last executing test programs: 3.763604906s ago: executing program 0 (id=1513): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x10004) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) r5 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102070101ff2505a8a4400001020301090224000101074003090400007e0a0e2781090501020000010906090582021802040102"], &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x40, 0x6, 0x6, 0x20, 0xa6}, 0x3f, &(0x7f00000002c0)={0x5, 0xf, 0x3f, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x5, 0xf, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x40, 0x40c}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7f, 0x2, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x63, "5d62a1b3556ea84b43edeac9e75ef277"}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1001}}]}) syz_usb_disconnect(r5) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x50, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x0, 0x557, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x9, 0xaa, 0x4d, 0x8, 0x13d3, 0x3307, 0xe19b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x545, 0x3, 0xff, 0x9, 0x40, 0x6, [{{0x9, 0x4, 0x9b, 0x1, 0x5, 0xbf, 0x4f, 0xbd, 0x6, [@generic={0x71, 0x30, "f9cedc64ab79dc20dec3df5fb93c5eaa2fcfd67249e66b34a4bc0dbbcc1b6d8bc6d654ff4f195984c93f771da95d885c80e0318523b34f8465307f9f8cded03868b28f4238bd9721f58c53b3cfc821756030350d60e65659ba5615a68be8c57086ad6d4882d9ea1ef1ac84fc5128d9"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "db"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0x1, 0x7a}, {0x6, 0x24, 0x1a, 0x877, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x25}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x7, 0xe8, 0xaa}, @mdlm_detail={0x43, 0x24, 0x13, 0xf5, "b488ce98ba8df1c0f2e324f349df41633b6ccb7d39bd1af7ebbe9036dea57b99e6c4757b886c500bd1c789b1ca2722a567d5062426bad85505a7cf9b0fae6c"}]}], [{{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x8, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x8}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x2, 0x8, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}]}}, {{0x9, 0x5, 0x88, 0x0, 0x20, 0xdc, 0x0, 0xfe, [@generic={0x10, 0x21, "a9e8a8ac1f824b31da82c133c15e"}, @uac_iso={0x7, 0x25, 0x1, 0xc1, 0x2, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x5, 0x34, 0x1, [@generic={0x9f, 0x23, "885c114c593500ce4ada3f0a926a31ffe10c5d3bb8987a2d3a6bc84435b0738074e76d681bf7558a2c3f95831e5b508bbccdb3d5d3478676bc131a863ef3a28109e12041332579876621979b6b00e25719383b1d61864600a56b4e9ddade2f290218bd55f33c98063bbff18b5141cbcf1e11416e7e4a9e39136c7cdb375d1dd692c5022fbb37cd3ee04e39a282e7afb97bc825f5476e4e03c090df157b"}, @generic={0x6b, 0x22, "983e49d9689e515c9a8652d9e4e69a4cf976a99ffa1ae854805b0c12bae021835fd14a565e22bdbb58c9929bc3328f4e2adff61dcb3b83c1fbef9ee5fb5571a75a597dcc003edbd4ce3f5a261b679965484de3372066389c52f91e467e09c15c19163e0e59e415c0a7"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4b, 0x3, 0x3, [@generic={0x2f, 0xd, "703c01d584474a1f22ba76673a91eef8397f530d04a06da7d2aabd1d991d1bf0a596bdbb91c99238e8204d3627"}]}}]}}, {{0x9, 0x4, 0xa9, 0x4, 0x1, 0x2, 0x60, 0x1a, 0x1c, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '/'}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x0, 0x4, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm_detail={0xe, 0x24, 0x13, 0x1, "a6e48e9d65e10edea8f2"}]}], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x5, 0x1, 0x9, [@generic={0xd1, 0x7, "0e9a60459084074454f32bb23969759f5b2d9e75b004b3d9806c71b0f2774fc0fdb3bc370780a7d1927db4d8a2f089617a007a468ac8a2fce0b6ad3f28f169093999893f3367d6f3699c35cd7608251d0b8898d7018c5b0f19bb234c4c453b40fbb03e36af3895254a9d50e54ba055dd7dfd02f270f857d2a2144e6195d58db2a04e22bbf13fa3cb8321792c3cfecbbe8adca4d2427a8b7e3608115abcc5dabcb57c8a1ff048ceac6a018338f606ba857d4422295deff4bd93eed5e07d6e53b7f2ffc0f89a23e7a4549114a913b518"}]}}]}}, {{0x9, 0x4, 0xc7, 0x0, 0x4, 0x2f, 0x29, 0x30, 0x1, [@uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x30, 0x4, 0x8, 0x7f, "079a"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x2b, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x57, 0x1, 0x9, 0x4, "599b", "0f8d"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x8, 0x22, "f3718e"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x3, 0x1001}]}], [{{0x9, 0x5, 0x4, 0x8, 0x10, 0x2, 0x31, 0x9, [@generic={0xaa, 0x4, "b1e9a3c1b41d692b0d4a50f0e8935722f1eea4f0afa807d1b1e6e114417fde99c41411fc7d68a429fecbbbbe3b52a74b3cf90baa674c4698f7d72434722af374f7dc3fccc76445e4d4562f4e82e60f60d07c57575fa692a2574181c26f81ba3fd171aae0bd1749124affebb0992e025d4f80d3a7d088d412bb520930d59fe12978ab8779e9141d7b76a9204c6b728a14cbf033bec6df35473fe3d98e4bfe4c5cb04d6b7a7750475d"}, @generic={0x46, 0x6, "ebfb0f1948014b1bf00dfdb8274c60483f590d1afb546a0800d3c60aea985740e59ea1e2e27bd4886acbe2016fd75f49ce8b5fd6b4d5883005331494b1b899d1d2648e32"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x3, 0x3c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x41, 0x1}, @generic={0x54, 0x2b, "9994556a30850de476e1889eed877cf4bbe99efb7f2e1c22c285577694cad55a3ccebad43d3ba6f8449de37be4ed821da67a1b97d14622c4a23c9cbdb90b8ffb8784905ac49ec835f4c2f4eac8370b354f31"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0xa3, 0x3b, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8a, 0x101}]}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x110, 0x8, 0x4, 0xfb, 0x20, 0xe}, 0xc, &(0x7f0000000b00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x1, 0x3}]}, 0x4, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xf0, &(0x7f0000000b80)=@string={0xf0, 0x3, "d6287d6e970f5a37e5e1888b97e1d7f4056dd29173cc4f82ec49b8273706221a3682ce1c8b79f028ba588f59877146693f26c242b59d9b788870f5059c2f36a7828ec423caf030e1f747629f82c0f531acbf75c0db41d91162d09ab0a6a7ed5d34e3731fa63661257b98100c0e8fdc6c551bcdc01b4675b04f3e06a1b6ecad91b70dc3404e985b845ad4b517907d038306fdbb64b44e4b687ef7c8b253da0e16349a56a784219e06ac6ff49c310ea3a35e4b15b9b050ac3b4a1a3dc5a042adb37c320c0cb5bac9cede88efe0f1639d0b11a0e833e902f9725994535ccc81f6d77557f3f89d028cbc57f00042dddd"}}, {0xbb, &(0x7f0000000f80)=@string={0xbb, 0x3, "0f6f1fe56fdbadfdee3eeab1bf1d28080b0b0e14b92fc13cc45a235a7a8141fe7e31be048213104876eccb4e313f7fcbb04865862003a38b9ac739dd054c454a8646cd8837d97b473bc08b79338d1307301104cab5a29af81159c2be50a9c259916f419a31cf2e0992ea530a0000000000000000951f1998da2db6d4e835f4750d6d5c5684c5b20e1f75d1e8a53ec3179f223abb216cf97d736b481cc2cf2d5c1cd94a2894fc95feb9bfdce8bec203f7dffb651b2aec09b5a9"}}, {0x102, &(0x7f0000000e40)=@string={0x102, 0x3, "eeb520cf5a59406673d069fae557c7a3b7fe9f3b97f8b68d18c72187ad3b4d641e5f99aa041e33ed5be31fa370169a429267555d7100a8f25f53e343ab163f726fa62bc7bbe919614600d083c7358d26020fd51bba5a4d3d37720fa6c3ac6afa43799b0beb0ceaabce90ca07f325b2c9f20400000000000000c2aedb001df6ce2018a961cef2608aec17ceceea4a9b0770ef4cbf8ba68c8e2fefe2a055d350d042cb3507ba541c9927d9d68d0171eb55cfd64297709f1c38b2578712112157fdc34078e5e2de746b05eb187eb92aac425e5ed5b9bbfb2dbad190e6a6be853dbb14a9dee92bb55eb6d74aba9bcf296576fd7a2de45cfee8965381147872e8b846"}}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x6d, 0x9, 0x61, 0x7, 0x90, 0xd}}) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x12, &(0x7f0000000e00)=@conn_svc_rsp={0x0, 0x0, 0xa, "9d465c51", {0x3, 0x106, 0x0, 0x7, 0x8001, 0xdb, 0x2}}) lsm_get_self_attr(0x68, &(0x7f0000000080)={0x0, 0x0, 0xe1, 0xc1, ""/193}, &(0x7f0000000380)=0xe1, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) 1.371643879s ago: executing program 2 (id=1550): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sync_file_range(r1, 0x4, 0x488d, 0x1) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x4, 0x3a, '\\]}%+(', 0x3a, '(]#', 0x3a, './bus', 0x3a, [0x43, 0x4f]}, 0x30) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a00150000000008ffffff2e00000097"], 0x18}], 0x1}, 0x8000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r0, 0xe6680000) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x4000010) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b01"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0xffffffffffffffdc) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x807, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x106}, 0x1c) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async, rerun: 64) io_submit(r8, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r9, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) (async, rerun: 64) io_destroy(r8) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.315523454s ago: executing program 2 (id=1551): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x301000, 0x30) waitid(0x0, r2, &(0x7f0000000180), 0x80000000, &(0x7f0000000280)) setpgid(r2, r2) utimensat(r3, &(0x7f0000000100)='./cgroup/file0\x00', &(0x7f0000000140), 0x100) 1.314781444s ago: executing program 2 (id=1552): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x401, 0xc}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x401, 0xc}}}}}]}}]}}, 0x0) syz_usb_connect(0x1, 0x3a7, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xb, 0xbb, 0x2f, 0xff, 0x856, 0xbc01, 0xfc10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x395, 0x2, 0x0, 0x7, 0x0, 0xc, [{{0x9, 0x4, 0x9d, 0x1, 0x7, 0x27, 0xd7, 0xec, 0x8, [@hid_hid={0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x453}}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x9, 0xe}}, {{0x9, 0x5, 0xa, 0x11, 0xe6bd6f362a23d05d, 0xfb, 0x1, 0x3, [@generic={0xcb, 0x9, "31faa4be2406b52695ca247e2d28b102e658294a475391fc0fb2ef3ba077b3607a6a78195bf5e799c3e8bd9716efb06c48523d76a6837037a45fe337746aa0ac3c30b239f6f03eb2a2dd533857d8698e8a852672dfd8abb1ceec07ce75950efbaa5ab2426bbf3495447854fa773cd1b5850aeb34365f079315e9cb7c913c69163ec64cfc8570e1dcbf762e969e92d863dec6b37a72ca686bfb60f22f461b3214357631fcc1cbeed15c48ceb7accc7a1ccd50d8ba300218ceda70ce50a65aa0d50e2f320fe57527d114"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x3, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x3}]}}, {{0x9, 0x5, 0x88, 0x0, 0x40, 0x9, 0x98, 0xc, [@generic={0xf6, 0x23, "fd6a9a904690f183bec98bf64e6836a97f3382509f660234b876b006234fdfb9f159f1eef029094d4d042ac3987d78c10d3a3f69a236753f28aeaf198895eacc4571811f099bc13ca7543b9acbae3934413b4043b5d31c76022ba370933288ab44d5db4d6460ea8b7b523ad19d2e3f4a74128ae8910b9c56ea92aa50fb53600cf50d0fd3ad4989c615278f6a0831c10169545261c98d4a5ab5a78a1c4a1bb8e0f21d89ca579383001f3c9a031bf9ed72b0a8c79e69647c03d0d2ccc3efeffa350a4d15fe3bff22ac4e61248bb137b0ee4344b2ecb15a7ae90921ffe1c217f8da9cadbc1068ba828ea7d6f10a0be4748e9ab57f8f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x8, 0xff, 0xb2, [@generic={0x9f, 0xd, "3253b9d93e52d867547be35004ea7054c5485594e08724166c1e51bb50335d540ee0d10abd1cec2fa443ae29a0a3182832e48ad165085a3fb71f8b72a9efa779107131a96ce59b247b293dbc223e5b56aa8923c65de7b32f86bb38531906d760437c07ebfc42ff91b706a1ab5195ed5c93671295a13a8563ce25855a7c9b317b9e3f90c9947e3d1ede5bcab371f36dd618d08b99bcb194b860f5255c64"}, @generic={0x9b, 0x8, "ac08b9ceaf80ae170549fdc0b1bbe9066796e4b6e8cc9dc91cb2fc45e13ac9bd1eb4803c58b41abf175032f0a88d1facb0a34334aa4cde6f3e4e447340c6fbca8ca67c0ad38e13059b5327520c04babf7b52bd885f6dce034c3b66601763b53f6f816efaa6f20e82ef1c58ea144340a26c901bdcdbe4f8dc170c18f02b40ce7dbfb94fbe48b08af7b5acbc6412b7374e3869904af24ae25d3d"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x4, 0x3a, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xda, 0x91}]}}, {{0x9, 0x5, 0x5, 0xd, 0x10, 0x4, 0xa5, 0xb}}]}}, {{0x9, 0x4, 0x75, 0x4, 0x1, 0x5b, 0x33, 0xc8, 0xdf, [], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x1, 0xff, 0x5, [@generic={0x19, 0x1, "b276a3922b0fe187d75ee5d25f42164d410f08d57a8dbd"}]}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7f, 0x7, 0x2, 0x8, 0x1a}, 0x10f, &(0x7f0000000100)={0x5, 0xf, 0x10f, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x80, 0x2, 0x8b11}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x5e, 0x7, 0x7fff, 0x79}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x6, 0x2}, @generic={0xee, 0x10, 0x1, "ff121d82a8d47b68fa4ca0661757002e1ee9ac63b65feb7b790969b39b2b7cf6d425f9bfd077225b2e5edad83a245d2f1f4d6bd9424430d2eedbf1fd140f6a1d56bff803b69122ac4cfabf6136ef632ecf20f4d23648769eb930758948d5d8e1241dcdd8d9c4c5af72988b7d8f501380b3c087fd039b9092a2b1a3233dd9ca1d129557c35f84662a79590c0a3761e749d8668c7a90a4d4cf9786364eef676aa9ab0df656c5aa7390bbb15657fe7c918d1eda2d8ddcc4c692d132659b67ab7aecbb183608ca9be35693248a7333420f6772fce908e715349aa3b5422f58b3246bed2b24d9068b98fa0232ba"}]}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0xc0a}}, {0xda, &(0x7f0000000840)=@string={0xda, 0x3, "e7307158afa51166e0bcbd834509789acbe14ae4b2f4fefd6d91d54ce54e2059aca51a39c13028eee7a9b2dc2fcb0726729ec3ae39bed27cd13b1ff9b7461166c5cc77b0b9732042b2832d5eb1e2e771246a0c2e5e9c5324b07cf7d4452e811f3fe6519a471c01690f7d40d20a8d7a694d8f58e20c8851f60a390317923a5ae0e3691d33478befb3cd89987a4e5c5531420a1e8f4295491dfdfdc09bcfc38426e6522efe626c8fbd1c6dcb22448ba791cf2635799c04b87df0e34e97318e1048e6bf29f423e6e8d2ce6164ef327184d6a74dc6f9d14ae03b"}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000240)=0x2000004) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x5, {0x5, 0x22, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86220080}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000009c0)=@ccm_128={{0x304}, "dbee0cb8838084eb", "1059bf714e8748e70816223847e6d8d2", "38b63398", "5ea39ff1407e9738"}, 0x28) 1.153094557s ago: executing program 3 (id=1553): r0 = gettid() mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1b2) r1 = open(&(0x7f0000000140)='./file1\x00', 0x800, 0x70) getdents(r1, &(0x7f0000000440)=""/135, 0x87) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000001040)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d02f4692ba1214990e8dad9e3759ecca361e41c97c692dc45639c7398f3aeb402143b4e286ac9f8eb8bf8ff57344854341c62ca09390ea93aa516e63f66eaf6f1b2c718b367a0e1bb7d67dd110173d2ffcfe8755d13ffe8805145e975c0dac87de7951d7d8613d85b750fa6d30cdad53d4793fc756c6c3ad15133906ee6cb3f477b46be39cae8580d9fb1716173436a39ec6bac03695552f672c45f5b721a121fca6d9a4b7a05bfc15a4e27d9"], 0xc) write$vga_arbiter(r4, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) timer_create(0x1fce779ec10e5115, &(0x7f0000001100)={0x0, 0x17, 0x1, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)) fcntl$setstatus(r6, 0x4, 0x0) r7 = dup(r6) copy_file_range(r6, 0x0, r7, &(0x7f0000000640)=0xffffffffffffcfff, 0x3000, 0x0) 1.068091014s ago: executing program 1 (id=1555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @fda={0x66646185, 0x9, 0xffffffffffffffff, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1e94, &(0x7f0000000180)={0x0, 0xbba4, 0x73651cda65ebb59b, 0x1, 0x3e3}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000001780)="12df", 0x2}], 0x1, 0x8) (async) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000001780)="12df", 0x2}], 0x1, 0x8) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)={0x3ff, 0xb40a, 0x5}) 1.067806824s ago: executing program 3 (id=1556): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0xe00000, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xffffff01, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x80000002, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.062301644s ago: executing program 1 (id=1557): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000006c0)="fc0000001c000704ab5b2509b86803000aab087a0400400001481193210001c0f0030584050060100000000000039815fa2c53c2864800008d5e63efbe737f96705e670929f4af6002b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b2941b94b661304fd5d60789b89d3ef3d99f30910a5bba2e177312e082bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b21067693da9a9c2dbb8b8f5566791cf190201ded815b2ccd243f395ed94e0ad91", 0xfc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10002, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x100000000001, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="44000000120009000000000000000000100000000c000000002400"], 0x44}], 0x1}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) 1.024222777s ago: executing program 3 (id=1558): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000040c0)='./file0\x00', &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) read$FUSE(r1, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f00000061c0)={0xa0, 0x0, r2, {{0x3, 0x2, 0xdd, 0xff, 0x9, 0x6b, {0x1, 0x6, 0x67f, 0x5, 0x0, 0x7, 0x2, 0x9e31, 0x4d, 0xa000, 0x400, r0, r5, 0x2a, 0xb}}, {0x0, 0x9}}}, 0xa0) r6 = eventfd(0x10001) r7 = eventfd(0x273) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000006280)={r6, 0x5, 0x2, r7}) lstat(&(0x7f00000062c0)='./file0\x00', &(0x7f0000006300)) r8 = dup3(r7, r7, 0x80000) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000006380)={0x1fd, 0x0, 0xeeee0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) chmod(&(0x7f00000063c0)='./file0\x00', 0xd2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) pread64(r1, &(0x7f0000006400)=""/66, 0x42, 0x1) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000006480)=@rnullb, r3, &(0x7f00000064c0)='./file0\x00') r9 = socket$inet(0x2, 0x80000, 0x70bb) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000006540)={'filter\x00', 0x7, 0x4, 0x410, 0x110, 0x110, 0x220, 0x328, 0x328, 0x328, 0x4, &(0x7f0000006500), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @empty, 0x2}}}, {{@arp={@loopback, @empty, 0xff000000, 0xff000000, 0x3, 0x5, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x5, 0x0, 0x32d8, 0x6, 0xd, 0x6, 'team0\x00', 'lo\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r10 = accept$inet6(r8, &(0x7f00000069c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000006a00)=0x1c) ioctl$int_out(r10, 0x5460, &(0x7f0000006a40)) fsetxattr$trusted_overlay_redirect(r9, &(0x7f0000006a80), &(0x7f0000006ac0)='./file0\x00', 0x8, 0x3) r11 = fsopen(&(0x7f0000006b00)='pipefs\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000006b40)='./file0\x00', 0x200400, 0x1c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) fstatfs(r11, &(0x7f0000006b80)=""/228) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$TCSETA(r8, 0x5406, &(0x7f0000006c80)={0x4b10, 0x1, 0x0, 0x5, 0x18, "fbd71e7165369240"}) r12 = getegid() mount$9p_tcp(&(0x7f0000006cc0), &(0x7f0000006d00)='./file0/file0\x00', &(0x7f0000006d40), 0x4000, &(0x7f0000006d80)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{}, {@dfltgid={'dfltgid', 0x3d, r12}}, {@uname={'uname', 0x3d, 'IDLETIMER\x00'}}, {@access_client}, {@mmap}], [{@subj_user={'subj_user', 0x3d, '\"!$\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@flag='nomand'}, {@appraise}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@seclabel}]}}) 995.662469ms ago: executing program 1 (id=1559): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setgroups(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000040)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace_dev_match', 0x42200, 0x43) finit_module(r2, 0x0, 0x2) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x98, 0x2}, 0xe) write$UHID_INPUT2(r2, &(0x7f0000000100)={0xc, {0x41, "28ee9100f94af05914f79f45f3b2a7e6ed34af8fb6cf8d7cc4a36bd98121fb0ad3d6da8c21644f0de9ef58a8eec39a033658f5cde784f94c2c1b17de707b10626d"}}, 0x47) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 995.14483ms ago: executing program 3 (id=1560): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0x0, 0x8, "edf958e7e942"}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000180)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) read$eventfd(r3, &(0x7f0000000000), 0x8) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 994.7555ms ago: executing program 1 (id=1561): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYRES8=r1]) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_destroy(r3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x608080, 0x0) r5 = memfd_secret(0x80000) syz_genetlink_get_family_id$tipc2(0x0, r5) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x5b8c2000) r6 = eventfd(0x96) r7 = eventfd2(0xcc07, 0x801) r8 = eventfd2(0x9, 0x80801) io_submit(r3, 0x6, &(0x7f0000002880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000000000)="e2da4709ccc7a3537d1deaaf553a457b9b88edcf4b7a844d1091109cd0e2ee313beb503e0c71918ea73b787427ee5de2e647ca93a0d3c6c17ebe2173ab", 0x3d, 0x800, 0x0, 0x2, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x52, r0, &(0x7f0000002500)="12f2a0b0b6d4412a774e0672057ba67986b3d364a16e01df1898b963f0a4960afb3728207b78784fa7e416d0cb39a4bb4848e1b048087f09c95c7e76eb3c7ca7ce1c0d7556b54985c7389155cdf4e41b6b16ff4b0c6b561d5c64750267d0e22987e37e1ef99d8c04756cecde92e5c3a83a9f314bcbbaa6d625269c7935c09be21d12571feaf7b6bb92ebb1e0ebabbc4a27cd76ad7cbf36157147", 0x9a, 0x2, 0x0, 0x1, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xf5ee, r0, &(0x7f00000025c0)="d93c249e0dde53dfc0d78dfbec76de4e0be0305a43df6d7b67babeaed1017f0921dd1aac929c2b8cdda8a3aca67d70792b73fd7f668257970d7948a2d8193f262402e3c082a710f0d3fcb84441b54a766292f73d7dc672e76ad9d6e4078b512a90ba1438eeec387d6a5658161b5b4af1a6d57e9c2c31a1ddc1f72f2f206010dcff9117c3787c4be287eb706de558e5762883559d554bf1fca665", 0x9a, 0x0, 0x0, 0x1, r6}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xfff8, r0, &(0x7f0000002680)="59cf1e9452f5604fe2b0c6997be19e09575ede11aca9985db2f4aa18cdaa05ee54679be6b20bc0b5ca1f5f763b581ba2724afb876a6ede67d9d8d013b88dd852c504e85cd5fc4d287d0b11bdc3aec03aa52ec1e0828a3b3a55e499411696c924a31e786d776c7584fa48ba0ef8875a9660940e", 0x73, 0x0, 0x0, 0x0, r7}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000002700)="9ea1509596c00e3067fbb76741efd166e00247bcae8c83", 0x17, 0x80, 0x0, 0x0, r8}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f0000002780)="128ac11f7bd3b3d70b2591ee8d28494984116ebc13e9440c16cdf07e464b3c8af8f4d83831b1708536a4abf2be4c006c0d4dacbb84a2c1a072c92dded97f8a36e980b89d8c7e71fc875835cad5970bfddbd5c95bfaba1b2403539dda1d0f53a1b827da388a8ec888cb707b59eb04db253a6c25d2b0323c212fa8dd3dc1a516620d7c715626c503388005aad9353a09e93731ad3239e514b057a92c", 0x9b, 0x5, 0x0, 0x1}]) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0xfffffffffffffea8, {0x0, 0x8080000}}, "cdb372b4dfe02964a59572ecc37526989e90f15cc175ae8c93ae45591f356c6884a1eb49a1ccc74c2260aded1979bfd746a27408d1220c39493a1d3b65f5306464393183b3b654e5237f83855fde05bc36e88baa2c07c6acd1e5d8c2b3736f1ec8fb98c1b5c20bae0c02c146f4182375c277e8647f577021416f8ba515ffa35cddd261d521df3e841a9179cda39879511c2e9ab06778ce9ffa6f2c9370d7af33bc74d16360a42aa2ced6433463ef4bbed671371e8eba18f2aa973f65ff1b5b35c7c67638ba4aaa64a717f556fe32f70ab1f227b75eaace9c63811a4abc99987e6c8964cfac90a0ca3384510dc63e3e3935540ce749bfa6a8785ee00fe862262ce28ff980e350a64be310b5f576ccfb5a2ba166b324b4bbe9f23030a79f16f20258d077d87f7b1e5b8ca402ce6e51b3236729fde5e6f96d7a94c8db3cc00fdab35e2544ebb424632bb9d82cbfb21146bfeb80e5f5e26ed89a6c521920b5c02cd9cf8063e1ef18919946124f64f749f5c2e3d603af2b7a2d2d24acb6ebe5f47b988dc51e690d9aea44fece3a353bae1b80dcae49c8cb6443978623b0ec80cd0feb0a134a51fdd2b1912a45c6ca41414273268c676bbef4ab3e2f7ac5e061d6dcf0041af2cc971a27b616444ae913033933ed4b1d89b96c8ee9edc86ee12d5917695796906d4822fb3a931df763e3a8e8893ae4749765bdbae4377ce47fb5e26890cb5178c03dd0df248bf35caf84f3cea3d7780860cd51ea04f28dd6ce80820fda0ffa3f33d38adb2d68d41db8ab27d4cad8b7abb026827738fb9c59d043199cd27c2bdf9711acb36926c730e216de7ad2de0326676916586ec8325f4b13735e34c4d60bd27e2fde3edc95dc59cb69c1dc25569da425488b6b6e9a63b17964ce1fa57bf2c7508ed199cf64a5cbc23b01cdf08b1ad4337f1b0aa02a6c137fb90e32fd7e204966170aa80fca868a45d496be7758c47f83760208793eb1600b6ebf4d1d2dcaa2b741f1c0b9f8844b9e68ec7f7123083c69f1a97b66961279a6aa3498f146f7e517c2f5a9c0b0673b93dca4fe0c48d53c8f5f89bb7ab0476e00a13e020370077a55c28abccb585bcbdf29966a4db1c3ab0f3f58e54640032484e08072aac638b9c9dc9655a525e9016d9b24358ba477695875e3abd484ff3adb92069825841c3bd1870f708cc25288ee5cc4a6d7fab62eaa724a7acb4ee5952db977b4da11597891f5c5af6086ddf387deb19ce0995ba175f830c94b5adac04d8618a262b3059fe96d5b18690e5adf3e592ae77fed8214ef468d0cacdbbdb1712cff009e03146b57bab5b8302a5ed0f75f59c63877ad8fea5ec596c667ffc2337343e1726e79985bf7c663f8dca6ae731dd96486568d0c0e4c3a3860d7250e04373cc55018eda3ac9077cd2c5317df8992b548e34344ca97a9ed3b6f8bf1a97e060231657706c9e8ce8f03805b111d4bf1a559f4cf0822a20cd9ce06b56c5f051317e187d76a303af82d2053286d5d3cee381602170f5bb4036fb34c080992e9f7d509aa230935233dac608f533ae2a26c5e5710e6c2ed1bf61303cc3c47465791333dae385f91de77c3357fbedbbb64ae3b868ee90b98ab647fa0dcc85bfbab33058667b95106519c7ba80246f73391919fb575dedfe436fb190e828fd58ac25537a4ba5ef0a97c595ce67a740d1cfd84a05d3462d9203dd6ea94f60dc03a29c3c81aa25dce4b330fa7500234016373add8120018ea6b5fac8597fcc8404c793658db3277e2a7e042cb56420002922183f14af74d970dec12a781763c1d9d69cf664b065a9b09491b1ff043e9c9a2098975c17e82a5d06b9f1081c43a539669e95991d866f3105e0b327ab8659e23bf1b196603c7406221e47494b765a114077187295dfafc261ea9ad3064b3449c6e8ef5e2517f609995adf82710d6c23a83e06f61c8186017afa6b2de5b28082770edfc81ee72e46fd1365d0a7583e3609ce420e54cc7a2d57542b924c6c5c9c896d068912adf22a97b3547502d0181d2c69729c539921ab16c466ba6d1d518c3e787fb0e9f708c9a1bc6d428355f0a3bd574397a6f8eda6a1503854a1bd4004719db60a9b3fefe434464d9f2aaddf44ee98c503ac606b7d4d8bac4efa557a77fa5a31ed8c8b48cd1ee6e4e7731ffb273bf21838f4e0cb8eec8a2cbd8acd40c15fcc3959ec3b4ea86680fb1e65743acfc164c6ae830f81a00c83102085d6ae8c7b4424ee0e86673015d98449252de73a25bfbe1697ff06aecf299b2a0e7ce452ba6bcba6b6da2c494cf0ce51cbb555cc2a371bf5a595748486825b0798221f40d2c29396431d13a03248874b893c7880d3b87cf845858a31f68fe57b032e3e0204fd4fb23fd5b2357d8e4f6052dd058b3bf6cd913b4341446e62895d6a367e4233e25ef3aabfb7f35a2804938e3181b6f551ac4a947ff016a12dffb53e7101b6ee911fac7637b2786cf95a4611376d0ac7b1e61c763040550e0c00ddb39a11086e08941c518a5ebedcff2c9477f7be26ad4dc48d837b85d082b4a54c8ec3f1caff75f7fb8f1282df6c5b336c2e56c0f35d9c5dd38fc91001e950f5fb41b58a620a9ee5e6b001a637aad4ec9ffd09eb762fd0d1d8058ca0e544329ee8693547095264c46d9b716fe56ff991b28dc056caefb0d08c0c509ab0eafeffc280684f8654b18323eddff28b4e778a674b4d5b85df786bb12ca24e1980e56032d1d32eb472954eed24b99bbc404dc920e16d4f8e792d6fe581efa82420085155ab9716dc642b44e2a9215cdaaf3df4fa5ad66a26804ad87b7520c132fdb595ea560eb408b5d519cb31c2c6ed2a16fe971d7ca71b7530af7478f06509cc988b96b27dd3e667ce4b08ca685ae818527103addba74d71d094e7a989a1d973fc9f1cfebe848c35279cfff728928f77af22430daee46cc9242fa4afe5197e6b42811396f9136fbd545826e020a910fa790acf9292472b7ee3b34723d6f56781d5c061be6e535e49bfcc292a1208645c730b6aadc94e56f05c6f8ca71c7fde81b687190accb75b08f131d61d6536cb3810eb2b6006336f700f1e6ea8104de9c9c6c9f4566a3783d253e3153e9550b91d547430bbe6dc2b586ad5eb67c7add5b009fa44c416bfbe28e524ee6a2d0b016331037010fa882db5d35cfa359d1c7a173cf913e11b8888d0f37b75011f26ce9f97b132dd6f50cbf4bd7d1f9201c55b7ebc08c4e2df4a3b35d2980bf8ee63b8091fed356f764c0bbcc95a91afeb4a2c1deb3fc0c44fa76d768fed87d737bb3380794e4b67932e7492e6558ca53599a446664031ef83e6a6d5362d89eac11c767932f477201d2953b4bb6058f4a3baca2968719edbf41ca5da5be2efeb9bceb38e2f1394ff41d9e93ecc746175b8e5fa2f5bf903663cebc1266ca7a2f8c57340c1ef42e4fc8a85d76ce24237d16f1ac13d32bfd1121017e9a72ad3fb0e952a296ff9a79bdc5be6d8691696720d97daa7c27fb9489e47584c00c854779de5980490afbacad0d0774a7f13e424b0ea955a87b7e296a40eca7ab8f45ae76170da77fff6b554c50dcdc6a261e8ebb7d2f24583023d001ff218ec7844fb4640736f04e9f7d968aa74bef26f65eae961a4857a946d3b221818a798d65bf74f8c0ac1b4529e36183c49606890643573722d467f4c464e68069955e561ccfd4423c2a240cfbb96efb668844ba0a1ceb910ad4ef06cd0f13f7ffa85744bdd0dd16ca27f62179b3916868187421b6d9f9c698d6542a02d4c124373ce0f10cbbc6b9a18385d99519f06a24aa9a4f5560157880233ee8352f2e9de0ffa333bb50932587a70153a37f25263693b86dd6a61f7d1f40cac0f205b65fa2faa3098254fb084160c271addea6711ecae589870450b941db419bb27c8b597982b704ba0ea0189e7b5cd6b72e3529cd77e4a79c752f2f7af6aa43ec9eb0bbefc91a02a85871771189c1f9a0742e8e6fc2d71575e20631dee592f0ed44c9d8f6a22e7d7844445066ca5e8bb97dd5c2ca0365d7c33563ceca884e8e14ba21733c4d2415c1be9369298fbd616fd792bd767555aa2deec8f45e92e10fcc88079cf0093ca2e38adc797845548005a0660b5cbf6423d966ebdccb6ce9d5d476bfd562dff0dd1f8e576d424c0f5cbfe68a3a571e860e5665861a133bc8eb3d9838e9a88f18edb12dfec18a488ad1177ca22f6f763beee9c1e0dd61344997dbbc6de56800f15d2b04a4d83a0b79adb12c54aa7c418d8fd0c96b5797a003b8313d14093fdadd4b530233dd1176e86090e0cc5401d6f98529de8bb6094b8e2f02b53f562a4c115655dc2619811d8caade655b767a5d4fac6c10784bf5bb06e9f535fd1304f383e39bbc5ce58a5f2f9deb9af1d6df6b491fbcbb9053f9bc73da0ae2e815ae72aff41c71ab7adc71074dfa6906724f18b74a344f7911994ee8ee843fd991de053dd9fae152d02b4fe0818c6313aee7df2f32009221f6c2d0ef9b53b7c2e795d64dcae34e5fab88e6b112b935fa836c6868f72077c57a42a940d3c0a667f3d0b674a3de2aa8c3443748c3a5ac949f72ed49220a9cbf0896794f58e12b74a1d7c7bbf8bec7d8aa055855c34a6c25d6fddd22a73725ca3daf8e357b8173508be65d329a4b97820cdb1c7a98d222a839b4da2a33ac687ab4004f5e1d90be7dad53a50ab4d6bc04135e0a9f31af27dc75eae3b9e7fd7459455a4cdd7faf94c5fe701d66d2006719b9acb72db3c89ca61bddea7c0be7ec769ec1cbfae11a77f36a59966f042e5dd32ece56932b083f0cb68c92194c6a4ca0267186b5f3ebaa25f63b6a1b60a2a5c78b9b5b488962b2ce4854b51ab2bc001231b6be3fcdc5563b0950165da87745e387c1205ba808287a8cebfaae10ff461c2933d775c6cddaa936d1907e29b5b4e1ef0a000aafab5363dd692560a291a71f06552647144cac4884a8ae8f2dade616384eeafa54f84737d1613beb945faaa4a316ee2e2a3a094187b5edba42358e930c89bfeaf4620bada8aa6d6c8800d1b19548a308b8310a0b51c8ccc7db60aa2a04fd8b21769a32eded238f93f476b69a6548a8a17aee1d0c4476db41e4eba24d9351d3f98fac043f423ffead379b6cbfb05aaf705ff0dca6e5f6ba36d00d1bc98714a92c8ac1e7cbf441521c98e2b913dd7a5d8595e0479537029de96e2991652243fe3093594720a0538b1687711bf0bc46a1453ebe60c5d33bd798b66f19e69c90e55c2b68b62d1a759a3519630798dd4434fa658b013e28fe9befca82abc1f89a3b246f2fd44df84f88dab2792fc67b3ef2ef8eef84e441e2a7ff5a83e3784a5636a7d4775f5b3063d8e190bfcedcd8083d864d0cbb2fcca7af05cee2be552d89c801e760348dadf01ee4dbb9fb09d5b6c993ab9ac9ff7d5e1e104ab3a894f6cc9067ad64c5a97d3e12efd17820b3c07e4ce302a20fd4c5b5de8752bc4e609fbe9e6cebe713f309229883790ab6dffc22864f7b02fd9026a07299f8cf1e799acdd448428199165abf20eee23988cfcad773c7bc483f941f994c07f255e6cd72e7198f34bcbcbd801abb84e6e383d7bf6e217ee0281f4691beba5d17ef8bd59d7474540dda647ca3bdb8e280a2e6b7a7688bc677a25b2186b1e59e637737366733d75f02a597b7cabb18e75a1722d2327f4f2f101955ca88636ae97d5740ba61d7867c5141becd39f7fc5abb5b96142e0995046c2ab369ac46c18159d5a3569df964e69e7686471ac756bf0515fee78904fe8fcec2096b5f3e00", "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"}) ioctl$KVM_GET_NESTED_STATE(r11, 0xc080aebe, &(0x7f0000000480)={{0x0, 0x0, 0x80, {0x0, 0xdddd0000, 0x1}}, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b825c8c70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003d3600"}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x3, 0xffffffffffffffff) write(r13, &(0x7f0000000100), 0xfffffe5d) 927.371595ms ago: executing program 3 (id=1562): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) setreuid(0xee00, 0x0) r1 = getuid() setreuid(0x0, r1) setpriority(0x2, 0x0, 0xd2f4) ioctl$BTRFS_IOC_DEFRAG(r0, 0x40101283, 0x3) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2991, 0x3, 0x1, 0x5}, {0xe, 0xff, 0xb, 0x9}, {0x3, 0x5, 0x4, 0x5}, {0x9, 0x5c, 0x7}]}) gettid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, 0x0, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) stat(&(0x7f0000000400)='./file2\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() setreuid(0xee00, r7) mount$fuse(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000140), 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000400,blksize=0x0000000000001600,blksize=0x0000000000000200,allow_other,allow_other,allow_other,euid=', @ANYRESDEC=r7, @ANYBLOB="2c7375626a5f726f7c653d2f6465762f726e756c9e99689e2c00000000000000000000008eb8ea79f13ab7140fb6c3dc3f55031e647d2e048be27a3cda"]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000040)={0x1, 0x5, 0x4}) ioctl$KVM_RUN(r10, 0xae80, 0x0) socket$tipc(0x1e, 0x2, 0x0) 827.188253ms ago: executing program 2 (id=1563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x4000400) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x1c, 0x23, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r2, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) sendmmsg$inet6(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r4, r3, 0x0, 0x80000000) 770.606788ms ago: executing program 2 (id=1564): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f00000b5000/0x4000)=nil, 0x4000, 0x2) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 695.791784ms ago: executing program 2 (id=1565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000000)={[0xffffffffc44d54c4]}, 0x8) getpid() r1 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) rt_tgsigqueueinfo(r2, r1, 0x2d, &(0x7f0000000080)={0x6, 0x10, 0x2}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r3, &(0x7f0000000740)=""/377, 0x179) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 694.045684ms ago: executing program 0 (id=1566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x68) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xd2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@redirect_dir_follow}, {@userxattr}]}) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x4000400) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000002780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000000000000007000000860d"], 0x20}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x34, &(0x7f0000f59ffc)=0x4, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 692.512594ms ago: executing program 3 (id=1567): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) eventfd2(0x9, 0x80000) close_range(0xffffffffffffffff, r0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x4) (async) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async) eventfd2(0x9, 0x80000) (async) close_range(0xffffffffffffffff, r0, 0x0) (async) 667.223056ms ago: executing program 0 (id=1568): prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xb) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xd) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000800, &(0x7f0000000140)={[{@verity_require}, {@redirect_dir_nofollow}]}) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0xe}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x74, 0x0, 0x0, 0xfffffffd}]}) close_range(r0, 0xffffffffffffffff, 0x0) 572.955993ms ago: executing program 0 (id=1569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x82000, 0x0) unshare(0x6060600) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x480402, 0x0) unshare(0x4010200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x10000a007) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0xfffffffe, 0xb97f}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x82000, 0x0) (async) unshare(0x6060600) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x480402, 0x0) (async) unshare(0x4010200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r4, r3, 0x0, 0x10000a007) (async) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0xfffffffe, 0xb97f}) (async) 403.602157ms ago: executing program 0 (id=1570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = accept(r1, &(0x7f0000000340)=@ieee802154, &(0x7f00000000c0)=0x80) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000140)=0x2) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1c, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) (rerun: 64) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000080)={0x2, r5}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x100000, 0x85, &(0x7f0000000280)=""/133}, {0x0, 0xe, &(0x7f0000000100)=""/14}]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 402.239357ms ago: executing program 0 (id=1571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000d80)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be004488fffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESHEX], 0xfdef) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r6, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r7, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r8 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r10 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x50) r11 = dup3(r8, r1, 0x80000) mount_setattr(r10, &(0x7f0000000080)='./file0\x00', 0x100, &(0x7f0000000100)={0x4, 0x8, 0x60000, {r11}}, 0x20) 22.222378ms ago: executing program 1 (id=1572): socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 0s ago: executing program 1 (id=1573): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) r7 = open$dir(&(0x7f0000000b40)='./file0\x00', 0x2000, 0x10) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f00000000c0)={@host}) fcntl$setownex(r7, 0xf, &(0x7f0000000900)) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) mlockall(0x2) rt_sigaction(0x6, &(0x7f0000000080)={&(0x7f0000000200)="c4412211ec00e401796ef9f981395dc164400f49eb66f2480f2dfbc422093fdec463dd79069dc7f8a5000000c46279301c42644380b54800000000", 0x10000001, &(0x7f0000000040)="c4e1785af3c4414159b01535f664c481056040d56690d062cf8f4908012d0a00000043d0ecc4c1f917322e3e660f2dd3c4e21d9a97547f564f", {[0x200000bf]}}, &(0x7f0000000180)={&(0x7f00000000c0)="66400f2c01400f2d330f19ee26f04280a20d00000061f041f614060fa34b00c482b9987d0ef0812e08000000c4a1bc1510c442b9bdf6", 0x0, &(0x7f0000000100)="c4e1105c89000001008fe9c8959bf7000000f30f1efef3460f1ee48f0838a602ad676d2664df7144f04080890e0000000044d3a0000000000fb06d74"}, 0x8, &(0x7f00000001c0)) syz_io_uring_setup(0x36e2, &(0x7f0000000600)={0x0, 0x5946, 0x400, 0x0, 0x2c5}, &(0x7f00000004c0), 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) kernel console output (not intermixed with test programs): evice strings: Mfr=1, Product=2, SerialNumber=3 [ 57.924189][ T441] usb 3-1: Product: syz [ 57.928710][ T441] usb 3-1: Manufacturer: syz [ 57.933960][ T441] usb 3-1: SerialNumber: syz [ 58.202841][ T441] ipheth 3-1:176.218: Unable to find alternate settings interface [ 58.224825][ T441] usb 3-1: USB disconnect, device number 13 [ 58.530352][ T441] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 58.540362][ T626] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 58.680391][ T441] usb 3-1: Using ep0 maxpacket: 8 [ 58.687011][ T441] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 58.695921][ T441] usb 3-1: config 179 has no interface number 0 [ 58.702632][ T441] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 58.714771][ T441] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 58.727953][ T441] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.739878][ T441] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 58.752866][ T626] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 58.762134][ T441] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 58.775971][ T626] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 58.786811][ T441] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 58.796253][ T626] usb 4-1: config 220 has no interface number 2 [ 58.802958][ T626] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 58.818058][ T441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.827058][ T626] usb 4-1: config 220 interface 0 has no altsetting 0 [ 58.835070][ T626] usb 4-1: config 220 interface 76 has no altsetting 0 [ 58.842305][ T626] usb 4-1: config 220 interface 1 has no altsetting 0 [ 58.842372][ T1747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.850805][ T626] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 58.869103][ T626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.879349][ T626] usb 4-1: Product: syz [ 58.884385][ T626] usb 4-1: Manufacturer: syz [ 58.889388][ T626] usb 4-1: SerialNumber: syz [ 58.952908][ T1772] overlayfs: failed to clone upperpath [ 59.080555][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14 [ 59.274945][ T1747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.284298][ T1747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.496257][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 59.496275][ T36] audit: type=1400 audit(1756251718.840:349): avc: denied { ioctl } for pid=1746 comm="syz.2.434" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.530125][ T10] usb 3-1: USB disconnect, device number 14 [ 59.530125][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 59.530258][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 59.554282][ T10] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 59.639434][ T626] usb 4-1: selecting invalid altsetting 0 [ 59.650436][ T626] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 59.656948][ T626] usb 4-1: No valid video chain found. [ 59.674945][ T626] usb 4-1: USB disconnect, device number 9 [ 59.712905][ T1793] random: crng reseeded on system resumption [ 59.761488][ T36] audit: type=1400 audit(1756251719.110:350): avc: denied { connect } for pid=1792 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.802008][ T36] audit: type=1400 audit(1756251719.110:351): avc: denied { ioctl } for pid=1792 comm="syz.3.448" path="socket:[13125]" dev="sockfs" ino=13125 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.080350][ T626] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 60.240294][ T626] usb 4-1: Using ep0 maxpacket: 32 [ 60.251504][ T626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 230, changing to 11 [ 60.270324][ T626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.290489][ T626] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 60.313881][ T626] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 60.330308][ T626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.330366][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 60.357736][ T626] usb 4-1: config 0 descriptor?? [ 60.368689][ T626] usbhid 4-1:0.0: can't add hid device: -22 [ 60.374959][ T626] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 60.390243][ T1820] overlayfs: failed to clone upperpath [ 60.492164][ T36] audit: type=1400 audit(1756251719.840:352): avc: denied { mounton } for pid=1825 comm="syz.0.456" path="/91/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 60.540297][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 60.547341][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.557905][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 60.571213][ T36] audit: type=1400 audit(1756251719.910:353): avc: denied { create } for pid=1792 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 60.591790][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.604608][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.621064][ T10] usb 3-1: config 0 descriptor?? [ 60.626513][ T36] audit: type=1400 audit(1756251719.920:354): avc: denied { sys_admin } for pid=1792 comm="syz.3.448" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 60.649467][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 60.727651][ T626] usb 4-1: USB disconnect, device number 10 [ 60.770327][ T930] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 60.823687][ T1836] fuse: Bad value for 'fd' [ 60.822890][ T36] audit: type=1401 audit(1756251720.170:355): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F66696C653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 60.853659][ T10] usb 3-1: USB disconnect, device number 15 [ 60.900144][ T1838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 61.035206][ T1838] overlayfs: failed to resolve './file1': -2 [ 61.040396][ T930] usb 1-1: Using ep0 maxpacket: 16 [ 61.047967][ T930] usb 1-1: config index 0 descriptor too short (expected 25953, got 27) [ 61.057126][ T36] audit: type=1400 audit(1756251720.390:356): avc: denied { mount } for pid=1837 comm="syz.1.461" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 61.080244][ T930] usb 1-1: config 9 has an invalid interface number: 144 but max is 0 [ 61.094350][ T930] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 61.129459][ T930] usb 1-1: config 9 has no interface number 0 [ 61.150350][ T930] usb 1-1: config 9 interface 144 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.170447][ T930] usb 1-1: config 9 interface 144 has no altsetting 0 [ 61.191349][ T930] usb 1-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=4b.68 [ 61.201149][ T930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.209493][ T930] usb 1-1: Product: syz [ 61.225020][ T930] usb 1-1: Manufacturer: syz [ 61.229663][ T930] usb 1-1: SerialNumber: syz [ 61.251475][ T930] r8152-cfgselector 1-1: Unknown version 0x0000 [ 61.302142][ T1846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.463'. [ 61.463563][ T930] r8152 1-1:9.144: Expected endpoints are not found [ 61.475742][ T930] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 61.601022][ T1856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'. [ 61.828690][ T1870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 61.840450][ T1871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 61.900317][ T930] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 62.080303][ T930] usb 4-1: Using ep0 maxpacket: 32 [ 62.091328][ T930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.109904][ T930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.120186][ T930] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 62.140298][ T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.160755][ T930] usb 4-1: config 0 descriptor?? [ 62.230365][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 62.380379][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 62.386680][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 62.400611][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 62.420217][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.431149][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 62.440584][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 62.460412][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.469891][ T10] usb 1-1: config 0 descriptor?? [ 62.478192][ T1891] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 62.478219][ T1891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 62.496692][ T1891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:234 [ 62.581033][ T1867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.616935][ T1867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.642274][ T1893] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.677375][ T1877] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.702985][ T1877] __vm_enough_memory: pid: 1877, comm: syz.0.473, bytes: 18014402804453376 not enough memory for the allocation [ 62.715663][ T36] audit: type=1400 audit(1756251722.050:357): avc: denied { create } for pid=1876 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 62.792058][ T36] audit: type=1400 audit(1756251722.140:358): avc: denied { read } for pid=1896 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.927768][ T930] usbhid 4-1:0.0: can't add hid device: -71 [ 62.937540][ T930] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 62.957173][ T930] usb 4-1: USB disconnect, device number 11 [ 63.075793][ T1913] veth1: entered allmulticast mode [ 63.085767][ T1913] veth1: left allmulticast mode [ 63.247169][ T626] usb 1-1: USB disconnect, device number 20 [ 63.336078][ T1924] fuse: Bad value for 'fd' [ 63.367358][ T1926] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 63.378112][ T1926] SELinux: failed to load policy [ 63.420331][ T63] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 63.464745][ T1930] rust_binder: Failed copying into alloc: EFAULT [ 63.464774][ T1930] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 63.473447][ T1930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 63.482429][ T1930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:42 [ 63.505872][ T1935] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 63.516560][ T1935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 63.530336][ T1935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:44 [ 63.551555][ T1937] binder: Bad value for 'stats' [ 63.590334][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 63.596869][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.609234][ T63] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.614971][ T1939] FAT-fs (rnullb0): bogus number of reserved sectors [ 63.622914][ T63] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 63.629974][ T1939] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 63.650035][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.663668][ T63] usb 3-1: config 0 descriptor?? [ 63.670435][ T63] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 63.832849][ T1971] overlay: ./file0 is not a directory [ 63.873009][ T63] usb 3-1: USB disconnect, device number 16 [ 63.984444][ T1982] input: syz1 as /devices/virtual/input/input15 [ 64.005739][ T1982] rust_binder: Error while translating object. [ 64.005777][ T1982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 64.012812][ T1982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 64.024046][ T1984] netlink: 'syz.0.513': attribute type 1 has an invalid length. [ 64.041994][ T1984] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 64.042020][ T1984] rust_binder: Error while translating object. [ 64.058908][ T1984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.065768][ T1984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 64.380401][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 64.550293][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 64.563028][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.580779][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.600594][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 64.623159][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.640984][ T10] usb 4-1: config 0 descriptor?? [ 64.651430][ T10] hub 4-1:0.0: USB hub found [ 64.717657][ T1996] rust_binder: Error while translating object. [ 64.717712][ T1996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 64.726853][ T1996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:298 [ 64.853890][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 65.054442][ T1986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.078031][ T1986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.106870][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 65.120523][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 65.151168][ T10] usb 4-1: USB disconnect, device number 12 [ 65.464504][ T2018] rust_binder: Write failure EFAULT in pid:260 [ 65.550428][ T2020] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 65.565385][ T2020] overlayfs: missing 'lowerdir' [ 65.672484][ T2025] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819718256 (180461968384 ns) > initial count (8435122816 ns). Using initial count to start timer. [ 65.691714][ T2025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.099760][ T2047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.100177][ T2047] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 66.115262][ T2047] devtmpfs: Unknown parameter 'fuse' [ 66.321751][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 66.321769][ T36] audit: type=1400 audit(1756251725.670:370): avc: denied { write } for pid=2053 comm="syz.2.540" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 66.443586][ T2063] kvm: kvm [2062]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 66.561952][ T2073] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.562557][ T2073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:289 [ 66.623299][ T2081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.717763][ T36] audit: type=1326 audit(1756251726.060:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2034 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9f8ebe9 code=0x7fc00000 [ 66.755654][ T36] audit: type=1326 audit(1756251726.060:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2034 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8b9f8ebe9 code=0x7fc00000 [ 66.788248][ T36] audit: type=1326 audit(1756251726.060:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2034 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9f8ebe9 code=0x7fc00000 [ 66.812209][ T36] audit: type=1326 audit(1756251726.060:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2034 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9f8ebe9 code=0x7fc00000 [ 66.842866][ T36] audit: type=1326 audit(1756251726.060:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2034 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9f8ebe9 code=0x7fc00000 [ 66.867814][ T36] audit: type=1326 audit(1756251726.060:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2034 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9f8ebe9 code=0x7fc00000 [ 66.880539][ T626] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 66.892643][ T36] audit: type=1326 audit(1756251726.060:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2034 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9f8ebe9 code=0x7fc00000 [ 66.925289][ T930] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 66.930587][ T36] audit: type=1326 audit(1756251726.060:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2034 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9f8ebe9 code=0x7fc00000 [ 66.957515][ T36] audit: type=1326 audit(1756251726.060:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2034 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9f8ebe9 code=0x7fc00000 [ 67.039678][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.070359][ T626] usb 3-1: Using ep0 maxpacket: 32 [ 67.077633][ T626] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.086709][ T626] usb 3-1: config 98 has an invalid interface number: 248 but max is 1 [ 67.092106][ T930] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 67.095427][ T626] usb 3-1: config 98 has an invalid interface number: 174 but max is 1 [ 67.105391][ T930] usb 4-1: config 1 has no interface number 1 [ 67.113280][ T626] usb 3-1: config 98 has no interface number 0 [ 67.121040][ T930] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.126036][ T626] usb 3-1: config 98 has no interface number 1 [ 67.135548][ T930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.141964][ T626] usb 3-1: config 98 interface 174 altsetting 255 endpoint 0x6 has an invalid bInterval 80, changing to 10 [ 67.150202][ T930] usb 4-1: Product: syz [ 67.162188][ T626] usb 3-1: config 98 interface 174 altsetting 255 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.167395][ T930] usb 4-1: Manufacturer: 㢶ᗮזּ爆സ굝臨랻᧵猷퓕Ȫ嫚㦯쟩⨙㉜䥿 [ 67.177817][ T626] usb 3-1: config 98 interface 248 has no altsetting 0 [ 67.187297][ T930] usb 4-1: SerialNumber: syz [ 67.195056][ T626] usb 3-1: config 98 interface 174 has no altsetting 0 [ 67.207906][ T626] usb 3-1: New USB device found, idVendor=04e2, idProduct=1411, bcdDevice=4a.71 [ 67.217449][ T626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.225703][ T626] usb 3-1: Product: syz [ 67.230057][ T626] usb 3-1: Manufacturer: syz [ 67.234971][ T626] usb 3-1: SerialNumber: syz [ 67.403093][ T2084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.412200][ T2084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.516039][ T626] usb 3-1: USB disconnect, device number 17 [ 67.557902][ T2105] netlink: 120 bytes leftover after parsing attributes in process `syz.1.560'. [ 67.626808][ T930] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 67.634516][ T930] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 67.645476][ T930] usb 4-1: USB disconnect, device number 13 [ 67.653894][ T751] udevd[751]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.202020][ T2125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 68.720375][ T930] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 68.870339][ T930] usb 4-1: Using ep0 maxpacket: 8 [ 68.877906][ T930] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 68.889609][ T930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.900878][ T930] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.912607][ T930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.923129][ T930] usb 4-1: Product: Ѓ [ 68.927635][ T930] usb 4-1: Manufacturer: ⻍걠篱꼹鱤胟⤢퇮晆폾᭧ꬨ兊墨繗ⷠ똄潽빸䮌鮵Яῧ襜再鑵蕸鋆嚱Ⴍ碛暒欬㐛귱愦촎蟋́㲡꜡ꝺ튷દ꭮▭ޓౡ┾向浪咉ڶ恼 [ 68.949810][ T930] usb 4-1: SerialNumber: 瓘ʡꞃ㈠㔞﫢䭴ᶀ쫠⚾἗䗸롟螋豳ྻ俜솙簣ຜꂷ䭲灷嵅될嶱뭐煸↊鞕稄湩謡䘆㈋ [ 69.010162][ T2141] 9pnet_fd: Insufficient options for proto=fd [ 69.110321][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.110351][ T934] Bluetooth: hci0: command 0x1003 tx timeout [ 69.580333][ T626] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 69.731576][ T626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1632, setting to 64 [ 69.743051][ T626] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.756829][ T626] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 69.766084][ T626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.774974][ T626] usb 1-1: config 0 descriptor?? [ 69.780477][ T2147] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 70.191215][ T626] acrux 0003:1A34:0802.000C: unknown global tag 0xd [ 70.198705][ T626] acrux 0003:1A34:0802.000C: item 0 2 1 13 parsing failed [ 70.208238][ T626] acrux 0003:1A34:0802.000C: parse failed [ 70.215041][ T626] acrux 0003:1A34:0802.000C: probe with driver acrux failed with error -22 [ 70.714944][ T2156] 9pnet_fd: Insufficient options for proto=fd [ 70.741900][ T2160] syzkaller0: refused to change device tx_queue_len [ 70.816503][ T2181] fuse: Unknown parameter '' [ 71.047318][ T2205] fuse: Bad value for 'fd' [ 71.102857][ T2210] overlayfs: failed to clone upperpath [ 71.124194][ T2214] netlink: 'syz.1.596': attribute type 4 has an invalid length. [ 71.137831][ T2214] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.596'. [ 71.198863][ T2228] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 71.324145][ T2245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.488614][ T930] usb 4-1: 0:2 : does not exist [ 71.503963][ T930] usb 4-1: USB disconnect, device number 14 [ 71.551421][ T2252] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819718256 (180461968384 ns) > initial count (8435122816 ns). Using initial count to start timer. [ 71.571671][ T2252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.851099][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 71.851114][ T36] audit: type=1400 audit(1756251731.200:453): avc: denied { sqpoll } for pid=2271 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.877580][ T36] audit: type=1400 audit(1756251731.200:454): avc: denied { read } for pid=2271 comm="syz.1.618" path="socket:[15621]" dev="sockfs" ino=15621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.142761][ T930] usb 1-1: USB disconnect, device number 21 [ 72.222134][ T36] audit: type=1400 audit(1756251731.560:455): avc: denied { create } for pid=2279 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.280316][ T36] audit: type=1400 audit(1756251731.560:456): avc: denied { create } for pid=2279 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.730363][ T441] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 72.860325][ T441] usb 1-1: device descriptor read/64, error -71 [ 72.979356][ T2309] rust_binder: Error in use_page_slow: ESRCH [ 72.979374][ T2309] rust_binder: use_range failure ESRCH [ 72.985659][ T2309] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 72.991474][ T2309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.000087][ T2309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:101 [ 73.011847][ T2309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.030514][ T2309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.100346][ T441] usb 1-1: device descriptor read/64, error -71 [ 73.144661][ T2312] rust_binder: Write failure EFAULT in pid:327 [ 73.242379][ T2327] 9pnet_fd: Insufficient options for proto=fd [ 73.250326][ T626] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 73.278663][ T2331] netlink: 5 bytes leftover after parsing attributes in process `syz.1.639'. [ 73.350379][ T441] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 73.399566][ T36] audit: type=1400 audit(1756251732.740:457): avc: denied { accept } for pid=2340 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.421317][ T36] audit: type=1400 audit(1756251732.770:458): avc: denied { read } for pid=2340 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.442558][ T626] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 73.451159][ T626] usb 4-1: config 0 has no interface number 0 [ 73.457931][ T626] usb 4-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 73.460314][ T930] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 73.469768][ T626] usb 4-1: config 0 interface 214 has no altsetting 0 [ 73.484860][ T441] usb 1-1: device descriptor read/64, error -71 [ 73.492728][ T626] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 73.504403][ T626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.513197][ T626] usb 4-1: Product: syz [ 73.517741][ T626] usb 4-1: Manufacturer: syz [ 73.522956][ T626] usb 4-1: SerialNumber: syz [ 73.528658][ T626] usb 4-1: config 0 descriptor?? [ 73.534756][ T2310] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 73.600603][ T930] usb 3-1: device descriptor read/64, error -71 [ 73.740344][ T441] usb 1-1: device descriptor read/64, error -71 [ 73.746798][ T2309] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 73.840419][ T930] usb 3-1: device descriptor read/64, error -71 [ 73.850508][ T441] usb usb1-port1: attempt power cycle [ 74.080365][ T930] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 74.190340][ T441] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 74.210367][ T930] usb 3-1: device descriptor read/64, error -71 [ 74.211419][ T441] usb 1-1: device descriptor read/8, error -71 [ 74.351405][ T441] usb 1-1: device descriptor read/8, error -71 [ 74.355678][ T2310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.357931][ T2349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.365065][ T2310] rust_binder: 101: no such ref 0 [ 74.377126][ T2310] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 74.385508][ T2310] rust_binder: 101: no such ref 0 [ 74.450435][ T930] usb 3-1: device descriptor read/64, error -71 [ 74.497745][ T2359] netlink: 260 bytes leftover after parsing attributes in process `syz.1.647'. [ 74.521860][ T2370] overlayfs: failed to clone upperpath [ 74.527762][ T2369] overlayfs: failed to clone upperpath [ 74.570330][ T930] usb usb3-port1: attempt power cycle [ 74.600452][ T441] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 74.651232][ T441] usb 1-1: device descriptor read/8, error -71 [ 74.781289][ T441] usb 1-1: device descriptor read/8, error -71 [ 74.870917][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 74.894853][ T441] usb usb1-port1: unable to enumerate USB device [ 74.902435][ T36] audit: type=1400 audit(1756251734.250:459): avc: denied { accept } for pid=2383 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 74.931124][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 74.939264][ T930] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 74.950430][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 74.962191][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 74.973831][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 74.984653][ T930] usb 3-1: device descriptor read/8, error -71 [ 74.985631][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.007511][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.019705][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.031612][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.043478][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 75.055183][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.066794][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 75.078568][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 75.091347][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 75.103565][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.116095][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 75.121381][ T930] usb 3-1: device descriptor read/8, error -71 [ 75.130545][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 75.146761][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 75.158221][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 75.169977][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 75.181528][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 75.193657][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 75.205632][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 75.217460][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 75.229391][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 75.247568][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 75.258822][ T626] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 75.271483][ T626] ax88179_178a 4-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 56:27:b1:e9:5c:86 [ 75.290415][ T626] usb 4-1: USB disconnect, device number 15 [ 75.297623][ T626] ax88179_178a 4-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 75.327474][ T36] audit: type=1400 audit(1756251734.670:460): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 75.380375][ T930] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 75.401513][ T930] usb 3-1: device descriptor read/8, error -71 [ 75.531361][ T930] usb 3-1: device descriptor read/8, error -71 [ 75.608365][ T2399] rust_binder: Write failure EFAULT in pid:335 [ 75.650412][ T930] usb usb3-port1: unable to enumerate USB device [ 75.660323][ T626] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 75.820372][ T626] usb 4-1: Using ep0 maxpacket: 32 [ 75.826951][ T626] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 75.835386][ T626] usb 4-1: config 0 has no interface number 0 [ 75.843466][ T626] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 75.853620][ T626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.862295][ T626] usb 4-1: Product: syz [ 75.866566][ T626] usb 4-1: Manufacturer: syz [ 75.871193][ T626] usb 4-1: SerialNumber: syz [ 75.876520][ T626] usb 4-1: config 0 descriptor?? [ 75.882613][ T626] smsc95xx v2.0.0 [ 76.293438][ T626] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 76.320385][ T626] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 76.340326][ T626] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 76.360399][ T626] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 76.381318][ T626] usb 4-1: USB disconnect, device number 16 [ 76.410311][ T441] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 76.415394][ T2426] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 76.418167][ T2426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 76.427059][ T2426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:124 [ 76.461369][ T2430] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 76.479325][ T2430] SELinux: failed to load policy [ 76.541323][ T2432] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819718256 (180461968384 ns) > initial count (8435122816 ns). Using initial count to start timer. [ 76.550569][ T441] usb 1-1: device descriptor read/64, error -71 [ 76.567872][ T2432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.680185][ T36] audit: type=1400 audit(1756251736.020:461): avc: denied { getattr } for pid=2443 comm="syz.1.675" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=16511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.800347][ T441] usb 1-1: device descriptor read/64, error -71 [ 77.040359][ T441] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 77.170332][ T441] usb 1-1: device descriptor read/64, error -71 [ 77.207111][ T2457] netlink: 80 bytes leftover after parsing attributes in process `syz.3.681'. [ 77.410363][ T441] usb 1-1: device descriptor read/64, error -71 [ 77.520468][ T441] usb usb1-port1: attempt power cycle [ 77.570350][ T626] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 77.640981][ T2476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.720344][ T626] usb 4-1: Using ep0 maxpacket: 32 [ 77.734395][ T626] usb 4-1: config 40 has an invalid interface number: 30 but max is 0 [ 77.743443][ T626] usb 4-1: config 40 has no interface number 0 [ 77.750929][ T626] usb 4-1: config 40 interface 30 has no altsetting 0 [ 77.750943][ T2478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356 [ 77.759687][ T626] usb 4-1: New USB device found, idVendor=1bc7, idProduct=0036, bcdDevice=1c.31 [ 77.778630][ T626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.786849][ T626] usb 4-1: Product: syz [ 77.791050][ T626] usb 4-1: Manufacturer: syz [ 77.795797][ T626] usb 4-1: SerialNumber: syz [ 77.860336][ T441] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 77.881306][ T441] usb 1-1: device descriptor read/8, error -71 [ 78.009148][ T626] usb 4-1: USB disconnect, device number 17 [ 78.017547][ T441] usb 1-1: device descriptor read/8, error -71 [ 78.260312][ T441] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 78.281363][ T441] usb 1-1: device descriptor read/8, error -71 [ 78.411428][ T441] usb 1-1: device descriptor read/8, error -71 [ 78.486059][ T2487] incfs: Options parsing error. -22 [ 78.491469][ T2487] incfs: mount failed -22 [ 78.523744][ T441] usb usb1-port1: unable to enumerate USB device [ 78.575822][ T36] audit: type=1400 audit(1756251737.920:462): avc: denied { unmount } for pid=1543 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 78.597093][ T2496] SELinux: ebitmap start bit (402653440) is beyond the end of the bitmap (1472) [ 78.611667][ T2496] SELinux: failed to load policy [ 78.658893][ T2505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 78.658934][ T2505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:376 [ 78.688694][ T2508] binder: Unknown parameter '01777777777777777777777' [ 78.742966][ T2513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.752964][ T2515] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 78.771932][ T2517] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 78.781099][ T2517] rust_binder: Error while translating object. [ 78.790705][ T2517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.797345][ T2517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:382 [ 78.809436][ T36] audit: type=1400 audit(1756251738.140:463): avc: denied { mount } for pid=2519 comm="syz.3.706" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.862367][ T2520] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=2520 comm=syz.3.706 [ 78.981429][ T2530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819718256 (180461968384 ns) > initial count (8435122816 ns). Using initial count to start timer. [ 79.001089][ T2530] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.140313][ T626] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 79.281279][ T626] usb 4-1: device descriptor read/64, error -71 [ 79.345138][ T2551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:409 [ 79.377549][ T36] audit: type=1400 audit(1756251738.720:464): avc: denied { map } for pid=2555 comm="syz.2.721" path="socket:[16915]" dev="sockfs" ino=16915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 79.420043][ T441] rust_binder: 2539: removing orphan mapping 0:24 [ 79.430680][ T441] rust_binder: 2539: removing orphan mapping 24:1024 [ 79.438393][ T36] audit: type=1400 audit(1756251738.780:465): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.544666][ T36] audit: type=1400 audit(1756251738.890:466): avc: denied { accept } for pid=2563 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.580312][ T626] usb 4-1: device descriptor read/64, error -71 [ 79.830581][ T626] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 79.980315][ T626] usb 4-1: device descriptor read/64, error -71 [ 79.987304][ T2594] rust_binder: Error while translating object. [ 79.987347][ T2594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.000360][ T2594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 80.045998][ T2607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.081355][ T36] audit: type=1400 audit(1756251739.430:467): avc: denied { audit_write } for pid=2612 comm="syz.1.740" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.118251][ T2615] netlink: 5 bytes leftover after parsing attributes in process `syz.2.741'. [ 80.142143][ T2613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=2613 comm=syz.1.740 [ 80.174117][ T36] audit: type=1400 audit(1756251739.520:468): avc: denied { getopt } for pid=2614 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.220303][ T626] usb 4-1: device descriptor read/64, error -71 [ 80.300306][ T930] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 80.340386][ T626] usb usb4-port1: attempt power cycle [ 80.440316][ T930] usb 1-1: device descriptor read/64, error -71 [ 80.670318][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 80.680355][ T626] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 80.680484][ T930] usb 1-1: device descriptor read/64, error -71 [ 80.712161][ T626] usb 4-1: device descriptor read/8, error -71 [ 80.821454][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 80.830439][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 80.841185][ T10] usb 3-1: config 220 has no interface number 2 [ 80.847650][ T10] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.851603][ T626] usb 4-1: device descriptor read/8, error -71 [ 80.858142][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 80.878459][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 80.885931][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 80.893165][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 80.901622][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 80.911356][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.920293][ T10] usb 3-1: Product: syz [ 80.924550][ T10] usb 3-1: Manufacturer: syz [ 80.929315][ T10] usb 3-1: SerialNumber: syz [ 80.940332][ T930] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 81.070299][ T930] usb 1-1: device descriptor read/64, error -71 [ 81.100329][ T626] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 81.131562][ T626] usb 4-1: device descriptor read/8, error -71 [ 81.262400][ T626] usb 4-1: device descriptor read/8, error -71 [ 81.265504][ T10] usb 3-1: selecting invalid altsetting 0 [ 81.275470][ T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 81.282458][ T10] usb 3-1: No valid video chain found. [ 81.291820][ T10] usb 3-1: USB disconnect, device number 22 [ 81.310409][ T930] usb 1-1: device descriptor read/64, error -71 [ 81.370398][ T626] usb usb4-port1: unable to enumerate USB device [ 81.420480][ T930] usb usb1-port1: attempt power cycle [ 81.735815][ T2643] 9pnet_fd: Insufficient options for proto=fd [ 81.758584][ T2647] netlink: 188 bytes leftover after parsing attributes in process `syz.1.753'. [ 81.760386][ T930] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 81.791584][ T930] usb 1-1: device descriptor read/8, error -71 [ 81.799650][ T2654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=2654 comm=syz.1.755 [ 81.813960][ T2654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=2654 comm=syz.1.755 [ 81.827326][ T2654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2654 comm=syz.1.755 [ 81.879040][ T2654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 81.927613][ T930] usb 1-1: device descriptor read/8, error -71 [ 81.944078][ T36] audit: type=1400 audit(1756251741.290:469): avc: denied { accept } for pid=2665 comm="syz.1.759" path=0000204E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 82.032456][ T2681] overlayfs: failed to resolve './file0/file0': -2 [ 82.041439][ T2681] input: syz0 as /devices/virtual/input/input16 [ 82.052783][ T2681] UHID_CREATE from different security context by process 152 (syz.3.764), this is not allowed. [ 82.080446][ T626] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 82.133516][ T2703] syz.3.772 uses obsolete (PF_INET,SOCK_PACKET) [ 82.141099][ T2702] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 82.156993][ T2708] fuse: Bad value for 'group_id' [ 82.170411][ T930] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 82.178231][ T2708] fuse: Bad value for 'group_id' [ 82.191294][ T930] usb 1-1: device descriptor read/8, error -71 [ 82.230360][ T626] usb 3-1: Using ep0 maxpacket: 16 [ 82.236739][ T626] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.248324][ T626] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.258968][ T626] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.265606][ T626] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 82.275131][ T626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.284025][ T626] usb 3-1: config 0 descriptor?? [ 82.321451][ T930] usb 1-1: device descriptor read/8, error -71 [ 82.420355][ T63] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 82.430529][ T930] usb usb1-port1: unable to enumerate USB device [ 82.494718][ T626] usbhid 3-1:0.0: can't add hid device: -71 [ 82.501215][ T626] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 82.510177][ T626] usb 3-1: USB disconnect, device number 23 [ 82.570486][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 82.577421][ T63] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.587096][ T63] usb 4-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 82.597743][ T63] usb 4-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.611492][ T63] usb 4-1: config 1 interface 0 has no altsetting 0 [ 82.618411][ T36] audit: type=1400 audit(1756251741.960:470): avc: denied { mounton } for pid=2715 comm="syz.2.775" path="/152/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 82.641816][ T36] audit: type=1400 audit(1756251741.960:471): avc: denied { remount } for pid=2715 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 82.664546][ T63] usb 4-1: string descriptor 0 read error: -22 [ 82.671632][ T63] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 82.681305][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.690931][ T2709] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 82.698924][ T2709] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 82.909122][ T63] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 82.922212][ T63] usb 4-1: USB disconnect, device number 22 [ 82.928907][ T63] usblp0: removed [ 83.348731][ T2738] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.400543][ T2739] bridge0: port 3(dummy0) entered blocking state [ 83.414293][ T2739] bridge0: port 3(dummy0) entered disabled state [ 83.420716][ T2739] dummy0: entered allmulticast mode [ 83.426366][ T2739] dummy0: entered promiscuous mode [ 83.431740][ T2739] bridge0: port 3(dummy0) entered blocking state [ 83.438997][ T2739] bridge0: port 3(dummy0) entered forwarding state [ 83.446833][ T2739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 83.460340][ T930] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 83.600422][ T930] usb 1-1: device descriptor read/64, error -71 [ 83.690386][ T330] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 83.840315][ T930] usb 1-1: device descriptor read/64, error -71 [ 83.850332][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 83.856923][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.868084][ T330] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.877832][ T330] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.887904][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.896950][ T330] usb 4-1: config 0 descriptor?? [ 84.080439][ T930] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 84.104356][ T626] usb 4-1: USB disconnect, device number 23 [ 84.210327][ T930] usb 1-1: device descriptor read/64, error -71 [ 84.460366][ T930] usb 1-1: device descriptor read/64, error -71 [ 84.466939][ T330] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 84.570443][ T930] usb usb1-port1: attempt power cycle [ 84.600362][ T330] usb 3-1: device descriptor read/64, error -71 [ 84.773413][ T2762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.792'. [ 84.840385][ T330] usb 3-1: device descriptor read/64, error -71 [ 84.857679][ T2768] netlink: 'syz.1.793': attribute type 4 has an invalid length. [ 84.886811][ T2770] netlink: 'syz.1.793': attribute type 4 has an invalid length. [ 84.910394][ T930] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 84.941694][ T930] usb 1-1: device descriptor read/8, error -71 [ 85.071643][ T930] usb 1-1: device descriptor read/8, error -71 [ 85.080416][ T330] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 85.210380][ T330] usb 3-1: device descriptor read/64, error -71 [ 85.310434][ T930] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 85.331556][ T930] usb 1-1: device descriptor read/8, error -71 [ 85.450313][ T330] usb 3-1: device descriptor read/64, error -71 [ 85.461681][ T930] usb 1-1: device descriptor read/8, error -71 [ 85.560407][ T330] usb usb3-port1: attempt power cycle [ 85.570516][ T930] usb usb1-port1: unable to enumerate USB device [ 85.597217][ T2773] binder: Bad value for 'max' [ 85.689429][ T2785] syz.1.797 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.726489][ T2789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 85.736857][ T2789] netlink: 'syz.3.799': attribute type 3 has an invalid length. [ 85.772431][ T36] audit: type=1400 audit(1756251745.120:472): avc: denied { nlmsg_write } for pid=2786 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 85.853179][ T2794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 85.859082][ T930] rust_binder: 2792: removing orphan mapping 0:24 [ 85.890499][ T2796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 85.901652][ T330] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 85.912764][ T2796] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.931433][ T330] usb 3-1: device descriptor read/8, error -71 [ 85.964250][ T2797] rust_binder: Error in use_page_slow: ESRCH [ 85.964272][ T2797] rust_binder: use_range failure ESRCH [ 85.970922][ T2797] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 85.976762][ T2797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 85.985565][ T2797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:191 [ 86.071500][ T330] usb 3-1: device descriptor read/8, error -71 [ 86.296848][ T2811] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 86.320317][ T330] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 86.351710][ T330] usb 3-1: device descriptor read/8, error -71 [ 86.447210][ T2817] sit0: entered promiscuous mode [ 86.453761][ T2817] netlink: 1 bytes leftover after parsing attributes in process `syz.0.808'. [ 86.481422][ T330] usb 3-1: device descriptor read/8, error -71 [ 86.519876][ T2818] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 86.570370][ T2817] rust_binder: Write failure EINVAL in pid:395 [ 86.600454][ T330] usb usb3-port1: unable to enumerate USB device [ 86.735581][ T2831] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 86.766519][ T2836] input: syz1 as /devices/virtual/input/input17 [ 87.172914][ T2847] 9pnet_fd: Insufficient options for proto=fd [ 87.329302][ T2866] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 87.329331][ T2866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 87.329415][ T2865] rust_binder: 2862 RLIMIT_NICE not set [ 87.350433][ T2866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:462 [ 87.357493][ T626] rust_binder: 2816: removing orphan mapping 0:112 [ 87.381843][ T626] rust_binder: 2861: removing orphan mapping 0:4248 [ 87.401084][ T2870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.660334][ T330] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 87.790356][ T330] usb 4-1: device descriptor read/64, error -71 [ 88.030283][ T330] usb 4-1: device descriptor read/64, error -71 [ 88.145713][ T2900] netlink: 7 bytes leftover after parsing attributes in process `syz.2.838'. [ 88.164132][ T2900] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.172970][ T2900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.180254][ T2900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471 [ 88.235392][ T36] audit: type=1326 audit(1756252007.580:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2907 comm="syz.0.841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9f8ebe9 code=0x0 [ 88.280257][ T330] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 88.302526][ T36] audit: type=1400 audit(1756252007.650:474): avc: denied { setopt } for pid=2920 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.323114][ T2924] x_tables: unsorted underflow at hook 4 [ 88.385931][ T2929] netlink: 'syz.2.847': attribute type 4 has an invalid length. [ 88.393889][ T2929] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.847'. [ 88.420201][ T330] usb 4-1: device descriptor read/64, error -71 [ 88.467556][ T2932] rust_binder: Failed to allocate buffer. len:3806277752, is_oneway:false [ 88.467611][ T2932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 88.477703][ T2932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:485 [ 88.511508][ T2934] netlink: 72 bytes leftover after parsing attributes in process `syz.2.849'. [ 88.616689][ T2936] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819718256 (180461968384 ns) > initial count (8435122816 ns). Using initial count to start timer. [ 88.642545][ T2936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.670211][ T330] usb 4-1: device descriptor read/64, error -71 [ 88.744429][ T36] audit: type=1326 audit(1756252008.090:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2938 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36858ebe9 code=0x7fc00000 [ 88.780435][ T330] usb usb4-port1: attempt power cycle [ 88.844658][ T2956] fuse: Unknown parameter '' [ 88.891148][ T36] audit: type=1326 audit(1756252008.240:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2957 comm="syz.1.856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda56b8ebe9 code=0x0 [ 88.920285][ T36] audit: type=1400 audit(1756252008.250:477): avc: denied { bind } for pid=2955 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.108695][ T2964] binder: Bad value for 'stats' [ 89.120157][ T330] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 89.141228][ T330] usb 4-1: device descriptor read/8, error -71 [ 89.271361][ T330] usb 4-1: device descriptor read/8, error -71 [ 89.510093][ T330] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 89.541264][ T330] usb 4-1: device descriptor read/8, error -71 [ 89.691908][ T330] usb 4-1: device descriptor read/8, error -71 [ 89.812000][ T330] usb usb4-port1: unable to enumerate USB device [ 90.106162][ T2990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.212972][ T36] audit: type=1400 audit(1756252009.561:478): avc: denied { ioctl } for pid=2998 comm="syz.2.870" path="socket:[19422]" dev="sockfs" ino=19422 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.489665][ T36] audit: type=1326 audit(1756252009.831:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3005 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda56b8ebe9 code=0x7ffc0000 [ 90.529996][ T36] audit: type=1326 audit(1756252009.831:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3005 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda56b8ebe9 code=0x7ffc0000 [ 90.534564][ T3008] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.558129][ T36] audit: type=1326 audit(1756252009.871:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3005 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fda56b8ebe9 code=0x7ffc0000 [ 90.829221][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 90.829238][ T36] audit: type=1400 audit(1756252010.171:508): avc: denied { remount } for pid=3032 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.829387][ T3033] fuse: Unknown parameter ' 0x0000000000000007' [ 91.161885][ T3049] tipc: Enabling of bearer rejected, failed to enable media [ 91.186943][ T36] audit: type=1400 audit(1756252010.531:509): avc: denied { module_load } for pid=3050 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 91.186977][ T3051] Invalid ELF header type: 2 != 1 [ 91.270108][ T3053] netlink: 1 bytes leftover after parsing attributes in process `syz.2.892'. [ 92.064820][ T36] audit: type=1400 audit(1756252011.411:510): avc: denied { mount } for pid=3064 comm="syz.2.896" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.184337][ T36] audit: type=1400 audit(1756252011.531:511): avc: denied { name_bind } for pid=3072 comm="syz.2.899" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 92.279008][ T3096] overlayfs: failed to clone upperpath [ 92.295793][ T3101] netlink: 'syz.2.907': attribute type 46 has an invalid length. [ 92.530957][ T36] audit: type=1400 audit(1756252011.871:512): avc: denied { append } for pid=3126 comm="syz.3.915" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.650982][ T3136] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819718256 (180461968384 ns) > initial count (8435122816 ns). Using initial count to start timer. [ 92.670241][ T3136] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.753421][ T3139] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 92.753442][ T3139] rust_binder: Error while translating object. [ 92.765905][ T3139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.772573][ T3139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 92.795698][ T3141] fuse: Bad value for 'user_id' [ 92.810243][ T3141] fuse: Bad value for 'user_id' [ 92.840786][ T3143] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 93.066470][ T3153] rust_binder: validate_parent_fixup: new_min_offset=2251799813685316, sg_entry.length=238 [ 93.066490][ T3153] rust_binder: Error while translating object. [ 93.077376][ T3153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.083624][ T3153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:412 [ 93.169651][ T330] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 93.331017][ T330] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 93.339725][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.350561][ T330] usb 4-1: config 0 has no interface number 0 [ 93.359381][ T330] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 93.369363][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.377866][ T330] usb 4-1: Product: syz [ 93.382381][ T330] usb 4-1: Manufacturer: syz [ 93.387358][ T330] usb 4-1: SerialNumber: syz [ 93.392721][ T330] usb 4-1: config 0 descriptor?? [ 93.398738][ T330] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 93.405756][ T330] usb 4-1: No valid video chain found. [ 93.862141][ T3158] netlink: 'syz.0.927': attribute type 16 has an invalid length. [ 94.080040][ T3187] fuseblk: Bad value for 'fd' [ 94.080040][ T3188] fuseblk: Bad value for 'fd' [ 94.083198][ T3190] rust_binder: Error while translating object. [ 94.092399][ T3191] rust_binder: Error while translating object. [ 94.099975][ T3190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.111778][ T3191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.122845][ T3190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:425 [ 94.133804][ T3191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:425 [ 94.150110][ T3193] fuse: Bad value for 'fd' [ 94.176768][ T3193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 94.419515][ T330] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 94.569547][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 94.579488][ T330] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 94.591758][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.602202][ T330] usb 1-1: Product: syz [ 94.607068][ T330] usb 1-1: Manufacturer: syz [ 94.612466][ T330] usb 1-1: SerialNumber: syz [ 94.621500][ T330] r8152-cfgselector 1-1: Unknown version 0x0000 [ 94.629904][ T330] r8152-cfgselector 1-1: config 0 descriptor?? [ 94.637920][ T330] hub 1-1:0.0: bad descriptor, ignoring hub [ 94.644894][ T330] hub 1-1:0.0: probe with driver hub failed with error -5 [ 94.723989][ T3205] 9pnet_fd: Insufficient options for proto=fd [ 94.845689][ T330] r8152-cfgselector 1-1: Unknown version 0x0000 [ 94.853137][ T330] r8152-cfgselector 1-1: bad CDC descriptors [ 95.149501][ T63] r8152-cfgselector 1-1: USB disconnect, device number 38 [ 95.174751][ T36] audit: type=1400 audit(1756252014.521:513): avc: denied { create } for pid=3225 comm="syz.1.951" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 95.626530][ T3241] : renamed from tunl0 (while UP) [ 95.871817][ T330] usb 4-1: USB disconnect, device number 29 [ 96.149917][ T36] audit: type=1400 audit(1756252015.501:514): avc: denied { getopt } for pid=3257 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.197820][ T3266] 9pnet_fd: Insufficient options for proto=fd [ 96.213645][ T36] audit: type=1400 audit(1756252015.561:515): avc: denied { getopt } for pid=3267 comm="syz.2.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.238918][ T3268] tmpfs: Invalid uid '0x00000000ffffffff' [ 96.479280][ T63] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 96.629206][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 96.639937][ T63] usb 4-1: config 162 has an invalid interface number: 79 but max is 1 [ 96.655033][ T63] usb 4-1: config 162 has an invalid interface number: 183 but max is 1 [ 96.669203][ T63] usb 4-1: config 162 has no interface number 0 [ 96.676512][ T36] audit: type=1326 audit(1756252016.021:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3285 comm="syz.1.972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda56b8ebe9 code=0x0 [ 96.676636][ T63] usb 4-1: config 162 has no interface number 1 [ 96.709906][ T63] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.724403][ T63] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 96.735569][ T63] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 96.748723][ T63] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 96.760998][ T63] usb 4-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 96.772516][ T63] usb 4-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 96.792409][ T63] usb 4-1: config 162 interface 79 has no altsetting 0 [ 96.801411][ T63] usb 4-1: config 162 interface 183 has no altsetting 0 [ 96.810329][ T63] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 96.828685][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.838829][ T63] usb 4-1: Product: syz [ 96.843900][ T63] usb 4-1: Manufacturer: syz [ 96.849202][ T63] usb 4-1: SerialNumber: syz [ 96.896752][ T3306] capability: warning: `syz.2.980' uses 32-bit capabilities (legacy support in use) [ 97.116026][ T3325] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 97.138139][ T36] audit: type=1400 audit(1756252272.483:517): avc: denied { wake_alarm } for pid=3327 comm="syz.2.988" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.297375][ T63] pl2303 4-1:162.79: required endpoints missing [ 97.306505][ T63] pl2303 4-1:162.183: pl2303 converter detected [ 97.313755][ T63] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 97.323332][ T63] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 97.333990][ T63] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 97.342962][ T63] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 97.352393][ T63] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 97.361502][ T63] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 97.370593][ T63] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 97.379756][ T63] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 97.389409][ T63] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 97.399646][ T63] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 97.409903][ T63] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 97.421429][ T63] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 97.435865][ T63] usb 4-1: USB disconnect, device number 30 [ 97.449668][ T63] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 97.459544][ T63] pl2303 4-1:162.183: device disconnected [ 97.683373][ T63] rust_binder: 3271: removing orphan mapping 0:112 [ 97.825382][ T3367] 9pnet_fd: Insufficient options for proto=fd [ 98.049185][ T330] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 98.209235][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 98.216172][ T330] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 98.224027][ T330] usb 4-1: can't read configurations, error -61 [ 98.278672][ T3406] syz.0.1017 (3406): /proc/3405/oom_adj is deprecated, please use /proc/3405/oom_score_adj instead. [ 98.290362][ T3406] rust_binder: Write failure EFAULT in pid:439 [ 98.304258][ T3411] rust_binder: Failed copying remainder into alloc: EFAULT [ 98.311497][ T3411] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 98.320052][ T3411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 98.331284][ T3411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:444 [ 98.359562][ T330] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 98.519264][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 98.529591][ T330] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 98.540849][ T330] usb 4-1: can't read configurations, error -61 [ 98.548961][ T330] usb usb4-port1: attempt power cycle [ 98.669184][ T441] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 98.711402][ T3435] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1028'. [ 98.727108][ T3435] tmpfs: Bad value for 'huge' [ 98.734583][ T36] audit: type=1400 audit(1756252274.083:518): avc: denied { map } for pid=3434 comm="syz.1.1028" path="socket:[21115]" dev="sockfs" ino=21115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.764904][ T36] audit: type=1400 audit(1756252274.083:519): avc: denied { read } for pid=3434 comm="syz.1.1028" path="socket:[21115]" dev="sockfs" ino=21115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.809254][ T441] usb 1-1: device descriptor read/64, error -71 [ 98.889278][ T330] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 98.919599][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 98.931346][ T330] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 98.945057][ T330] usb 4-1: can't read configurations, error -61 [ 99.049344][ T441] usb 1-1: device descriptor read/64, error -71 [ 99.079226][ T330] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 99.109766][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 99.118793][ T330] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 99.130327][ T330] usb 4-1: can't read configurations, error -61 [ 99.140662][ T330] usb usb4-port1: unable to enumerate USB device [ 99.289216][ T441] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 99.429985][ T441] usb 1-1: device descriptor read/64, error -71 [ 99.589750][ T3446] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1031'. [ 99.599330][ T3447] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1031'. [ 99.679189][ T441] usb 1-1: device descriptor read/64, error -71 [ 99.789328][ T441] usb usb1-port1: attempt power cycle [ 100.129290][ T441] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 100.151669][ T441] usb 1-1: device descriptor read/8, error -71 [ 100.244443][ T3464] netlink: 'syz.1.1038': attribute type 46 has an invalid length. [ 100.290195][ T441] usb 1-1: device descriptor read/8, error -71 [ 100.529185][ T441] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 100.560225][ T441] usb 1-1: device descriptor read/8, error -71 [ 100.690458][ T441] usb 1-1: device descriptor read/8, error -71 [ 100.799447][ T441] usb usb1-port1: unable to enumerate USB device [ 100.840585][ T36] audit: type=1326 audit(1756252276.193:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3478 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda56b8ebe9 code=0x7ffc0000 [ 100.882000][ T36] audit: type=1326 audit(1756252276.193:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3478 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda56b8ebe9 code=0x7ffc0000 [ 100.914194][ T3483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.915083][ T3483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.916407][ T36] audit: type=1326 audit(1756252276.213:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3478 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fda56b8ebe9 code=0x7ffc0000 [ 100.926825][ T3483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.933600][ T36] audit: type=1326 audit(1756252276.213:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3478 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda56b8ebe9 code=0x7ffc0000 [ 101.424957][ T3514] loop7: detected capacity change from 0 to 7 [ 101.432006][ T441] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 101.440872][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.453196][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.463687][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.473793][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.485815][ T751] loop7: unable to read partition table [ 101.493453][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.506814][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.519066][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 101.531432][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.543840][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.553841][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.565112][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.575627][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.587076][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.596297][ T3514] loop7: unable to read partition table [ 101.603108][ T3514] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 101.604253][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.628626][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.649147][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.658576][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.666922][ T441] usb 4-1: Using ep0 maxpacket: 16 [ 101.672335][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.674555][ T441] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 101.681981][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.699288][ T441] usb 4-1: can't read configurations, error -61 [ 101.782239][ T3543] overlayfs: failed to resolve './file1/file0': -2 [ 101.839197][ T441] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 101.883891][ T3566] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1072'. [ 101.931925][ T3575] overlayfs: failed to clone upperpath [ 101.999159][ T441] usb 4-1: Using ep0 maxpacket: 16 [ 102.007119][ T441] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 102.017564][ T441] usb 4-1: can't read configurations, error -61 [ 102.024589][ T441] usb usb4-port1: attempt power cycle [ 102.039075][ T3585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1081'. [ 102.146566][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 102.146586][ T36] audit: type=1400 audit(1756252277.493:549): avc: denied { lock } for pid=3589 comm="syz.1.1083" path="socket:[21385]" dev="sockfs" ino=21385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 102.269706][ T36] audit: type=1326 audit(1756252277.623:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3592 comm="syz.0.1084" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8b9f8ebe9 code=0x0 [ 102.369167][ T441] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 102.389490][ T441] usb 4-1: Using ep0 maxpacket: 16 [ 102.399118][ T441] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 102.406992][ T441] usb 4-1: can't read configurations, error -61 [ 102.433979][ T36] audit: type=1400 audit(1756252277.783:551): avc: denied { create } for pid=3601 comm="syz.2.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.539333][ T441] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 102.559572][ T441] usb 4-1: Using ep0 maxpacket: 16 [ 102.566767][ T441] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 102.574841][ T441] usb 4-1: can't read configurations, error -61 [ 102.581516][ T441] usb usb4-port1: unable to enumerate USB device [ 103.019033][ T3627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1096'. [ 103.341338][ T36] audit: type=1400 audit(1756252278.693:552): avc: denied { setattr } for pid=3668 comm="syz.0.1110" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.375357][ T3672] /dev/rnullb0: Can't open blockdev [ 103.432893][ T3681] binder: Unknown parameter '00000000000000000000003' [ 103.594033][ T3688] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1116'. [ 103.609815][ T3690] fuse: Unknown parameter '' [ 103.643615][ T3692] /dev/rnullb0: Can't open blockdev [ 103.687121][ T36] audit: type=1400 audit(1756252279.033:553): avc: denied { lock } for pid=3693 comm="syz.0.1119" path="socket:[22600]" dev="sockfs" ino=22600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.771281][ T3694] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096) [ 103.771301][ T3694] rust_binder: Error while translating object. [ 103.782554][ T3694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.789065][ T3694] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 103.799460][ T3694] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:492 [ 103.815735][ T930] rust_binder: 3693: removing orphan mapping 0:24 [ 103.833197][ T36] audit: type=1400 audit(1756252279.183:554): avc: denied { map } for pid=3703 comm="syz.0.1122" path="socket:[22615]" dev="sockfs" ino=22615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.853618][ T3704] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 103.857837][ T3704] rust_binder: Error while translating object. [ 103.867010][ T3704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.874886][ T3704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495 [ 104.149265][ T441] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 104.236258][ T3718] overlayfs: failed to resolve './file0': -40 [ 104.309162][ T441] usb 1-1: device descriptor read/64, error -71 [ 104.549176][ T441] usb 1-1: device descriptor read/64, error -71 [ 104.579218][ T930] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 104.729163][ T930] usb 4-1: Using ep0 maxpacket: 16 [ 104.736336][ T930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.745785][ T930] usb 4-1: config 1 interface 0 altsetting 105 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 104.758030][ T930] usb 4-1: config 1 interface 0 has no altsetting 0 [ 104.766554][ T930] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.40 [ 104.776370][ T930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.784971][ T930] usb 4-1: Product: syz [ 104.789713][ T930] usb 4-1: Manufacturer: syz [ 104.794492][ T930] usb 4-1: SerialNumber: syz [ 104.799181][ T441] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 104.929187][ T441] usb 1-1: device descriptor read/64, error -71 [ 105.011998][ T930] usbhid 4-1:1.0: can't add hid device: -71 [ 105.018612][ T930] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 105.034476][ T930] usb 4-1: USB disconnect, device number 39 [ 105.179186][ T441] usb 1-1: device descriptor read/64, error -71 [ 105.289331][ T441] usb usb1-port1: attempt power cycle [ 105.639174][ T441] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 105.660370][ T441] usb 1-1: device descriptor read/8, error -71 [ 105.769210][ T930] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 105.790664][ T441] usb 1-1: device descriptor read/8, error -71 [ 105.939393][ T930] usb 4-1: Using ep0 maxpacket: 16 [ 105.947430][ T930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.962447][ T930] usb 4-1: config 0 has no interfaces? [ 105.969164][ T930] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.980655][ T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.990664][ T930] usb 4-1: config 0 descriptor?? [ 106.029238][ T441] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 106.050422][ T441] usb 1-1: device descriptor read/8, error -71 [ 106.180511][ T441] usb 1-1: device descriptor read/8, error -71 [ 106.199512][ T930] usb 4-1: USB disconnect, device number 40 [ 106.289325][ T441] usb usb1-port1: unable to enumerate USB device [ 106.480300][ T36] audit: type=1400 audit(1756252281.833:555): avc: denied { bind } for pid=3749 comm="syz.2.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.503636][ T36] audit: type=1400 audit(1756252281.833:556): avc: denied { name_bind } for pid=3749 comm="syz.2.1140" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 106.528127][ T36] audit: type=1400 audit(1756252281.833:557): avc: denied { node_bind } for pid=3749 comm="syz.2.1140" saddr=255.255.255.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 106.826468][ T3758] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819718256 (180461968384 ns) > initial count (8435122816 ns). Using initial count to start timer. [ 106.849783][ T3758] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.925106][ T3761] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819718256 (180461968384 ns) > initial count (8435122816 ns). Using initial count to start timer. [ 106.948935][ T3761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.090725][ T3763] rust_binder: Write failure EFAULT in pid:501 [ 107.095201][ T36] audit: type=1400 audit(1756252282.443:558): avc: denied { create } for pid=3771 comm="syz.2.1147" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 107.289156][ T330] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 107.449214][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 107.459548][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.473223][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.486657][ T330] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.499791][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.512256][ T330] usb 4-1: Product: syz [ 107.518202][ T330] usb 4-1: Manufacturer: syz [ 107.524565][ T330] usb 4-1: SerialNumber: syz [ 107.934527][ T330] usb 4-1: 0:2 : does not exist [ 107.959163][ T63] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 108.139234][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 108.151873][ T330] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 108.170567][ T63] usb 1-1: config 0 has no interfaces? [ 108.177913][ T63] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 108.179951][ T330] usb 4-1: USB disconnect, device number 41 [ 108.207595][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.237692][ T63] usb 1-1: config 0 descriptor?? [ 108.294443][ T36] audit: type=1400 audit(1756252283.643:559): avc: denied { remount } for pid=3795 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 108.294894][ T3796] option changes via remount are deprecated (pid=3795 comm=syz.3.1155) [ 108.326939][ T3796] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 108.340960][ T3796] rust_binder: Write failure EINVAL in pid:318 [ 108.406867][ T3803] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 108.451536][ T31] usb 1-1: USB disconnect, device number 47 [ 108.775497][ T3823] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 108.788670][ T3823] overlayfs: failed to clone upperpath [ 108.812562][ T36] audit: type=1326 audit(1756252284.163:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3828 comm="syz.2.1168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd36858ebe9 code=0x0 [ 108.849363][ T63] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 109.000134][ T3841] 9pnet_fd: Insufficient options for proto=fd [ 109.012034][ T63] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 109.027414][ T63] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 109.052123][ T63] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.066139][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.079055][ T63] usb 4-1: SerialNumber: syz [ 109.080415][ T3843] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 109.135161][ T3848] binder: Unknown parameter '1XP' [ 109.389155][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 109.539158][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 109.548250][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 109.558706][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.568613][ T9] usb 1-1: Product: syz [ 109.573128][ T9] usb 1-1: Manufacturer: syz [ 109.578164][ T9] usb 1-1: SerialNumber: syz [ 109.585761][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 109.594429][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 109.603718][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 109.610947][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 109.808767][ T3848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.819752][ T3848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.828205][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 109.837037][ T9] r8152-cfgselector 1-1: bad CDC descriptors [ 110.037627][ T3848] binder: Unknown parameter '1XP ' [ 110.267697][ T9] r8152-cfgselector 1-1: USB disconnect, device number 48 [ 110.635912][ T3904] overlayfs: failed to resolve './file1': -2 [ 110.769500][ T36] audit: type=1326 audit(1756252286.123:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda56b8ebe9 code=0x7fc00000 [ 111.132281][ T3918] rust_binder: Failed copying remainder into alloc: EFAULT [ 111.132303][ T3918] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 111.139792][ T3918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 111.148625][ T3918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:523 [ 111.234249][ T36] audit: type=1326 audit(1756252286.583:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.0.1195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9f8ebe9 code=0x0 [ 111.709736][ T63] usb 4-1: USB disconnect, device number 42 [ 111.733140][ T3934] x_tables: duplicate underflow at hook 1 [ 111.741670][ T36] audit: type=1400 audit(1756252287.093:563): avc: denied { connect } for pid=3933 comm="syz.3.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.793266][ T3935] rust_binder: 337: no such ref 3 [ 112.116756][ T36] audit: type=1400 audit(1756252287.463:564): avc: denied { lock } for pid=3950 comm="syz.0.1206" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.640315][ T3969] rust_binder: 3968 RLIMIT_NICE not set [ 112.911148][ T3984] rust_binder: Error while translating object. [ 112.917337][ T3984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 112.923753][ T3984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:533 [ 112.934107][ T3985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.969141][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 113.129198][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 113.136258][ T9] usb 4-1: config 0 has no interfaces? [ 113.142258][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.152185][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.162272][ T9] usb 4-1: config 0 descriptor?? [ 113.199160][ T441] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 113.359181][ T441] usb 1-1: Using ep0 maxpacket: 16 [ 113.367983][ T441] usb 1-1: config 0 has no interfaces? [ 113.373785][ T441] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.378189][ T9] usb 4-1: USB disconnect, device number 43 [ 113.385764][ T441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.403857][ T441] usb 1-1: config 0 descriptor?? [ 113.409805][ T36] audit: type=1400 audit(1756252288.753:565): avc: denied { setopt } for pid=4015 comm="syz.2.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.439156][ T4020] 9pnet_fd: Insufficient options for proto=fd [ 113.632054][ T3989] FAULT_INJECTION: forcing a failure. [ 113.632054][ T3989] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 113.645695][ T3989] CPU: 1 UID: 0 PID: 3989 Comm: syz.0.1218 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 113.645718][ T3989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.645728][ T3989] Call Trace: [ 113.645734][ T3989] [ 113.645740][ T3989] __dump_stack+0x21/0x30 [ 113.645760][ T3989] dump_stack_lvl+0x10c/0x190 [ 113.645773][ T3989] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.645787][ T3989] ? _parse_integer_limit+0x195/0x1e0 [ 113.645802][ T3989] dump_stack+0x19/0x20 [ 113.645815][ T3989] should_fail_ex+0x3d9/0x530 [ 113.645831][ T3989] should_fail_alloc_page+0xeb/0x110 [ 113.645842][ T3989] __alloc_pages_noprof+0x19b/0x7b0 [ 113.645856][ T3989] ? kstrtouint+0x78/0xf0 [ 113.645869][ T3989] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 113.645881][ T3989] ? kstrtouint_from_user+0xfb/0x150 [ 113.645895][ T3989] ? x64_sys_call+0xe69/0x2ee0 [ 113.645910][ T3989] ? avc_policy_seqno+0xd/0x30 [ 113.645923][ T3989] ? selinux_file_permission+0x309/0xb30 [ 113.645936][ T3989] ? __cfi_selinux_file_permission+0x10/0x10 [ 113.645948][ T3989] get_free_pages_noprof+0x14/0x40 [ 113.645961][ T3989] environ_read+0xd7/0x460 [ 113.645973][ T3989] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 113.645986][ T3989] ? bpf_lsm_file_permission+0xd/0x20 [ 113.646000][ T3989] ? __cfi_environ_read+0x10/0x10 [ 113.646011][ T3989] vfs_read+0x27b/0xb60 [ 113.646026][ T3989] ? __cfi_vfs_read+0x10/0x10 [ 113.646041][ T3989] ? __fget_files+0x2c5/0x340 [ 113.646053][ T3989] ksys_pread64+0x170/0x270 [ 113.646062][ T3989] ? __cfi_ksys_pread64+0x10/0x10 [ 113.646072][ T3989] __x64_sys_pread64+0x9f/0xb0 [ 113.646082][ T3989] x64_sys_call+0x2a34/0x2ee0 [ 113.646096][ T3989] do_syscall_64+0x58/0xf0 [ 113.646114][ T3989] ? clear_bhb_loop+0x50/0xa0 [ 113.646125][ T3989] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.646140][ T3989] RIP: 0033:0x7fc8b9f8ebe9 [ 113.646154][ T3989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.646163][ T3989] RSP: 002b:00007fc8badac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 113.646176][ T3989] RAX: ffffffffffffffda RBX: 00007fc8ba1b5fa0 RCX: 00007fc8b9f8ebe9 [ 113.646184][ T3989] RDX: 0000000000019020 RSI: 0000200000000200 RDI: 0000000000000004 [ 113.646191][ T3989] RBP: 00007fc8badac090 R08: 0000000000000000 R09: 0000000000000000 [ 113.646198][ T3989] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.646205][ T3989] R13: 00007fc8ba1b6038 R14: 00007fc8ba1b5fa0 R15: 00007ffd9a394fe8 [ 113.646214][ T3989] [ 113.646502][ T9] usb 1-1: USB disconnect, device number 49 [ 114.259156][ T930] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 114.342635][ T4062] overlayfs: failed to resolve './file1': -2 [ 114.409197][ T930] usb 4-1: Using ep0 maxpacket: 16 [ 114.416140][ T930] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.424762][ T930] usb 4-1: config 0 has no interface number 0 [ 114.431068][ T930] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.442328][ T930] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.452271][ T930] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 114.461682][ T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.470732][ T930] usb 4-1: config 0 descriptor?? [ 114.686801][ T930] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000D/input/input23 [ 114.711280][ T930] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000D/input/input24 [ 114.728719][ T930] uclogic 0003:28BD:0071.000D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 114.884706][ T930] usb 4-1: USB disconnect, device number 44 [ 115.239306][ T930] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 115.369157][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 115.417583][ T930] usb 4-1: Using ep0 maxpacket: 16 [ 115.424242][ T930] usb 4-1: config 0 has no interfaces? [ 115.430065][ T930] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.443372][ T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.445745][ T4102] overlayfs: missing 'lowerdir' [ 115.457638][ T4101] overlayfs: missing 'lowerdir' [ 115.457693][ T930] usb 4-1: config 0 descriptor?? [ 115.519163][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 115.525907][ T9] usb 1-1: config 0 has no interfaces? [ 115.532509][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.542794][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.553857][ T9] usb 1-1: config 0 descriptor?? [ 115.559141][ T4121] syzkaller0: entered allmulticast mode [ 115.565281][ T4121] syzkaller0: entered promiscuous mode [ 115.575199][ T4120] syzkaller0: left promiscuous mode [ 115.580779][ T4120] syzkaller0: left allmulticast mode [ 115.626326][ T4124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4124 comm=syz.2.1263 [ 115.651772][ T4127] overlayfs: missing 'lowerdir' [ 115.677533][ T4091] FAULT_INJECTION: forcing a failure. [ 115.677533][ T4091] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.691583][ T4091] CPU: 0 UID: 0 PID: 4091 Comm: syz.3.1251 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 115.691614][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.691626][ T4091] Call Trace: [ 115.691633][ T4091] [ 115.691641][ T4091] __dump_stack+0x21/0x30 [ 115.691670][ T4091] dump_stack_lvl+0x10c/0x190 [ 115.691690][ T4091] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.691713][ T4091] dump_stack+0x19/0x20 [ 115.691718][ T36] audit: type=1400 audit(1756252291.043:566): avc: denied { write } for pid=4123 comm="syz.1.1262" name="file2" dev="tmpfs" ino=2787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.691735][ T4091] should_fail_ex+0x3d9/0x530 [ 115.691759][ T4091] should_fail+0xf/0x20 [ 115.691777][ T4091] should_fail_usercopy+0x1e/0x30 [ 115.691793][ T4091] _copy_to_user+0x24/0xa0 [ 115.691825][ T4091] simple_read_from_buffer+0xed/0x160 [ 115.692085][ T4091] proc_fail_nth_read+0x19e/0x210 [ 115.692108][ T4091] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 115.692130][ T4091] ? bpf_lsm_file_permission+0xd/0x20 [ 115.692153][ T4091] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 115.692175][ T4091] vfs_read+0x27b/0xb60 [ 115.692200][ T4091] ? __cfi_vfs_read+0x10/0x10 [ 115.692224][ T4091] ? __kasan_check_write+0x18/0x20 [ 115.692247][ T4091] ? mutex_lock+0x92/0x1c0 [ 115.692271][ T4091] ? __cfi_mutex_lock+0x10/0x10 [ 115.692295][ T4091] ? __fget_files+0x2c5/0x340 [ 115.692314][ T4091] ksys_read+0x141/0x250 [ 115.692330][ T4091] ? __cfi_ksys_read+0x10/0x10 [ 115.692345][ T4091] ? __kasan_check_read+0x15/0x20 [ 115.692368][ T4091] __x64_sys_read+0x7f/0x90 [ 115.692383][ T4091] x64_sys_call+0x2638/0x2ee0 [ 115.692407][ T4091] do_syscall_64+0x58/0xf0 [ 115.692427][ T4091] ? clear_bhb_loop+0x50/0xa0 [ 115.692444][ T4091] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.692470][ T4091] RIP: 0033:0x7feea358d5fc [ 115.692486][ T4091] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.692501][ T4091] RSP: 002b:00007feea44cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.692521][ T4091] RAX: ffffffffffffffda RBX: 00007feea37b5fa0 RCX: 00007feea358d5fc [ 115.692534][ T4091] RDX: 000000000000000f RSI: 00007feea44cd0a0 RDI: 0000000000000006 [ 115.692546][ T4091] RBP: 00007feea44cd090 R08: 0000000000000000 R09: 0000000000000000 [ 115.692557][ T4091] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.692569][ T4091] R13: 00007feea37b6038 R14: 00007feea37b5fa0 R15: 00007fff3c1d1d08 [ 115.692585][ T4091] [ 115.697745][ T9] usb 4-1: USB disconnect, device number 45 [ 115.718847][ T36] audit: type=1400 audit(1756252291.053:567): avc: denied { ioctl } for pid=4123 comm="syz.1.1262" path="/507/file2" dev="tmpfs" ino=2787 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.761948][ T4132] netlink: 'syz.1.1266': attribute type 21 has an invalid length. [ 115.779517][ T441] usb 1-1: USB disconnect, device number 50 [ 115.782127][ T4132] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1266'. [ 116.159023][ T4154] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 116.167930][ T4154] rust_binder: Write failure EINVAL in pid:385 [ 116.314305][ T4175] overlayfs: failed to clone upperpath [ 116.589946][ T4190] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1287'. [ 116.599255][ T930] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 116.609303][ T441] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 116.749246][ T930] usb 1-1: Using ep0 maxpacket: 16 [ 116.755731][ T930] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 116.764586][ T930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.770343][ T441] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.775029][ T930] usb 1-1: config 0 has no interface number 0 [ 116.786408][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.793964][ T930] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 116.804193][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.813354][ T930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.828148][ T441] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.832153][ T930] usb 1-1: Product: syz [ 116.849837][ T930] usb 1-1: Manufacturer: syz [ 116.854093][ T441] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.855065][ T930] usb 1-1: SerialNumber: syz [ 116.868076][ T441] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.878779][ T441] usb 4-1: Manufacturer: syz [ 116.884858][ T930] usb 1-1: config 0 descriptor?? [ 116.885261][ T441] usb 4-1: config 0 descriptor?? [ 116.892072][ T930] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 116.902658][ T4203] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1290'. [ 116.912159][ T930] usb 1-1: No valid video chain found. [ 116.961075][ T4211] SELinux: Context system_u:object_r:system_dbusd_var_lib_t:s0 is not valid (left unmapped). [ 116.972390][ T36] audit: type=1400 audit(1756252292.323:568): avc: denied { relabelto } for pid=4210 comm="syz.2.1293" name="cgroup" dev="tmpfs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 117.001494][ T36] audit: type=1400 audit(1756252292.323:569): avc: denied { associate } for pid=4210 comm="syz.2.1293" name="cgroup" dev="tmpfs" ino=1913 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 117.111345][ T930] usb 1-1: USB disconnect, device number 51 [ 117.309767][ T441] usbhid 4-1:0.0: can't add hid device: -71 [ 117.315940][ T441] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 117.331777][ T441] usb 4-1: USB disconnect, device number 46 [ 117.883485][ T4250] overlayfs: failed to clone upperpath [ 117.899511][ T4252] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1309'. [ 118.199347][ T4306] rust_binder: 573: no such ref 0 [ 118.204788][ T4307] rust_binder: 573: no such ref 0 [ 118.219238][ T4306] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 118.239856][ T36] audit: type=1400 audit(1756252293.593:570): avc: denied { setopt } for pid=4304 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.243114][ T4310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 118.261384][ T4310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:576 [ 118.273119][ T4310] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 118.282590][ T4310] rust_binder: Read failure Err(EFAULT) in pid:576 [ 118.329433][ T4318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.367705][ T4318] rust_binder: Error in use_page_slow: ESRCH [ 118.367730][ T4318] rust_binder: use_range failure ESRCH [ 118.374226][ T4318] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 118.380803][ T4318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 118.391212][ T4318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:578 [ 118.817845][ T36] audit: type=1400 audit(1756252294.163:571): avc: denied { setopt } for pid=4339 comm="syz.2.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.848451][ T4341] x_tables: duplicate underflow at hook 1 [ 118.945904][ T4356] overlayfs: failed to clone upperpath [ 118.951961][ T4357] overlayfs: failed to clone upperpath [ 119.229577][ T4373] rust_binder: Error while translating object. [ 119.229601][ T4373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.236232][ T4373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:406 [ 119.246593][ T4373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:406 [ 119.339979][ T36] audit: type=1400 audit(1756252294.693:572): avc: denied { read } for pid=94 comm="acpid" name="mouse2" dev="devtmpfs" ino=670 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 119.373360][ T36] audit: type=1400 audit(1756252294.693:573): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=670 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 119.396942][ T36] audit: type=1400 audit(1756252294.693:574): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=670 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 119.544366][ T36] audit: type=1400 audit(1756252294.893:575): avc: denied { execute } for pid=4415 comm="syz.2.1366" path="/dev/rnullb0" dev="tmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 120.163532][ T36] audit: type=1400 audit(1756252295.513:576): avc: denied { bpf } for pid=4455 comm="syz.2.1378" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.186603][ T4456] netlink: 'syz.2.1378': attribute type 32 has an invalid length. [ 120.254897][ T4467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.254929][ T4467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 120.266684][ T4467] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 120.278934][ T4467] rust_binder: Read failure Err(EFAULT) in pid:420 [ 120.312246][ T4478] netlink: 'syz.1.1387': attribute type 4 has an invalid length. [ 120.355913][ T4486] rust_binder: Error while translating object. [ 120.355953][ T4486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 120.364047][ T4486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:427 [ 120.394906][ T4488] rust_binder: inc_ref_done called when no active inc_refs [ 120.433582][ T36] audit: type=1400 audit(1756252295.783:577): avc: denied { create } for pid=4491 comm="syz.3.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.462227][ T4492] rust_binder: Write failure EFAULT in pid:431 [ 120.521146][ T36] audit: type=1400 audit(1756252295.873:578): avc: denied { execute_no_trans } for pid=4497 comm="syz.3.1396" path="/151/file0" dev="tmpfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 120.657389][ T9] rust_binder: 4508: removing orphan mapping 0:8 [ 120.667462][ T4516] rust_binder: Write failure EFAULT in pid:602 [ 120.964281][ T36] audit: type=1400 audit(1756252296.313:579): avc: denied { mounton } for pid=4536 comm="syz.3.1409" path="/156/file0" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.340919][ T4569] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 121.352300][ T36] audit: type=1400 audit(1756252296.703:580): avc: denied { relabelto } for pid=4568 comm="syz.3.1420" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 121.955324][ T4582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.955358][ T4582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.962989][ T4580] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 121.984909][ T4580] rust_binder: Write failure EINVAL in pid:619 [ 122.031106][ T4595] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 122.299186][ T441] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 122.449195][ T441] usb 1-1: Using ep0 maxpacket: 32 [ 122.456332][ T441] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 122.464909][ T441] usb 1-1: can't read configurations, error -61 [ 122.599184][ T441] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 122.627477][ T4609] can0: slcan on ttyS3. [ 122.759189][ T441] usb 1-1: Using ep0 maxpacket: 32 [ 122.777077][ T441] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 122.786471][ T441] usb 1-1: can't read configurations, error -61 [ 122.793100][ T441] usb usb1-port1: attempt power cycle [ 122.869526][ T626] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 123.031057][ T626] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.045007][ T626] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.052791][ T626] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 123.064296][ T626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.075406][ T626] usb 4-1: config 0 descriptor?? [ 123.149274][ T441] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 123.169615][ T441] usb 1-1: Using ep0 maxpacket: 32 [ 123.177465][ T441] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 123.186578][ T441] usb 1-1: can't read configurations, error -61 [ 123.301702][ T4609] can0 (unregistered): slcan off ttyS3. [ 123.312592][ T626] usbhid 4-1:0.0: can't add hid device: -71 [ 123.321214][ T441] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 123.330695][ T626] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 123.342581][ T626] usb 4-1: USB disconnect, device number 47 [ 123.359478][ T441] usb 1-1: Using ep0 maxpacket: 32 [ 123.368672][ T441] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 123.377597][ T441] usb 1-1: can't read configurations, error -61 [ 123.384711][ T441] usb usb1-port1: unable to enumerate USB device [ 123.531718][ T4660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1438'. [ 123.840745][ T4666] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 123.891710][ T4668] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819718256 (180461968384 ns) > initial count (8435122816 ns). Using initial count to start timer. [ 123.925583][ T4668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.016116][ T4671] netlink: 'syz.3.1441': attribute type 4 has an invalid length. [ 124.031887][ T4671] netlink: 'syz.3.1441': attribute type 4 has an invalid length. [ 124.043156][ T4671] rust_binder: Fixups oob 156 120 160 164 [ 124.043180][ T4671] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 124.050381][ T4671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.060080][ T4671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495 [ 124.072662][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 124.072678][ T36] audit: type=1400 audit(1756252299.423:598): avc: denied { execmem } for pid=4672 comm="syz.1.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 124.129976][ T4682] 9pnet_fd: Insufficient options for proto=fd [ 124.266845][ T4692] netlink: 'syz.1.1448': attribute type 1 has an invalid length. [ 124.280467][ T4692] netlink: 'syz.1.1448': attribute type 2 has an invalid length. [ 124.359238][ T626] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 124.520814][ T626] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 124.532518][ T626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.544604][ T626] usb 4-1: config 0 descriptor?? [ 125.089547][ T36] audit: type=1400 audit(1756252300.443:599): avc: denied { write } for pid=4699 comm="syz.0.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.096500][ T4705] overlayfs: failed to clone upperpath [ 125.115075][ T36] audit: type=1400 audit(1756252300.443:600): avc: denied { nlmsg_write } for pid=4699 comm="syz.0.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.439148][ T441] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 125.590478][ T441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 125.602887][ T441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 125.613522][ T441] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.627230][ T441] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.13 [ 125.637208][ T441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.646790][ T441] usb 1-1: config 0 descriptor?? [ 125.652926][ T441] usbhid 1-1:0.0: can't add hid device: -22 [ 125.659428][ T441] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 125.718852][ T4721] overlayfs: failed to clone upperpath [ 125.761702][ T36] audit: type=1400 audit(1756252301.113:601): avc: denied { relabelfrom } for pid=4728 comm="syz.2.1460" name="NETLINK" dev="sockfs" ino=26103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 125.826267][ T4737] overlayfs: failed to clone upperpath [ 125.843060][ T4739] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1465'. [ 126.020904][ T626] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 126.036539][ T626] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 126.037231][ T36] audit: type=1400 audit(1756252301.383:602): avc: denied { ioctl } for pid=4762 comm="syz.1.1474" path="socket:[26135]" dev="sockfs" ino=26135 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.052534][ T626] asix 4-1:0.0: probe with driver asix failed with error -71 [ 126.101356][ T626] usb 4-1: USB disconnect, device number 48 [ 126.608509][ T4771] rust_binder: Write failure EINVAL in pid:500 [ 126.906365][ T4800] overlayfs: failed to clone upperpath [ 127.611286][ T36] audit: type=1400 audit(1756252302.963:603): avc: denied { append } for pid=4823 comm="syz.3.1492" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.677929][ T4831] overlayfs: failed to clone upperpath [ 127.755723][ T4841] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 127.800399][ T4850] 9pnet_fd: Insufficient options for proto=fd [ 127.846740][ T4860] overlayfs: failed to clone upperpath [ 127.886586][ T4870] overlayfs: failed to clone upperpath [ 128.094802][ T626] usb 1-1: USB disconnect, device number 56 [ 128.451315][ T4887] overlayfs: failed to clone upperpath [ 128.490281][ T626] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 128.631286][ T4905] 9pnet_fd: Insufficient options for proto=fd [ 128.635483][ T4907] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 128.656063][ T626] usb 1-1: device descriptor read/64, error -71 [ 128.919266][ T626] usb 1-1: device descriptor read/64, error -71 [ 129.169190][ T626] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 129.197122][ T4926] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.209146][ T4926] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.223348][ T4926] bridge_slave_0: entered allmulticast mode [ 129.233715][ T4926] bridge_slave_0: entered promiscuous mode [ 129.245525][ T4926] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.255107][ T4926] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.263684][ T4926] bridge_slave_1: entered allmulticast mode [ 129.272719][ T4926] bridge_slave_1: entered promiscuous mode [ 129.309147][ T626] usb 1-1: device descriptor read/64, error -71 [ 129.371087][ T12] bridge_slave_1: left allmulticast mode [ 129.378147][ T12] bridge_slave_1: left promiscuous mode [ 129.384738][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.399950][ T12] bridge_slave_0: left allmulticast mode [ 129.406607][ T12] bridge_slave_0: left promiscuous mode [ 129.412991][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.549274][ T626] usb 1-1: device descriptor read/64, error -71 [ 129.595276][ T4950] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 129.611978][ T4926] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.620762][ T4926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.629527][ T4926] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.637649][ T4926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.647106][ T12] veth1_macvtap: left promiscuous mode [ 129.653875][ T12] veth0_vlan: left promiscuous mode [ 129.659407][ T626] usb usb1-port1: attempt power cycle [ 129.721951][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.732649][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.756620][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.765858][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.777096][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.784713][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.832482][ T4926] veth0_vlan: entered promiscuous mode [ 129.856905][ T4926] veth1_macvtap: entered promiscuous mode [ 129.886471][ T4965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1538'. [ 129.927728][ T4968] rust_binder: Write failure EFAULT in pid:2 [ 129.947952][ T4971] input: syz0 as /devices/virtual/input/input26 [ 129.966921][ T751] udevd[751]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 130.009175][ T626] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 130.040890][ T36] audit: type=1400 audit(1756252305.393:604): avc: denied { ioctl } for pid=4882 comm="syz.0.1513" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.041678][ T626] usb 1-1: device descriptor read/8, error -71 [ 130.198802][ T36] audit: type=1400 audit(1756252305.543:605): avc: denied { read write } for pid=4973 comm="syz.1.1541" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.224768][ T36] audit: type=1400 audit(1756252305.553:606): avc: denied { open } for pid=4973 comm="syz.1.1541" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.225071][ T626] usb 1-1: device descriptor read/8, error -71 [ 130.445317][ T4991] overlayfs: failed to clone upperpath [ 130.489197][ T626] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 130.521264][ T626] usb 1-1: device descriptor read/8, error -71 [ 130.650539][ T626] usb 1-1: device descriptor read/8, error -71 [ 130.769309][ T626] usb usb1-port1: unable to enumerate USB device [ 130.798775][ T5017] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 130.832167][ T5021] rust_binder: Error in use_page_slow: ESRCH [ 130.832184][ T5021] rust_binder: use_range failure ESRCH [ 130.840268][ T5021] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 130.853071][ T5021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 130.862243][ T5021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:19 [ 130.886562][ T5026] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1557'. [ 131.065008][ T5038] kvm: kvm [5037]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 131.142770][ T5042] /dev/loop0: Can't lookup blockdev [ 131.225792][ T5048] overlayfs: conflicting options: userxattr,redirect_dir=on [ 131.236105][ T5048] 9pnet_fd: Insufficient options for proto=fd [ 131.245851][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.288655][ T5056] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 131.499459][ T36] audit: type=1400 audit(1756252306.853:607): avc: denied { accept } for pid=5063 comm="syz.0.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 131.923637][ T5071] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 131.958031][ T5074] ------------[ cut here ]------------ [ 131.963810][ T5074] WARNING: CPU: 0 PID: 5074 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 131.974020][ T5074] Modules linked in: [ 131.978848][ T5074] CPU: 0 UID: 0 PID: 5074 Comm: syz.1.1573 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 131.994550][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.007462][ T5074] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 132.014650][ T5074] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b1 25 ee 05 00 0f 85 be 00 00 00 c6 05 a4 25 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 132.036585][ T5074] RSP: 0018:ffffc9000baef680 EFLAGS: 00010246 [ 132.044530][ T5074] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 132.053607][ T5074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000baef738 [ 132.062993][ T5074] RBP: ffffc9000baef7a8 R08: ffffc9000baef737 R09: 0000000000000000 [ 132.072988][ T5074] R10: ffffc9000baef720 R11: fffff5200175dee7 R12: ffffc9000baef6c0 [ 132.083277][ T5074] R13: dffffc0000000000 R14: 1ffff9200175ded4 R15: 0000000000000000 [ 132.093058][ T5074] FS: 00007f7defb1e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 132.105669][ T5074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.113510][ T5074] CR2: 0000200000006000 CR3: 000000013e94c000 CR4: 00000000003526b0 [ 132.122105][ T5074] Call Trace: [ 132.126015][ T5074] [ 132.129548][ T5074] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 132.136841][ T5074] ? kasan_save_alloc_info+0x40/0x50 [ 132.142615][ T5074] ? __kasan_slab_alloc+0x73/0x90 [ 132.148658][ T5074] ? hashtab_init+0xdb/0x1f0 [ 132.154751][ T5074] ___kmalloc_large_node+0x9c/0x1d0 [ 132.161452][ T5074] ? ebitmap_read+0x21d/0x990 [ 132.168478][ T5074] ? hashtab_init+0xdb/0x1f0 [ 132.175368][ T5074] __kmalloc_large_node_noprof+0x1e/0xe0 [ 132.182063][ T5074] ? hashtab_init+0xdb/0x1f0 [ 132.187905][ T5074] __kmalloc_noprof+0x26d/0x450 [ 132.193303][ T5074] hashtab_init+0xdb/0x1f0 [ 132.198197][ T5074] ? policydb_read+0x86f/0x28c0 [ 132.204648][ T5074] symtab_init+0x44/0x70 [ 132.209379][ T5074] policydb_read+0x8fe/0x28c0 [ 132.214440][ T5074] ? kasan_save_alloc_info+0x40/0x50 [ 132.219948][ T5074] ? __cfi_policydb_read+0x10/0x10 [ 132.225458][ T5074] ? security_load_policy+0x128/0x12f0 [ 132.231831][ T5074] security_load_policy+0x162/0x12f0 [ 132.237586][ T5074] ? irqentry_exit+0x4a/0x60 [ 132.243777][ T5074] ? exc_page_fault+0x66/0xc0 [ 132.249589][ T5074] ? asm_exc_page_fault+0x2b/0x30 [ 132.255801][ T5074] ? __cfi_security_load_policy+0x10/0x10 [ 132.262222][ T5074] ? rep_movs_alternative+0x4a/0xa0 [ 132.268585][ T5074] sel_write_load+0x298/0x5e0 [ 132.274207][ T5074] ? futex_wait+0x29a/0x7a0 [ 132.280036][ T5074] ? __cfi_sel_write_load+0x10/0x10 [ 132.286347][ T5074] ? __cfi_futex_wait+0x10/0x10 [ 132.291746][ T5074] ? bpf_lsm_file_permission+0xd/0x20 [ 132.297511][ T5074] ? __cfi_sel_write_load+0x10/0x10 [ 132.303569][ T5074] vfs_write+0x3c0/0xe80 [ 132.308568][ T5074] ? __cfi_vfs_write+0x10/0x10 [ 132.316102][ T5074] ? __kasan_check_write+0x18/0x20 [ 132.322468][ T5074] ? mutex_lock+0x92/0x1c0 [ 132.327749][ T5074] ? __cfi_mutex_lock+0x10/0x10 [ 132.334377][ T5074] ? __fget_files+0x2c5/0x340 [ 132.339825][ T5074] ksys_write+0x141/0x250 [ 132.345273][ T5074] ? __cfi_ksys_write+0x10/0x10 [ 132.351035][ T5074] ? __kasan_check_write+0x18/0x20 [ 132.358495][ T5074] ? fpregs_restore_userregs+0x11d/0x260 [ 132.365234][ T5074] __x64_sys_write+0x7f/0x90 [ 132.370421][ T5074] x64_sys_call+0x271c/0x2ee0 [ 132.375591][ T5074] do_syscall_64+0x58/0xf0 [ 132.380547][ T5074] ? clear_bhb_loop+0x50/0xa0 [ 132.386228][ T5074] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 132.393335][ T5074] RIP: 0033:0x7f7deed8ebe9 [ 132.398736][ T5074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.421994][ T5074] RSP: 002b:00007f7defb1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.431517][ T5074] RAX: ffffffffffffffda RBX: 00007f7deefb5fa0 RCX: 00007f7deed8ebe9 [ 132.441908][ T5074] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000003 [ 132.452582][ T5074] RBP: 00007f7deee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 132.462723][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.472334][ T5074] R13: 00007f7deefb6038 R14: 00007f7deefb5fa0 R15: 00007ffd4a910308 [ 132.482051][ T5074] [ 132.486716][ T5074] ---[ end trace 0000000000000000 ]--- [ 132.495362][ T5074] SELinux: failed to load policy [ 133.269225][ T934] Bluetooth: hci0: command 0x1003 tx timeout [ 133.269235][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110