 92.095145][ T2715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:476 [ 92.428373][ T2722] /dev/rnullb0: Can't open blockdev [ 93.018881][ T2741] incfs: Backing dir is not set, filesystem can't be mounted. [ 93.026830][ T2741] incfs: mount failed -2 [ 93.233929][ T2753] SELinux: failed to load policy [ 93.387430][ T31] usb 1-1: 0:2 : does not exist [ 93.409662][ T31] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 93.437590][ T31] usb 1-1: USB disconnect, device number 21 [ 93.501953][ T2778] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 93.520188][ T2779] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 93.773940][ T36] audit: type=1326 audit(1754629695.770:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.0.762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x0 [ 94.289137][ T2790] syzkaller0: entered promiscuous mode [ 94.289590][ T2792] __vm_enough_memory: pid: 2792, comm: syz.2.766, bytes: 18014402804453376 not enough memory for the allocation [ 94.307263][ T2790] syzkaller0: entered allmulticast mode [ 94.434096][ T2797] rust_binder: inc_ref_done called when no active inc_refs [ 94.434129][ T2797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:595 [ 94.630148][ T465] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 94.650145][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 94.810116][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 94.819279][ T465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 94.840269][ T465] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 94.860763][ T465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.869103][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 94.878212][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.899134][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.915937][ T465] usb 3-1: config 0 descriptor?? [ 94.930491][ T2794] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 94.938938][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.948193][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.956883][ T31] usb 4-1: Product: syz [ 94.961306][ T31] usb 4-1: Manufacturer: syz [ 94.966099][ T31] usb 4-1: SerialNumber: syz [ 95.227289][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.234857][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.242407][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.249997][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.257720][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.265334][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.272913][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.280439][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.288225][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.295936][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.304220][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.311885][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.319469][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.327999][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.335915][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.343897][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.351512][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.359368][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.367110][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.374404][ T31] usb 4-1: 0:2 : does not exist [ 95.374741][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.387732][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.390301][ T465] hid-generic 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 95.395374][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.415286][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.423108][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.430755][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.438418][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.445981][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.453523][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.461190][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.468875][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.477001][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.484520][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.492095][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.499674][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.507379][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.514892][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.522731][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.530295][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.537970][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.545711][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.553423][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.561164][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.568879][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.576717][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.584559][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.592233][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.599739][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.607317][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.619117][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.626994][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.636698][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.645223][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.653032][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.660877][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.668628][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.672489][ T465] usb 3-1: USB disconnect, device number 19 [ 95.676683][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.704578][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.712806][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.720481][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.728190][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.735837][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.743439][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.751211][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.759095][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.766901][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.774541][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.782438][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.790301][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.797935][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.806137][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.813815][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.821513][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.828998][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.836616][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.844125][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.851658][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.859276][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.866827][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.874607][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.882416][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.890147][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.898097][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.905652][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.913649][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.921348][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.929204][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.938291][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.945866][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.953441][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.961186][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.969296][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.978026][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.979053][ T31] usb 4-1: USB disconnect, device number 23 [ 95.992057][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 95.999668][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.007475][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.015020][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.022733][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.030538][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.038113][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.045828][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.053335][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.060972][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.068454][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.076149][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.083989][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.091499][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.098991][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.106508][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.114150][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.121784][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.129482][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.137076][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.144770][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.152253][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.159715][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.167412][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.175592][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.183343][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.191129][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.198792][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.206492][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.214041][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.221661][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.229160][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.236695][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.244418][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.252397][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.256730][ T2835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.260397][ T417] hid-generic 0000:10000:0007.0008: unknown main item tag 0x0 [ 96.275171][ T417] hid-generic 0000:10000:0007.0008: hidraw0: HID v9.40 Device [syz1] on syz1 [ 96.289682][ T2836] fido_id[2836]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.312821][ T2837] rust_binder: Error in use_page_slow: ESRCH [ 96.312846][ T2837] rust_binder: use_range failure ESRCH [ 96.319209][ T2837] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 96.327747][ T2837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 96.336425][ T2837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:578 [ 96.400003][ T36] audit: type=1400 audit(1754629698.390:377): avc: denied { sqpoll } for pid=2844 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.428562][ T36] audit: type=1400 audit(1754629698.410:378): avc: denied { setattr } for pid=2844 comm="syz.1.783" name="/" dev="incremental-fs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.096621][ T2862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.148895][ T2863] rust_binder: Error in use_page_slow: ESRCH [ 97.156028][ T2863] rust_binder: use_range failure ESRCH [ 97.162153][ T2863] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 97.167658][ T2863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 97.175603][ T2863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:581 [ 97.186819][ T2863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:581 [ 97.289300][ T36] audit: type=1400 audit(1754629699.280:379): avc: denied { bind } for pid=2870 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.356460][ T36] audit: type=1400 audit(1754629699.350:380): avc: denied { relabelfrom } for pid=2874 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.378389][ T36] audit: type=1400 audit(1754629699.350:381): avc: denied { relabelto } for pid=2874 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.384725][ T2875] syzkaller0: entered promiscuous mode [ 97.405009][ T2875] syzkaller0: entered allmulticast mode [ 97.453471][ T2879] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.453787][ T2879] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 97.465477][ T2879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 97.477404][ T2879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:634 [ 97.619383][ T2895] rust_binder: pid 2895 performed invalid decrement on ref [ 97.730140][ T417] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 97.881604][ T417] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 97.889963][ T417] usb 4-1: config 0 has no interface number 1 [ 97.896174][ T417] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 97.906158][ T417] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.917664][ T417] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 97.926792][ T417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.935117][ T417] usb 4-1: SerialNumber: syz [ 97.940813][ T417] usb 4-1: config 0 descriptor?? [ 97.947591][ T417] usb 4-1: Found UVC 0.00 device (0002:0000) [ 97.957523][ T417] usb 4-1: No valid video chain found. [ 98.039591][ T2912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.048202][ T2912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.064396][ T2915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.064707][ T2915] rust_binder: Error in use_page_slow: ESRCH [ 98.071364][ T2915] rust_binder: use_range failure ESRCH [ 98.077361][ T2915] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 98.082892][ T2915] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 98.090836][ T2915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:599 [ 98.106406][ T2917] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 98.134066][ T2919] fuse: Unknown parameter 'fd0x0000000000000003' [ 98.148844][ T2883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.158428][ T2883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.171255][ T10] usb 4-1: USB disconnect, device number 24 [ 98.185896][ T2926] netlink: 108 bytes leftover after parsing attributes in process `syz.2.810'. [ 98.200437][ T36] audit: type=1400 audit(1754629700.200:382): avc: denied { create } for pid=2927 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 98.289505][ T36] audit: type=1400 audit(1754629700.280:383): avc: denied { listen } for pid=2934 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.451021][ T2956] fuse: Unknown parameter 'fd0x0000000000000003' [ 98.459512][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.481170][ T2957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 98.481208][ T2957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:524 [ 98.517975][ T2964] tc_dump_action: action bad kind [ 98.538503][ T2957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 98.790109][ T417] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 98.941746][ T417] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.953051][ T417] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.963321][ T417] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 98.972746][ T417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.982243][ T417] usb 3-1: config 0 descriptor?? [ 99.394693][ T417] nintendo 0003:057E:200E.000A: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 99.460167][ T417] nintendo 0003:057E:200E.000A: Failed charging grip handshake [ 99.468170][ T417] nintendo 0003:057E:200E.000A: Failed to initialize controller; ret=-110 [ 99.477746][ T417] nintendo 0003:057E:200E.000A: probe - fail = -110 [ 99.484446][ T417] nintendo 0003:057E:200E.000A: probe with driver nintendo failed with error -110 [ 99.595573][ T465] usb 3-1: USB disconnect, device number 20 [ 99.662089][ T2996] rust_binder: 2995 RLIMIT_NICE not set [ 99.662461][ T2995] rust_binder: 657: no such ref 3 [ 99.673226][ T2995] rust_binder: inc_ref_done called when no active inc_refs [ 99.697420][ T36] audit: type=1400 audit(1754629701.690:384): avc: denied { create } for pid=2997 comm="syz.1.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 99.732652][ T2998] /dev/rnullb0: Can't open blockdev [ 99.970165][ T417] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 100.103863][ T3021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.120125][ T417] usb 1-1: Using ep0 maxpacket: 32 [ 100.133415][ T417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 100.144592][ T417] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 100.154522][ T417] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 100.165858][ T417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.174991][ T417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.183023][ T417] usb 1-1: Product: 骞曇ⰿ [ 100.187715][ T417] usb 1-1: Manufacturer: 䇜펡総젿焾뭭㏄鿿 [ 100.194568][ T417] usb 1-1: SerialNumber: ؿ [ 100.340131][ T465] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 100.491625][ T465] usb 3-1: config 0 has no interfaces? [ 100.498810][ T465] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 100.508816][ T604] Bluetooth: hci0: command 0x1003 tx timeout [ 100.510962][ T603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.515027][ T465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.529253][ T465] usb 3-1: Product: syz [ 100.533461][ T465] usb 3-1: Manufacturer: syz [ 100.538346][ T465] usb 3-1: SerialNumber: syz [ 100.544070][ T465] usb 3-1: config 0 descriptor?? [ 100.603096][ T36] audit: type=1400 audit(1754629702.600:385): avc: denied { transfer } for pid=2999 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 100.603368][ T3000] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 100.634979][ T417] cdc_ncm 1-1:1.0: bind() failure [ 100.642042][ T417] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 100.648966][ T417] cdc_ncm 1-1:1.1: bind() failure [ 100.655478][ T417] usb 1-1: USB disconnect, device number 22 [ 100.758510][ T3021] rust_binder: Error in use_page_slow: ESRCH [ 100.758540][ T3021] rust_binder: use_range failure ESRCH [ 100.764636][ T3021] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 100.770290][ T3021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 100.778481][ T3021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:617 [ 100.832502][ T417] usb 3-1: USB disconnect, device number 21 [ 101.156153][ T36] audit: type=1400 audit(1754629703.150:386): avc: denied { setopt } for pid=3032 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.300128][ T465] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 101.430124][ T465] usb 4-1: device descriptor read/64, error -71 [ 101.512302][ T3054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.521070][ T3054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.595887][ T36] audit: type=1400 audit(1754629703.590:387): avc: denied { mounton } for pid=3056 comm="syz.1.852" path="/235/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 101.629079][ T3061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1068 sclass=netlink_route_socket pid=3061 comm=syz.1.853 [ 101.667720][ T3068] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 101.691039][ T465] usb 4-1: device descriptor read/64, error -71 [ 101.714228][ T36] audit: type=1400 audit(1754629703.710:388): avc: denied { accept } for pid=3076 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.930128][ T465] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 102.060098][ T465] usb 4-1: device descriptor read/64, error -71 [ 102.108999][ T36] audit: type=1326 audit(1754629704.100:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.2.864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8aed98ebe9 code=0x0 [ 102.273838][ T3110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.274969][ T3110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.281998][ T3110] rust_binder: 638: no such ref 1 [ 102.300095][ T465] usb 4-1: device descriptor read/64, error -71 [ 102.430175][ T465] usb usb4-port1: attempt power cycle [ 102.600163][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 102.672579][ T3133] netlink: 68 bytes leftover after parsing attributes in process `syz.1.877'. [ 102.750193][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 102.756631][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.767665][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.778033][ T465] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 102.785714][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.798821][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 102.810328][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.811824][ T3139] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 102.819216][ T45] usb 3-1: config 0 descriptor?? [ 102.834157][ T465] usb 4-1: device descriptor read/8, error -71 [ 102.938700][ T36] audit: type=1400 audit(1754629704.930:390): avc: denied { create } for pid=3147 comm="syz.1.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.963846][ T36] audit: type=1400 audit(1754629704.930:391): avc: denied { setopt } for pid=3147 comm="syz.1.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.984347][ T36] audit: type=1400 audit(1754629704.930:392): avc: denied { ioctl } for pid=3147 comm="syz.1.882" path="socket:[21410]" dev="sockfs" ino=21410 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.993317][ T465] usb 4-1: device descriptor read/8, error -71 [ 103.009346][ T36] audit: type=1400 audit(1754629704.930:393): avc: denied { write } for pid=3147 comm="syz.1.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.016907][ T3148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.038657][ T36] audit: type=1400 audit(1754629704.980:394): avc: denied { read write } for pid=3147 comm="syz.1.882" name="binder1" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.051606][ T3148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.069293][ T36] audit: type=1400 audit(1754629704.980:395): avc: denied { open } for pid=3147 comm="syz.1.882" path="/dev/binderfs/binder1" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.074701][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 103.098827][ T36] audit: type=1400 audit(1754629704.980:396): avc: denied { ioctl } for pid=3030 comm="syz.3.844" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.116410][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 103.146630][ T45] usb 3-1: USB disconnect, device number 23 [ 103.280232][ T465] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 103.301396][ T465] usb 4-1: device descriptor read/8, error -71 [ 103.351065][ T3158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:630 [ 103.427564][ T3162] netlink: 124 bytes leftover after parsing attributes in process `syz.0.886'. [ 103.431195][ T465] usb 4-1: device descriptor read/8, error -71 [ 103.560212][ T465] usb usb4-port1: unable to enumerate USB device [ 103.724500][ T3170] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 103.734957][ T3170] SELinux: failed to load policy [ 103.754798][ T3174] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 104.200154][ T466] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 104.250183][ T465] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 104.361267][ T466] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.372467][ T466] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.382326][ T466] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 104.391541][ T466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.400514][ T466] usb 1-1: config 0 descriptor?? [ 104.410141][ T465] usb 3-1: Using ep0 maxpacket: 16 [ 104.416740][ T465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.427899][ T465] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.441140][ T465] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.450612][ T465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.459255][ T465] usb 3-1: config 0 descriptor?? [ 104.464358][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 104.620135][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 104.626363][ T45] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 104.634769][ T45] usb 4-1: config 0 has no interface number 0 [ 104.642277][ T45] usb 4-1: New USB device found, idVendor=0421, idProduct=0009, bcdDevice= 0.00 [ 104.651495][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.659520][ T45] usb 4-1: Product: syz [ 104.663948][ T45] usb 4-1: Manufacturer: syz [ 104.668571][ T45] usb 4-1: SerialNumber: syz [ 104.674168][ T45] usb 4-1: config 0 descriptor?? [ 104.680494][ T45] usb 4-1: bad CDC descriptors [ 104.704336][ T3211] netlink: 'syz.1.902': attribute type 2 has an invalid length. [ 104.722765][ T3211] binder: Bad value for 'defcontext' [ 104.744086][ T3214] binder: Unknown parameter '' [ 104.789940][ T3217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.798624][ T3217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.811093][ T466] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 104.820968][ T466] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 104.874817][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.882200][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.889525][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.889882][ T417] usb 4-1: USB disconnect, device number 29 [ 104.896954][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.910440][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.917824][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.925352][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.932917][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.940350][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.947853][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.955959][ T465] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 104.963388][ T465] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 104.971620][ T465] microsoft 0003:045E:07DA.000C: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 104.983233][ T465] microsoft 0003:045E:07DA.000C: no inputs found [ 104.989634][ T465] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 105.006785][ T466] cp2112 0003:10C4:EA90.000B: error requesting version [ 105.014447][ T466] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -32 [ 105.333465][ T3221] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.361330][ T417] usb 1-1: USB disconnect, device number 24 [ 105.384622][ T3226] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 105.394740][ T3226] rust_binder: Error in use_page_slow: ESRCH [ 105.394764][ T3226] rust_binder: use_range failure ESRCH [ 105.406561][ T3226] rust_binder: Failed to allocate buffer. len:160, is_oneway:true [ 105.412341][ T3226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 105.441537][ T3234] rust_binder: Error in use_page_slow: ESRCH [ 105.453663][ T3226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:653 [ 105.471059][ T3234] rust_binder: use_range failure ESRCH [ 105.490408][ T3234] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 105.503656][ T3234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 105.523714][ T3234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:653 [ 105.648384][ T3240] rust_binder: Failed copying remainder into alloc: EFAULT [ 105.657719][ T3240] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 105.665467][ T3240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 105.674183][ T3240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:764 [ 106.343124][ T3256] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 106.650574][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 106.650597][ T36] audit: type=1400 audit(1754629708.650:476): avc: denied { read write } for pid=3267 comm="syz.1.917" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.688914][ T36] audit: type=1400 audit(1754629708.650:477): avc: denied { open } for pid=3267 comm="syz.1.917" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.724799][ T36] audit: type=1400 audit(1754629708.720:478): avc: denied { create } for pid=3271 comm="syz.1.918" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.750143][ T36] audit: type=1400 audit(1754629708.720:479): avc: denied { ioctl } for pid=3271 comm="syz.1.918" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23766 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.776587][ T36] audit: type=1400 audit(1754629708.750:480): avc: denied { map } for pid=3273 comm="syz.1.919" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.801546][ T36] audit: type=1400 audit(1754629708.750:481): avc: denied { read write } for pid=3273 comm="syz.1.919" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.024007][ T465] usb 3-1: USB disconnect, device number 24 [ 107.032679][ T36] audit: type=1400 audit(1754629709.030:482): avc: denied { create } for pid=3282 comm="syz.2.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.052209][ T36] audit: type=1400 audit(1754629709.030:483): avc: denied { ioctl } for pid=3282 comm="syz.2.922" path="socket:[23780]" dev="sockfs" ino=23780 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.077368][ T36] audit: type=1400 audit(1754629709.030:484): avc: denied { create } for pid=3282 comm="syz.2.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 107.097638][ T36] audit: type=1400 audit(1754629709.030:485): avc: denied { getopt } for pid=3282 comm="syz.2.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 107.370161][ T466] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 107.520128][ T466] usb 4-1: Using ep0 maxpacket: 16 [ 107.526524][ T466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.537816][ T466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.547600][ T466] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.561191][ T466] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.570681][ T466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.580324][ T466] usb 4-1: config 0 descriptor?? [ 107.892514][ T3303] random: crng reseeded on system resumption [ 107.993048][ T466] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 108.015410][ T466] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 108.037865][ T466] microsoft 0003:045E:07DA.000D: no inputs found [ 108.050090][ T466] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 108.192222][ T982] usb 4-1: USB disconnect, device number 30 [ 108.360297][ T417] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 108.530119][ T417] usb 3-1: Using ep0 maxpacket: 32 [ 108.539049][ T417] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.547702][ T417] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 108.557047][ T417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.565311][ T417] usb 3-1: Product: syz [ 108.569606][ T417] usb 3-1: Manufacturer: syz [ 108.574229][ T417] usb 3-1: SerialNumber: syz [ 108.579293][ T417] usb 3-1: config 0 descriptor?? [ 108.641274][ T3328] x_tables: unsorted underflow at hook 3 [ 108.805141][ T3319] overlayfs: failed to resolve './file1': -2 [ 108.822190][ T466] usb 3-1: USB disconnect, device number 25 [ 108.846362][ T3335] binder: Unknown parameter 'jats' [ 108.993819][ T3351] rust_binder: inc_ref_done called when no active inc_refs [ 108.993848][ T3351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:558 [ 109.196567][ T3357] rust_binder: 3356 RLIMIT_NICE not set [ 109.218066][ T3362] fuse: Bad value for 'group_id' [ 109.228727][ T3362] fuse: Bad value for 'group_id' [ 109.350821][ T466] rust_binder: 0: removing orphan mapping 0:40 [ 109.500287][ T3376] netlink: 'syz.2.953': attribute type 12 has an invalid length. [ 109.713642][ T3385] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 109.740582][ T3387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.758757][ T3387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.767499][ T3387] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 109.786601][ T3382] /dev/rnullb0: Can't open blockdev [ 110.130104][ T465] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 110.278760][ T3408] cgroup: Unknown subsys name 'measure' [ 110.281173][ T465] usb 3-1: config 3 has an invalid interface number: 210 but max is 3 [ 110.287008][ T3408] input: syz1 as /devices/virtual/input/input15 [ 110.292909][ T465] usb 3-1: config 3 has an invalid interface number: 254 but max is 3 [ 110.307483][ T465] usb 3-1: config 3 has an invalid interface number: 225 but max is 3 [ 110.321742][ T465] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 110.330674][ T465] usb 3-1: config 3 has an invalid interface number: 96 but max is 3 [ 110.338863][ T465] usb 3-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 110.350333][ T465] usb 3-1: config 3 has no interface number 0 [ 110.360092][ T465] usb 3-1: config 3 has no interface number 1 [ 110.367244][ T465] usb 3-1: config 3 has no interface number 2 [ 110.373487][ T465] usb 3-1: config 3 has no interface number 4 [ 110.380135][ T465] usb 3-1: config 3 interface 210 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 110.391762][ T465] usb 3-1: config 3 interface 210 altsetting 2 has an endpoint descriptor with address 0x5D, changing to 0xD [ 110.410097][ T465] usb 3-1: config 3 interface 210 altsetting 2 endpoint 0xD has invalid maxpacket 544, setting to 64 [ 110.421186][ T465] usb 3-1: config 3 interface 210 altsetting 2 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 110.432787][ T465] usb 3-1: config 3 interface 210 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.446020][ T465] usb 3-1: config 3 interface 3 altsetting 179 endpoint 0x6 has invalid maxpacket 3835, setting to 64 [ 110.457256][ T465] usb 3-1: config 3 interface 3 altsetting 179 endpoint 0x5 has invalid maxpacket 1080, setting to 64 [ 110.470761][ T465] usb 3-1: config 3 interface 3 altsetting 179 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.481659][ T465] usb 3-1: config 3 interface 3 altsetting 179 has a duplicate endpoint with address 0xA, skipping [ 110.497959][ T465] usb 3-1: config 3 interface 3 altsetting 179 has a duplicate endpoint with address 0x6, skipping [ 110.514206][ T465] usb 3-1: config 3 interface 3 altsetting 179 has a duplicate endpoint with address 0x5, skipping [ 110.517005][ T3427] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 110.526629][ T465] usb 3-1: config 3 interface 3 altsetting 179 has 9 endpoint descriptors, different from the interface descriptor's value: 16 [ 110.546185][ T465] usb 3-1: too many endpoints for config 3 interface 254 altsetting 140: 114, using maximum allowed: 30 [ 110.557586][ T465] usb 3-1: config 3 interface 254 altsetting 140 has an invalid descriptor for endpoint zero, skipping [ 110.568793][ T465] usb 3-1: config 3 interface 254 altsetting 140 has a duplicate endpoint with address 0x2, skipping [ 110.582831][ T3431] binder: Unknown parameter 'fscontext?}' [ 110.588901][ T465] usb 3-1: config 3 interface 254 altsetting 140 has a duplicate endpoint with address 0x1, skipping [ 110.600068][ T465] usb 3-1: config 3 interface 254 altsetting 140 has a duplicate endpoint with address 0x6, skipping [ 110.611042][ T465] usb 3-1: config 3 interface 254 altsetting 140 has a duplicate endpoint with address 0x2, skipping [ 110.621950][ T465] usb 3-1: config 3 interface 254 altsetting 140 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 110.633149][ T465] usb 3-1: config 3 interface 254 altsetting 140 has 7 endpoint descriptors, different from the interface descriptor's value: 114 [ 110.646851][ T465] usb 3-1: config 3 interface 225 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 110.657910][ T465] usb 3-1: config 3 interface 225 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 110.669036][ T465] usb 3-1: config 3 interface 225 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 110.669062][ T417] rust_binder: 0: removing orphan mapping 0:24 [ 110.684798][ T465] usb 3-1: config 3 interface 225 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 110.697055][ T465] usb 3-1: config 3 interface 225 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.710828][ T465] usb 3-1: config 3 interface 225 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 110.721753][ T465] usb 3-1: config 3 interface 225 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.732854][ T465] usb 3-1: config 3 interface 225 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 110.743005][ T465] usb 3-1: config 3 interface 225 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 110.753814][ T465] usb 3-1: config 3 interface 225 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 110.763698][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0x6, skipping [ 110.775094][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0x7, skipping [ 110.792017][ T45] rust_binder: 3440: removing orphan mapping 0:24 [ 110.806393][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 110.827911][ T465] usb 3-1: config 3 interface 96 altsetting 16 has an endpoint descriptor with address 0x59, changing to 0x9 [ 110.841722][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0x9, skipping [ 110.849533][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.853288][ T465] usb 3-1: config 3 interface 96 altsetting 16 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 110.870776][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0x83, skipping [ 110.881919][ T3450] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 110.888711][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0xB, skipping [ 110.899833][ T465] usb 3-1: config 3 interface 96 altsetting 16 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 110.911511][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0x2, skipping [ 110.927905][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0xC, skipping [ 110.939786][ T465] usb 3-1: config 3 interface 96 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 110.951203][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 110.962127][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0x9, skipping [ 110.973017][ T465] usb 3-1: config 3 interface 96 altsetting 16 has a duplicate endpoint with address 0xE, skipping [ 110.983800][ T465] usb 3-1: config 3 interface 96 altsetting 16 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 110.985496][ T3460] KVM: debugfs: duplicate directory 3460-7 [ 110.997244][ T465] usb 3-1: config 3 interface 210 has no altsetting 0 [ 110.997272][ T465] usb 3-1: config 3 interface 3 has no altsetting 0 [ 110.997289][ T465] usb 3-1: config 3 interface 254 has no altsetting 0 [ 111.023908][ T465] usb 3-1: config 3 interface 96 has no altsetting 0 [ 111.032480][ T465] usb 3-1: Dual-Role OTG device on HNP port [ 111.038667][ T465] usb 3-1: New USB device found, idVendor=05d1, idProduct=1003, bcdDevice= 9.8b [ 111.047771][ T465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.055813][ T465] usb 3-1: Product:  [ 111.059980][ T465] usb 3-1: Manufacturer: 쵠煄瀥뗚謱艛饚ԯ鯅繚㪋浨⚜⺶㜁ⵄ蜬鱃᫮붿饶绩Ⴑ麓鹲㕒拟鑙쓼﫳ザ슕鈱᷀첛ꥱ꼞럸윜枭斶埤䎇㐘餒膅晸쀆շ狥䉢생ਮ䵯睶뺥ٶ⿭㆛–횁羜莼؆⍈뎴哄㤷Ꙧ萸㺇褸瑥퉃斅腊➆鷂၂耺咹ꛒ귃݂Ɡ龤乲筎骳玆ꨍ릑顒츱 [ 111.091655][ T465] usb 3-1: SerialNumber: syz [ 111.097213][ T3403] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.308050][ T465] ftdi_sio 3-1:3.210: FTDI USB Serial Device converter detected [ 111.316410][ T465] ftdi_sio ttyUSB0: unknown device type: 0x98b [ 111.324958][ T465] ftdi_sio 3-1:3.3: FTDI USB Serial Device converter detected [ 111.333439][ T465] ftdi_sio ttyUSB1: unknown device type: 0x98b [ 111.342711][ T465] ftdi_sio 3-1:3.254: FTDI USB Serial Device converter detected [ 111.353928][ T465] ftdi_sio ttyUSB2: unknown device type: 0x98b [ 111.356075][ T3474] /dev/rnullb0: Can't open blockdev [ 111.362138][ T465] ftdi_sio 3-1:3.225: FTDI USB Serial Device converter detected [ 111.366639][ T3475] /dev/rnullb0: Can't open blockdev [ 111.374308][ T465] ftdi_sio ttyUSB3: unknown device type: 0x98b [ 111.387887][ T465] ftdi_sio 3-1:3.96: FTDI USB Serial Device converter detected [ 111.395842][ T465] ftdi_sio ttyUSB4: unknown device type: 0x98b [ 111.405518][ T465] usb 3-1: USB disconnect, device number 26 [ 111.414812][ T465] ftdi_sio 3-1:3.210: device disconnected [ 111.426448][ T465] ftdi_sio 3-1:3.3: device disconnected [ 111.432856][ T465] ftdi_sio 3-1:3.254: device disconnected [ 111.439717][ T465] ftdi_sio 3-1:3.225: device disconnected [ 111.446953][ T465] ftdi_sio 3-1:3.96: device disconnected [ 111.599718][ T3479] netlink: 104 bytes leftover after parsing attributes in process `syz.1.988'. [ 111.824114][ T3487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.875874][ T3488] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 111.882560][ T3488] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 111.955459][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 111.955480][ T36] audit: type=1400 audit(1754629713.950:540): avc: denied { read } for pid=3491 comm="syz.2.993" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 111.960553][ T3493] netlink: 'syz.0.992': attribute type 12 has an invalid length. [ 111.963905][ T3494] rust_binder: Write failure EFAULT in pid:703 [ 112.000207][ T36] audit: type=1400 audit(1754629713.950:541): avc: denied { open } for pid=3491 comm="syz.2.993" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 112.038413][ T36] audit: type=1400 audit(1754629714.030:542): avc: denied { remount } for pid=3496 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 112.065847][ T36] audit: type=1400 audit(1754629714.050:543): avc: denied { write } for pid=3496 comm="syz.2.994" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 112.114523][ T3506] netlink: 'syz.2.997': attribute type 16 has an invalid length. [ 112.122530][ T3506] netlink: 'syz.2.997': attribute type 3 has an invalid length. [ 112.130505][ T3506] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.997'. [ 112.171575][ T3514] rust_binder: Error in use_page_slow: ESRCH [ 112.171599][ T3514] rust_binder: use_range failure ESRCH [ 112.177619][ T3514] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 112.181869][ T3516] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.183662][ T3514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 112.197663][ T3514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:721 [ 112.227921][ T36] audit: type=1400 audit(1754629714.220:544): avc: denied { read } for pid=3517 comm="syz.2.1001" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.246320][ T3524] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.269121][ T36] audit: type=1400 audit(1754629714.220:545): avc: denied { open } for pid=3517 comm="syz.2.1001" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.282310][ T3524] rust_binder: Error in use_page_slow: ESRCH [ 112.298911][ T3524] rust_binder: use_range failure ESRCH [ 112.305186][ T3524] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 112.311077][ T3524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 112.319068][ T3524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:729 [ 112.337355][ T36] audit: type=1400 audit(1754629714.330:546): avc: denied { mount } for pid=3526 comm="syz.0.1004" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.351488][ T3524] rust_binder: Read failure Err(EFAULT) in pid:729 [ 112.900081][ T603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.900117][ T604] Bluetooth: hci0: command 0x1003 tx timeout [ 112.935374][ T36] audit: type=1400 audit(1754629714.920:547): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.063246][ T36] audit: type=1400 audit(1754629715.060:548): avc: denied { remount } for pid=3563 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.106225][ T3565] binder: Unknown parameter 'fscontext?}' [ 113.129124][ T36] audit: type=1400 audit(1754629715.080:549): avc: denied { setopt } for pid=3563 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.343322][ T3579] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 113.367296][ T3581] fuseblk: Bad value for 'fd' [ 113.374208][ T3583] fuseblk: Bad value for 'fd' [ 113.394452][ T3578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1897435698 (121435884672 ns) > initial count (65943496576 ns). Using initial count to start timer. [ 113.418892][ T3578] kvm: Disabled LAPIC found during irq injection [ 113.425494][ T3589] netlink: 'syz.0.1027': attribute type 30 has an invalid length. [ 113.435298][ T3587] 9pnet_fd: Insufficient options for proto=fd [ 113.737450][ T3620] syzkaller0: entered promiscuous mode [ 113.742978][ T3620] syzkaller0: entered allmulticast mode [ 113.750298][ T982] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 113.794426][ T3626] rust_binder: 878: no such ref 3 [ 113.799550][ T3626] rust_binder: Write failure EFAULT in pid:878 [ 113.816160][ T3630] tmpfs: Unknown parameter 'noswUp' [ 113.856647][ T1414] rust_binder: 0: removing orphan mapping 0:24 [ 113.863074][ T1414] rust_binder: 0: removing orphan mapping 24:1120 [ 113.891352][ T3637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.900641][ T3637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.910114][ T982] usb 1-1: Using ep0 maxpacket: 32 [ 113.916579][ T982] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.925391][ T982] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.940103][ T982] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.949174][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.961854][ T982] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.971793][ T982] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.984985][ T982] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.995609][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.002677][ T3641] can0: slcan on ptm3. [ 114.008795][ T982] usb 1-1: config 0 descriptor?? [ 114.230131][ T465] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 114.240108][ T466] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 114.370163][ T466] usb 3-1: device descriptor read/64, error -71 [ 114.380497][ T465] usb 4-1: Using ep0 maxpacket: 8 [ 114.380523][ T982] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.392213][ T465] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.399296][ T982] usb 1-1: USB disconnect, device number 25 [ 114.410431][ T465] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 114.412043][ T982] usblp0: removed [ 114.425047][ T465] usb 4-1: can't read configurations, error -71 [ 114.521555][ T3670] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 114.572193][ T3669] rust_binder: 888: no such ref 2 [ 114.577230][ T3669] rust_binder: Write failure EINVAL in pid:888 [ 114.577593][ T3670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.586430][ T31] rust_binder: 0: removing orphan mapping 0:112 [ 114.599496][ T31] rust_binder: 0: removing orphan mapping 112:1048 [ 114.610124][ T466] usb 3-1: device descriptor read/64, error -71 [ 114.691567][ T3680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.700443][ T3680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.753578][ T3680] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 114.760120][ T982] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 114.767798][ T2036] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.800165][ T465] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 114.850132][ T466] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 114.920119][ T982] usb 1-1: Using ep0 maxpacket: 32 [ 114.926449][ T982] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.934995][ T982] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.943638][ T982] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.952882][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.962549][ T982] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.970097][ T465] usb 4-1: Using ep0 maxpacket: 8 [ 114.972408][ T982] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.978728][ T465] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 114.990657][ T982] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 114.999165][ T466] usb 3-1: device descriptor read/64, error -71 [ 115.007917][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.014428][ T465] usb 4-1: config 179 has no interface number 0 [ 115.026182][ T982] usb 1-1: config 0 descriptor?? [ 115.028616][ T465] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 115.044656][ T465] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 115.055998][ T465] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.067180][ T465] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 115.077302][ T465] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 115.090905][ T465] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 115.099954][ T465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.109016][ T3667] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 115.116937][ T465] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 115.234821][ T982] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.260108][ T466] usb 3-1: device descriptor read/64, error -71 [ 115.370255][ T466] usb usb3-port1: attempt power cycle [ 115.439677][ T982] usb 1-1: USB disconnect, device number 26 [ 115.446273][ T982] usblp0: removed [ 115.710144][ T466] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 115.731130][ T466] usb 3-1: device descriptor read/8, error -71 [ 115.861208][ T466] usb 3-1: device descriptor read/8, error -71 [ 116.003423][ T3690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.003735][ T3690] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 116.020317][ T3693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.029343][ T3695] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.100147][ T466] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 116.131197][ T466] usb 3-1: device descriptor read/8, error -71 [ 116.261303][ T466] usb 3-1: device descriptor read/8, error -71 [ 116.280124][ T10] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 116.370244][ T466] usb usb3-port1: unable to enumerate USB device [ 116.431356][ T10] usb 1-1: No LPM exit latency info found, disabling LPM. [ 116.439974][ T10] usb 1-1: config 1 interface 0 altsetting 223 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 116.450911][ T10] usb 1-1: config 1 interface 0 altsetting 223 endpoint 0x82 is Bulk; changing to Interrupt [ 116.461243][ T10] usb 1-1: config 1 interface 0 altsetting 223 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.474333][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 116.482879][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.492090][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.500103][ T10] usb 1-1: Product: п [ 116.504157][ T10] usb 1-1: Manufacturer: 䫼å᥈뗎唿ⱵꜨᰟ么侭纼걉є妀怯왮࿀鹞惸὿ｧ뻆헍삦ഋ汪揾麑ﱗ [ 116.517109][ T10] usb 1-1: SerialNumber: ༔萏軰궄בֿ謇탑૔ꛜ➺魑㻳﫬ݤ☧瑝鹟憇婜댉鼅᳜棻륮骍ཨ艽蕲᪏櫘糅㏄Ꭺ哅ब묢倓唶綬䠬쌙泞譙ᕤ篁曅쮹謹쐯얎喜埸开쀉谾ﾸꨡ폘⡮ଣ뭿먡轫孥墨ꭗ敥뱳궰羵០琚䫢ᓓﰻй玜闝㍨屯厼❛뺞떋唬㇋⹌珩ힵ㋢焜뷌 [ 116.547349][ T3698] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.554609][ T3698] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.562053][ T3698] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.773965][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 116.785992][ T10] usb 1-1: USB disconnect, device number 27 [ 116.820070][ T603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.890441][ T3720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 116.890485][ T3720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:914 [ 117.042975][ T3641] can0 (unregistered): slcan off ptm3. [ 117.091464][ T3750] netlink: 'syz.2.1067': attribute type 25 has an invalid length. [ 117.102321][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 117.102341][ T36] audit: type=1400 audit(1754629719.090:585): avc: denied { nlmsg_read } for pid=3749 comm="syz.2.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.220077][ T36] audit: type=1400 audit(1754629719.210:586): avc: denied { block_suspend } for pid=3738 comm="syz.0.1065" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.299834][ T3781] fuse: Unknown parameter 'g 6' [ 117.307257][ T3750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.442098][ T3807] tipc: Started in network mode [ 117.453899][ T3807] tipc: Node identity 8e018fb827c9, cluster identity 4711 [ 117.461553][ T3807] tipc: Enabled bearer , priority 0 [ 117.469647][ T3807] tipc: Disabling bearer [ 117.530564][ T1414] usb 4-1: USB disconnect, device number 32 [ 117.552367][ T10] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 117.562999][ T3786] rust_binder: Read failure Err(EFAULT) in pid:943 [ 117.578632][ T3816] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 117.592774][ T3816] rust_binder: Write failure EINVAL in pid:947 [ 117.594972][ T3819] rust_binder: 618: no such ref 0 [ 117.600010][ T36] audit: type=1400 audit(1754629719.590:587): avc: denied { map } for pid=3815 comm="syz.1.1075" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.632191][ T36] audit: type=1400 audit(1754629719.630:588): avc: denied { accept } for pid=3817 comm="syz.3.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.643267][ T3819] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 117.661171][ T3819] rust_binder: 618: no such ref 0 [ 117.676265][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'. [ 117.685929][ T3822] binder: Unknown parameter 'fscontext?}' [ 117.721151][ T10] usb 3-1: config 0 has no interfaces? [ 117.729493][ T10] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 117.748674][ T36] audit: type=1400 audit(1754629719.740:589): avc: denied { create } for pid=3828 comm="syz.3.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.752579][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.777271][ T10] usb 3-1: Product: syz [ 117.781475][ T10] usb 3-1: Manufacturer: syz [ 117.786056][ T10] usb 3-1: SerialNumber: syz [ 117.791234][ T10] usb 3-1: config 0 descriptor?? [ 117.828298][ T3833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.836853][ T3833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.357533][ T465] rust_binder: 0: removing orphan mapping 0:24 [ 118.370449][ T3777] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.386462][ T36] audit: type=1400 audit(1754629720.380:590): avc: denied { read } for pid=3839 comm="syz.0.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.407809][ T36] audit: type=1400 audit(1754629720.410:591): avc: denied { create } for pid=3841 comm="syz.1.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 118.428864][ T3842] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 118.456738][ T36] audit: type=1400 audit(1754629720.450:592): avc: denied { ioctl } for pid=3844 comm="syz.1.1086" path="socket:[27697]" dev="sockfs" ino=27697 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.535909][ T36] audit: type=1400 audit(1754629720.530:593): avc: denied { map } for pid=3848 comm="syz.1.1088" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 118.559179][ T36] audit: type=1400 audit(1754629720.550:594): avc: denied { execute } for pid=3848 comm="syz.1.1088" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 118.796942][ T3862] rust_binder: 3858 RLIMIT_NICE not set [ 118.805087][ T3861] bridge0: entered allmulticast mode [ 118.867637][ T3863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.867985][ T3863] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 119.270085][ T1414] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 119.430076][ T1414] usb 4-1: Using ep0 maxpacket: 16 [ 119.436386][ T1414] usb 4-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 119.446770][ T1414] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.455778][ T1414] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.470059][ T1414] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.479163][ T1414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.487166][ T1414] usb 4-1: Product: syz [ 119.491359][ T1414] usb 4-1: Manufacturer: syz [ 119.495965][ T1414] usb 4-1: SerialNumber: syz [ 119.502070][ T1414] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 119.508881][ T1414] cdc_ncm 4-1:1.0: bind() failure [ 119.689704][ T3890] netlink: 'syz.0.1099': attribute type 21 has an invalid length. [ 119.697819][ T3890] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1099'. [ 119.713872][ T1414] usb 4-1: USB disconnect, device number 33 [ 119.755774][ T3899] rust_binder: Failed copying into alloc: EFAULT [ 119.755791][ T3899] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 119.762362][ T3899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 119.770822][ T3899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:837 [ 119.971694][ T3934] binder: Bad value for 'defcontext' [ 120.164231][ T466] usb 3-1: USB disconnect, device number 31 [ 120.230686][ T3962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.232845][ T3962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.239808][ T3962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:884 [ 120.245571][ T3964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3964 comm=syz.3.1112 [ 120.390222][ T3990] __vm_enough_memory: pid: 3990, comm: syz.2.1119, bytes: 18014402804453376 not enough memory for the allocation [ 120.417778][ T3994] overlayfs: failed to resolve './file1': -2 [ 120.432912][ T3986] __vm_enough_memory: pid: 3986, comm: syz.2.1119, bytes: 18014402804453376 not enough memory for the allocation [ 120.489544][ T4015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.490397][ T4015] rust_binder: Error in use_page_slow: ESRCH [ 120.496903][ T4015] rust_binder: use_range failure ESRCH [ 120.503007][ T4015] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 120.508538][ T4015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 120.516745][ T4015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:786 [ 120.568135][ T4024] rust_binder: inc_ref_done called when no active inc_refs [ 120.587930][ T4028] tipc: Enabled bearer , priority 10 [ 120.600855][ T4030] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1133'. [ 120.602089][ T4028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.612436][ T4030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.615443][ T4028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.620508][ T4030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.628253][ T465] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 120.637982][ T4028] rust_binder: Error in use_page_slow: ESRCH [ 120.649556][ T4028] rust_binder: use_range failure ESRCH [ 120.655859][ T4028] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 120.661586][ T4028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 120.669545][ T4028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:794 [ 120.683675][ T4028] rust_binder: Read failure Err(EFAULT) in pid:794 [ 120.709961][ T4033] fuse: Bad value for 'fd' [ 120.723286][ T4028] rust_binder: Error in use_page_slow: ESRCH [ 120.723311][ T4028] rust_binder: use_range failure ESRCH [ 120.729362][ T4028] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 120.735221][ T4028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 120.743897][ T4028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:794 [ 120.768189][ T4041] netlink: 'syz.0.1136': attribute type 4 has an invalid length. [ 120.785529][ T4041] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1136'. [ 120.800118][ T465] usb 4-1: Using ep0 maxpacket: 32 [ 120.806544][ T465] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 120.815214][ T465] usb 4-1: config 0 has no interface number 0 [ 120.823069][ T465] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 120.832179][ T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.840279][ T465] usb 4-1: Product: syz [ 120.844476][ T465] usb 4-1: Manufacturer: syz [ 120.849304][ T465] usb 4-1: SerialNumber: syz [ 120.854911][ T465] usb 4-1: config 0 descriptor?? [ 120.862202][ T465] smsc95xx v2.0.0 [ 120.877340][ T4043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4043 comm=syz.2.1138 [ 120.891737][ T4043] /dev/rnullb0: Can't open blockdev [ 120.919629][ T4045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.953207][ T4047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.262600][ T465] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 121.288649][ T465] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 121.476567][ T4061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.516859][ T4061] rust_binder: Error in use_page_slow: ESRCH [ 121.530120][ T4061] rust_binder: use_range failure ESRCH [ 121.540588][ T4061] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 121.546590][ T4061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 121.560238][ T4061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:805 [ 121.614008][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.700125][ T31] tipc: Node number set to 1042855697 [ 121.908830][ T465] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 121.930126][ T465] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 121.939520][ T465] usb 4-1: USB disconnect, device number 34 [ 122.110108][ T36] kauditd_printk_skb: 18513 callbacks suppressed [ 122.110128][ T36] audit: type=1326 audit(2000000001.130:19109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x50000 [ 122.112149][ T4065] rust_binder: Failed copying remainder into alloc: EFAULT [ 122.119951][ T36] audit: type=1326 audit(2000000001.140:19110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x50000 [ 122.141532][ T4065] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 122.147501][ T36] audit: type=1326 audit(2000000001.140:19111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x50000 [ 122.171192][ T4065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 122.179446][ T36] audit: type=1326 audit(2000000001.140:19112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x50000 [ 122.203399][ T4065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1009 [ 122.212834][ T36] audit: type=1326 audit(2000000001.140:19113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x50000 [ 122.268454][ T36] audit: type=1326 audit(2000000001.140:19114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x50000 [ 122.291729][ T36] audit: type=1326 audit(2000000001.140:19115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x50000 [ 122.292602][ T4068] /dev/rnullb0: Can't open blockdev [ 122.315080][ T36] audit: type=1326 audit(2000000001.140:19116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x50000 [ 122.315115][ T36] audit: type=1326 audit(2000000001.140:19117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x50000 [ 122.365136][ T4071] rust_binder: 1015: no such ref 3 [ 122.367578][ T36] audit: type=1326 audit(2000000001.140:19118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03af18ebe9 code=0x50000 [ 122.417160][ T4072] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 122.417180][ T4072] rust_binder: Error while translating object. [ 122.426043][ T4072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.440073][ T4072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1015 [ 122.694867][ T4086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 122.704328][ T4086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:669 [ 123.236613][ T4097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.255194][ T4097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.620076][ T604] Bluetooth: hci0: command 0x1003 tx timeout [ 123.620150][ T603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.632714][ T4063] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 123.778228][ T4101] binder: Unknown parameter 'appraise' [ 124.180324][ T4135] rust_binder: Write failure EFAULT in pid:701 [ 124.235726][ T4145] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 124.304486][ T4150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.314546][ T4150] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 124.338418][ T4150] rust_binder: Write failure EINVAL in pid:926 [ 124.530079][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 124.613467][ T4164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.613853][ T4164] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 124.627975][ T4164] rust_binder: Write failure EINVAL in pid:939 [ 124.700084][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 124.712754][ T10] usb 3-1: config 1 has an invalid descriptor of length 218, skipping remainder of the config [ 124.723086][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1279, setting to 1024 [ 124.734166][ T10] usb 3-1: too many endpoints for config 1 interface 1 altsetting 235: 145, using maximum allowed: 30 [ 124.745195][ T10] usb 3-1: config 1 interface 1 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 124.752038][ T4166] can0: slcan on ptm1. [ 124.765944][ T10] usb 3-1: config 1 interface 1 has no altsetting 0 [ 124.776744][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.786557][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.794841][ T10] usb 3-1: Product: syz [ 124.804716][ T10] usb 3-1: Manufacturer: syz [ 124.811095][ T10] usb 3-1: SerialNumber: syz [ 124.820549][ T4148] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.832787][ T10] cdc_ncm 3-1:1.0: skipping garbage [ 124.838048][ T10] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 124.843341][ T4174] SELinux: failed to load policy [ 124.849551][ T10] cdc_ncm 3-1:1.0: bind() failure [ 124.987217][ T4191] random: crng reseeded on system resumption [ 125.000197][ T465] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 125.045228][ T4191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.055622][ T10] usb 3-1: USB disconnect, device number 32 [ 125.058311][ T4191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.150101][ T465] usb 1-1: Using ep0 maxpacket: 8 [ 125.377650][ T465] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.386007][ T465] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 125.396293][ T465] usb 1-1: can't read configurations, error -71 [ 125.421458][ T4165] can0 (unregistered): slcan off ptm1. [ 125.573205][ T4232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.609806][ T4239] syz.0.1190 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.248133][ T4269] binder: Bad value for 'max' [ 126.314554][ T4272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:733 [ 126.315946][ T4272] rust_binder: 4271 RLIMIT_NICE not set [ 126.393817][ T4274] rust_binder: validate_parent_fixup: new_min_offset=549755813906, sg_entry.length=0 [ 126.399596][ T4274] rust_binder: Error while translating object. [ 126.409168][ T4274] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.415796][ T4274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:736 [ 126.485286][ T4284] overlayfs: failed to resolve '': -2 [ 126.550732][ T4290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.559218][ T4290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.569751][ T4290] ------------[ cut here ]------------ [ 126.575246][ T4290] WARNING: CPU: 0 PID: 4290 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 126.584679][ T4290] Modules linked in: [ 126.588579][ T4290] CPU: 0 UID: 0 PID: 4290 Comm: syz.1.1204 Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 126.602119][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.612208][ T4290] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 126.618114][ T4290] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 61 03 ee 05 00 0f 85 be 00 00 00 c6 05 54 03 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 126.637809][ T4290] RSP: 0018:ffffc90010687680 EFLAGS: 00010246 [ 126.643938][ T4290] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 126.651958][ T4290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90010687738 [ 126.660102][ T4290] RBP: ffffc900106877a8 R08: ffffc90010687737 R09: 0000000000000000 [ 126.668227][ T4290] R10: ffffc90010687720 R11: fffff520020d0ee7 R12: ffffc900106876c0 [ 126.676444][ T4290] R13: dffffc0000000000 R14: 1ffff920020d0ed4 R15: 0000000000000000 [ 126.684460][ T4290] FS: 00007ff7fa7a06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 126.693703][ T4290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.700369][ T4290] CR2: 0000200000005000 CR3: 0000000116042000 CR4: 00000000003526b0 [ 126.708358][ T4290] DR0: 0000000001400000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.710100][ T466] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 126.716566][ T4290] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 126.732383][ T4290] Call Trace: [ 126.735669][ T4290] [ 126.738611][ T4290] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 126.744794][ T4290] ? kasan_save_alloc_info+0x40/0x50 [ 126.750217][ T4290] ? __kasan_slab_alloc+0x73/0x90 [ 126.755240][ T4290] ? hashtab_init+0xdb/0x1f0 [ 126.759821][ T4290] ___kmalloc_large_node+0x9c/0x1d0 [ 126.765040][ T4290] ? ebitmap_read+0x21d/0x990 [ 126.769727][ T4290] ? hashtab_init+0xdb/0x1f0 [ 126.774336][ T4290] __kmalloc_large_node_noprof+0x1e/0xe0 [ 126.780349][ T4290] ? hashtab_init+0xdb/0x1f0 [ 126.784932][ T4290] __kmalloc_noprof+0x26d/0x450 [ 126.789791][ T4290] hashtab_init+0xdb/0x1f0 [ 126.794229][ T4290] ? policydb_read+0x86f/0x28c0 [ 126.799084][ T4290] symtab_init+0x44/0x70 [ 126.803362][ T4290] policydb_read+0x8fe/0x28c0 [ 126.808051][ T4290] ? kasan_save_alloc_info+0x40/0x50 [ 126.813355][ T4290] ? __cfi_policydb_read+0x10/0x10 [ 126.818464][ T4290] ? security_load_policy+0x128/0x12f0 [ 126.823943][ T4290] security_load_policy+0x162/0x12f0 [ 126.829238][ T4290] ? irqentry_exit+0x4a/0x60 [ 126.833988][ T4290] ? exc_page_fault+0x66/0xc0 [ 126.838716][ T4290] ? asm_exc_page_fault+0x2b/0x30 [ 126.843816][ T4290] ? __cfi_security_load_policy+0x10/0x10 [ 126.849571][ T4290] ? rep_movs_alternative+0x4a/0xa0 [ 126.854902][ T4290] sel_write_load+0x298/0x5e0 [ 126.859639][ T4290] ? futex_wait+0x29a/0x7a0 [ 126.864203][ T4290] ? __cfi_sel_write_load+0x10/0x10 [ 126.869428][ T4290] ? __cfi_futex_wait+0x10/0x10 [ 126.874389][ T4290] ? bpf_lsm_file_permission+0xd/0x20 [ 126.879771][ T4290] ? __cfi_sel_write_load+0x10/0x10 [ 126.885006][ T4290] vfs_write+0x3c0/0xe80 [ 126.889258][ T4290] ? __cfi_vfs_write+0x10/0x10 [ 126.891106][ T466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.894052][ T4290] ? __kasan_check_write+0x18/0x20 [ 126.905331][ T466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.910070][ T4290] ? mutex_lock+0x92/0x1c0 [ 126.910100][ T4290] ? __cfi_mutex_lock+0x10/0x10 [ 126.920224][ T466] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 126.924245][ T4290] ? __fget_files+0x2c5/0x340 [ 126.929168][ T466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.938246][ T4290] ksys_write+0x141/0x250 [ 126.943440][ T31] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 126.950981][ T4290] ? __cfi_ksys_write+0x10/0x10 [ 126.958985][ T466] usb 4-1: config 0 descriptor?? [ 126.962932][ T4290] ? __kasan_check_write+0x18/0x20 [ 126.977861][ T4290] ? fpregs_restore_userregs+0x11d/0x260 [ 126.983576][ T4290] __x64_sys_write+0x7f/0x90 [ 126.988202][ T4290] x64_sys_call+0x271c/0x2ee0 [ 126.993089][ T4290] do_syscall_64+0x58/0xf0 [ 126.997544][ T4290] ? clear_bhb_loop+0x50/0xa0 [ 127.002256][ T4290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 127.008166][ T4290] RIP: 0033:0x7ff7f998ebe9 [ 127.012636][ T4290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.032314][ T4290] RSP: 002b:00007ff7fa7a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.040787][ T4290] RAX: ffffffffffffffda RBX: 00007ff7f9bb5fa0 RCX: 00007ff7f998ebe9 [ 127.048777][ T4290] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000003 [ 127.057013][ T4290] RBP: 00007ff7f9a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 127.065038][ T4290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.073153][ T4290] R13: 00007ff7f9bb6038 R14: 00007ff7f9bb5fa0 R15: 00007ffc923afce8 [ 127.081697][ T4290] [ 127.084812][ T4290] ---[ end trace 0000000000000000 ]--- [ 127.090453][ T4290] SELinux: failed to load policy [ 127.121288][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.132353][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 127.141847][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.150699][ T31] usb 3-1: config 0 descriptor?? [ 127.360218][ T4286] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1202'. [ 127.377188][ T466] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 127.390394][ T466] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 127.584604][ T466] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 127.644253][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 127.650338][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 127.659212][ T31] usb 3-1: USB disconnect, device number 33 [ 128.194403][ T4280] random: crng reseeded on system resumption [ 133.060249][ T466] cp2112 0003:10C4:EA90.000E: error reading lock byte: -110 [ 133.102033][ T466] usb 4-1: USB disconnect, device number 35