last executing test programs: 2m54.384821856s ago: executing program 0 (id=1001): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ocfs2_dlmfs\x00', 0x200c408, 0x0) 2m54.336315s ago: executing program 0 (id=1002): r0 = getpgrp(0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) kcmp(r0, r0, 0x1, r1, r1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c0100001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000a8000580a400ce80a0003e809c00a0809800618094009d808d0063800400a500100090800c00198008001000", @ANYRES32=r2, @ANYBLOB="040070800c001c00090000000000000008002e00", @ANYRES32=0x0, @ANYBLOB="2800deff1adbf3800800630065c1be07c3d499b4654994d9d8bf5aa8a6aba3d7e8355a33b358ff8e7347b0b1e36bdd0ba3496fa490da3ea11a221f380001000086dfc1e10e82452c1091c379f23b4f03b0bdca9851b95ca5349b8e6fb0986f1019fca8ba3244db0988515ab53f0d7fd1ab8cad93a44ad7d5826df47bcfb3e8e78e90d62b10c00c03c0b0ae6cc13b5d1a1b", @ANYRES32=r2, @ANYBLOB="1c00328008000800f7ffffff0400888008002f00640101010400148067bc0ca816bfd690a5b2bc965f642f86fcbaa1ef938c5fa66781695122165b300ce9a004e74d8dd0acd8aea39f0cf5ea1f0400b880000000"], 0x10c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$MRT(r2, 0x0, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) getpgrp(0x0) (async) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000180)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) kcmp(r0, r0, 0x1, r1, r1) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c0100001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000a8000580a400ce80a0003e809c00a0809800618094009d808d0063800400a500100090800c00198008001000", @ANYRES32=r2, @ANYBLOB="040070800c001c00090000000000000008002e00", @ANYRES32=0x0, @ANYBLOB="2800deff1adbf3800800630065c1be07c3d499b4654994d9d8bf5aa8a6aba3d7e8355a33b358ff8e7347b0b1e36bdd0ba3496fa490da3ea11a221f380001000086dfc1e10e82452c1091c379f23b4f03b0bdca9851b95ca5349b8e6fb0986f1019fca8ba3244db0988515ab53f0d7fd1ab8cad93a44ad7d5826df47bcfb3e8e78e90d62b10c00c03c0b0ae6cc13b5d1a1b", @ANYRES32=r2, @ANYBLOB="1c00328008000800f7ffffff0400888008002f00640101010400148067bc0ca816bfd690a5b2bc965f642f86fcbaa1ef938c5fa66781695122165b300ce9a004e74d8dd0acd8aea39f0cf5ea1f0400b880000000"], 0x10c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) getsockopt$MRT(r2, 0x0, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) (async) 2m54.33595268s ago: executing program 0 (id=1003): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffd) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sync_file_range(0xffffffffffffffff, 0xf1ad, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@flat=@binder={0x73622a85, 0xa}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000380)=0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0x2, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x5f4}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @flat=@weak_handle={0x77682a85, 0x0, 0xffffffff}, @flat=@binder={0x73622a85, 0x1001, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)) 2m54.325084001s ago: executing program 0 (id=1004): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000180)='./file0/../file0/../file0/../file0\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000001940)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x81, r3, 0x0, 0x0, 0x5}]) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) listen(r2, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 2m54.314809891s ago: executing program 0 (id=1005): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000009880), 0x380, 0x0) mount$incfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) unlinkat(r2, 0x0, 0x200) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x45, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003d1a1310210409000000010203010902330001000000000904b400000202ff0005240600010524007f000d240f0101010000000802000006241a0c0010042402"], 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) 2m54.144359185s ago: executing program 0 (id=1006): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x6, 0x0, 0x129, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0xfffffc48, 0x800, 0x0}, {0x1, 0x0, 0x180000, 0x0}, {0x1, 0x0, 0x3cb0, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x3, 0x0, 0x4e00000, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x7ffffffe, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x200000, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x8001, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m54.143850015s ago: executing program 32 (id=1006): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x6, 0x0, 0x129, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0xfffffc48, 0x800, 0x0}, {0x1, 0x0, 0x180000, 0x0}, {0x1, 0x0, 0x3cb0, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x3, 0x0, 0x4e00000, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x7ffffffe, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x200000, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x8001, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 6.382497177s ago: executing program 1 (id=3881): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) listen(r0, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f00000000c0)=0xffff, 0x0, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x300, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x44014) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) io_setup(0x4f4f, &(0x7f0000000100)) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x46b5d000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r2, 0x0) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1800, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x1c, "002546e3aa02e11c073919e6c41dc85e57c0237166c771252d19ead294cdce6f1e7a3bff3c6c07705e99f7906e044e246f726495c45e9400", "131baeb9c2f06041a56fa2b226bb94ce7cadf37e68998fe9d212f3fb142a3fbbddaa414ad649560324442700", "e978332d4728ebf2cab7d407b8f8e318743509536547e06c6548ffbca79e0f83", [0x0, 0x8]}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2982, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000029c0)={'pimreg0\x00', &(0x7f0000000280)=@ethtool_rxfh={0x47, 0xf4, 0x7, 0x6, 0x4, "c48469", 0x9, [0x5]}}) ioctl$TCXONC(r7, 0x540a, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6.298177783s ago: executing program 1 (id=3882): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'macsec0\x00', &(0x7f0000000280)=@ethtool_cmd={0x8, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x0, 0x9, [0x4]}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x138}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000540)=[@request_death, @transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000000)="6b724b2bb14db9a06d472403034e766a5a8de7130e6db5760134d051e86b6d1fb8d772ecbde8e7ac4758509fcd0895ab3d3c78942acce92d0c89e2cbfdf89adff9ad28be6437aebb6c5e94f4fd20007e"}) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) 3.258293068s ago: executing program 1 (id=3913): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a80, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = socket$unix(0x1, 0x1, 0x0) io_setup(0x66eb, &(0x7f0000000080)=0x0) r3 = eventfd(0x5a21) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x3899, r1, 0x0, 0x0, 0x4, 0x0, 0x3, r3}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e52000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000240)={0x20, 0x0, 0x45, {0x45, 0x30, "3b65178197f47af56d16011c223195f81f498052da0333ddbb348e9187148f258ce1c51708ff7f000000000000465ec4c94d51a60f84a4bfa30c43ce1055c03a000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106a05bb0000000100000109022400010000ee05090400060103000000092100000001220500090581030078324a62b2e0403fe91b1db9d59e5481869f40ff0efdb6e23e02d59aa4978c5c36acdc9df481f1c0dcce6c6f7ec23b65c68a48ca6bc30fed704e0f4288a79668ed9f6e96adb321fcbd4e735ee0ae4584cd3ad132215d538b045033f3e60a77b7905649a6a65bba4b963783501c2168af52512e0c77961d2da8cc7508fcc7d3f088ccd79a58a1d6818c9c6427f6f0750ef34aa54de12c6b22d3fbadd956c5f8864c264619b85325b6659479ec945747b78ca17e4680475a91281ecec428ed8842d0acf3002924f1242b6bd884fd7ac307263027be21d1159da864387c538f08b9cce12e36f6f8af30e15c3ba3f9ce547f88d28fd0e3b1a84d6cc0ed3bef9c5ac60c436c6541fdeb4c7aef7924aca547ede63ab786582fbe96a8e73937ba7715db4d73e2c48e703a49b1c4"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="2005b0"], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.924308175s ago: executing program 2 (id=3931): openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x4100, 0x0, 0x14}, 0x18) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) pwritev2(r1, &(0x7f0000003300)=[{&(0x7f00000000c0)='r', 0x1}], 0x1, 0x8, 0x7, 0xa) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x9, '\a\x00'}, @main=@item_4={0x3, 0x0, 0xb, "dddc6011"}, @global=@item_012={0x2, 0x1, 0x3, 'e`'}]}}, 0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 1.376260389s ago: executing program 2 (id=3950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000000780)=""/4103, 0x1007) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10c) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.375796199s ago: executing program 2 (id=3951): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1000, 0x9, 0x4, 0x0, @loopback, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r3, @multicast2, @broadcast}, 0xc) ioctl$HIDIOCGRAWPHYS(r4, 0x4004480d, 0x0) fsopen(&(0x7f0000000000)='pstore\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.315774144s ago: executing program 2 (id=3952): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @register_looper], 0x0, 0x0, 0x0}) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x60) fcntl$setsig(r1, 0xa, 0xa) 1.208269833s ago: executing program 2 (id=3954): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}]}}) (async) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e29, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffc01}, 0x1c) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x10, 0x6, 0x4a, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @mcast2, 0x40, 0x700, 0xc, 0x8}}) (async) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006b02"]) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) copy_file_range(r12, 0x0, r12, 0x0, 0x101, 0x0) (async) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.11903914s ago: executing program 2 (id=3955): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20, 0xb0}, {0x0, 0x100000, 0x4, 0x0, 0xffffffffffff235b, 0x8007, 0x9, 0x1000000}, {0x0, 0x10000}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x3506, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000, 0x5}}, 0xe8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00000fd000/0x400000)=nil) socket$packet(0x11, 0xa, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r6 = eventfd2(0x6, 0x800) clock_gettime(0x1, &(0x7f00000001c0)) io_getevents(r1, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) io_pgetevents(r1, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) io_setup(0x1, &(0x7f0000000040)=0x0) io_getevents(r7, 0x3, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000200)={0x0, 0x989680}) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000240), 0x8ff3, 0x654000) 725.536482ms ago: executing program 4 (id=3959): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32, @ANYBLOB="08000300000000001400020076657468315f746f5f627269646765000800030003"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x40008d4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@rand_addr=0x64010100, @empty, @rand_addr=0x64010102}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000740)={0x30}, 0x30) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r6, 0xc028aa03, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10010, r5, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x11, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000180)={0x50, 0x0, r10, {0x7, 0x2b, 0x400, 0x2000, 0x7, 0x4d, 0x7, 0x80000001, 0x0, 0x0, 0x1, 0x4}}, 0x50) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @multicast1}, 0xc) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r11, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) 572.474054ms ago: executing program 4 (id=3962): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x4d, 0x0, &(0x7f0000001840)=0x1c) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, @nested={0x4, 0x37}]}, 0x34}], 0x1}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x2020, 0x4) 524.472768ms ago: executing program 4 (id=3964): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 524.044628ms ago: executing program 4 (id=3965): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x100001) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000003c0)=0x1) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000024d564b"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$xdp(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x2c, 0x2, 0x0, 0x7}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000180)="abaca8c1717fc59271a76836e226a42fc97be0ecb861d0a7e75ea811cf70108f74a3f4e690a48a0f0398af395a262b802324d58e1cf473456a48d24da14ea10dd34a500862cc4aaaf5deb3c118be05d7ff6ebadbd71675045d8788524e681016a761c90b7ebabc7012ca59d949c8f3443a475d37dc41aed460bef96e6d6a6e6002277d9fe2f7f3b801e8e675bcda916cc198d524c0244cf6ff38f5104cea90a04ce532a94ffdc6996249067f57a309effdc5993b65241905cb59690282aa0ca7", 0xc0}, {&(0x7f0000000240)="8d294152928522c86ed6dd229299b6b7c705d561381c3f59fca0a649387d47b4de7d695ff0e3643982e45705b1ba643f78cb6efd6f8626e23af520370e106b2d2a423aa062a58b2b346d2d7089ba67cd722a9c5ad09d95210c354f094cd562ecf145e1880329ae26985da5696bcaa1a0ad3eb38dfd569e5d45733446b3519cbb00", 0x81}, {&(0x7f0000001180)="18bd2c1d3a4576fa0907a06d0cbf068e0e2588f993780f500433e84662ecc8771bcbf31f30ed4ae09edcde446085326eebf23bcca52b7a8047772bbdbe038f70369a2fbd2c7016387f8fb7293be62c4839e6ae494d3201ccd5c9984672f926f794651afde950a24d11ef1ce690716cf15824cdf6a2e42d6ef5a6ba49d5f6feff8b61b82ce4e5a3ff7af67e4d1ce3f34211a72f45b541fc0dc526aa98e100bd778bdc36e0569a48193fecded49d2c079296418945c73a7cb7a4c2ddc398a8b2f7e478b900a776d3b795d45dbf339e74b963c667731cfe2a08815548705ddc199eb769f77dc33d113088668a2d5053a7f13e2c789d1d981e3458e73fd5f1776554cdc14f359dbb5868c956ea0fe12d1f143d9de87d48e2a636a5b5af61df8c849800b68ebedcba1d3e1a8013d4ffc3bc6f5f7a7405efa1fdd95541d1c4d5050f417183a27427cb56faa46c4db9dab376d4db7e6c7d5e7a12230bcadfc08c0730d63d189a70620c37d8cc4483731e896f2a541cee6c4c5260b8f573b827644b2edd03227ea7406bd771a83d04f12516a4d3604a5b26994e530402a1731d3013d6ac44f98da5028fd268ce5dfbcf58064cb376c3d1472c412ae865251e87249af3a1f4e047099d6a436cb46a5c1929bdc1b8c23ee2bc8251827a648455eae875f0073f858ed649f920bda2380c0f75323d51bbf6c3f41d698749adcf1b68aabab398d5a266fb82749dcfefbc27b8a15f75d5dbf4a38a2abdf36678358315521cce81bac8c91deb755230f00d82218b7be6553696d79af32bc469137c6c051ae04bc0980da00c62940b68a3f6e27e0388920c9710e1e7e85c120a4b40284ed208848f91079ca7c3d5741b2aac37ec7f93963ffbc6122ee8715d3c0bb58ae55fe6008af5483b1f599633fe94d4b819ac96b919d03fef23d3baeb1fe8d3fac2f4b487db6e90078797af87d393b9cbae045c5c1092f243dbd8035ca83266a46ec87ffde11991c1bb97cf8f3cd7810baff9908c4cc5c1d7eaedcad839126eb3310f27bd4d197a6ac6a12651fd71e2d272cedcb701af6fca43184506e6e34cd1ee0f33aac82ef1d61a8e6682c7358ca4b995b24c49d95ee82d35fe2b4292cc7fc0615356594d94f44a00fe74893bd6f4b6b3c6d53148223be51b167dd486387ddffea5199dbe2d139ad8045c4ccf9da9bd59c1d289ec11aabea481c96350e3ccd3f569dd60cee7457ea340c4db60364f097bf11dc12d7a85e489690b1ad1da0d1778032c96f68984eee805af77bc1f8a8aa91b565f046a4e2ac05770883f66998d1fbcd82a9d72b416ef29b5908b368dd4756b89625adb0d6602a9d3929d737a58b635329a282c62a5e710dc28ecb6dac2f837a952fd08fe0d0df78784b090a96ffa276e8f6e43691756c53b81761660d948b4fb1e9775a10314f52a549ee4000285a488fcfb3c14cdd3eaaed544df1c2af45ce7218cff39035bb94ee8ec5414c8548953402921688598796ae0adefe6a87d230c19982f51779c8379d90e91c0dc2ca4ce14b6d6f984de3cd31f0c9348f3123bf7d494822131045f4e0a1beb0654770c5aa72c530c2c324250b920779c6d326a3eb8547271703c96a73d11e44ba1254a73d78af6977059dc9afc2753fc99935f58622dce24771aac6ec3f42925a46af4dbef6da577b1bfccbf147f21e49d16b1c96f3b7e5a9c72013401d0b3855fddf9fb1b69f682d13b76c5fe3ed55ff9eb4c752e603a5a4b17444ce7dd779c39a8f8c29f9a392758a440f61c5968aa5606b3413ecf5d673cd241e5245571d9548ecf9069ae9ffc39b39bc8bd0e6a92055fe1b41aee3f17edd02f93e03ce84ee5a9f13d01b24dbad0d2eaf6266af8040d59e0d51902000c565071b27d4f6020f6d03b70259402f5f29dee80eabce1038eb9e4a67d83811a11cae523b76cdd815827bd0425c66b9cb09787268496c0a49c06c45533061580412b5d85e386a037fdc189c48b4d49bd716fb020e313059bff68fa7bbbfac5dbb286d7b02034a533fa3fadfd178f4069fc7c76f83e619ee67e663d7ec80018631c32882f0ff74cf4d906f312975781fdfedd37dd95381fbd0151fabb2895eedb0c3b479096d84cecd8fd17e36bb7e4294350c7bb090768014555fe58c609e964e8af14c93582f2f5c912dededeb18374566687d2715be2464ebf1831eb44bc05ffe3862e653188c3493b917bdd4751e5fffdac58809716aa461d52433b09b05bc8c8596fa6b61368ff35c870435d6c18621b8bf22993af3a68aacc59079b36060ae7c8431fcebde4893341e0a1b9984eedfc78ba6797880775b50ede9024ff6ef86ae66f13d8aa89f82559057f556e9a19ba953e32d26c49b420cda25cbb9ec059f5e88a2e74d4e2c7a4360f3292f34ab9ee5af6bcb47d98463636819199b1716d5ccb80142967f25e8ac0e4ab1b0c45955e8342508794b9274445ac6609c8f139948574ee7984c1e24bc5d1451e2c5f35e8d543b8ead5e67f3855791039db5c43f0bf8ab0322c0c6c3a31edc66c809a23b46f294857668f0c7bdb4e1a5c0c20e7589a89a225e0422348ba339be1c78d4176a8846d3a9182ae95b0c0dc18a29cfc43499436f73350533fdff2de7430080008be75c90e616a6eb276073fa1c4a8eaa401af479a6d03c9383b3507a6986fb9a6b086518a61c2436be85ccee1d1851f1c8f59f750e56db167f30f91dedfd041e2600cda0bddb8e2d8fb73078061c4ea8a6c128d93f36219ef90f3375fb0915e4876d3461078639bab4ab393b3ac04149f1111639a35d5bf033a5b48fc366209f4834f17d5ce04f822e0f3eac09c4d70f3e366c8f0be917bb008d1fab0c63a61eab56888f4148329dcc681cb0af9dfe60c99f6785d1dcf252c356d0951a2d8d9bae8fdec4e19ab72a9b8faeddecf9cccace47e21944c4096ff8d73a69b5a0afd1e3630c1c2e2e1941d03e3c98abdd4c988063e5dba276a7fc5791c78c141e5edc3ff529c9ef979a65298a6fbc7d819b814d2f4f8bb042a7c4d9155b8c2161b0f7276720a2ae0bbc3e169267ac4ac97523fd415b7da4daafdd5e7c6a320c6d183cc750ff10efa2c8b03ab2e194139a8999b5206c3ed73dcedab483ed07398c3e0767d96a63ccd5c0de549988e6d65ba79268c95a104f40196dc8bec6d2b0199008d5a79a8eba1ab8acee1cb80486b2ecdef649728c15ec62952276048595bb60806311639343973b14953658c987020304974e4dd5cd6db2760ebf913bf55b3ce400355abf5f663055baec706bbc31035a43afd2754407736328e6316fa2365fb4fee3406b54e7484dcacf47c6e8d939f839325a94583c42c59ef4801f6eaf2bd9fcbbf2832a0a7a2d43f8956541d85d5ac4eaf85c9aa65b3d73f5e127b61fbcd273d1a4c5e4b10a6589cabb1c4e2fd73aafc1897eb6d04047e1505084252ed0dfac44250485cfc40ae95c3de45bcc215cc61ab07255e4e6c6af58aa24a4a39b057101b152457e28f64b288e0941c8367e126c53013409794481b503e27dc1e6029acdd2003c6376d7f385acd3fb121b690e751c98d5952137dde72a96019ac112dfb3ea2057a419f24c52fe0aa1d46407519bfa92d965363423d8ac43d2acf69a61dbbf456bf728672137eacc0c36952e05166efe1cab66740b7f7c43d1ecc04b8f351d2f558399a16267924b2479458dfb6b625c446ca258dada6a542a9ee7e54ec1b19bdc9ada1f3dabb53fad5d0fe5695431c4601c6d3d74249daf82cf73fbeaa3afe9e741d0f6cd22d3ce2182ea8b1a65fae989ee21033cb42460ccee01ca9dabdda7acc01210761de8fc5161b75143921fc78b2dbc1b9ca0d84202baa85141ffd49009e05a00411f1517b63024e834c08d71a4ed43020b96a4af6af2bf6dd5331f011cf0479fe6f9615eabe2f5e353f63b86daec40c5445dc7a931034ed2b9fd85fc4bae456beacf7b4e308b2476334be2c16e168ece86395a3796dfdbcbd0bbffc7789a339acdaccf72af8a4f5f53bbebfe857564f125e81aaae59c4f7ac59fa52918c5584480c373f2f6bebbb694f1b1331bc828bc2766fd27f68509b8af5efea5f38f81378f23a3f1563d938f338c978f099f10e8decee7aa8ada31102ac413812aa0721829f48059e09629b7abcd18e3e16aa4f9ed0e8286047137d97e6ac14fd0d23bfbc2847b0d3a06e64afce83035e3ef85b105062d479b7d3ba41d362539d1f54b001432061a2a50056d4c4a5c7f36652dde062236db377302a8c9d9867232bf42ccccc6b2f2df423d5f2f6eb1c5d15d4828e0377d867d8cb29227790ac1469ef73a2182322365525014ed7a6fdbe12264f4c484e41ff1db90a587f4ae283f970cc9e70442abffcd5dee2833bd33c0e1eec55fd19f3d44959cda2d25bc2861fc5d5886c2bc05bcf1054defe2388abe4a0d362bbb69859dc7c19b7a7f2218d725ca650f25619efc5a9c5b44a9e1c81b29b3b5103b77869e5cc7f55af2d1f38632063220c99ae3e12008463699c2203c81148d9796386236a0d1b8fcb8fc7e677b1c17618f49b70f5a0f2334d0c705ac732b06d63cd8a5ac21ec250cbe841cc0cdfec36cba35daa4ab6295084efa95463f32cf24a1e198e99e4bf000ec2433b1176beaf0d9f0585e21fe2d0eb4c3106053b28f70e1377fe0e10cdafafd165e85f37dbe46d933def834de0634374085ef02ba83eaf9c434de0db3a214c20a79bc3b22b603d9acaa4026c3c56615664315829918609bb3bdaebf2b23214734da340871c5ceb1204b103a78e0d068bc9714b2c191a64e6bed190bd3cf4b65ee842903b5f7f5a709aa00b23e04e75d30902f65e440ae695cf87ec8167d0744615a625ec47151dfbe1700ddbc1bb146e15778eb232c1a3b647080209adde5dbb2daf594d5a5411b993f10f26776babdfc08368037437e6ea7304c0902ae723386ca853dbaaa3a7a2e3ed33fa12fb1943d9dbbe1a6dd825464b0b4e5bb9d691bd02535c8575cc3b50bc22f0345e7bd29d015ae661148f9736004d995fb6c97cff493e29c4f8513fbfe7176c72bf9c33b32fa4e1bb472b47420df5c23e8eb3c6961127b3a02deb5f113fe94e37afffc613140deea0938d84aa4e41d52cf9d9efc8798f2684f55ef238e92ffec1e4a91d30d06277c31620d3c47adc7d2dc9069db29f3360becf323e861d14f7910b139bb41cfa69df87a8ce9c6fb759167c5f9858570273c3fdb54e1155cc5ccb64ea0c488223c41241452f11cf2ac9db7d9417d6f5353c633a9fec6412161957e8ac01e567124f2db0150aa9126f6e29dd1f5dcc6d32df0f53668effda38ad854574863fba1f448e2cae5a1f0cc8bab24fc128397b3cfb213c7971d3845d0bd2be2272b4c1ca65a45eef2fc17326300bc42a0a9983790ba7d72d8333a6f5ed8c9204d6ed5a1170da325b1eca19a9362fc28b85747f3c84cef113cea4ec57acec8f13a36feb741ae0937809799fd8cd0d38bec10a4f2584ac50a12d8a303060b8fce42621cf7fcb4f7c04726937f73fcb70947a8319309a53a783b411b3fe2a5d910d7aa5108f5e08fd7ece82d4fef032b25834424fe0ad9440c54298407124956dddb6fd8ab02b054906718aec41bf0ffd785d59ebc3abe16e2d5733c3d3d258e8831fe0474061567e9f85ab36a2d3564c9e0ae928f74daeac0a85a4491e934e7753f366cf6391241a3afc5e87c7ba1555b9bb9be5df0b8ba449a93c901aa37b6d632f3db10aee2ee2e030b9dc8766b9b01cdd9f631b17bff970a8c2b3834ca8766f09ca1dec7c80dfbd17f737", 0x1000}, {&(0x7f0000000300)="74b63d4295aeec1b7dd9fe02b84ca4482adcce5e4f3d56", 0x17}], 0x4, 0x0, 0x0, 0x85}, 0x4000080) madvise(&(0x7f0000b47000/0x1000)=nil, 0x1000, 0x11) r6 = socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0xc0002, 0x46) copy_file_range(r7, 0x0, r7, &(0x7f0000000040)=0x400, 0x100, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000963000/0x4000)=nil, 0x4000}, 0x5}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f00008b0000/0x3000)=nil) 377.83292ms ago: executing program 3 (id=3970): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) (async) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080003000d000000", 0x24) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000040)={0x0}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 362.656021ms ago: executing program 3 (id=3971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = dup(r0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x1, 0x3, 0xfd, 0x7, 0xa3, 0xc3, 0x0, 0x5, 0x81, 0x3, 0xa, 0xb, 0x100}, {0x320c, 0x8, 0xfe, 0x1, 0x5, 0x7, 0xc4, 0x73, 0x9, 0xa, 0x3, 0x2, 0x762c}, {0x1, 0x0, 0xb, 0x7, 0x0, 0x5, 0x1, 0x5, 0x2, 0x1, 0x1, 0x7, 0x5}], 0x3ff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e4000d"], 0x36) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) socket(0x10, 0x3, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x100) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x0) (async) r7 = fcntl$dupfd(r0, 0x0, r4) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000000)={0x2, 0x19d000}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000200)={'sit0\x00', @broadcast}) 352.327982ms ago: executing program 3 (id=3972): fsopen(&(0x7f0000000080)='msdos\x00', 0x1) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) 303.239216ms ago: executing program 3 (id=3973): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e4f000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) (async) syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc010000190001000000000010000000fe8000000000000000000000000000bbffffffff0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000001000000000000000000000000000000000000010000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000300ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000008000000000000ff020000000000000100000000000001000000003200000000000000e00000010000000000000000000000000335000003000100000000000000000000000000ff0100000000000000000000000000010000000032"], 0x1fc}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 302.172016ms ago: executing program 3 (id=3974): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) (async) preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/68, 0x44}, {&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f00000001c0)=""/179, 0xb3}, {&(0x7f0000000280)=""/163, 0xa3}, {&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/123, 0x7b}], 0x8, 0x7ff, 0x3c9330b0, 0x18) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x400400, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000680)={0xd, 0x8}) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000006c0)={0x0, 0x2, 0x101, 0x6}) (async) recvmmsg(r0, &(0x7f00000009c0)=[{{&(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)=""/164, 0xa4}, {&(0x7f0000000840)=""/133, 0x85}], 0x2, &(0x7f0000000940)=""/120, 0x78}, 0x8}], 0x1, 0x0, &(0x7f0000000a00)={0x0, 0x989680}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000b00)={0x2, 'macvlan1\x00'}, 0x18) sendto(r5, &(0x7f0000000b40)="f6887c22504a23e3c17ba4c810544823df85632cffa7727537405f4b16d058a5df40333af42a777dd81668ba824f0b068ae7d282b01bd03e53d0e240d3c9b913613b7e25e34de60eba1446eedec6c6c6f429237e90", 0x55, 0x0, 0x0, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000bc0)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000c00)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000c40)='devices.allow\x00', 0x2, 0x0) (async) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000c80)) ioctl$FS_IOC_READ_VERITY_METADATA(r8, 0xc0286687, &(0x7f0000000d80)={0x3, 0x200, 0x89, &(0x7f0000000cc0)=""/137}) (async) sendto$inet6(r3, &(0x7f0000000dc0)="577042947cb6a58ea5349b625a0e955c2fa18dfa5a58d4184fa6c4931176b24dfa6e84c4d27adfdbfbd98a39bbdea02d724cc8f25d3a15fc99619d481b65", 0x3e, 0x8000, &(0x7f0000000e00)={0xa, 0x4e23, 0x3ff, @private1, 0x100}, 0x1c) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000e40)) (async) ioctl$int_out(r3, 0x0, &(0x7f0000000e80)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000f40)={'gre0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x8000, 0x0, 0x0, 0x4, {{0x14, 0x4, 0x0, 0x8, 0x50, 0x65, 0x0, 0x5, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xcd, 0x1, 0x8, [{@rand_addr=0x64010102, 0x81}, {@multicast1, 0x2}, {@rand_addr=0x64010100, 0xfffffffc}, {@broadcast, 0x800}, {@rand_addr=0x64010102, 0x7}]}, @lsrr={0x83, 0xf, 0x56, [@remote, @broadcast, @remote]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000f80)={@private0, @dev={0xfe, 0x80, '\x00', 0x10}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x100, 0x9266, 0x8, 0x80, 0x4, 0x3880200, r9}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001000), &(0x7f0000001040)=0x4) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x440}, 0x2400c000) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000001180)={0x9c, 0x34, 0x4, 0x1, 0xf, "6040829952a75924f9be850aabd76ebcb9d33d"}) 301.347416ms ago: executing program 3 (id=3975): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000040)=""/52) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x9, 0x5, 0x2, 0x5, 0xe, "04b83b9a59d7248a"}) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x7]}, 0x8, 0x40000) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)="3f3d5e10395c9fb513551dcc3b075fbab244f2b2b4f93862b410b94b644b52040bc45886b9693c46186c2af76fb8c83c3e21337365ff57cd143b38fc329601db9cc1904ae6b15136ce150f806a5adcbd36ae478ea5a5c28361edfba61c42d75a76b7d20307f6939f0b36ebdf02e1b4c097668c8a1f5d4cdeb98ce3d32667acf8854beec2476211652604f66b65d7a9aab890e0d03aff0d60d92e115d1232b2d1604825d6c28b2e72a27e2d97d08cea567f4fc5afe9bdfddd2a793ca3ce8fc12d05539ca9f8c60000655959b1a5a21ff865c3fd83f134447de12441786312785f", 0xe0, 0x3) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x7, &(0x7f0000000280)=""/175, &(0x7f0000000340)=0xaf) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r5 = geteuid() mount$cgroup2(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1000, &(0x7f0000000500)={[{@favordynmods}, {@favordynmods}, {@memory_localevents}, {@pids_localevents}, {@memory_recursiveprot}, {@favordynmods}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@favordynmods}, {@memory_localevents}], [{@subj_type}, {@fowner_lt={'fowner<', r3}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', r5}}]}) recvmmsg$unix(r1, &(0x7f0000005a40)=[{{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f00000007c0)=""/73, 0x49}], 0x2, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000009c0)=""/195, 0xc3}, {&(0x7f0000000ac0)=""/231, 0xe7}], 0x2}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000c00)=""/206, 0xce}, {&(0x7f0000000d00)=""/11, 0xb}, {&(0x7f0000000d40)=""/163, 0xa3}, {&(0x7f0000000e00)=""/150, 0x96}, {&(0x7f0000000ec0)=""/140, 0x8c}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/217, 0xd9}, {&(0x7f0000002080)=""/3, 0x3}, {&(0x7f00000020c0)=""/214, 0xd6}], 0x9, &(0x7f0000002280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000023c0)=""/141, 0x8d}, {&(0x7f0000002480)=""/4, 0x4}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/119, 0x77}, {&(0x7f0000003540)=""/111, 0x6f}], 0x5, &(0x7f0000003640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000003700), 0x6e, &(0x7f0000003a80)=[{&(0x7f0000003780)=""/29, 0x1d}, {&(0x7f00000037c0)=""/254, 0xfe}, {&(0x7f00000038c0)=""/110, 0x6e}, {&(0x7f0000003940)=""/215, 0xd7}, {&(0x7f0000003a40)=""/17, 0x11}], 0x5}}, {{&(0x7f0000003b00), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003b80)=""/98, 0x62}, {&(0x7f0000003c00)=""/78, 0x4e}, {&(0x7f0000003c80)=""/3, 0x3}], 0x3, &(0x7f0000003d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f0000003f80)=[{&(0x7f0000003e40)=""/254, 0xfe}, {&(0x7f0000003f40)=""/20, 0x14}], 0x2, &(0x7f0000003fc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/190, 0xbe}, {&(0x7f0000004140)=""/209, 0xd1}, {&(0x7f0000004240)=""/16, 0x10}, {&(0x7f0000004280)=""/131, 0x83}, {&(0x7f0000004340)=""/166, 0xa6}, {&(0x7f0000004400)=""/4096, 0x1000}], 0x7, &(0x7f0000005480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f00000054c0)=""/179, 0xb3}, {&(0x7f0000005580)=""/99, 0x63}, {&(0x7f0000005600)=""/92, 0x5c}, {&(0x7f0000005680)=""/62, 0x3e}, {&(0x7f00000056c0)=""/143, 0x8f}, {&(0x7f0000005780)=""/242, 0xf2}, {&(0x7f0000005880)=""/45, 0x2d}, {&(0x7f00000058c0)=""/95, 0x5f}], 0x8, &(0x7f00000059c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}], 0x9, 0x2000, &(0x7f0000005c80)={0x77359400}) ioctl$KVM_GET_EMULATED_CPUID(r14, 0xc008ae09, &(0x7f0000005cc0)={0x1, 0x0, [{0xc0000001, 0x6, 0x1, 0x5, 0x4, 0x5, 0x6}]}) dup3(r10, r11, 0x80000) ioctl$USBDEVFS_RESET(r13, 0x5514) recvmmsg$unix(r8, &(0x7f0000006980)=[{{&(0x7f0000005d00)=@abs, 0x6e, &(0x7f0000006000)=[{&(0x7f0000005d80)=""/171, 0xab}, {&(0x7f0000005e40)=""/216, 0xd8}, {&(0x7f0000005f40)=""/41, 0x29}, {&(0x7f0000005f80)=""/94, 0x5e}], 0x4, &(0x7f0000006040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000060c0)=@abs, 0x6e, &(0x7f0000006200)=[{&(0x7f0000006140)}, {&(0x7f0000006180)=""/111, 0x6f}], 0x2}}, {{&(0x7f0000006240), 0x6e, &(0x7f0000006580)=[{&(0x7f00000062c0)=""/242, 0xf2}, {&(0x7f00000063c0)=""/133, 0x85}, {&(0x7f0000006480)=""/208, 0xd0}], 0x3, &(0x7f00000065c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f00000066c0)=@abs, 0x6e, &(0x7f0000006900)=[{&(0x7f0000006740)=""/92, 0x5c}, {&(0x7f00000067c0)=""/54, 0x36}, {&(0x7f0000006800)=""/118, 0x76}, {&(0x7f0000006880)=""/87, 0x57}], 0x4, &(0x7f0000006940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x4, 0x1, &(0x7f0000006a80)={0x0, 0x3938700}) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000006ac0)=0x1) r16 = openat$random(0xffffffffffffff9c, &(0x7f0000006b00), 0x60a80, 0x0) sendfile(r16, r15, &(0x7f0000006b40)=0xffffffffffffff00, 0x10) io_setup(0x4, &(0x7f0000006b80)=0x0) r18 = openat2(0xffffffffffffffff, &(0x7f0000006bc0)='./file0\x00', &(0x7f0000006c00)={0x200402, 0x59, 0x2b}, 0x18) ioctl$TIOCSBRK(r18, 0x5427) ioctl$TCGETA(r12, 0x5405, &(0x7f0000006c40)) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000006c80)={{0x2, 0x0, 0x80, {0x5000, 0xf000, 0x2}}, "5d9a097cc5902976c002ba605bbfb5d15c8e87ef37b8c0ab710c36863dc508d298ffd29c5abb2260e30d021fe2db2a8a46d108e35405124a0e670b9ba9fe81deaf7b415f0cdb0c00677336965b3a1a24f5826f71d52a5f19dd5735026bb9779ddf32ad10bca7b7cbed1949cf575c2cc566def89c53a395672db73f88946b1c969c0c91e7a9e64513aaefe9a0a17794c03e04262ac43f94686fb8e462632cef0c356b624d8eb414d64a99bab31df7239ac42ebda171ebdeca26f110713f33fcea20223fc934d207bfdf1754a90d0f749ed7eee4149417d840c249557a0e5674d1695645961cbba8380127b3ce1464ac52a3c423773dd0b7604d82223324254fffc443db4c8efd0d1690942e36f41c5f9927806404948071869e30bbb4dd5d4f321b8a3a8d856d379082d6cc1903d9717b5071878dc56166813c576f30855f6866b165c5911178db7e9c7d8265725cd6137d5d6da17d91fb6bd0cb38c1aaa09faaecdc284e242d9799688e1591701aefa587558eb568e022998c87827a727b1971d1a72e86902afb6efbc5d4ce24cbf2f165a0dbafa53e0ff8b5986b95d3a83f0130cebce35eef465d5260879a5ee8f60ed7c4c51a510baa441c109de5852d9c01cb1d93c65a22aaf2b7b61c847935d18ef9f42fc35ca6f3d455fd57a8f156258406537a52248f76e6b1a28ccac2b096401065e5cd576753d9d9a3f1ce3e73dd76768fd9cb1bca357ce1b4a6634dc518a2522e50067528faf7dc5c9d609d8a24de9ed6d337bf71637db5e00926e7553569721355946850d830caf86e2c3a41f7a3e39f38d792ec68700baf277b12d3e13062d1830bdc886b06ad44b18577a9db34ad87da3332a708bc6e8b2b94805f72fc3873cb5f06e5d809a59e14525779ec87a45af2e8718a4105a68ea764569d065f43d98a838ba27509d606607ecda5a9a16da6ffe78ab23e766bec2fc7cfedcc34849f3f910ebd0824b48763f253d686d54184d581c208d7975e66e0f541b2f303dfc4bae769f08ad7a9f63fb0ef95cb6d9b8adcd8a9a1ba9ec43f9ef920851664882d7e3f91b8f7e69f9604eff7b1bcccab73b273826b3d9e7294560fc5620ea2a533304bb6f9945b6df226e6974aaf39c491f884d97de8d90e3005ab701128fccc82eb674f98b226c70a5a187c5c279fc0b7a9724f1089d9587ec68290e7939a67071776a74a4cb5f22de24ca061d3a6743d1d1209ea9efb9adb7ba6a1d74302b5118c6fb4a42da7ec2a4009f1d0928e86730051cd3d755bdf72b7182cc9f43cf82ce8b84ad70c7e5d16be2cc4be03b7c5086b9cfb66201286596cd3daa3b827ffdb487d79861e0f41a4add9686f98b811aded63bea65770b2c919d30d437c0e2bcf3a3d62e5a1631fe0e052715b23c4aa0e4a4a12655e859d7dc4637be187310d763a8217b89a6f3730d471a15f8746324411dc2ed8154a46263163d8edc09391708e037f2caf5aaf1079dc3c6263dabf38fa8b6e61eb4c1289779f1b68d9a92ef354552bcd513ed766d9f70196952f5046d40ff6c67f64c854d51dc8139c3804a68401d9a3e9627c4a4c05f66e5d092a41d23240dcc62e6a99913012b90425d4c443933b03e27b57383c1830c5b5e1d988494be01822e387f650285f273a04a1dc0768a2a56e40534e9ef25a246cd8db31037ba4b247172d8492d100a5ef658849144724676dcd5738dee47db6d866aeda0f7a2582428c9b6d392e39db6cd12cdc0cf44997affd0fc71c714df9cb21691db8abc8a4eb48f1c64537ef77bb669e3591d6ec876e348cfefb91092483f4d80d5ec434552e065c66f8a45f6e940ce671d51f9a36fccad2a919853a5fc3011866f1500b56c40dc08f06ba8e2f65429f7a20647bf8399542523a6635e7d675340accfdf6e56b167d7560f97d17fa1e5dce8566c8eeac1efacd44ccce85e047abb719076c17425cf6d35912670510033d5b8c892bd53833219080287bc1f3c9b7cd491c1024ddf1ac5de3ad2a59c28164c4f099e4933ee9ede20fcc8486c6fabb4b4f56792b7ec6be1ad12fd9edbfd3dff2a8abc5f1683a4510d13233d34b63a3a65c1d32c36307a9d2de7fbbc0b88d783a49c31e53292fb6db762bfecb69f2442c2ed932bef28f6fc7df493a4135c34d51d60283d422485eb0f309f6f32f816f09d18d3d0d9af58df8d1d635c24b82cf208bd84a526570aa09406013f826a5b9d4d594c6f1a7ae94eb7d26c8b66eeed052a45435adb9e3eda1e17815b2f40f51e9c432c9da7ed61206b6b548bc18e4ec6e8ce3b69055a24652e70259055e2c626eaab43edd38f3452b311cb98e1871b839ba99331c72f16d6fb09574cadfd03b38e6faea17214abd98309b91556b21bd0c2274e96262b5578554e443c08812c838d3e76063f7073dc2ffd8e020becba1404c28fa638efb100b1fc79d37f7e915b124e8878b20d2d4d641e3ec37f82028e7399720143ebb3fe6ea0e4570a29215c2862adb4036b0250703d55239cf0acf4c95d07ea0ff46dd0eb9396da61911f551cc7ab4cbec50ccf181f3aee559b7ca8351f6f5aadaf12d6cdd4e8c0d29fa5cde9bb05a8ddf00dde337793b80c95282c6c81e2b75efb676b05cca1f93d7d70c88fe6cf820f5abaa32d9d0f0d0189245e2c0b1b9370e0ad40e98bfdaccb0f1f14b33c039e597b1083ff64770ed11449d388e45ea3aa70a9d5eb16c7c7c9031d8aa8ac6eff72a3380732a3ec5da0d7e4a5b9c62f324ac639df8ff658368ca9f2c890919595578e02ab87fd2fc3ddee6e14e9e9bd50d81f1d5818ecd5dc0686a82ba47b9403cc085ce691e86cdad3a3544a13b50bdc0bf416354ffbca5e000afed710449bbfe05ea182393156708f20656065c6abd1a2a239334d4875c19338b561ea20ffcfd66bd60af3d93272c7af9039dfd926c1c0631619e23b5c6fa49fc5d26a083b958b284c30beb980f459ba135a6a1b90383bc96db540f3645a5730e7fb0a0fbdd1e055e7d56fa970c55572529e38a82411b69545b9d3ccfc41f51879b1670febe542d9c03a6e4ce82264f7f117c237d139e5641ba499f0a3f9793cb1873cd543692e93bf61b857922ea6b60847cfec074a8db18d461eb40f0b9ea5e680e8e663c71fbbf6a53ad47219b4cb70db86dc0aaaef7bf3212bad8d75a6941548b02dc790e00c61d079e485c763121a33d537bd6b22d2df47fff9351ac7e766d2b9c2668df0a7dd993f091121002bdbb10e6eeac1eb35d706d08d7d5f01bba3e2aedbcceb42168e5920db4a81be5d4cca3479c728af876c98077dbca1f168fab2885841e8defda08a28110ecbf1b71e397bec197f813f26aae1a3109b2d7b163bbd07cfa3934e19dde2a616f15b0425a15811e9bdc64e36c3790683d26664c77f65d3f4e2d6b3545dd90eab41dd71c0bec0d65a899455a08e0f471dbab20ac5dad2d7d0af29e3325f2c3db8a09ea1591e192f8ca25495fec53e5a50cfac278e983e8f7e16953854aad32dc11094c2f4129c0479d4b7cd0ce03128814d18c3d024079a6a5415f00fe285a2ac6e89e0779e3d0ed1721199e25ce731bc5eda70acb2e03437300e5ada11fbdc46d5e2bc8d2098d904a1543a775d8f973f9dcb02e47c5293f4324fede15ef3f0414b3d7fc08ddc6c2c94fa6f7ea74606a751185678f145c88d9320fc7e0e707448904545a31e6794344decf522e075f26f0ed6f08e3e8e179bf9de22c15fdc48239fbb82db7bf268d96255cc7167165867ba3a00661fd257e1c029ac592aacab795b81f6aea7488ca5b545ecdd4699257e5fe1a3543ab70c6bd5b1d0966f47903b6764c5652ff673001c788798834290881fd186ac631dc6f17d084c7b6e6eaf2fb631feb5b74052a124abeaf22867df6fb6391e746b1277e9ccbe87f76b3d194ae63519eba25be8c45fb821a499e3399c259b4b77b4638077f005c10b9ab489505314d2c86caee78eb4e18ba0f8d5fae7e58bc94d7606fca0145d4adfa23201a0f4593bde6b486d3ee3ae431f0d0c8165e7ef42b880bb93fd1ca16c3fe89bcbde1a73229a4e38f333a06600446df7a58f0077ac186cd0ce2234f5ba8e61e997137f3ab2b18cad68d9873fb52991ed4997354b6f758a47cf442b88d425923250ea160786da9a99a970914786446098595d6ab47ca9370f9a6584a2f666f557a7f160070fdcc016d08bed14d88b8812582b68d27b011227b616a35a82558b396981d314072804850784c7cb3f0fe464f281961b097e1b9b354577e80048cb3713214d27f9cd45316d018e125f1606a24ad3fcf0faf4be8a2c97ee42fa80d0d7abda3ac6f46990d3f022dc86049639f515490c7a937af6fc1cfe23fd36368426970b8ca88febd97a80d167d15a3b10dac34ec9b8396fe5f5b2c144e3be2594afa8ffffd856e0f58f8d161eb683c9271a482aa88b1fe57a827023320b4012404a3e8b61ccf4dcb145d56f766f7d181df92934ee721f2f1420a19b296511042d922e94d4a50bfd51f674644e8af77b7b98e9b1f27c70881063173ca19dc584b4d4d0e992b0678b10db33e85279d5e6ecf7c6b6c850954e5ad7b2da5a1fd63857c035e7e6ebbdf7038b01286c6fcbf96be39123cbe37a16fa5c66d7ae741459bc9fde4e039cc9a0b69840fa9b64b546e1e0a57302e07c248441ad42b35eb8ce5d96eda238c2561aeb318a390075eb8dd3615fbbabb163677767d57d3b18f17304e914cb8afb305abb599d419a0eef6eae53964d349b1ceafe51644d8fefd8c5682a25b983e3a3ebbbdeca028976985808ce4bde9b4b501b5476078d2befb22e8db07aab3f8b537c9452012514cdac48e83b3214073b0a7ad3bde5f9ccc13f2f5a2f9a1d9e2a508a77715f85496c841e00af081674276d8ca8e5e38105bacae0173776f4252506cec11396b7a2a1d2238c6a53e1514ed8c46bdefd68ee0cf837d0840b45e17b1221ebc3b13a0a0f497815a1677b335661483ec2cf2ca140956e3bcccdb72b42be14a0a3dcf81f34b874f205ed48f2704600a0510dc5ad81dbbaae89e2057a02cd4c4b54dd9a679bda30d0b5c24674b3c37842a1482d9392db66b73cf332cfb2e967ec8eec9d386a28e5d7f76abad694794bf5f09f05299a57ba95c174d3753e58622c6b52e26feef5df77a2fe22aa7ed86265e866b85573f7692fb4a886958fa4f0ef54a8e4033075fc1392f97715c2f64a68a15025225af4206f7f46bebc9716e3e5549f5ddb26fc400a1d7e63d5c78a46803a329478f78218cdb9af07fedb18531c360c02379983f20a5f621f8f350a81513136d8b2e2c4127dbaf5c5ae561b8a0a414e63c86b251620f9b8f9c8009a26428d5edaaf1b13771a44464c103f43b33ea3271db7a8cc0107157eb033abcace77b7d07e85e4c97d59c2ef80096a0b56dbe449503f7368b8a27530aa661f4128240e2f27ba3dd4320116ada93232aad70353d9b49d6f8c474a5850bf1639c9e3b453569b115cc3d575b6356e47a0453fe436fb2a69eee139ab4b3487b3f152dcb3c9be163118ad5376655536e50099c393f021772e3101cada7f605447f8e72c58b4c1d3fd04a38ad5385e8472462db19405e2ea3401c9a283f5cc7b49d972153549922f3da3ec547a2fc6f24779b346154a3cbc0b014f9ae719883a434ee67cd913b327e1f9c801a284fa919ad2a19ed362665b966f3bac5dafdf0cf0b8c0ff47f04b1b25078a7f45cb074714288b1197a212983723392416125aba638dbbfca922343cd87298d3487e19a3e54a7a8bd21e7f7320680845e7adb440ced23e7", "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"}) r19 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000008d00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r19, &(0x7f0000008e00)={0x14, &(0x7f0000008d40)={0x20, 0x30, 0x3d, {0x3d, 0x537e2ca6f7796969, "6f3bd6507bf708b99392724ac653d3b7bb6d0a30643430fd8a0cd4f0c18b0c60f199ff2d6d3b9b615ec2cfcf100b54b4b2b8aa82aef73e8b77e566"}}, &(0x7f0000008dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000009000)={0x34, &(0x7f0000008e40)={0x0, 0x5a997bf7317bf903, 0x61, "8a055ac60dfa9a26719314aeb30cc96ef6093f5f944c933b6b7eb91daddb1a07435bdc88f90d5f2bf312987f082c9008a024da2f318deec320a3323ebf47594799d3cfa31bf0a743d029b434f168a8b660a855a5e67d140c877451684c4a31595c"}, &(0x7f0000008ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000008f00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000008f40)={0xc0, 0xa1, 0x4}, &(0x7f0000008f80)={0x40, 0xa0, 0x4, 0xe}, &(0x7f0000008fc0)={0xc0, 0xa2, 0x2f, "d080304f68ffc1f4ab50b3e00e2b8d07fd4f483015c0910166ee98da000b11c3aa7d10dfcaa6eb74c3fdc0ce329458"}}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000009040)={0x6, 0x0, [{0x40000001, 0x7, 0x7, 0xffff, 0x1, 0x7fff, 0x6}, {0x0, 0x7c977c26, 0x4, 0x8, 0x8, 0x9}, {0x40000000, 0x7, 0x2, 0xfffffff9, 0x80000000, 0x8, 0x8}, {0x6, 0xffffffff, 0x4, 0x0, 0x1, 0x85, 0x8}, {0x40000001, 0x3, 0x5, 0x1, 0x7, 0x8, 0x361}, {0x40000000, 0x3, 0x0, 0x7ff, 0xf0e, 0x9, 0x9}]}) io_destroy(r17) syz_usb_control_io(r19, &(0x7f0000009300)={0x2c, &(0x7f0000009140)={0x40, 0x8, 0xa7, {0xa7, 0x3, "8fdcaeca82f005b8e1befdb1cabd21119e9dd271b4d627462005bf2b19a650dc055295270f0da2d0ef29975a0a79e822fb66a28c8d309681af7c90de9b5e009bc4ad29d3428396003b7bfae24d519e63077834817fecf80a7388ba99655fa4ad09fd84802c793d4b226a74c56739aa7a1aa84b239b31ac004f3f59bdcd5418f2c1c7e3668271dcc7c00a3df31e60b29d3e7f94b54d236dd3cf131a45dd11e7349f61ad9ede"}}, &(0x7f0000009200)={0x0, 0x3, 0x2e, @string={0x2e, 0x3, "1a33f1c47a63c09db57efc5bcbbbbb8d6c7deab67871cae7c1553e87caed260ebe86429d443117b34a021dfe"}}, &(0x7f0000009240)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x30, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xc, 0x0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "afd694b3af35f19ec758b531e40e5e6c"}]}}, &(0x7f0000009280)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x80, 0x0, 0xf7, "efb54bbb", "38c480e5"}}, &(0x7f00000092c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x4, 0x7, 0x7, 0xb}}}, &(0x7f00000097c0)={0x84, &(0x7f0000009340)={0x40, 0x5, 0xba, "dbf2b28d3e3caa9abc4c1afa3bcc2c3e7400894eb5476787e406aeabbcec30d537fff8a083d1e2cd813190ce2ba452c3e64cf9d426be586c2534d9623b367195e850b2432504b00b254817342c21d858a3fe0609defe77d0bb3b166a45ba0af99f1c5794c861ac3615fa804877329196efb6d3217a753a2748fb480cfca7506c68454873209c376e9e940d6b54397a03d8d997999d2c3641cdc10e23056ef454689026dd68d6842707133a9f0eb420bd419fe344f610cc3287ae"}, &(0x7f0000009400)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000009440)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000009480)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000094c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf00]}}, &(0x7f0000009500)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000009540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000009580)={0x40, 0xb, 0x2, "9296"}, &(0x7f00000095c0)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000009600)={0x40, 0x13, 0x6, @local}, &(0x7f0000009640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000009680)={0x40, 0x19, 0x2, '5<'}, &(0x7f00000096c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000009700)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000009740)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000009780)={0x40, 0x21, 0x1, 0x5}}) 300.305386ms ago: executing program 4 (id=3976): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) getsockopt(0xffffffffffffffff, 0x200, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 244.18265ms ago: executing program 4 (id=3977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0xd) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1c0000, &(0x7f0000000380)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x25, 0x74, 0x78, 0x70, 0x70, 0x37]}}], [{@euid_lt={'euid<', r4}}, {@obj_type={'obj_type', 0x3d, './binderfs\x00'}}, {@smackfshat={'smackfshat', 0x3d, '&'}}, {@fowner_lt={'fowner<', r5}}]}) 142.325559ms ago: executing program 1 (id=3978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/193, 0xc1}, {&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000001400)=""/251, 0xfb}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000001500)=""/236, 0xec}], 0x8) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r3, &(0x7f0000000400)="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", 0x1f000) 100.397702ms ago: executing program 1 (id=3979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4020aeb2, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0xfffffffd}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r2, 0x5501) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000068a000/0x1000)=nil, 0x1000, 0x2) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_mem(r5, &(0x7f0000000500)={0x9, 0x20, 0x3f519662, 0x20, 0x1}, 0x48) write$cgroup_subtree(r5, 0x0, 0x9) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=3980): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x2, 0x3, 0x7, 0x1, 0x2}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)="7c0b44389336c680b459fbc65350d45fe3e28a", 0x13}], 0x1) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0x80008, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x9b1d105f1fe9a9c7, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'pim6reg\x00', 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@abs={0x1, 0x0, 0xfffeffff}, 0x6e) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0xb, 0x8, 0x3, 0x0, 0x1a}) kernel console output (not intermixed with test programs): fig 129 has an invalid interface number: 5 but max is 0 [ 110.389774][ T339] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 110.399019][ T339] usb 2-1: config 129 has no interface number 0 [ 110.405310][ T339] usb 2-1: config 129 has no interface number 1 [ 110.411569][ T339] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 110.424823][ T339] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 110.435745][ T339] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 110.448976][ T339] usb 2-1: config 129 interface 135 has no altsetting 0 [ 110.455941][ T339] usb 2-1: config 129 interface 5 has no altsetting 0 [ 110.464071][ T339] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 110.473147][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.481181][ T339] usb 2-1: Product: syz [ 110.485349][ T339] usb 2-1: Manufacturer: syz [ 110.490040][ T339] usb 2-1: SerialNumber: syz [ 110.504871][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 110.610105][ T36] audit: type=1400 audit(1756472604.658:442): avc: denied { map } for pid=3361 comm="syz.3.953" path="socket:[16545]" dev="sockfs" ino=16545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.634446][ T36] audit: type=1400 audit(1756472604.658:443): avc: denied { accept } for pid=3361 comm="syz.3.953" path="socket:[16545]" dev="sockfs" ino=16545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.675995][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.687041][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.696933][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 110.699425][ T3316] rust_binder: Error while translating object. [ 110.709806][ T9] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 110.709939][ T3316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 110.716019][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.725530][ T3316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:486 [ 110.735340][ T9] usb 1-1: config 0 descriptor?? [ 110.751021][ T339] usb 2-1: MIDIStreaming interface descriptor not found [ 110.766611][ T339] usb 2-1: USB disconnect, device number 36 [ 110.776700][ T1692] udevd[1692]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.164369][ T3394] overlay: Unknown parameter 'fowner>00000000000000000000' [ 111.214828][ T36] audit: type=1400 audit(1756472605.258:444): avc: denied { getopt } for pid=3403 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.274861][ T3408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 111.283753][ T3408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 111.309683][ T3417] __vm_enough_memory: pid: 3417, comm: syz.1.971, bytes: 18014402804453376 not enough memory for the allocation [ 111.318103][ T3420] netlink: 'syz.2.972': attribute type 2 has an invalid length. [ 111.321898][ T3417] __vm_enough_memory: pid: 3417, comm: syz.1.971, bytes: 18014402804453376 not enough memory for the allocation [ 111.331230][ T3420] 9pnet_fd: Insufficient options for proto=fd [ 111.341737][ T3417] __vm_enough_memory: pid: 3417, comm: syz.1.971, bytes: 18014402804453376 not enough memory for the allocation [ 111.359500][ T3417] __vm_enough_memory: pid: 3417, comm: syz.1.971, bytes: 18014402804453376 not enough memory for the allocation [ 111.371652][ T3417] __vm_enough_memory: pid: 3417, comm: syz.1.971, bytes: 18014402804453376 not enough memory for the allocation [ 111.383741][ T3417] __vm_enough_memory: pid: 3417, comm: syz.1.971, bytes: 18014402804453376 not enough memory for the allocation [ 111.395715][ T3417] __vm_enough_memory: pid: 3417, comm: syz.1.971, bytes: 18014402804453376 not enough memory for the allocation [ 111.407702][ T3417] __vm_enough_memory: pid: 3417, comm: syz.1.971, bytes: 18014402804453376 not enough memory for the allocation [ 111.419057][ T36] audit: type=1326 audit(1756472605.458:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3343 comm="syz.0.947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6e238ebe9 code=0x0 [ 111.419670][ T3417] __vm_enough_memory: pid: 3417, comm: syz.1.971, bytes: 18014402804453376 not enough memory for the allocation [ 111.454387][ T3417] __vm_enough_memory: pid: 3417, comm: syz.1.971, bytes: 18014402804453376 not enough memory for the allocation [ 111.499438][ T36] audit: type=1326 audit(1756472605.548:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3427 comm="syz.1.974" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd12178ebe9 code=0x0 [ 111.527753][ T3429] rust_binder: Error in use_page_slow: ESRCH [ 111.527775][ T3429] rust_binder: use_range failure ESRCH [ 111.533859][ T3429] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 111.539460][ T3429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 111.547566][ T3429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:541 [ 112.581816][ T36] audit: type=1400 audit(1756472606.628:447): avc: denied { create } for pid=3461 comm="syz.2.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.584880][ T45] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 112.754937][ T45] usb 2-1: device descriptor read/64, error -71 [ 112.995393][ T45] usb 2-1: device descriptor read/64, error -71 [ 113.225219][ T3485] overlay: ./file0 is not a directory [ 113.235042][ T45] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 113.288273][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 113.294396][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 113.305033][ T9] usb 1-1: USB disconnect, device number 22 [ 113.364912][ T45] usb 2-1: device descriptor read/64, error -71 [ 113.441780][ T3500] rust_binder: Error while translating object. [ 113.441817][ T3500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 113.448200][ T3500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:556 [ 113.604936][ T45] usb 2-1: device descriptor read/64, error -71 [ 113.624753][ T436] bridge_slave_1: left allmulticast mode [ 113.630704][ T436] bridge_slave_1: left promiscuous mode [ 113.641809][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.652069][ T436] bridge_slave_0: left allmulticast mode [ 113.657850][ T436] bridge_slave_0: left promiscuous mode [ 113.663568][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.688494][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 113.688512][ T36] audit: type=1400 audit(1756472607.738:449): avc: denied { ioctl } for pid=3509 comm="syz.2.1008" path="socket:[17595]" dev="sockfs" ino=17595 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.725062][ T45] usb usb2-port1: attempt power cycle [ 113.759105][ T36] audit: type=1400 audit(1756472607.808:450): avc: denied { mounton } for pid=3513 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 113.800843][ T3519] overlayfs: failed to clone upperpath [ 113.806970][ T3517] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1010'. [ 113.816242][ T436] tipc: Left network mode [ 113.829264][ T436] veth1_macvtap: left promiscuous mode [ 113.835022][ T436] veth0_vlan: left promiscuous mode [ 113.935315][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.944877][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.953751][ T3513] bridge_slave_0: entered allmulticast mode [ 113.960575][ T3513] bridge_slave_0: entered promiscuous mode [ 113.969346][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.976604][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.983721][ T3513] bridge_slave_1: entered allmulticast mode [ 113.992648][ T3513] bridge_slave_1: entered promiscuous mode [ 114.072593][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.079680][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.087019][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.094069][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.101529][ T45] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 114.116752][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.124060][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.133545][ T45] usb 2-1: device descriptor read/8, error -71 [ 114.135498][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.146884][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.156214][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.163283][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.190244][ T3513] veth0_vlan: entered promiscuous mode [ 114.200744][ T3513] veth1_macvtap: entered promiscuous mode [ 114.219577][ T36] audit: type=1400 audit(1756472608.268:451): avc: denied { mounton } for pid=3513 comm="syz-executor" path="/root/syzkaller.JPQTaL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 114.275972][ T45] usb 2-1: device descriptor read/8, error -71 [ 114.285028][ T36] audit: type=1400 audit(1756472608.328:452): avc: denied { getopt } for pid=3552 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.388211][ T3558] pim6reg1: entered promiscuous mode [ 114.393577][ T3558] pim6reg1: entered allmulticast mode [ 114.514878][ T45] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 114.536120][ T45] usb 2-1: device descriptor read/8, error -71 [ 114.585358][ T36] audit: type=1400 audit(1756472608.628:453): avc: denied { read } for pid=3568 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 114.635917][ T36] audit: type=1400 audit(1756472608.688:454): avc: denied { setopt } for pid=3568 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 114.637198][ T3570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=3570 comm=syz.2.1024 [ 114.685910][ T45] usb 2-1: device descriptor read/8, error -71 [ 114.788915][ T36] audit: type=1400 audit(1756472608.838:455): avc: denied { accept } for pid=3587 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.819873][ T45] usb usb2-port1: unable to enumerate USB device [ 115.200923][ T36] audit: type=1400 audit(1756472609.248:456): avc: denied { map } for pid=3612 comm="syz.3.1039" path="socket:[17235]" dev="sockfs" ino=17235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.224096][ T36] audit: type=1400 audit(1756472609.248:457): avc: denied { read } for pid=3612 comm="syz.3.1039" path="socket:[17235]" dev="sockfs" ino=17235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.313507][ T3626] input: syz1 as /devices/virtual/input/input13 [ 115.375084][ T3633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.405059][ T3636] rust_binder: got new transaction with bad transaction stack [ 115.411564][ T3636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:506 [ 115.613367][ T3638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1047'. [ 115.886087][ T3648] tmpfs: Bad value for 'huge' [ 116.209937][ T3661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'. [ 116.236577][ T3664] rust_binder: Write failure EFAULT in pid:35 [ 116.241299][ T3664] rust_binder: Write failure EFAULT in pid:35 [ 116.312239][ T3679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1062'. [ 116.328239][ T36] audit: type=1400 audit(1756472610.378:458): avc: denied { setopt } for pid=3678 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.349671][ T3679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1062'. [ 116.706886][ T3693] overlayfs: failed to clone upperpath [ 116.837736][ T3745] vcan0: entered allmulticast mode [ 117.168677][ T3770] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 117.177555][ T3770] rust_binder: Write failure EINVAL in pid:53 [ 117.414243][ T3777] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1091'. [ 117.646020][ T3809] 9pnet_fd: p9_fd_create_unix (3809): problem connecting socket: ./file0: -111 [ 117.675912][ T3811] 9pnet_fd: Insufficient options for proto=fd [ 117.716218][ T3828] overlayfs: failed to clone upperpath [ 117.829689][ T3842] binder: Bad value for 'stats' [ 118.011189][ T4004] 9p: Unknown Cache mode or invalid value mmapÿÿ [ 118.314042][ T4073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 118.324152][ T4073] fuseblk: Unknown parameter 'smackfsfloor' [ 118.350895][ T4077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 118.360841][ T4077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40449 sclass=netlink_route_socket pid=4077 comm=syz.2.1128 [ 118.614903][ T4098] pim6reg1: entered promiscuous mode [ 118.620291][ T4098] pim6reg1: entered allmulticast mode [ 118.746479][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 118.746497][ T36] audit: type=1400 audit(1756472612.798:463): avc: denied { write } for pid=4104 comm="syz.4.1140" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 118.758142][ T4105] rust_binder: Failed copying remainder into alloc: EFAULT [ 118.773525][ T4105] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 118.773823][ T36] audit: type=1400 audit(1756472612.798:464): avc: denied { open } for pid=4104 comm="syz.4.1140" path="/26/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 118.782891][ T4105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 118.792480][ T4112] cgroup: name respecified [ 118.813389][ T4105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:81 [ 118.905702][ T4133] veth1_macvtap: left promiscuous mode [ 118.920393][ T4133] macsec0: entered allmulticast mode [ 118.932002][ T4133] veth1_macvtap: entered promiscuous mode [ 118.937835][ T4133] veth1_macvtap: entered allmulticast mode [ 118.943767][ T4133] macsec0: left allmulticast mode [ 118.948976][ T4133] veth1_macvtap: left allmulticast mode [ 119.130380][ T63] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.285247][ T63] usb 5-1: Using ep0 maxpacket: 16 [ 119.296245][ T63] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 119.315172][ T63] usb 5-1: config 0 has no interface number 0 [ 119.336822][ T63] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 119.358035][ T63] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.375545][ T63] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 119.386687][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.394914][ T63] usb 5-1: Product: syz [ 119.409518][ T63] usb 5-1: Manufacturer: syz [ 119.414382][ T63] usb 5-1: SerialNumber: syz [ 119.440472][ T63] usb 5-1: config 0 descriptor?? [ 119.445740][ T4121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.453127][ T4121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.612636][ T4157] rust_binder: Error while translating object. [ 119.612671][ T4157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 119.612892][ T4153] overlayfs: failed to clone upperpath [ 119.618979][ T4157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:519 [ 119.680999][ T4121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.697331][ T4121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.771981][ T36] audit: type=1400 audit(1756472613.793:465): avc: denied { create } for pid=4175 comm="syz.2.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.816711][ T428] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.908060][ T4206] tipc: Enabling of bearer rejected, failed to enable media [ 120.069647][ T45] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 120.131489][ T63] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 120.141724][ T63] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 120.153971][ T63] asix 5-1:0.251: probe with driver asix failed with error -71 [ 120.164027][ T63] usb 5-1: USB disconnect, device number 2 [ 120.203474][ T45] usb 2-1: device descriptor read/64, error -71 [ 120.259641][ T4213] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1179'. [ 120.268926][ T4213] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1179'. [ 120.278145][ T4213] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1179'. [ 120.287449][ T4213] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1179'. [ 120.296797][ T4213] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1179'. [ 120.305960][ T4213] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1179'. [ 120.315187][ T4213] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1179'. [ 120.324464][ T4213] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1179'. [ 120.333783][ T4213] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1179'. [ 120.343005][ T4213] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1179'. [ 120.455613][ T4233] 9pnet_fd: Insufficient options for proto=fd [ 120.461024][ T45] usb 2-1: device descriptor read/64, error -71 [ 120.710396][ T45] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 120.759596][ T36] audit: type=1400 audit(1756472614.744:466): avc: denied { setattr } for pid=4278 comm="syz.4.1200" name="NETLINK" dev="sockfs" ino=19522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.862757][ T45] usb 2-1: device descriptor read/64, error -71 [ 121.120151][ T45] usb 2-1: device descriptor read/64, error -71 [ 121.233308][ T45] usb usb2-port1: attempt power cycle [ 121.437101][ T36] audit: type=1400 audit(1756472615.404:467): avc: denied { lock } for pid=4301 comm="syz.2.1210" path="socket:[19061]" dev="sockfs" ino=19061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 121.582823][ T45] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 121.604363][ T45] usb 2-1: device descriptor read/8, error -71 [ 121.738039][ T45] usb 2-1: device descriptor read/8, error -71 [ 121.881024][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 121.886770][ T36] audit: type=1400 audit(1756472615.842:468): avc: denied { mounton } for pid=4307 comm="syz.3.1212" path="/518/file0" dev="tmpfs" ino=2819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.887145][ T1433] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.978366][ T4324] netlink: 'syz.2.1217': attribute type 4 has an invalid length. [ 121.986481][ T45] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 121.988422][ T4324] netlink: 'syz.2.1217': attribute type 4 has an invalid length. [ 122.006601][ T36] audit: type=1400 audit(1756472615.968:469): avc: denied { relabelto } for pid=4323 comm="syz.2.1217" name="ashmem" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 122.034721][ T36] audit: type=1400 audit(1756472615.968:470): avc: denied { associate } for pid=4323 comm="syz.2.1217" name="ashmem" dev="tmpfs" ino=702 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 122.063370][ T45] usb 2-1: device descriptor read/8, error -71 [ 122.166866][ T4384] fuse: Bad value for 'user_id' [ 122.171848][ T4384] fuse: Bad value for 'user_id' [ 122.201118][ T45] usb 2-1: device descriptor read/8, error -71 [ 122.223210][ T36] audit: type=1400 audit(1756472616.173:471): avc: denied { accept } for pid=4397 comm="syz.3.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.244205][ T36] audit: type=1400 audit(1756472616.183:472): avc: denied { execute } for pid=4397 comm="syz.3.1233" path="/dev/ashmem" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.275475][ T4414] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 122.312780][ T45] usb usb2-port1: unable to enumerate USB device [ 122.982795][ T4424] can0: slcan on ttyS3. [ 123.043219][ T4424] can0 (unregistered): slcan off ttyS3. [ 123.096992][ T4445] fuse: Bad value for 'rootmode' [ 123.177476][ T4466] netlink: 'syz.3.1252': attribute type 22 has an invalid length. [ 123.199433][ T4469] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3507366080 (224471429120 ns) > initial count (25249277504 ns). Using initial count to start timer. [ 123.219922][ T4452] kvm: Disabled LAPIC found during irq injection [ 123.280229][ T4469] /dev/rnullb0: Can't open blockdev [ 123.707312][ T4496] fuse: Unknown parameter '0x0000000000000004ÿ' [ 123.714607][ T4496] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4496 comm=syz.2.1256 [ 123.727237][ T4496] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4496 comm=syz.2.1256 [ 123.740660][ T4496] tmpfs: Unknown parameter '' [ 124.007104][ T4504] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 124.016769][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 124.016788][ T36] audit: type=1400 audit(1756472617.928:491): avc: denied { relabelto } for pid=4503 comm="syz.1.1259" name="171" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 124.049381][ T36] audit: type=1400 audit(1756472617.928:492): avc: denied { associate } for pid=4503 comm="syz.1.1259" name="171" dev="tmpfs" ino=933 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 124.076728][ T36] audit: type=1400 audit(1756472617.957:493): avc: denied { map } for pid=4510 comm="syz.3.1261" path="socket:[19795]" dev="sockfs" ino=19795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 124.134113][ T36] audit: type=1400 audit(1756472618.035:494): avc: denied { shutdown } for pid=4527 comm="syz.3.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.290626][ T36] audit: type=1400 audit(1756472618.182:495): avc: denied { create } for pid=4530 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.712805][ T36] audit: type=1400 audit(1756472618.602:496): avc: denied { setattr } for pid=4533 comm="syz.4.1270" name="mcfilter" dev="proc" ino=4026532837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 124.862916][ T36] audit: type=1400 audit(1756472618.749:497): avc: denied { write } for pid=289 comm="syz-executor" name="171" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 124.869235][ T4548] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 124.894259][ T36] audit: type=1400 audit(1756472618.749:498): avc: denied { remove_name } for pid=289 comm="syz-executor" name="cpuset.effective_cpus" dev="tmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 124.925603][ T36] audit: type=1400 audit(1756472618.749:499): avc: denied { rmdir } for pid=289 comm="syz-executor" name="171" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 124.968150][ T4550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.968179][ T4550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:547 [ 124.978767][ T63] hid-generic 0005:0000:0005.000E: item fetching failed at offset 0/54 [ 124.996393][ T63] hid-generic 0005:0000:0005.000E: probe with driver hid-generic failed with error -22 [ 125.102359][ T36] audit: type=1400 audit(1756472618.983:500): avc: denied { execute_no_trans } for pid=4560 comm="syz.1.1279" path="/176/file0" dev="tmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.317292][ T4573] input: syz1 as /devices/virtual/input/input14 [ 125.634520][ T4579] netlink: 'syz.4.1284': attribute type 1 has an invalid length. [ 125.642350][ T4579] netlink: 'syz.4.1284': attribute type 2 has an invalid length. [ 125.709557][ T4587] sit0: entered promiscuous mode [ 125.715923][ T4587] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 125.724006][ T4587] __nla_validate_parse: 56 callbacks suppressed [ 125.724036][ T4587] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1288'. [ 126.541753][ T4616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4616 comm=syz.1.1297 [ 126.554672][ T4616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1297'. [ 126.763964][ T3172] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.869843][ T63] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 126.918147][ T3172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.936787][ T3172] usb 5-1: config 0 has no interfaces? [ 126.944542][ T3172] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 126.953874][ T3172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 126.962225][ T3172] usb 5-1: Product: syz [ 126.966503][ T3172] usb 5-1: Manufacturer: syz [ 126.971405][ T3172] usb 5-1: SerialNumber: syz [ 126.976964][ T3172] usb 5-1: config 0 descriptor?? [ 127.008798][ T63] usb 2-1: device descriptor read/64, error -71 [ 127.192657][ T4614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.207832][ T4614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.220261][ T3172] usb 5-1: USB disconnect, device number 4 [ 127.253570][ T63] usb 2-1: device descriptor read/64, error -71 [ 127.498083][ T63] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 127.630539][ T63] usb 2-1: device descriptor read/64, error -71 [ 127.752109][ T4687] rust_binder: Error while translating object. [ 127.752144][ T4687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 127.758411][ T4687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 127.794327][ T4691] netlink: 'syz.4.1322': attribute type 27 has an invalid length. [ 127.811978][ T4691] rust_binder: Error while translating object. [ 127.812002][ T4691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 127.818206][ T4691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:124 [ 127.875189][ T63] usb 2-1: device descriptor read/64, error -71 [ 127.997539][ T63] usb usb2-port1: attempt power cycle [ 128.065564][ T4715] veth1_vlan: mtu greater than device maximum [ 128.343701][ T63] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 128.365202][ T63] usb 2-1: device descriptor read/8, error -71 [ 128.497861][ T63] usb 2-1: device descriptor read/8, error -71 [ 128.740625][ T63] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 128.761977][ T63] usb 2-1: device descriptor read/8, error -71 [ 128.894335][ T63] usb 2-1: device descriptor read/8, error -71 [ 128.930132][ T4722] tc_dump_action: action bad kind [ 129.005280][ T63] usb usb2-port1: unable to enumerate USB device [ 129.483057][ T4730] fuse: Bad value for 'user_id' [ 129.488015][ T4730] fuse: Bad value for 'user_id' [ 129.614048][ T4735] rust_binder: Failed copying remainder into alloc: EFAULT [ 129.614066][ T4735] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 129.621472][ T4735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 129.629823][ T4735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:579 [ 129.695345][ T4741] cgroup: Invalid name [ 130.011933][ T63] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 130.113684][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 130.113706][ T36] audit: type=1400 audit(1756472623.909:504): avc: denied { setattr } for pid=4747 comm="syz.2.1345" name="" dev="pipefs" ino=21079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 130.166510][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.178713][ T63] usb 2-1: config 204 has an invalid interface number: 223 but max is 0 [ 130.187142][ T63] usb 2-1: config 204 has an invalid descriptor of length 10, skipping remainder of the config [ 130.197670][ T63] usb 2-1: config 204 has no interface number 0 [ 130.203948][ T63] usb 2-1: config 204 interface 223 has no altsetting 0 [ 130.212888][ T63] usb 2-1: New USB device found, idVendor=0b57, idProduct=5942, bcdDevice=38.7a [ 130.222013][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.230227][ T63] usb 2-1: Product: syz [ 130.234571][ T63] usb 2-1: Manufacturer: syz [ 130.239226][ T63] usb 2-1: SerialNumber: syz [ 130.452181][ T63] usbhid 2-1:204.223: couldn't find an input interrupt endpoint [ 130.460701][ T63] usb 2-1: USB disconnect, device number 49 [ 130.576136][ T4772] rust_binder: Error while translating object. [ 130.576176][ T4772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 130.576304][ T36] audit: type=1326 audit(1756472624.352:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.4.1354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76cab8ebe9 code=0x0 [ 130.582756][ T4772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141 [ 130.740169][ T4776] 9pnet_fd: Insufficient options for proto=fd [ 131.377639][ T4826] rust_binder: Write failure EFAULT in pid:604 [ 131.429034][ T4828] netlink: 'syz.4.1375': attribute type 4 has an invalid length. [ 131.443201][ T4828] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.1375'. [ 131.626629][ T10] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 131.928333][ T4838] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 131.966681][ T4838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1378'. [ 131.976839][ T4838] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 131.984710][ T4838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1378'. [ 132.044761][ T10] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 132.052950][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 132.063798][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.227341][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.234508][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.242239][ T4864] bridge_slave_0: entered allmulticast mode [ 132.248747][ T4864] bridge_slave_0: entered promiscuous mode [ 132.255889][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.263057][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.270261][ T4864] bridge_slave_1: entered allmulticast mode [ 132.277034][ T4864] bridge_slave_1: entered promiscuous mode [ 132.283213][ T4349] veth0_to_bond: left allmulticast mode [ 132.289024][ T4349] veth0_to_bond: left promiscuous mode [ 132.294601][ T4349] bridge0: port 3(veth0_to_bond) entered disabled state [ 132.302139][ T4349] bridge_slave_1: left allmulticast mode [ 132.307845][ T4349] bridge_slave_1: left promiscuous mode [ 132.313500][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.321147][ T4349] bridge_slave_0: left allmulticast mode [ 132.327295][ T4349] bridge_slave_0: left promiscuous mode [ 132.332964][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.356159][ T4349] bridge0 (unregistering): left allmulticast mode [ 132.473445][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.480618][ T4864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.487873][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.494925][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.524977][ T449] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.532876][ T449] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.550465][ T4349] veth1_macvtap: left promiscuous mode [ 132.556058][ T4349] veth0_vlan: left promiscuous mode [ 132.569083][ T36] audit: type=1400 audit(1756472626.323:506): avc: denied { read write } for pid=4876 comm="syz.4.1390" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.620554][ T36] audit: type=1400 audit(1756472626.323:507): avc: denied { open } for pid=4876 comm="syz.4.1390" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.662835][ T36] audit: type=1400 audit(1756472626.323:508): avc: denied { ioctl } for pid=4876 comm="syz.4.1390" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.709005][ T36] audit: type=1400 audit(1756472626.461:509): avc: denied { map } for pid=4876 comm="syz.4.1390" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.732497][ T36] audit: type=1400 audit(1756472626.461:510): avc: denied { execute } for pid=4876 comm="syz.4.1390" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.756718][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.763790][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.771659][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.778742][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.809407][ T4864] veth0_vlan: entered promiscuous mode [ 132.820335][ T4864] veth1_macvtap: entered promiscuous mode [ 132.864458][ T36] audit: type=1400 audit(1756472626.619:511): avc: denied { write } for pid=4881 comm="syz.3.1388" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 132.893170][ T4885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.900372][ T4885] rust_binder: Error in use_page_slow: ESRCH [ 132.900378][ T4884] rust_binder: Error in use_page_slow: ESRCH [ 132.900393][ T4885] rust_binder: use_range failure ESRCH [ 132.900408][ T4885] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 132.906437][ T4884] rust_binder: use_range failure ESRCH [ 132.912865][ T4885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 132.918296][ T4884] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 132.926308][ T4885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:158 [ 132.931607][ T4884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 132.940896][ T4885] rust_binder: Error in use_page_slow: ESRCH [ 132.948291][ T4884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:158 [ 132.957724][ T4885] rust_binder: use_range failure ESRCH [ 132.981750][ T4885] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 132.987498][ T4885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 132.995595][ T4885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:158 [ 133.176621][ T4890] rust_binder: Write failure EFAULT in pid:163 [ 133.259203][ T4898] TCP: TCP_TX_DELAY enabled [ 133.262824][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1397'. [ 133.285797][ T4903] rust_binder: pid 4903 performed invalid decrement on ref [ 133.312821][ T4906] rust_binder: Error while translating object. [ 133.312890][ T4906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.319123][ T4906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 133.491564][ T438] bridge_slave_1: left allmulticast mode [ 133.507116][ T438] bridge_slave_1: left promiscuous mode [ 133.513147][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.521020][ T438] bridge_slave_0: left allmulticast mode [ 133.528150][ T438] bridge_slave_0: left promiscuous mode [ 133.534044][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.638122][ T4928] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.645229][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.652621][ T4928] bridge_slave_0: entered allmulticast mode [ 133.659005][ T4928] bridge_slave_0: entered promiscuous mode [ 133.665491][ T4928] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.672540][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.679651][ T4928] bridge_slave_1: entered allmulticast mode [ 133.686245][ T4928] bridge_slave_1: entered promiscuous mode [ 133.693453][ T438] veth1_macvtap: left promiscuous mode [ 133.699079][ T438] veth0_vlan: left promiscuous mode [ 133.825038][ T36] audit: type=1400 audit(1756472627.557:512): avc: denied { append } for pid=4934 comm="syz.3.1410" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 133.860593][ T4945] binder: Unknown parameter '18446744073709551615' [ 133.864435][ T4928] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.874259][ T4928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.881586][ T4928] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.888661][ T4928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.920409][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.927931][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.935325][ T4951] fuse: Unknown parameter 'f' [ 133.943344][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.950432][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.963151][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.970226][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.980378][ T4953] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 133.981699][ T4953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4953 comm=syz.3.1414 [ 134.036092][ T4928] veth0_vlan: entered promiscuous mode [ 134.063479][ T4928] veth1_macvtap: entered promiscuous mode [ 134.064588][ T4959] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1417'. [ 134.101779][ T36] audit: type=1400 audit(1756472627.833:513): avc: denied { ioctl } for pid=4963 comm="syz.4.1408" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.106029][ T4964] rust_binder: 2: no such ref 2 [ 134.132509][ T4965] rust_binder: 2: no such ref 2 [ 134.137761][ T4965] rust_binder: 2: no such ref 2 [ 134.142938][ T4965] rust_binder: 2: no such ref 0 [ 134.147805][ T4965] rust_binder: 2: no such ref 3 [ 134.152703][ T4965] rust_binder: 2: no such ref 0 [ 134.187123][ T4972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30 [ 134.428982][ T10] usb 2-1: New USB device found, idVendor=0eef, idProduct=7302, bcdDevice= 0.40 [ 134.447518][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.456625][ T10] usb 2-1: can't set config #1, error -71 [ 134.463098][ T10] usb 2-1: USB disconnect, device number 50 [ 134.636939][ T5010] kvm: MONITOR instruction emulated as NOP! [ 134.672541][ T5019] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 134.680189][ T5019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54 [ 134.700191][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 134.710881][ T5022] rust_binder: Error while translating object. [ 134.718546][ T5022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 134.720458][ T5021] erspan0: entered promiscuous mode [ 134.724867][ T5022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:612 [ 135.193626][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 135.193701][ T36] audit: type=1400 audit(1756472628.920:516): avc: denied { read } for pid=5048 comm="syz.3.1444" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.313649][ T5058] x_tables: duplicate underflow at hook 1 [ 135.359870][ T5058] rust_binder: Write failure EFAULT in pid:30 [ 135.500092][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 135.515256][ T5073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 135.568186][ T5075] rust_binder: Write failure EFAULT in pid:88 [ 135.568563][ T5075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5075 comm=syz.3.1448 [ 135.769430][ T63] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 135.922288][ T63] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 135.931077][ T63] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 135.941251][ T63] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.951739][ T63] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.960791][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.968963][ T63] usb 2-1: Product: 賘瞨킔 [ 135.973775][ T63] usb 2-1: Manufacturer: Я [ 135.978401][ T63] usb 2-1: SerialNumber: 兗떫㺘îšë¹¿í‹žæ”§ì¨„㯣姓î„쌵悎ç™ì¤ªä€¿ê«¦ï»Ÿë¯‹åƒžãº‡ä¬‡ì°ï›½éŒ†è¦—葲æ¢à¾ïƒæž‚෩쭎ꦬ쮖밦ç㫾⹫ä›å¼¿å â¨­ã¡µá­ªîš©à«€îª»ì¯¬ï¡‚樹ê‰ï¿—ë»ç†©ï‚³â¿´å‚ºë§ºã¼©çµäœ—췜胢嘆æ霭æ¶ê°Å¥è©¥íŒç•²à­€ç¸¹çŒ¶ã頻䓵îŒè¿›ì™§â«‘莵ꕰ㈺ã™áŽŽî¡…玄㷨癟à°ì…ªéž¸â¤¯ã‰ªä‘Šë¤‘æ½âƒ–ã—¿ïî¿  [ 136.148984][ T5077] rust_binder: got new transaction with bad transaction stack [ 136.149007][ T5077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 136.231099][ T63] usb 2-1: 0:2 : does not exist [ 136.247010][ T63] usb 2-1: USB disconnect, device number 51 [ 136.255583][ T1559] udevd[1559]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.311489][ T36] audit: type=1400 audit(1756472630.017:517): avc: denied { shutdown } for pid=5089 comm="syz.3.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 136.375833][ T5095] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 136.375859][ T5095] rust_binder: Error while translating object. [ 136.384821][ T5095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.391294][ T5095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 136.426646][ T339] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.530304][ T36] audit: type=1400 audit(1756472630.235:518): avc: denied { getopt } for pid=5103 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.576354][ T36] audit: type=1400 audit(1756472631.264:519): avc: denied { setattr } for pid=5172 comm="syz.3.1480" name="TIPC" dev="sockfs" ino=23464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.854003][ T5178] input: syz1 as /devices/virtual/input/input16 [ 137.942019][ T45] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 138.094709][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.104947][ T45] usb 2-1: config 0 has no interfaces? [ 138.112370][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 138.121517][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 138.130819][ T45] usb 2-1: Product: syz [ 138.135190][ T45] usb 2-1: Manufacturer: syz [ 138.139839][ T45] usb 2-1: SerialNumber: syz [ 138.151206][ T45] usb 2-1: config 0 descriptor?? [ 138.160246][ T36] audit: type=1400 audit(1756472631.849:520): avc: denied { setattr } for pid=5204 comm="syz.4.1490" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 138.198528][ T36] audit: type=1400 audit(1756472631.888:521): avc: denied { ioctl } for pid=5204 comm="syz.4.1490" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.367906][ T5169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.401560][ T5169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.411880][ T10] usb 2-1: USB disconnect, device number 52 [ 138.441066][ T5226] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 138.516820][ T63] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 138.656835][ T63] usb 5-1: device descriptor read/64, error -71 [ 138.896855][ T63] usb 5-1: device descriptor read/64, error -71 [ 139.136815][ T63] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 139.176786][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 139.266779][ T63] usb 5-1: device descriptor read/64, error -71 [ 139.326785][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 139.333046][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.344015][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.353793][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 139.360137][ T5241] netlink: 'syz.2.1504': attribute type 32 has an invalid length. [ 139.363214][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.382578][ T10] usb 2-1: config 0 descriptor?? [ 139.462616][ T36] audit: type=1400 audit(1756472633.150:522): avc: denied { append } for pid=5246 comm="syz.3.1507" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.506860][ T63] usb 5-1: device descriptor read/64, error -71 [ 139.605005][ T5255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 139.605045][ T5255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:152 [ 139.615341][ T5255] /dev/rnullb0: Can't open blockdev [ 139.624675][ T63] usb usb5-port1: attempt power cycle [ 139.800503][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.821337][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.832463][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.840384][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.847838][ T5259] x_tables: duplicate entry at hook 2 [ 139.853473][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.861916][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.869550][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.877206][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.884483][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.902247][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.927270][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.934857][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.942594][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.950050][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.957540][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.965281][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.973399][ T63] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 139.981468][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 139.994127][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.001888][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.009611][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.018364][ T63] usb 5-1: device descriptor read/8, error -71 [ 140.025773][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.033546][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.041678][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.049077][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.056273][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.063722][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.073517][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.081768][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.095300][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.102797][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.111765][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.135088][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.144820][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.157982][ T63] usb 5-1: device descriptor read/8, error -71 [ 140.164902][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.172515][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.186808][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.195773][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.208758][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.216914][ T36] audit: type=1326 audit(1756472633.900:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.1519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd12178ebe9 code=0x0 [ 140.241869][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.249391][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.257123][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.264500][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.272316][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.279657][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.288443][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.295739][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.303527][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.311052][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.319186][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.326959][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.336907][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 140.341043][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.355291][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.363212][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.370786][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.378432][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.385599][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.392986][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.400223][ T63] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 140.407877][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.415130][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.422418][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.429667][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.437326][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.447484][ T63] usb 5-1: device descriptor read/8, error -71 [ 140.449502][ T5312] overlayfs: failed to clone upperpath [ 140.458567][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.466288][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.473517][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.484011][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.493167][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.500828][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.508307][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.515452][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.522615][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.529766][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.536920][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.544042][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.551176][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.558434][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.565561][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.572725][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.579987][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.587192][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.594405][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.601891][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.609188][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.616348][ T63] usb 5-1: device descriptor read/8, error -71 [ 140.622551][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.629779][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.636938][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.644077][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.651220][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.658361][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.665479][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.672787][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.679943][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.687076][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.694206][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.701397][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.708543][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.715647][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.722822][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.729972][ T825] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.737564][ T63] usb usb5-port1: unable to enumerate USB device [ 140.744457][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.751812][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.758966][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.766090][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.773241][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.780382][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.787515][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.794903][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.802039][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.809277][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.816505][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.823800][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.830978][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.838144][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.845268][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.852403][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.859561][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.866681][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.873826][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.881033][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.888250][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.895378][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.902534][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.909693][ T825] usb 4-1: Using ep0 maxpacket: 8 [ 140.914769][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.921960][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.929180][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.936298][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.943514][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.950694][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.957961][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.965141][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.972393][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.979597][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 140.986820][ T825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.994552][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.001774][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.009034][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.016245][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.023510][ T825] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 141.034359][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.043264][ T825] usb 4-1: config 0 has no interface number 0 [ 141.050292][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.054358][ T5334] overlayfs: failed to clone upperpath [ 141.057781][ T825] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 141.076795][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.083960][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.093597][ T825] usb 4-1: config 0 interface 88 has no altsetting 0 [ 141.100418][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.109338][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.116803][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.124925][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.132336][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.139979][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.147944][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.155206][ T825] usb 4-1: string descriptor 0 read error: -22 [ 141.161517][ T825] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 141.170648][ T825] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 141.178944][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.186575][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.194058][ T825] usb 4-1: config 0 descriptor?? [ 141.199293][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.208268][ T825] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input17 [ 141.219904][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.227665][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.236402][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.243618][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.250846][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.258053][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.265254][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.272859][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.280107][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.288929][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.297252][ T10] logitech 0003:046D:C29C.000F: unknown main item tag 0x0 [ 141.306682][ T10] logitech 0003:046D:C29C.000F: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 141.330274][ T10] logitech 0003:046D:C29C.000F: no inputs found [ 141.349414][ T10] usb 2-1: USB disconnect, device number 53 [ 141.413360][ T825] usb 4-1: USB disconnect, device number 2 [ 141.446648][ T5353] overlayfs: missing 'lowerdir' [ 141.469582][ T5358] rust_binder: Error while translating object. [ 141.469617][ T5358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 141.475864][ T5358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:86 [ 142.235050][ T5410] tipc: New replicast peer: 255.255.255.255 [ 142.250485][ T5410] tipc: Enabled bearer , priority 10 [ 142.258906][ T5410] 9pnet_fd: Insufficient options for proto=fd [ 142.468607][ T5413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 142.603658][ T36] audit: type=1400 audit(1756472636.290:524): avc: denied { shutdown } for pid=5429 comm="syz.4.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.607741][ T5430] rust_binder: Error while translating object. [ 142.632777][ T5430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.639444][ T5430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 142.659105][ T5432] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 142.659113][ T36] audit: type=1400 audit(1756472636.350:525): avc: denied { load_policy } for pid=5431 comm="syz.4.1564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 142.696037][ T5432] SELinux: failed to load policy [ 142.707892][ T5432] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 142.856293][ T36] audit: type=1400 audit(1756472636.540:526): avc: denied { bind } for pid=5451 comm="syz.1.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.366783][ T63] tipc: Node number set to 2176349248 [ 143.386130][ T5459] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.616789][ T45] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 143.777859][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.790750][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 143.799809][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.808354][ T45] usb 2-1: config 0 descriptor?? [ 144.215485][ T45] wacom 0003:056A:0017.0010: unknown main item tag 0x0 [ 144.222489][ T45] wacom 0003:056A:0017.0010: unknown main item tag 0x0 [ 144.229390][ T45] wacom 0003:056A:0017.0010: unknown main item tag 0x0 [ 144.236278][ T45] wacom 0003:056A:0017.0010: unknown main item tag 0x0 [ 144.243172][ T45] wacom 0003:056A:0017.0010: unknown main item tag 0x0 [ 144.250273][ T45] wacom 0003:056A:0017.0010: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 144.260228][ T45] wacom 0003:056A:0017.0010: hidraw0: USB HID v0.03 Device [HID 056a:0017] on usb-dummy_hcd.1-1/input0 [ 144.272156][ T45] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0017.0010/input/input18 [ 144.416575][ T5459] rust_binder: Error while translating object. [ 144.416630][ T5459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 144.422890][ T5459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:671 [ 144.432809][ T45] usb 2-1: USB disconnect, device number 54 [ 144.973360][ T36] audit: type=1400 audit(1756472638.660:527): avc: denied { accept } for pid=5492 comm="syz.3.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.155282][ T36] audit: type=1400 audit(1756472638.840:528): avc: denied { setcheckreqprot } for pid=5501 comm="syz.3.1589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 145.155914][ T5503] binder: Unknown parameter 'fscontext?}' [ 145.573129][ T5510] rust_binder: Error while translating object. [ 145.573168][ T5510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 145.579422][ T5510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:681 [ 145.614717][ T5516] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 145.738367][ T10] rust_binder: 5433: removing orphan mapping 0:8 [ 145.768478][ T5540] binder: Bad value for 'stats' [ 145.787649][ T5542] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.958601][ T5551] rust_binder: Error while translating object. [ 145.965185][ T5551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 145.971851][ T5551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:179 [ 145.997553][ T339] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.046835][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 146.063643][ T5555] binder: Bad value for 'defcontext' [ 146.158197][ T339] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.166607][ T339] usb 5-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 146.176998][ T339] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.187386][ T339] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.196433][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.204442][ T339] usb 5-1: Product: syz [ 146.207924][ T10] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 146.208713][ T339] usb 5-1: Manufacturer: syz [ 146.219154][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.223487][ T339] usb 5-1: SerialNumber: syz [ 146.247336][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 146.256446][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.264489][ T10] usb 2-1: Product: syz [ 146.268726][ T10] usb 2-1: Manufacturer: syz [ 146.273869][ T10] usb 2-1: SerialNumber: syz [ 146.281541][ T10] rtl8150 2-1:1.0: couldn't find required endpoints [ 146.288236][ T10] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 146.336825][ T63] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.483777][ T5549] __vm_enough_memory: 55 callbacks suppressed [ 146.483793][ T5549] __vm_enough_memory: pid: 5549, comm: syz.1.1606, bytes: 18014402804453376 not enough memory for the allocation [ 146.487177][ T63] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 146.511781][ T63] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 146.519466][ T63] usb 4-1: can't read configurations, error -61 [ 146.567510][ T10] usb 2-1: USB disconnect, device number 55 [ 146.646835][ T63] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.797161][ T63] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 146.806076][ T63] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 146.807562][ T5571] netlink: 'syz.2.1616': attribute type 1 has an invalid length. [ 146.814029][ T63] usb 4-1: can't read configurations, error -61 [ 146.829008][ T63] usb usb4-port1: attempt power cycle [ 147.097187][ T5579] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.097264][ T5580] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 147.103895][ T5580] rust_binder: Read failure Err(EFAULT) in pid:707 [ 147.145039][ T5586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:714 [ 147.145670][ T36] audit: type=1400 audit(1756472640.830:529): avc: denied { bind } for pid=5585 comm="syz.1.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.167813][ T63] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.183813][ T5589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.186346][ T5590] rust_binder: Error while translating object. [ 147.193212][ T5590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 147.199520][ T5590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:717 [ 147.213760][ T63] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 147.236792][ T63] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 147.244414][ T63] usb 4-1: can't read configurations, error -61 [ 147.247707][ T36] audit: type=1400 audit(1756472640.930:530): avc: denied { ioctl } for pid=5597 comm="syz.1.1624" path="socket:[25888]" dev="sockfs" ino=25888 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.251797][ T5598] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5598 comm=syz.1.1624 [ 147.276259][ T36] audit: type=1400 audit(1756472640.940:531): avc: denied { setopt } for pid=5597 comm="syz.1.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.308810][ T36] audit: type=1400 audit(1756472640.940:532): avc: denied { read } for pid=5597 comm="syz.1.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.330067][ T36] audit: type=1400 audit(1756472640.980:533): avc: denied { nlmsg_read } for pid=5597 comm="syz.1.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.376860][ T63] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.397595][ T63] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 147.406838][ T63] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 147.414508][ T63] usb 4-1: can't read configurations, error -61 [ 147.421063][ T63] usb usb4-port1: unable to enumerate USB device [ 147.736458][ T5619] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1631'. [ 148.407524][ T5647] overlayfs: failed to clone lowerpath [ 148.428233][ T5650] tipc: New replicast peer: fe80:0000:0000:faff:ffff:0000:0000:0038 [ 148.436423][ T5650] tipc: Enabled bearer , priority 10 [ 148.686780][ T45] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 148.761420][ T339] usb 5-1: 0:2 : does not exist [ 148.771415][ T339] usb 5-1: USB disconnect, device number 10 [ 148.781116][ T1559] udevd[1559]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.838129][ T45] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 148.849298][ T45] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.860490][ T45] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 148.874641][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.883982][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 148.892014][ T45] usb 2-1: SerialNumber: syz [ 149.115252][ T45] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 149.121690][ T45] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 149.130721][ T339] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 149.142422][ T45] usb 2-1: USB disconnect, device number 56 [ 149.181782][ T36] audit: type=1326 audit(1756472642.870:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.1.1651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd12178ebe9 code=0x0 [ 149.282254][ T5683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.296811][ T339] usb 5-1: Using ep0 maxpacket: 32 [ 149.296972][ T5685] rust_binder: Write failure EFAULT in pid:190 [ 149.304742][ T339] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.324610][ T339] usb 5-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 149.336829][ T339] usb 5-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.350111][ T339] usb 5-1: config 1 interface 0 has no altsetting 0 [ 149.364283][ T339] usb 5-1: string descriptor 0 read error: -22 [ 149.370535][ T339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 149.379619][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.388440][ T5661] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.395667][ T5661] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.535253][ T5699] overlayfs: failed to clone upperpath [ 149.541174][ T5698] overlayfs: failed to clone upperpath [ 149.566275][ T36] audit: type=1400 audit(1756472643.250:535): avc: denied { bind } for pid=5700 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.586691][ T63] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.603791][ T5661] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 149.616508][ T339] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 149.632662][ T339] usb 5-1: USB disconnect, device number 11 [ 149.640327][ T339] usblp0: removed [ 149.737935][ T63] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 149.746071][ T63] usb 4-1: config 0 has no interface number 0 [ 149.752414][ T63] usb 4-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.763814][ T63] usb 4-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.773996][ T63] usb 4-1: config 0 interface 85 has no altsetting 0 [ 149.781062][ T63] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 149.790280][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.803971][ T63] usb 4-1: config 0 descriptor?? [ 150.089717][ T5709] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 150.172424][ T36] audit: type=1326 audit(1756472643.860:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5724 comm="syz.2.1668" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1bf38ebe9 code=0x0 [ 150.214859][ T5687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 150.226356][ T63] usbhid 4-1:0.85: can't add hid device: -71 [ 150.234987][ T63] usbhid 4-1:0.85: probe with driver usbhid failed with error -71 [ 150.244630][ T36] audit: type=1400 audit(1756472643.930:537): avc: denied { execute } for pid=5734 comm="syz.4.1670" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 150.276053][ T63] usb 4-1: USB disconnect, device number 7 [ 150.319042][ T5741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.422163][ T5743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:770 [ 150.546784][ T339] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.707807][ T339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.718025][ T339] usb 5-1: config 0 has no interfaces? [ 150.724974][ T339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 150.734036][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 150.742175][ T339] usb 5-1: Product: syz [ 150.746363][ T339] usb 5-1: Manufacturer: syz [ 150.751180][ T339] usb 5-1: SerialNumber: syz [ 150.754807][ T5745] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 150.756858][ T339] usb 5-1: config 0 descriptor?? [ 150.783065][ T5751] overlayfs: failed to resolve './file1': -2 [ 150.803563][ T5755] can: request_module (can-proto-4) failed. [ 150.977293][ T45] usb 5-1: USB disconnect, device number 12 [ 151.176784][ T63] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 151.195397][ T5759] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.196248][ T5759] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.328227][ T63] usb 4-1: not running at top speed; connect to a high speed hub [ 151.343353][ T63] usb 4-1: config 7 has an invalid interface number: 237 but max is 1 [ 151.351576][ T63] usb 4-1: config 7 has an invalid interface number: 251 but max is 1 [ 151.359969][ T63] usb 4-1: config 7 has an invalid interface number: 16 but max is 1 [ 151.368129][ T63] usb 4-1: config 7 has 3 interfaces, different from the descriptor's value: 2 [ 151.377128][ T63] usb 4-1: config 7 has no interface number 0 [ 151.383219][ T63] usb 4-1: config 7 has no interface number 1 [ 151.389302][ T63] usb 4-1: config 7 has no interface number 2 [ 151.395399][ T63] usb 4-1: config 7 interface 237 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 151.406361][ T63] usb 4-1: config 7 interface 251 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 151.413477][ T5759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:774 [ 151.417268][ T63] usb 4-1: config 7 interface 251 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 151.437425][ T63] usb 4-1: config 7 interface 251 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 151.448860][ T63] usb 4-1: config 7 interface 251 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 151.460455][ T63] usb 4-1: too many endpoints for config 7 interface 16 altsetting 225: 138, using maximum allowed: 30 [ 151.471604][ T63] usb 4-1: config 7 interface 16 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 138 [ 151.485062][ T63] usb 4-1: config 7 interface 237 has no altsetting 0 [ 151.492049][ T63] usb 4-1: config 7 interface 251 has no altsetting 0 [ 151.499314][ T63] usb 4-1: config 7 interface 16 has no altsetting 0 [ 151.504311][ T5767] netlink: 1072 bytes leftover after parsing attributes in process `syz.4.1681'. [ 151.515324][ T5767] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1681'. [ 151.525658][ T36] audit: type=1400 audit(1756472645.210:538): avc: denied { mount } for pid=5766 comm="syz.4.1681" name="/" dev="ramfs" ino=26805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 151.547988][ T36] audit: type=1400 audit(1756472645.210:539): avc: denied { unmount } for pid=4928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 151.594822][ T5775] netlink: 'syz.1.1684': attribute type 11 has an invalid length. [ 151.624198][ T339] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 151.632992][ T339] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.675334][ T5780] fido_id[5780]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 151.686367][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.699340][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.431531][ T5801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.499204][ T36] audit: type=1400 audit(1756472646.190:540): avc: denied { associate } for pid=5814 comm="syz.1.1696" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 152.656789][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 152.827172][ T45] usb 5-1: config 128 has an invalid interface number: 164 but max is 1 [ 152.835562][ T45] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 152.845893][ T339] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 152.853492][ T45] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 2 [ 152.862619][ T45] usb 5-1: config 128 has no interface number 0 [ 152.868929][ T45] usb 5-1: config 128 interface 164 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 152.883453][ T45] usb 5-1: config 128 interface 164 has no altsetting 0 [ 152.891887][ T45] usb 5-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=3b.3b [ 152.901004][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.909310][ T45] usb 5-1: Product: syz [ 152.913480][ T45] usb 5-1: Manufacturer: syz [ 152.918126][ T45] usb 5-1: SerialNumber: syz [ 153.027878][ T339] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 153.038846][ T339] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.051675][ T339] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.058345][ T339] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 153.067446][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.076209][ T339] usb 2-1: config 0 descriptor?? [ 153.081578][ T5815] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 153.136097][ T45] zaurus 5-1:128.164: skipping garbage [ 153.141680][ T45] usb 5-1: bad CDC descriptors [ 153.147716][ T45] usb 5-1: USB disconnect, device number 13 [ 153.491462][ T339] sunplus 0003:04FC:05D8.0012: hidraw0: USB HID v1.01 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 153.693608][ T339] usb 2-1: USB disconnect, device number 57 [ 153.825760][ T63] usb 4-1: New USB device found, idVendor=16c0, idProduct=09b1, bcdDevice=62.92 [ 153.835141][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.842497][ T36] audit: type=1400 audit(1756472647.530:541): avc: denied { create } for pid=5826 comm="syz.3.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 153.843936][ T63] usb 4-1: Product: 蹟頓趦핦伪즎ì¥é¹•æƒšãž´ã´ªê•ì²„艀䈕䃶쯙눒꜀裊櫇㤊䋺ݙé²è¾ì½‚丷ᾈ昌䂈谈ꦦ뱅郛唴嗶嵂酉ë¸ã³á¢‘봤嬢ï³äƒµâ»‡ä„­è²ªà¯²ê‚šé–„ê™´ãœî½–ëŠã£ã…ºâµ´ãŒ”篛㥲ᆣ粑ï„펗餫첒僈줪㉰⤮멣皼æ–➂थ疇饀᧞켬ᓤ㈡ᨻ޳᱉휑ᢎV풭ìŸã”‘궞긮䳫ç‘㧓청 [ 153.895643][ T63] usb 4-1: can't set config #7, error -71 [ 153.903987][ T63] usb 4-1: USB disconnect, device number 8 [ 153.938890][ T4353] bridge_slave_1: left allmulticast mode [ 153.944633][ T4353] bridge_slave_1: left promiscuous mode [ 153.950590][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.958520][ T4353] bridge_slave_0: left allmulticast mode [ 153.964182][ T4353] bridge_slave_0: left promiscuous mode [ 153.970559][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.076028][ T4353] veth1_macvtap: left promiscuous mode [ 154.081609][ T4353] veth0_vlan: left promiscuous mode [ 154.115888][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.123003][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.130159][ T5832] bridge_slave_0: entered allmulticast mode [ 154.136352][ T5832] bridge_slave_0: entered promiscuous mode [ 154.142720][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.149802][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.156944][ T5832] bridge_slave_1: entered allmulticast mode [ 154.163156][ T5832] bridge_slave_1: entered promiscuous mode [ 154.210313][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.217422][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.224676][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.231717][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.251264][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.258836][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.268191][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.275284][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.284682][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.291790][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.315495][ T5832] veth0_vlan: entered promiscuous mode [ 154.326012][ T5832] veth1_macvtap: entered promiscuous mode [ 154.402882][ T36] audit: type=1400 audit(1756472648.090:542): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 154.427411][ T5846] rust_binder: Fixups oob 164 166 363 196 [ 154.427438][ T5846] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 154.433297][ T5846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.441833][ T5846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:818 [ 154.481151][ T5851] overlayfs: conflicting options: userxattr,verity=require [ 154.567683][ T5867] overlayfs: failed to clone upperpath [ 154.577744][ T5869] tap0: tun_chr_ioctl cmd 1074025675 [ 154.583368][ T5869] tap0: persist enabled [ 154.593234][ T5869] tap0: tun_chr_ioctl cmd 1074025675 [ 154.598598][ T5869] tap0: persist enabled [ 154.603784][ T5869] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 154.625600][ T5869] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1711'. [ 154.729475][ T5884] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.741076][ T5884] binder: Unknown parameter 'defcontext01777777777777777777777' [ 154.897237][ T5889] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 154.904521][ T5889] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 154.912247][ T5889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.912272][ T5889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 155.264949][ T5913] tipc: Enabling of bearer rejected, media not registered [ 155.546227][ T5949] netlink: 'syz.1.1738': attribute type 11 has an invalid length. [ 155.588483][ T5956] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.589410][ T5956] rust_binder: 839: no such ref 3 [ 155.876811][ T45] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 156.028183][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 156.039467][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.052694][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 156.062310][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.071759][ T45] usb 2-1: config 0 descriptor?? [ 156.078525][ T5960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.111108][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 156.120504][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 156.176092][ T5988] overlayfs: failed to clone upperpath [ 156.294252][ T36] audit: type=1400 audit(1756472649.975:543): avc: denied { setattr } for pid=5997 comm="syz.3.1755" name="RAW" dev="sockfs" ino=27771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.488376][ T45] wacom 0003:056A:0020.0013: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 156.498632][ T45] wacom 0003:056A:0020.0013: hidraw0: USB HID v1.01 Device [HID 056a:0020] on usb-dummy_hcd.1-1/input0 [ 156.510578][ T45] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0020.0013/input/input21 [ 156.687775][ T45] usb 2-1: USB disconnect, device number 58 [ 156.845300][ T6014] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 156.855271][ T36] audit: type=1400 audit(1756472650.545:544): avc: denied { relabelto } for pid=6013 comm="syz.3.1760" name="file0" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:scanner_device_t:s0" [ 156.883014][ T36] audit: type=1400 audit(1756472650.545:545): avc: denied { associate } for pid=6013 comm="syz.3.1760" name="file0" dev="tmpfs" ino=261 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:scanner_device_t:s0" [ 156.910900][ T36] audit: type=1400 audit(1756472650.545:546): avc: denied { unlink } for pid=5832 comm="syz-executor" name="file0" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:scanner_device_t:s0" [ 157.176816][ T825] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 157.326783][ T825] usb 2-1: Using ep0 maxpacket: 16 [ 157.333172][ T825] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 157.343730][ T825] usb 2-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 157.352803][ T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.361456][ T825] usb 2-1: Product: syz [ 157.365658][ T825] usb 2-1: Manufacturer: syz [ 157.370270][ T825] usb 2-1: SerialNumber: syz [ 157.446986][ T6031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6031 comm=syz.3.1766 [ 157.459866][ T6031] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1766'. [ 157.469912][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'. [ 157.572876][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 157.587188][ T735] usb 2-1: USB disconnect, device number 59 [ 158.086847][ T735] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 158.101883][ T6058] input: syz1 as /devices/virtual/input/input24 [ 158.109352][ T6058] binder: Bad value for 'defcontext' [ 158.225067][ T36] audit: type=1400 audit(1756472651.905:547): avc: denied { setattr } for pid=6070 comm="syz.1.1781" name="/" dev="configfs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.226795][ T735] usb 5-1: device descriptor read/64, error -71 [ 158.486806][ T735] usb 5-1: device descriptor read/64, error -71 [ 158.576195][ T6082] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1784' sets config #0 [ 158.662898][ T36] audit: type=1326 audit(1756472652.345:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6085 comm="syz.3.1786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x0 [ 158.736902][ T735] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 158.866822][ T735] usb 5-1: device descriptor read/64, error -71 [ 159.106799][ T735] usb 5-1: device descriptor read/64, error -71 [ 159.192806][ T6093] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3507366080 (224471429120 ns) > initial count (25249277504 ns). Using initial count to start timer. [ 159.211310][ T6093] kvm: Disabled LAPIC found during irq injection [ 159.217852][ T735] usb usb5-port1: attempt power cycle [ 159.432484][ T6097] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5140 sclass=netlink_xfrm_socket pid=6097 comm=syz.2.1789 [ 159.445975][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.453206][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.461285][ T6097] bridge0: entered promiscuous mode [ 159.466533][ T6097] bridge0: entered allmulticast mode [ 159.474716][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.481812][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.489182][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.496306][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.510144][ T6099] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1790'. [ 159.558829][ T735] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 159.587898][ T735] usb 5-1: device descriptor read/8, error -71 [ 159.605144][ T6122] fuse: Bad value for 'fd' [ 159.619780][ T6124] netlink: 'syz.3.1800': attribute type 20 has an invalid length. [ 159.718200][ T735] usb 5-1: device descriptor read/8, error -71 [ 159.733500][ T6153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6153 comm=syz.3.1811 [ 159.956844][ T735] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 159.977845][ T735] usb 5-1: device descriptor read/8, error -71 [ 160.107560][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'. [ 160.117536][ T735] usb 5-1: device descriptor read/8, error -71 [ 160.139067][ T36] audit: type=1326 audit(1756472653.825:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.1818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1bf38ebe9 code=0x0 [ 160.236909][ T735] usb usb5-port1: unable to enumerate USB device [ 160.406784][ T339] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 160.557008][ T339] usb 2-1: Using ep0 maxpacket: 8 [ 160.563520][ T339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.575272][ T339] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255 [ 160.585314][ T36] audit: type=1400 audit(1756472654.265:550): avc: denied { create } for pid=6180 comm="syz.3.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 160.605707][ T339] usb 2-1: config 8 interface 0 has no altsetting 0 [ 160.613926][ T339] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 160.623098][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.631127][ T339] usb 2-1: Product: syz [ 160.635446][ T339] usb 2-1: Manufacturer: syz [ 160.640227][ T339] usb 2-1: SerialNumber: syz [ 160.645715][ T6178] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 160.858976][ T36] audit: type=1400 audit(1756472654.545:551): avc: denied { watch_reads } for pid=6177 comm="syz.1.1820" path="/284/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 160.892420][ T6187] input: syz1 as /devices/virtual/input/input26 [ 160.931409][ T339] usb 2-1: selecting invalid altsetting 0 [ 160.942962][ T339] usb 2-1: USB disconnect, device number 60 [ 160.955201][ T1692] udevd[1692]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 161.406785][ T825] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 161.558127][ T825] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.586770][ T825] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.602896][ T6251] fuse: Unknown parameter 'Á¾ŠËæ1tÎB§GEµÚœJ ' [ 161.606823][ T825] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.631033][ T825] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 161.640866][ T825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.661548][ T6218] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.139054][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 162.211399][ T6293] fuse: Unknown parameter 'usñr_id' [ 162.217372][ T6293] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1552 sclass=netlink_xfrm_socket pid=6293 comm=syz.2.1858 [ 162.231575][ T6293] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1858'. [ 162.240666][ T6293] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1858'. [ 162.249699][ T6293] netlink: 'syz.2.1858': attribute type 6 has an invalid length. [ 162.257489][ T6293] netlink: 'syz.2.1858': attribute type 5 has an invalid length. [ 162.265207][ T6293] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1858'. [ 162.556804][ T45] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 162.632818][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.641419][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.650148][ T6302] tmpfs: Bad value for 'huge' [ 162.687788][ T825] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 162.695513][ T825] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input28 [ 162.707478][ T825] usb 5-1: USB disconnect, device number 18 [ 162.707495][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 162.722733][ T45] usb 2-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 162.733097][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.742155][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.756869][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.765924][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.773943][ T45] usb 2-1: Product: syz [ 162.778176][ T45] usb 2-1: Manufacturer: syz [ 162.782773][ T45] usb 2-1: SerialNumber: syz [ 163.009167][ T825] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 163.021755][ T825] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.076449][ T45] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 163.083337][ T45] cdc_ncm 2-1:1.0: bind() failure [ 163.089384][ T45] usb 2-1: USB disconnect, device number 61 [ 163.330991][ T6315] kvm: kvm [6313]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 163.418107][ T6318] overlayfs: failed to clone upperpath [ 163.506207][ T36] audit: type=1400 audit(1756472657.185:552): avc: denied { associate } for pid=6325 comm="syz.3.1867" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 163.660671][ T36] audit: type=1400 audit(1756472657.345:553): avc: denied { execstack } for pid=6336 comm="syz.1.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 163.690093][ T6337] rust_binder: Error while translating object. [ 163.690142][ T6337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.702202][ T6337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:909 [ 163.745699][ T36] audit: type=1400 audit(1756472657.425:554): avc: denied { read write } for pid=6345 comm="syz.1.1876" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.808840][ T36] audit: type=1400 audit(1756472657.425:555): avc: denied { open } for pid=6345 comm="syz.1.1876" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.836773][ T36] audit: type=1400 audit(1756472657.425:556): avc: denied { map } for pid=6345 comm="syz.1.1876" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.861280][ T36] audit: type=1400 audit(1756472657.435:557): avc: denied { execute } for pid=6345 comm="syz.1.1876" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.884567][ T36] audit: type=1400 audit(1756472657.485:558): avc: denied { lock } for pid=6341 comm="syz.2.1875" path="socket:[28533]" dev="sockfs" ino=28533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 164.156255][ T6379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.156977][ T6379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.163532][ T6379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 164.182198][ T6383] __vm_enough_memory: pid: 6383, comm: syz.4.1886, bytes: 18014402804453376 not enough memory for the allocation [ 164.605172][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1895'. [ 164.640791][ T6410] syz.2.1897 uses obsolete (PF_INET,SOCK_PACKET) [ 164.742761][ T6433] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 165.026804][ T339] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 165.086774][ T825] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 165.179224][ T339] usb 2-1: not running at top speed; connect to a high speed hub [ 165.187773][ T339] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 165.198619][ T339] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.211516][ T339] usb 2-1: config 1 interface 0 has no altsetting 0 [ 165.219603][ T339] usb 2-1: New USB device found, idVendor=046d, idProduct=00fe, bcdDevice= 0.40 [ 165.228646][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.236631][ T339] usb 2-1: Manufacturer: ã…开础ꛓ噓ꦀ褬晋䭤䈯櫦᜾빭幛잹轸嵾谌縵꽪⬞ᤴ㳜좇à§ã¿ç€î¤Žé¥¶î—²á®¡á‹²ã‘­é› íƒ‡ç¤™ä››ï¡ŸãŸ¤ë«ê‰…惘ᾜì±Å˜ì“–떮뇔硈鑴轫á£ï€¯ä¯ç£½ì·®áˆæ‹· [ 165.236631][ T339] [ 165.236781][ T825] usb 5-1: Using ep0 maxpacket: 16 [ 165.259375][ T339] usb 2-1: SerialNumber: syz [ 165.269801][ T825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.269861][ T339] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 165.283546][ T825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.290378][ T339] usb 2-1: no configuration chosen from 1 choice [ 165.307985][ T825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.321133][ T825] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.330385][ T825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.340615][ T825] usb 5-1: config 0 descriptor?? [ 165.409272][ T6449] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 165.747906][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.755197][ T825] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 165.764003][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.771249][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.778491][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.785711][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.792970][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.800218][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.807467][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.814693][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.822012][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.829248][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.836449][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.843680][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.851057][ T825] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 165.947491][ T825] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 165.955583][ T825] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 165.967066][ T825] microsoft 0003:045E:07DA.0015: no inputs found [ 165.973427][ T825] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 166.173939][ T6485] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 166.184378][ T45] usb 5-1: USB disconnect, device number 19 [ 166.190873][ T6485] netlink: 'syz.2.1928': attribute type 2 has an invalid length. [ 166.336216][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 166.352799][ T6519] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1938'. [ 166.364189][ T6519] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1938'. [ 166.373311][ T6519] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 166.405719][ T6521] : renamed from bond_slave_0 [ 166.463850][ T6521] overlayfs: failed to clone upperpath [ 166.706928][ T6526] 9pnet_fd: Insufficient options for proto=fd [ 166.743701][ T6534] netlink: 'syz.4.1944': attribute type 3 has an invalid length. [ 166.752123][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 166.918245][ T339] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 166.933699][ T339] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.280668][ T6587] cgroup: fork rejected by pids controller in /syz3 [ 167.795977][ T339] usb 2-1: USB disconnect, device number 62 [ 167.883496][ T6680] fuse: Bad value for 'rootmode' [ 167.954545][ T735] rust_binder: 6681: removing orphan mapping 0:24 [ 168.106793][ T339] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 168.216792][ T735] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 168.237946][ T339] usb 2-1: device descriptor read/64, error -71 [ 168.366810][ T735] usb 5-1: Invalid ep0 maxpacket: 16 [ 168.487690][ T339] usb 2-1: device descriptor read/64, error -71 [ 168.496875][ T735] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 168.646776][ T735] usb 5-1: Invalid ep0 maxpacket: 16 [ 168.652292][ T735] usb usb5-port1: attempt power cycle [ 168.726782][ T339] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 168.856797][ T339] usb 2-1: device descriptor read/64, error -71 [ 168.996799][ T735] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 169.017129][ T735] usb 5-1: Invalid ep0 maxpacket: 16 [ 169.073342][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 169.073359][ T36] audit: type=1326 audit(1756472662.755:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.1994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x0 [ 169.106848][ T339] usb 2-1: device descriptor read/64, error -71 [ 169.130907][ T6748] netlink: 'syz.3.1997': attribute type 11 has an invalid length. [ 169.140175][ T36] audit: type=1326 audit(1756472662.825:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x7ff00000 [ 169.163819][ T36] audit: type=1326 audit(1756472662.825:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x7ff00000 [ 169.187215][ T735] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 169.187523][ T36] audit: type=1326 audit(1756472662.825:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x7ff00000 [ 169.207134][ T735] usb 5-1: Invalid ep0 maxpacket: 16 [ 169.218533][ T36] audit: type=1326 audit(1756472662.825:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x7ff00000 [ 169.223866][ T339] usb usb2-port1: attempt power cycle [ 169.247371][ T36] audit: type=1326 audit(1756472662.825:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x7ff00000 [ 169.253481][ T735] usb usb5-port1: unable to enumerate USB device [ 169.277025][ T36] audit: type=1326 audit(1756472662.825:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x7ff00000 [ 169.306089][ T36] audit: type=1326 audit(1756472662.825:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x7ff00000 [ 169.329874][ T36] audit: type=1326 audit(1756472662.825:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x7ff00000 [ 169.353453][ T36] audit: type=1326 audit(1756472662.825:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x7ff00000 [ 169.400611][ T6758] fuse: Unknown parameter '' [ 169.646803][ T339] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 169.667823][ T339] usb 2-1: device descriptor read/8, error -71 [ 169.798748][ T339] usb 2-1: device descriptor read/8, error -71 [ 170.036802][ T339] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 170.057828][ T339] usb 2-1: device descriptor read/8, error -71 [ 170.187879][ T339] usb 2-1: device descriptor read/8, error -71 [ 170.270619][ T6809] 9pnet_fd: Insufficient options for proto=fd [ 170.296992][ T339] usb usb2-port1: unable to enumerate USB device [ 170.818969][ T825] hid-generic 0EC0:42B0DBC:0006.0017: unknown main item tag 0x2 [ 170.831740][ T825] hid-generic 0EC0:42B0DBC:0006.0017: item fetching failed at offset 24/83 [ 170.840806][ T825] hid-generic 0EC0:42B0DBC:0006.0017: probe with driver hid-generic failed with error -22 [ 170.842755][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2026'. [ 171.002397][ T6839] rust_binder: 313: no such ref 2 [ 171.007644][ T6839] rust_binder: Write failure EINVAL in pid:313 [ 171.008128][ T6839] rust_binder: 313: no such ref 1 [ 171.019348][ T6839] rust_binder: Write failure EINVAL in pid:313 [ 171.174568][ T6855] SELinux: security_context_str_to_sid () failed with errno=-22 [ 171.377262][ T6865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 171.383594][ T6878] 9pnet_fd: Insufficient options for proto=fd [ 171.399361][ T735] rust_binder: 6864: removing orphan mapping 0:24 [ 171.405941][ T735] rust_binder: 6864: removing orphan mapping 24:1112 [ 171.436813][ T339] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 171.521279][ T6882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:330 [ 171.605738][ T339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.637205][ T339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.647344][ T339] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 171.657667][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.667018][ T339] usb 2-1: config 0 descriptor?? [ 172.101721][ T339] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 172.116874][ T339] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 172.124311][ T339] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 172.157448][ T339] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 172.165394][ T339] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 172.176932][ T339] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 172.184373][ T339] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 172.206102][ T339] steelseries 0003:1038:12B6.0018: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 172.485948][ T735] usb 2-1: USB disconnect, device number 67 [ 172.932842][ T6911] netlink: 'syz.3.2054': attribute type 16 has an invalid length. [ 172.940709][ T6911] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2054'. [ 173.014892][ T6921] rust_binder: Write failure EINVAL in pid:950 [ 173.029055][ T6926] binder: Unknown parameter 'contextÀ' [ 173.056324][ T6936] binder: Unknown parameter 'max‘þ@ÞßñÓ0000000000000000' [ 173.070788][ T6936] overlay: Unknown parameter 'pcr' [ 173.849383][ T6965] netlink: 'syz.3.2070': attribute type 16 has an invalid length. [ 173.857368][ T6965] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2070'. [ 174.351919][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 174.351939][ T36] audit: type=1326 audit(1756472668.035:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12178ebe9 code=0x7fc00000 [ 174.477309][ T6997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=6997 comm=syz.2.2081 [ 174.941527][ T36] audit: type=1326 audit(1756472668.615:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd12172ade9 code=0x7fc00000 [ 175.126593][ T7040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7040 comm=syz.2.2096 [ 175.139140][ T7040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7040 comm=syz.2.2096 [ 175.151628][ T7040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=7040 comm=syz.2.2096 [ 175.164131][ T7040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7040 comm=syz.2.2096 [ 175.177473][ T7040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=7040 comm=syz.2.2096 [ 175.231756][ T7069] support for the xor transformation has been removed. [ 175.236887][ T7070] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 175.417977][ T7101] binder: Unknown parameter 'sta(Æ' [ 175.437554][ T7105] rust_binder: Error while translating object. [ 175.437591][ T7105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 175.444028][ T7105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1004 [ 175.467863][ T7112] /dev/rnullb0: Can't open blockdev [ 175.528149][ T36] audit: type=1400 audit(1756472669.215:646): avc: denied { setopt } for pid=7130 comm="syz.1.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.548956][ T7132] binder: Bad value for 'stats' [ 175.806781][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 175.956775][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 175.963145][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 175.971653][ T10] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 175.979812][ T10] usb 2-1: config 0 has no interface number 0 [ 175.985906][ T10] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 175.996917][ T10] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 176.006763][ T10] usb 2-1: config 0 interface 88 has no altsetting 0 [ 176.015436][ T10] usb 2-1: string descriptor 0 read error: -22 [ 176.021680][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 176.030733][ T10] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 176.039404][ T10] usb 2-1: config 0 descriptor?? [ 176.045905][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input29 [ 176.064602][ T1559] udevd[1559]: Error opening device "/dev/input/event3": Input/output error [ 176.073436][ T1559] udevd[1559]: Unable to EVIOCGABS device "/dev/input/event3" [ 176.081023][ T1559] udevd[1559]: Unable to EVIOCGABS device "/dev/input/event3" [ 176.088645][ T1559] udevd[1559]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 176.107916][ T110] udevd[110]: worker [1559] terminated by signal 6 (Aborted) [ 176.115475][ T110] udevd[110]: worker [1559] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input29/event3' [ 176.251424][ T7140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.261087][ T7140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.543414][ T10] usb 2-1: USB disconnect, device number 68 [ 176.776529][ T7199] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.783682][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.791243][ T7199] bridge_slave_0: entered allmulticast mode [ 176.798058][ T7199] bridge_slave_0: entered promiscuous mode [ 176.804698][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.813539][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.820908][ T7199] bridge_slave_1: entered allmulticast mode [ 176.827529][ T7199] bridge_slave_1: entered promiscuous mode [ 176.842324][ T438] bridge_slave_1: left allmulticast mode [ 176.848673][ T438] bridge_slave_1: left promiscuous mode [ 176.854316][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.861913][ T438] bridge_slave_0: left allmulticast mode [ 176.867704][ T438] bridge_slave_0: left promiscuous mode [ 176.873461][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.932864][ T7209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1027 [ 176.969184][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.985452][ T7199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.992753][ T7199] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.000096][ T7199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.020223][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.027679][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.030478][ T7217] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 177.049261][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.056340][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.067228][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.074321][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.087804][ T438] tipc: Disabling bearer [ 177.093414][ T438] tipc: Disabling bearer [ 177.101324][ T438] tipc: Left network mode [ 177.106764][ T438] veth1_macvtap: left promiscuous mode [ 177.112730][ T438] veth0_vlan: left promiscuous mode [ 177.183233][ T438] vcan0 (unregistering): left allmulticast mode [ 177.208815][ T7199] veth0_vlan: entered promiscuous mode [ 177.241101][ T7199] veth1_macvtap: entered promiscuous mode [ 177.257021][ T7228] rust_binder: validate_parent_fixup: new_min_offset=42, sg_entry.length=0 [ 177.257048][ T7228] rust_binder: Error while translating object. [ 177.277609][ T7228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 177.283873][ T7228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1038 [ 177.313900][ T7233] futex_wake_op: syz.3.2136 tries to shift op by 144; fix this program [ 177.461033][ T7242] kvm: pic: non byte write [ 177.467913][ T7242] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2138'. [ 177.478378][ T7242] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 177.478401][ T7242] rust_binder: Read failure Err(EFAULT) in pid:9 [ 177.738937][ T36] audit: type=1400 audit(1756472671.425:647): avc: denied { map } for pid=7249 comm="syz.2.2141" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 177.747508][ T7250] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 177.769513][ T7250] rust_binder: Read failure Err(EFAULT) in pid:15 [ 177.979525][ T7281] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 178.036779][ T735] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 178.197973][ T735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 178.209328][ T735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.219420][ T735] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 178.232551][ T735] usb 3-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 178.242875][ T735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.251560][ T735] usb 3-1: config 0 descriptor?? [ 178.296812][ T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 178.316875][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 178.441793][ T7296] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2155'. [ 178.456986][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 178.463434][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.472123][ T45] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 178.477871][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.480279][ T45] usb 5-1: config 0 has no interface number 0 [ 178.492019][ T10] usb 2-1: config 0 has no interfaces? [ 178.502039][ T45] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 178.503883][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 178.513114][ T45] usb 5-1: config 0 interface 88 has no altsetting 0 [ 178.522345][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 178.531654][ T45] usb 5-1: string descriptor 0 read error: -22 [ 178.537114][ T10] usb 2-1: Product: syz [ 178.543368][ T45] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 178.547369][ T10] usb 2-1: Manufacturer: syz [ 178.556689][ T45] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 178.570363][ T45] usb 5-1: config 0 descriptor?? [ 178.575382][ T10] usb 2-1: SerialNumber: syz [ 178.577902][ T45] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input30 [ 178.591838][ T10] usb 2-1: config 0 descriptor?? [ 178.663100][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.671708][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.681628][ T735] usbhid 3-1:0.0: can't add hid device: -71 [ 178.687711][ T735] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 178.696225][ T735] usb 3-1: USB disconnect, device number 28 [ 178.783012][ T45] usb 5-1: USB disconnect, device number 24 [ 178.799839][ T65] usb 2-1: USB disconnect, device number 69 [ 186.393679][ T7309] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 186.602350][ T7364] rust_binder: 359: no such ref 2 [ 187.076898][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.085482][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.316808][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 187.447572][ T10] usb 2-1: device descriptor read/64, error -71 [ 187.636957][ T36] audit: type=1400 audit(1756472681.315:648): avc: denied { sqpoll } for pid=7391 comm="syz.3.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.696791][ T45] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 187.696813][ T10] usb 2-1: device descriptor read/64, error -71 [ 187.847831][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.857987][ T45] usb 5-1: config 0 has no interfaces? [ 187.864900][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 187.874065][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 187.882176][ T45] usb 5-1: Product: syz [ 187.886364][ T45] usb 5-1: Manufacturer: syz [ 187.890985][ T45] usb 5-1: SerialNumber: syz [ 187.896197][ T45] usb 5-1: config 0 descriptor?? [ 187.946771][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 188.077010][ T10] usb 2-1: device descriptor read/64, error -71 [ 188.110069][ T45] usb 5-1: USB disconnect, device number 25 [ 188.228818][ T7411] fuse: Unknown parameter 'rootm™de' [ 188.316774][ T10] usb 2-1: device descriptor read/64, error -71 [ 188.426873][ T10] usb usb2-port1: attempt power cycle [ 188.764069][ T36] audit: type=1400 audit(1756472682.445:649): avc: denied { create } for pid=7464 comm="syz.4.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.783984][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 188.807774][ T10] usb 2-1: device descriptor read/8, error -71 [ 188.947782][ T10] usb 2-1: device descriptor read/8, error -71 [ 189.186791][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 189.217809][ T10] usb 2-1: device descriptor read/8, error -71 [ 189.347777][ T10] usb 2-1: device descriptor read/8, error -71 [ 189.454398][ T7478] tipc: Started in network mode [ 189.459394][ T7478] tipc: Node identity 06a23b7e7dca, cluster identity 4711 [ 189.466582][ T7478] tipc: Enabled bearer , priority 0 [ 189.466843][ T10] usb usb2-port1: unable to enumerate USB device [ 189.479815][ T7477] tipc: Resetting bearer [ 189.491656][ T7477] tipc: Disabling bearer [ 189.659230][ T36] audit: type=1400 audit(1756472683.345:650): avc: denied { shutdown } for pid=7492 comm="syz.4.2215" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.824907][ T7503] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=34 [ 189.824933][ T7503] rust_binder: Error while translating object. [ 189.833746][ T7503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.840050][ T7503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 189.849942][ T7504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.865734][ T7505] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=34 [ 189.865751][ T7505] rust_binder: Error while translating object. [ 189.874481][ T7505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.880670][ T7505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 189.900321][ T36] audit: type=1400 audit(1756472683.585:651): avc: denied { setattr } for pid=7506 comm="syz.2.2220" name="timer" dev="devtmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 189.932881][ T36] audit: type=1400 audit(1756472683.585:652): avc: denied { execute } for pid=7506 comm="syz.2.2220" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 189.979785][ T7513] rust_binder: Error in use_page_slow: ESRCH [ 189.979806][ T7513] rust_binder: use_range failure ESRCH [ 189.985856][ T7513] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 189.991531][ T7513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 190.000071][ T7513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:51 [ 190.033909][ T36] audit: type=1400 audit(1756472683.715:653): avc: denied { add_name } for pid=7517 comm="syz.2.2224" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.034498][ T7518] sock: sock_timestamping_bind_phc: sock not bind to device [ 190.042978][ T36] audit: type=1400 audit(1756472683.715:654): avc: denied { create } for pid=7517 comm="syz.2.2224" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 190.129471][ T7523] 9pnet: bogus RWRITE count (2 > 1) [ 190.134106][ T36] audit: type=1400 audit(1756472683.715:655): avc: denied { associate } for pid=7517 comm="syz.2.2224" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 190.467527][ T45] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 190.488731][ T63] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 190.626766][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 190.633037][ T45] usb 2-1: config 0 has no interfaces? [ 190.638958][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 190.648158][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.656846][ T45] usb 2-1: config 0 descriptor?? [ 190.659805][ T63] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.669888][ T63] usb 3-1: config 0 has no interface number 0 [ 190.676054][ T63] usb 3-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30 [ 190.687554][ T63] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 190.700586][ T63] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 190.709649][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.718315][ T63] usb 3-1: config 0 descriptor?? [ 190.867656][ T10] usb 2-1: USB disconnect, device number 74 [ 190.926004][ T63] usb 3-1: string descriptor 0 read error: -71 [ 190.937059][ T63] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 190.937633][ T7371] udevd[7371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 190.947514][ T63] usb 3-1: USB disconnect, device number 29 [ 191.484706][ T7583] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 191.658605][ T7610] overlayfs: failed to clone upperpath [ 191.796825][ T735] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 191.848213][ T7620] bridge0: entered allmulticast mode [ 191.947977][ T735] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.958255][ T735] usb 3-1: config 0 has no interfaces? [ 191.963833][ T735] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.973268][ T735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.982376][ T735] usb 3-1: config 0 descriptor?? [ 192.190860][ T63] usb 3-1: USB disconnect, device number 30 [ 192.939532][ T7662] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2274'. [ 193.124922][ T7678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.125065][ T7678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 193.455326][ T7692] 8021q: VLANs not supported on ip_vti0 [ 193.500941][ T7692] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 193.500978][ T7692] rust_binder: Error in use_page_slow: EBUSY [ 193.521584][ T7692] rust_binder: use_range failure EBUSY [ 193.536754][ T7692] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 193.543252][ T7692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 193.551408][ T7692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:91 [ 193.562747][ T7694] TCP: out of memory -- consider tuning tcp_mem [ 193.669172][ T7703] netlink: 'syz.4.2287': attribute type 5 has an invalid length. [ 193.701149][ T7703] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2287'. [ 193.920040][ T36] audit: type=1400 audit(1756472687.605:656): avc: denied { create } for pid=7721 comm="syz.2.2293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 194.638564][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2313'. [ 194.647689][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2313'. [ 194.656872][ T7784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7784 comm=syz.4.2314 [ 194.747052][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 194.756028][ T7793] erspan0: default FDB implementation only supports local addresses [ 194.780295][ T10] rust_binder: 7768: removing orphan mapping 0:24 [ 194.787126][ T10] rust_binder: 0: removing orphan mapping 24:96 [ 194.796076][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.804807][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.056800][ T339] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 195.206761][ T339] usb 2-1: Using ep0 maxpacket: 32 [ 195.216566][ T339] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 195.227063][ T339] usb 2-1: config 0 has no interface number 0 [ 195.233203][ T339] usb 2-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 195.240145][ T7805] netlink: 'syz.4.2323': attribute type 3 has an invalid length. [ 195.243370][ T339] usb 2-1: config 0 interface 214 has no altsetting 0 [ 195.251209][ T7805] netlink: 944 bytes leftover after parsing attributes in process `syz.4.2323'. [ 195.260967][ T339] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 195.281328][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.294367][ T339] usb 2-1: Product: syz [ 195.298625][ T339] usb 2-1: Manufacturer: syz [ 195.302558][ T7810] overlayfs: failed to clone upperpath [ 195.305785][ T339] usb 2-1: SerialNumber: syz [ 195.316882][ T339] usb 2-1: config 0 descriptor?? [ 195.322219][ T7799] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 195.423083][ T7826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2330'. [ 195.439113][ T7826] fuse: Bad value for 'user_id' [ 195.444096][ T7826] fuse: Bad value for 'user_id' [ 195.530605][ T7799] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 195.583003][ T36] audit: type=1400 audit(1756472689.265:657): avc: denied { create } for pid=7829 comm="syz.2.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.844246][ T7840] 9pnet_fd: Insufficient options for proto=fd [ 195.961012][ T7854] tmpfs: Bad value for 'size' [ 195.961029][ T7855] tmpfs: Bad value for 'size' [ 196.430952][ T7874] netlink: 'syz.4.2346': attribute type 29 has an invalid length. [ 196.438935][ T7874] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2346'. [ 196.566814][ T63] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 196.657203][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 196.726809][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 196.733343][ T63] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 196.742071][ T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.752191][ T63] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 196.761182][ T63] usb 3-1: config 1 has no interface number 1 [ 196.767312][ T63] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 196.780118][ T63] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.792419][ T63] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.801505][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.809544][ T63] usb 3-1: Product: syz [ 196.813716][ T63] usb 3-1: Manufacturer: syz [ 196.818417][ T63] usb 3-1: SerialNumber: syz [ 197.027106][ T63] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 197.035530][ T63] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 197.043197][ T63] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 197.053797][ T63] usb 3-1: USB disconnect, device number 32 [ 197.675631][ T7799] rust_binder: inc_ref_done called when no active inc_refs [ 197.675660][ T7799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1102 [ 197.683425][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 197.704094][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 197.715960][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 197.727155][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 197.750914][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 197.762477][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 197.774023][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 197.786780][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 197.799462][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 197.811551][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 197.813652][ T36] audit: type=1326 audit(1756472691.495:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.2375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f099878ebe9 code=0x0 [ 197.822796][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 197.856653][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 197.868490][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 197.870595][ T7956] can0: slcan on ttyS3. [ 197.888758][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 197.900080][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 197.911515][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 197.924285][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 197.936899][ T7956] can0 (unregistered): slcan off ttyS3. [ 197.942915][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 197.954034][ T7964] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 197.963455][ T7964] rust_binder: Write failure EINVAL in pid:137 [ 197.963622][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 197.981473][ T339] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 197.995421][ T339] ax88179_178a 2-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 24:20:d5:0c:c6:e4 [ 198.013847][ T339] usb 2-1: USB disconnect, device number 75 [ 198.020414][ T339] ax88179_178a 2-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 198.207617][ T7988] binder: Unknown parameter '/ek#/' [ 198.213418][ T36] audit: type=1400 audit(1756472691.895:659): avc: denied { create } for pid=7987 comm="syz.1.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 198.346843][ T8001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8001 comm=syz.3.2383 [ 198.388028][ T8003] hub 6-0:1.0: USB hub found [ 198.397181][ T8003] hub 6-0:1.0: 1 port detected [ 198.524331][ T339] rust_binder: 8005: removing orphan mapping 0:24 [ 198.595658][ T8011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1116 [ 198.611761][ T8013] syzkaller1: entered promiscuous mode [ 198.626963][ T8013] syzkaller1: entered allmulticast mode [ 198.708291][ T339] rust_binder: 0: removing orphan mapping 0:24 [ 198.773756][ T36] audit: type=1326 audit(1756472692.455:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12178ebe9 code=0x7fc00000 [ 198.797299][ T36] audit: type=1326 audit(1756472692.455:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12178ebe9 code=0x7fc00000 [ 198.831097][ T8034] rust_binder: Error while translating object. [ 198.831131][ T8034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 198.837360][ T8034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:146 [ 198.872967][ T8044] rust_binder: Write failure EFAULT in pid:150 [ 198.888940][ T36] audit: type=1400 audit(1756472692.575:662): avc: denied { setattr } for pid=8045 comm="syz.1.2398" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 198.950975][ T8054] overlayfs: failed to resolve './file2': -2 [ 199.028787][ T8062] rust_binder: Error while translating object. [ 199.028838][ T8062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 199.035204][ T8062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1129 [ 199.148342][ T8077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.158023][ T8077] No source specified [ 199.371129][ T8077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.371838][ T8095] No source specified [ 199.436012][ T8107] 9pnet_fd: Insufficient options for proto=fd [ 199.459386][ T8111] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 199.466533][ T8111] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 199.466556][ T8111] rust_binder: Error while translating object. [ 199.502171][ T8111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 199.514900][ T8121] rust_binder: Write failure EINVAL in pid:162 [ 199.524900][ T8111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 200.098947][ T8164] overlayfs: failed to clone upperpath [ 200.486763][ T339] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 200.636766][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 200.643359][ T339] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.651777][ T339] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 200.660163][ T339] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 200.670437][ T339] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 200.679515][ T339] usb 3-1: config 128 has no interface number 0 [ 200.685775][ T339] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 200.696996][ T339] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.707096][ T339] usb 3-1: config 128 interface 127 has no altsetting 0 [ 200.715420][ T339] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 200.724555][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.732666][ T339] usb 3-1: Product: syz [ 200.736849][ T339] usb 3-1: Manufacturer: syz [ 200.741446][ T339] usb 3-1: SerialNumber: syz [ 200.949775][ T36] audit: type=1400 audit(1756472694.635:663): avc: denied { mounton } for pid=8180 comm="syz.2.2447" path="/" dev="ramfs" ino=36878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 200.976925][ T339] usb 3-1: USB disconnect, device number 33 [ 200.986162][ T7371] udevd[7371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 201.051252][ T8195] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 201.103834][ T8210] overlayfs: failed to clone upperpath [ 201.112399][ T8215] rust_binder: Error while translating object. [ 201.112443][ T8215] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.119070][ T8215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1156 [ 201.193009][ T8219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.202540][ T8219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1158 [ 201.212092][ T8219] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.224706][ T8219] rust_binder: Read failure Err(EFAULT) in pid:1158 [ 201.506526][ T8240] rust_binder: Error in use_page_slow: ESRCH [ 201.506554][ T8240] rust_binder: use_range failure ESRCH [ 201.512642][ T8240] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 201.518405][ T8240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 201.526421][ T8240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:170 [ 201.536778][ T339] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 201.554520][ T8240] rust_binder: 170: no such ref 1 [ 201.559638][ T8240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:170 [ 201.716757][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 201.723030][ T339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.733209][ T339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.743474][ T339] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.752558][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.760584][ T339] usb 2-1: Product: syz [ 201.764744][ T339] usb 2-1: Manufacturer: syz [ 201.769366][ T339] usb 2-1: SerialNumber: syz [ 201.822626][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'. [ 201.831554][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2472'. [ 201.840668][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'. [ 201.946779][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 202.084191][ T8273] netlink: 'syz.3.2478': attribute type 64 has an invalid length. [ 202.092187][ T8273] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2478'. [ 202.101627][ T8273] netlink: 'syz.3.2478': attribute type 15 has an invalid length. [ 202.106933][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 202.109602][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2478'. [ 202.124899][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.138285][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.149561][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.159903][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.173249][ T36] audit: type=1400 audit(1756472695.865:664): avc: denied { mount } for pid=8274 comm="syz.3.2479" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 202.173689][ T8275] overlayfs: failed to clone lowerpath [ 202.211148][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.220457][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.228534][ T10] usb 3-1: Product: syz [ 202.232741][ T10] usb 3-1: Manufacturer: syz [ 202.238072][ T10] usb 3-1: SerialNumber: syz [ 202.448859][ T10] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 202.455690][ T10] cdc_ncm 3-1:1.0: bind() failure [ 202.466874][ T10] usb 3-1: USB disconnect, device number 34 [ 202.619605][ T36] audit: type=1326 audit(1756472696.305:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.4.2481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x0 [ 203.435173][ T36] audit: type=1400 audit(1756472697.115:666): avc: denied { mounton } for pid=8297 comm="syz.2.2487" path="/61/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 203.435759][ T8298] incfs: Can't find or create .index dir in ./file0 [ 203.464818][ T8298] incfs: mount failed -5 [ 204.104143][ T36] audit: type=1400 audit(1756472697.785:667): avc: denied { create } for pid=8314 comm="syz.2.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 204.417854][ T339] usb 2-1: unknown interface protocol 0xc5, assuming v1 [ 204.424910][ T339] usb 2-1: cannot find UAC_HEADER [ 204.436017][ T339] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 204.446131][ T339] usb 2-1: USB disconnect, device number 76 [ 204.451386][ T7371] udevd[7371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 204.933503][ T8342] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2501'. [ 205.685335][ T8398] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 205.713676][ T36] audit: type=1400 audit(1756472699.395:668): avc: denied { create } for pid=8404 comm="syz.2.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 205.826230][ T8414] overlayfs: failed to clone upperpath [ 205.864649][ T8418] syz.4.2525: vmalloc error: size 169869312, failed to allocated page array size 331776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 205.882698][ T8418] CPU: 1 UID: 0 PID: 8418 Comm: syz.4.2525 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 205.882728][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 205.882739][ T8418] Call Trace: [ 205.882746][ T8418] [ 205.882754][ T8418] __dump_stack+0x21/0x30 [ 205.882785][ T8418] dump_stack_lvl+0x10c/0x190 [ 205.882811][ T8418] ? __cfi_dump_stack_lvl+0x10/0x10 [ 205.882836][ T8418] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 205.882863][ T8418] dump_stack+0x19/0x20 [ 205.882887][ T8418] warn_alloc+0x1bc/0x2a0 [ 205.882911][ T8418] ? x64_sys_call+0x2adc/0x2ee0 [ 205.882938][ T8418] ? __cfi_warn_alloc+0x10/0x10 [ 205.882962][ T8418] ? __get_vm_area_node+0x1dc/0x3a0 [ 205.882986][ T8418] ? xt_alloc_entry_offsets+0x56/0xe0 [ 205.883013][ T8418] __vmalloc_node_range_noprof+0x68e/0x1420 [ 205.883045][ T8418] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 205.883072][ T8418] ? update_rq_clock+0x31b/0x7c0 [ 205.883100][ T8418] ? __kmalloc_large_node_noprof+0x1e/0xe0 [ 205.883128][ T8418] ? __kmalloc_node_noprof+0x2a5/0x450 [ 205.883153][ T8418] ? nf_setsockopt+0x290/0x2b0 [ 205.883173][ T8418] __kvmalloc_node_noprof+0xfc/0x300 [ 205.883199][ T8418] ? xt_alloc_entry_offsets+0x56/0xe0 [ 205.883224][ T8418] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 205.883249][ T8418] ? __schedule+0x13e8/0x1df0 [ 205.883277][ T8418] xt_alloc_entry_offsets+0x56/0xe0 [ 205.883301][ T8418] translate_table+0x1a9/0x1f90 [ 205.883325][ T8418] ? cred_has_capability+0x281/0x380 [ 205.883347][ T8418] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 205.883375][ T8418] ? arpt_register_table+0x930/0x930 [ 205.883395][ T8418] ? raw_irqentry_exit_cond_resched+0x33/0x40 [ 205.883418][ T8418] ? irqentry_exit+0x4a/0x60 [ 205.883450][ T8418] ? sysvec_reschedule_ipi+0x73/0x80 [ 205.883470][ T8418] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 205.883492][ T8418] ? do_arpt_set_ctl+0x6cd/0xa00 [ 205.883512][ T8418] do_arpt_set_ctl+0x712/0xa00 [ 205.883534][ T8418] ? release_sock+0x171/0x1f0 [ 205.883557][ T8418] ? __cfi_do_arpt_set_ctl+0x10/0x10 [ 205.883577][ T8418] ? sockopt_release_sock+0x5c/0x70 [ 205.883600][ T8418] ? do_ip_setsockopt+0x1bb2/0x29e0 [ 205.883629][ T8418] ? __cfi_avc_has_perm+0x10/0x10 [ 205.883653][ T8418] ? futex_wake+0x5fb/0x900 [ 205.883678][ T8418] ? selinux_socket_setsockopt+0x2ea/0x390 [ 205.883705][ T8418] nf_setsockopt+0x290/0x2b0 [ 205.883728][ T8418] ip_setsockopt+0xf6/0x100 [ 205.883754][ T8418] udp_setsockopt+0xa3/0xc0 [ 205.883782][ T8418] sock_common_setsockopt+0xb5/0xd0 [ 205.883803][ T8418] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 205.883826][ T8418] do_sock_setsockopt+0x26a/0x400 [ 205.883856][ T8418] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 205.883888][ T8418] __x64_sys_setsockopt+0x1b8/0x250 [ 205.883918][ T8418] x64_sys_call+0x2adc/0x2ee0 [ 205.883946][ T8418] do_syscall_64+0x58/0xf0 [ 205.883970][ T8418] ? clear_bhb_loop+0x50/0xa0 [ 205.883991][ T8418] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 205.884011][ T8418] RIP: 0033:0x7f099878ebe9 [ 205.884029][ T8418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.884045][ T8418] RSP: 002b:00007f099958a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.884067][ T8418] RAX: ffffffffffffffda RBX: 00007f09989b5fa0 RCX: 00007f099878ebe9 [ 205.884082][ T8418] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000004 [ 205.884096][ T8418] RBP: 00007f0998811e19 R08: 00000000000003f0 R09: 0000000000000000 [ 205.884109][ T8418] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.884123][ T8418] R13: 00007f09989b6038 R14: 00007f09989b5fa0 R15: 00007ffcc2b08218 [ 205.884140][ T8418] [ 205.884148][ T8418] Mem-Info: [ 206.248073][ T8418] active_anon:33873 inactive_anon:12 isolated_anon:0 [ 206.248073][ T8418] active_file:22210 inactive_file:14416 isolated_file:0 [ 206.248073][ T8418] unevictable:16319 dirty:31 writeback:0 [ 206.248073][ T8418] slab_reclaimable:5887 slab_unreclaimable:73370 [ 206.248073][ T8418] mapped:24491 shmem:15508 pagetables:1188 [ 206.248073][ T8418] sec_pagetables:0 bounce:0 [ 206.248073][ T8418] kernel_misc_reclaimable:0 [ 206.248073][ T8418] free:1456737 free_pcp:3998 free_cma:0 [ 206.271774][ T8427] fuse: Bad value for 'group_id' [ 206.298842][ T8427] fuse: Bad value for 'group_id' [ 206.304122][ T8418] Node 0 active_anon:135392kB inactive_anon:48kB active_file:88840kB inactive_file:57664kB unevictable:65276kB isolated(anon):0kB isolated(file):0kB mapped:97864kB dirty:124kB writeback:0kB shmem:62032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7544kB pagetables:4652kB sec_pagetables:0kB all_unreclaimable? no [ 206.314929][ T8427] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2527'. [ 206.336623][ T8418] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965964kB mlocked:0kB bounce:0kB free_pcp:5752kB local_pcp:5684kB free_cma:0kB [ 206.375642][ T8418] lowmem_reserve[]: 0 3921 3921 [ 206.380616][ T8418] Normal free:2867880kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:135292kB inactive_anon:48kB active_file:88840kB inactive_file:57664kB unevictable:65276kB writepending:124kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:9864kB local_pcp:8532kB free_cma:0kB [ 206.414073][ T8418] lowmem_reserve[]: 0 0 0 [ 206.419207][ T8418] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 206.425310][ T36] audit: type=1400 audit(1756472700.105:669): avc: denied { watch watch_reads } for pid=8438 comm="syz.2.2531" path="/89/file0" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.435011][ T8418] Normal: 15*4kB (UM) 201*8kB (UM) 299*16kB (UME) 200*32kB (UME) 136*64kB (UME) 100*128kB (UME) 67*256kB (ME) 24*512kB (UME) 39*1024kB (UME) 27*2048kB (UME) 661*4096kB (UM) = 2866484kB [ 206.478819][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 206.484954][ T8418] 68491 total pagecache pages [ 206.488746][ T1433] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 206.490894][ T8418] 40 pages in swap cache [ 206.514505][ T8418] Free swap = 124324kB [ 206.520596][ T8418] Total swap = 124996kB [ 206.524818][ T8418] 2097051 pages RAM [ 206.528934][ T8418] 0 pages HighMem/MovableOnly [ 206.533893][ T8418] 351530 pages reserved [ 206.543392][ T8418] 0 pages cma reserved [ 206.563247][ T8418] Memory allocations: [ 206.576741][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'. [ 206.576951][ T8418] 0 B 0 init/main.c:1370 func:do_initcalls [ 206.587691][ T8470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2543'. [ 206.594962][ T8418] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 206.610397][ T8418] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 206.618119][ T8418] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 206.627610][ T8418] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 206.635536][ T8418] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 206.644915][ T8418] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 206.653125][ T8418] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 206.665241][ T8418] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 206.673236][ T8418] 0 B 0 init/initramfs.c:101 func:find_link [ 206.674847][ T735] rust_binder: 8475: removing orphan mapping 0:8 [ 206.774713][ T8492] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 206.782894][ T8492] fuseblk: Bad value for 'source' [ 206.809759][ T8499] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 206.846941][ T8502] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 207.241992][ T8538] rust_binder: Write failure EFAULT in pid:1217 [ 207.486787][ T339] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 207.644049][ T8556] tipc: New replicast peer: 255.255.255.255 [ 207.656955][ T8556] tipc: Enabled bearer , priority 10 [ 207.667741][ T339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 207.689834][ T339] usb 2-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 207.716745][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.735796][ T339] usb 2-1: config 0 descriptor?? [ 207.738554][ T8563] overlayfs: conflicting options: nfs_export=on,index=off [ 207.747982][ T8541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.967537][ T339] usbhid 2-1:0.0: can't add hid device: -71 [ 207.977728][ T339] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 207.998190][ T339] usb 2-1: USB disconnect, device number 77 [ 208.038533][ T8611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1226 [ 208.140067][ T8622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=8622 comm=syz.2.2587 [ 208.246389][ T36] audit: type=1400 audit(1756472701.925:670): avc: denied { setattr } for pid=8630 comm="syz.1.2592" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.430927][ T8666] overlayfs: failed to resolve './file1': -2 [ 208.646814][ T339] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 208.776768][ T10] tipc: Node number set to 2070428542 [ 208.797795][ T339] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 208.807015][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.815498][ T339] usb 2-1: config 0 descriptor?? [ 209.021570][ T339] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 209.222964][ T339] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 209.232988][ T339] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 209.243386][ T339] asix 2-1:0.0: probe with driver asix failed with error -71 [ 209.251638][ T339] usb 2-1: USB disconnect, device number 78 [ 210.237822][ T8715] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2619'. [ 210.275085][ T8722] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 210.283381][ T8722] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 210.291287][ T8722] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 210.299162][ T8722] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 210.307324][ T8722] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 210.315248][ T8722] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 210.323539][ T8722] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 210.331779][ T8722] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 210.339713][ T8725] netlink: 316 bytes leftover after parsing attributes in process `syz.1.2623'. [ 210.339864][ T8722] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 210.356804][ T8722] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 210.361993][ T8730] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 211.116666][ T36] audit: type=1400 audit(1756472704.795:671): avc: denied { create } for pid=8761 comm="syz.3.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 211.330059][ T8778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1268 [ 211.333283][ T10] rust_binder: 8777: removing orphan mapping 0:24 [ 211.349230][ T10] rust_binder: 0: removing orphan mapping 24:1096 [ 212.313867][ T8825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2656'. [ 212.344940][ T8830] overlayfs: failed to clone upperpath [ 212.546774][ T339] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 212.696794][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 212.703184][ T339] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 212.713486][ T339] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.724510][ T339] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.734429][ T339] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 212.747236][ T339] usb 2-1: config 7 interface 0 has no altsetting 0 [ 212.753922][ T339] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 212.763188][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.896391][ T8854] netlink: 64094 bytes leftover after parsing attributes in process `syz.3.2664'. [ 213.151278][ T8890] incfs: Options parsing error. -22 [ 213.156645][ T8890] incfs: mount failed -22 [ 213.217109][ T339] hid (null): unknown global tag 0xd [ 213.230012][ T339] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0019/input/input31 [ 213.257074][ T339] kye 0003:0458:5010.0019: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 213.611755][ T8918] 9pnet_fd: Insufficient options for proto=fd [ 213.612685][ T8917] 9pnet_fd: Insufficient options for proto=fd [ 213.750302][ T8938] overlayfs: failed to clone upperpath [ 213.788728][ T8942] netlink: 'syz.4.2697': attribute type 11 has an invalid length. [ 214.127614][ T8949] overlayfs: failed to clone upperpath [ 214.152186][ T8952] overlayfs: failed to resolve './file2': -2 [ 214.192271][ T36] audit: type=1400 audit(1756472707.875:672): avc: denied { write } for pid=8963 comm="syz.2.2706" path="socket:[39230]" dev="sockfs" ino=39230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 214.225181][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'. [ 214.283904][ T36] audit: type=1400 audit(1756472707.965:673): avc: denied { module_load } for pid=8977 comm="syz.2.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 214.283921][ T8979] Invalid ELF header type: 3 != 1 [ 214.284143][ T8979] Invalid ELF header type: 3 != 1 [ 214.321395][ T8979] Invalid ELF header type: 2 != 1 [ 214.337104][ C1] kye 0003:0458:5010.0019: usb_submit_urb(ctrl) failed: -1 [ 214.448019][ T9015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2726'. [ 214.676822][ T339] usb 2-1: reset high-speed USB device number 79 using dummy_hcd [ 214.685038][ T339] usb 2-1: device reset changed ep0 maxpacket size! [ 214.691905][ T45] usb 2-1: USB disconnect, device number 79 [ 214.826773][ T45] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 214.983769][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.008733][ T45] usb 2-1: config 0 has no interfaces? [ 215.015107][ T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 215.024414][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.033482][ T45] usb 2-1: config 0 descriptor?? [ 215.200026][ T9047] overlayfs: failed to clone lowerpath [ 215.245010][ T8993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.253546][ T8993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.262396][ T825] usb 2-1: USB disconnect, device number 80 [ 215.653489][ T9064] validate_nla: 58 callbacks suppressed [ 215.653505][ T9064] netlink: 'syz.3.2743': attribute type 15 has an invalid length. [ 215.747075][ T9078] netlink: 'syz.2.2748': attribute type 4 has an invalid length. [ 215.757278][ T9078] netlink: 'syz.2.2748': attribute type 17 has an invalid length. [ 215.906770][ T45] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 216.057843][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.068794][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.079674][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.092488][ T45] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.00 [ 216.101576][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.110149][ T45] usb 2-1: config 0 descriptor?? [ 216.319131][ T339] usb 2-1: USB disconnect, device number 81 [ 216.828880][ T36] audit: type=1400 audit(1756472710.515:674): avc: denied { mounton } for pid=9112 comm="syz.1.2760" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 216.828965][ T9113] fuse: Bad value for 'fd' [ 216.912763][ T36] audit: type=1326 audit(1756472710.595:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.2.2763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf18ebe9 code=0x0 [ 217.096763][ T735] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 217.246747][ T735] usb 2-1: Using ep0 maxpacket: 32 [ 217.253112][ T735] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 217.261747][ T735] usb 2-1: config 4 has no interface number 0 [ 217.268191][ T735] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.279457][ T735] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.289394][ T735] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 217.298468][ T735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.309988][ T735] hub 2-1:4.128: USB hub found [ 217.511318][ T735] hub 2-1:4.128: 6 ports detected [ 217.516455][ T735] hub 2-1:4.128: Using single TT (err -22) [ 217.523048][ T735] hub 2-1:4.128: insufficient power available to use all downstream ports [ 217.867400][ T735] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 217.873980][ T735] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 217.897112][ T735] usb 2-1: USB disconnect, device number 82 [ 218.024372][ T9139] 9pnet_fd: Insufficient options for proto=fd [ 218.670367][ T9159] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=9159 comm=syz.2.2777 [ 218.943283][ T9185] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 219.347455][ T9192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1297 [ 219.408170][ T9194] kvm: pic: non byte write [ 219.479138][ T9212] overlay: ./file0 is not a directory [ 219.679550][ T36] audit: type=1400 audit(1756472713.365:676): avc: denied { audit_write } for pid=9229 comm="syz.4.2802" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 220.277372][ T4353] tipc: Subscription rejected, illegal request [ 221.067929][ T9273] input: syz1 as /devices/virtual/input/input32 [ 221.099134][ T9279] /dev/rnullb0: Can't open blockdev [ 221.135064][ T9281] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2819'. [ 221.145540][ T9281] rust_binder: 1316: no such ref 1 [ 221.168756][ T9296] 9pnet_fd: Insufficient options for proto=fd [ 221.178214][ T9298] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2826'. [ 221.187705][ T36] audit: type=1400 audit(1756472714.875:677): avc: denied { map } for pid=9297 comm="syz.1.2826" path="socket:[40081]" dev="sockfs" ino=40081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.329754][ T9307] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2830'. [ 221.402879][ T9316] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2833'. [ 221.430595][ T735] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 221.597958][ T735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.609047][ T735] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 221.622244][ T735] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 221.631441][ T735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.640215][ T735] usb 2-1: config 0 descriptor?? [ 222.017385][ T9339] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2842'. [ 222.248517][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.257703][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.271169][ T735] usbhid 2-1:0.0: can't add hid device: -71 [ 222.277418][ T735] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 222.287430][ T735] usb 2-1: USB disconnect, device number 83 [ 222.328764][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2856'. [ 222.881421][ T9407] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2863'. [ 222.897659][ T9409] overlayfs: failed to clone lowerpath [ 223.126781][ T825] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 223.278843][ T825] usb 2-1: config 14 has an invalid interface number: 21 but max is 0 [ 223.287108][ T825] usb 2-1: config 14 has no interface number 0 [ 223.293301][ T825] usb 2-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 223.303461][ T825] usb 2-1: config 14 interface 21 has no altsetting 0 [ 223.312497][ T825] usb 2-1: string descriptor 0 read error: -22 [ 223.318786][ T825] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 223.327851][ T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.337004][ T9407] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 223.345471][ T825] usb 2-1: MIDIStreaming interface descriptor not found [ 223.471115][ T9443] overlayfs: failed to clone upperpath [ 223.539269][ T36] audit: type=1326 audit(1756472717.225:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.2883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf18ebe9 code=0x0 [ 223.647203][ T9472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9472 comm=syz.2.2883 [ 223.878085][ T735] usb 2-1: USB disconnect, device number 84 [ 224.005927][ T9481] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 224.017595][ T9481] overlayfs: missing 'lowerdir' [ 224.171405][ T735] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 224.179254][ T735] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.197359][ T9484] fido_id[9484]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 224.203889][ T9486] fuse: Unknown parameter 'rootmode?00000000000000¼é¢Nÿݘ0' [ 224.283122][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'. [ 224.292721][ T9488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1332 [ 224.316223][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 224.337057][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 224.358362][ T9496] /dev/rnullb0: Can't open blockdev [ 224.380931][ T9503] incfs: iterate_incfs_dir / -22 [ 224.385933][ T9503] incfs: iterate_incfs_dir / -22 [ 224.387879][ T9505] syz.2.2897 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 224.393515][ T9503] rust_binder: Error while translating object. [ 224.401345][ T9503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 224.407609][ T9503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1342 [ 224.817837][ T9518] x_tables: duplicate entry at hook 1 [ 225.557836][ T9521] rust_binder: Error in use_page_slow: ESRCH [ 225.557856][ T9521] rust_binder: use_range failure ESRCH [ 225.563926][ T9521] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 225.569458][ T9521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 225.577413][ T9521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1351 [ 225.960581][ T9546] binder: Bad value for 'stats' [ 225.986186][ T449] Bluetooth: hci0: Frame reassembly failed (-84) [ 227.047685][ T9575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=9575 comm=syz.3.2921 [ 227.377058][ T9603] __nla_validate_parse: 1 callbacks suppressed [ 227.377082][ T9603] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2930'. [ 227.393012][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2930'. [ 227.697262][ T9622] overlayfs: failed to clone lowerpath [ 227.996761][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 227.996767][ T1433] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.024772][ T9641] overlayfs: workdir and upperdir must reside under the same mount [ 228.085100][ T9643] kvm: pic: non byte write [ 229.186753][ T735] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 229.219130][ T9658] fuse: Unknown parameter ' ' [ 229.225288][ T9658] overlayfs: missing 'lowerdir' [ 229.326750][ T735] usb 2-1: device descriptor read/64, error -71 [ 229.330192][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2957'. [ 229.576755][ T735] usb 2-1: device descriptor read/64, error -71 [ 229.816749][ T735] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 229.946767][ T735] usb 2-1: device descriptor read/64, error -71 [ 230.186751][ T735] usb 2-1: device descriptor read/64, error -71 [ 230.306777][ T735] usb usb2-port1: attempt power cycle [ 230.646889][ T735] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 230.667874][ T735] usb 2-1: device descriptor read/8, error -71 [ 230.798261][ T735] usb 2-1: device descriptor read/8, error -71 [ 231.036794][ T735] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 231.055745][ T9725] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2978'. [ 231.070591][ T735] usb 2-1: device descriptor read/8, error -71 [ 231.121970][ T9743] fuse: Invalid rootmode [ 231.208379][ T735] usb 2-1: device descriptor read/8, error -71 [ 231.217981][ T36] audit: type=1400 audit(1756472724.905:679): avc: denied { mount } for pid=9754 comm="syz.3.2988" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 231.316831][ T735] usb usb2-port1: unable to enumerate USB device [ 231.434716][ T36] audit: type=1326 audit(1756472725.115:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9763 comm="syz.2.2991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf18ebe9 code=0x0 [ 231.953787][ T36] audit: type=1400 audit(1756472725.635:681): avc: denied { setattr } for pid=9781 comm="syz.1.2998" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 232.001890][ T9782] rust_binder: Error in use_page_slow: ESRCH [ 232.001918][ T9782] rust_binder: use_range failure ESRCH [ 232.008261][ T9782] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 232.013950][ T9782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 232.022281][ T9782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1388 [ 232.040250][ T9791] xt_NFQUEUE: number of total queues is 0 [ 232.081353][ T9800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1395 [ 232.095221][ T9806] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 232.104676][ T9806] rust_binder: Error in use_page_slow: EBUSY [ 232.115394][ T9806] rust_binder: use_range failure EBUSY [ 232.121597][ T9806] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 232.127317][ T9806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 232.135531][ T9806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:1397 [ 232.167671][ T9825] rust_binder: Read failure Err(EAGAIN) in pid:1404 [ 232.188461][ T36] audit: type=1400 audit(1756472725.875:682): avc: denied { getopt } for pid=9826 comm="syz.1.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.291371][ T9827] PM: Enabling pm_trace changes system date and time during resume. [ 232.291371][ T9827] PM: Correct system time has to be restored manually after resume. [ 232.366601][ T9844] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=50 [ 232.366632][ T9844] rust_binder: Error while translating object. [ 232.375813][ T9844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.382307][ T9844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1410 [ 232.517354][ T9857] rust_binder: 1418: no such ref 1 [ 232.693353][ T9863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=9863 comm=syz.3.3026 [ 232.778231][ T9866] /dev/loop0: Can't lookup blockdev [ 232.783789][ T9866] /dev/loop0: Can't lookup blockdev [ 232.907860][ T9873] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 233.512051][ T9896] x_tables: unsorted underflow at hook 3 [ 233.708900][ T9911] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3043'. [ 233.821445][ T36] audit: type=1400 audit(1756472727.505:683): avc: denied { mounton } for pid=9917 comm="syz.1.3045" path="/466/file0" dev="tmpfs" ino=2533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 233.845859][ T9918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.845901][ T9918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1434 [ 233.901282][ T9927] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.075918][ T9932] rust_binder: 1444: no such ref 1 [ 234.089730][ T9934] rust_binder: Write failure EFAULT in pid:1446 [ 234.100625][ T9936] incfs: Can't find or create .index dir in ./file0 [ 234.113560][ T9936] incfs: mount failed -1 [ 234.167929][ T9938] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3052'. [ 234.666778][ T735] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 234.826733][ T735] usb 2-1: Using ep0 maxpacket: 16 [ 234.833072][ T735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.844008][ T735] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 234.853081][ T735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.861748][ T735] usb 2-1: config 0 descriptor?? [ 235.197769][ T9996] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3072'. [ 235.229007][T10003] tc_dump_action: action bad kind [ 235.235158][T10003] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 235.244190][T10003] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 235.253197][T10003] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.268630][ T735] greenasia 0003:0E8F:0012.001B: unknown main item tag 0xd [ 235.275970][ T735] greenasia 0003:0E8F:0012.001B: item fetching failed at offset 4/5 [ 235.284165][ T735] greenasia 0003:0E8F:0012.001B: parse failed [ 235.290316][ T735] greenasia 0003:0E8F:0012.001B: probe with driver greenasia failed with error -22 [ 235.794651][ T36] audit: type=1400 audit(1756472729.475:684): avc: denied { lock } for pid=10034 comm="syz.3.3085" path="socket:[42891]" dev="sockfs" ino=42891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.831952][ T36] audit: type=1326 audit(1756472729.515:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.3.3088" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccdcf8ebe9 code=0x0 [ 235.843990][T10047] bridge0: port 3(erspan0) entered blocking state [ 235.861425][T10047] bridge0: port 3(erspan0) entered disabled state [ 235.868094][T10047] erspan0: entered allmulticast mode [ 235.873737][T10047] erspan0: entered promiscuous mode [ 235.879088][T10047] bridge0: port 3(erspan0) entered blocking state [ 235.885533][T10047] bridge0: port 3(erspan0) entered forwarding state [ 235.894701][T10047] erspan0: left allmulticast mode [ 235.899951][T10047] erspan0: left promiscuous mode [ 235.905021][T10047] bridge0: port 3(erspan0) entered disabled state [ 236.010637][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3099'. [ 237.241394][T10147] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 237.290934][ T735] usb 2-1: USB disconnect, device number 90 [ 237.377754][ T339] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 237.401148][ T339] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 237.583837][T10174] rust_binder: Write failure EINVAL in pid:1471 [ 237.705068][T10186] kvm: pic: non byte write [ 238.206333][T10250] bpf: Bad value for 'gid' [ 238.508792][T10265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3160'. [ 238.683857][T10268] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3161'. [ 239.290208][ T36] audit: type=1400 audit(1756472732.975:686): avc: denied { append } for pid=10308 comm="syz.1.3175" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 239.328233][T10314] rust_binder: 1516: no such ref 1 [ 239.333497][T10314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1516 [ 239.405649][T10328] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3181'. [ 239.666761][ T735] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 239.796784][ T735] usb 2-1: device descriptor read/64, error -71 [ 239.816200][ T36] audit: type=1326 audit(1756472733.495:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10345 comm="syz.2.3188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ebf18ebe9 code=0x0 [ 240.036774][ T735] usb 2-1: device descriptor read/64, error -71 [ 240.088790][ T36] audit: type=1326 audit(1756472733.775:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.4.3194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x0 [ 240.276787][ T735] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 240.406758][ T735] usb 2-1: device descriptor read/64, error -71 [ 240.646743][ T735] usb 2-1: device descriptor read/64, error -71 [ 240.733727][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3204'. [ 240.756813][ T735] usb usb2-port1: attempt power cycle [ 241.020284][T10442] 9pnet_fd: Insufficient options for proto=fd [ 241.096756][ T735] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 241.117879][ T735] usb 2-1: device descriptor read/8, error -71 [ 241.248156][ T735] usb 2-1: device descriptor read/8, error -71 [ 241.339095][T10508] overlayfs: failed to clone upperpath [ 241.496769][ T735] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 241.508742][T10532] overlayfs: failed to clone upperpath [ 241.527785][ T735] usb 2-1: device descriptor read/8, error -71 [ 241.551956][ T36] audit: type=1400 audit(1756472735.235:689): avc: denied { map } for pid=10551 comm="syz.3.3258" path="socket:[44575]" dev="sockfs" ino=44575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 241.670153][ T735] usb 2-1: device descriptor read/8, error -71 [ 241.786762][ T735] usb usb2-port1: unable to enumerate USB device [ 242.012343][T10590] overlayfs: missing 'workdir' [ 242.219235][T10613] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 242.227128][T10613] netlink: 'syz.2.3279': attribute type 21 has an invalid length. [ 242.235057][T10613] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3279'. [ 242.501786][T10644] mmap: syz.2.3290 (10644): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 242.555650][T10656] fuse: Unknown parameter '' [ 242.736759][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 242.886795][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 242.894024][ T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 242.902398][ T10] usb 2-1: config 0 has no interface number 0 [ 242.908996][ T10] usb 2-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 242.919243][ T10] usb 2-1: config 0 interface 214 has no altsetting 0 [ 242.928360][ T10] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 242.937729][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.946007][ T10] usb 2-1: Product: syz [ 242.950596][ T10] usb 2-1: Manufacturer: syz [ 242.955462][ T10] usb 2-1: SerialNumber: syz [ 242.963883][ T10] usb 2-1: config 0 descriptor?? [ 242.970949][T10623] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.189821][T10623] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.257860][ T36] audit: type=1326 audit(1756472737.945:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.3.3317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccdcf8ebe9 code=0x0 [ 244.317152][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 244.399646][T10744] netlink: 'syz.2.3321': attribute type 11 has an invalid length. [ 244.441836][T10751] futex_wake_op: syz.2.3324 tries to shift op by 144; fix this program [ 244.529706][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 244.541040][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 244.552234][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 244.563358][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 244.574570][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 244.585732][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 244.597044][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 244.608139][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 244.619274][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 244.630378][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 244.641485][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 244.652684][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 244.663798][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 244.675143][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 244.686287][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 244.697456][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 244.708608][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 244.719743][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 244.730973][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 244.741989][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 244.753115][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 244.764193][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 244.775295][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 244.786373][ T10] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 244.798843][ T10] ax88179_178a 2-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 3e:17:62:f3:54:70 [ 244.816155][ T10] usb 2-1: USB disconnect, device number 95 [ 244.822791][ T10] ax88179_178a 2-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 245.229858][T10784] __vm_enough_memory: pid: 10784, comm: syz.1.3333, bytes: 18014402804453376 not enough memory for the allocation [ 245.271052][T10791] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 245.926762][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 245.992819][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.001086][T10830] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.008614][T10830] bridge_slave_0: entered allmulticast mode [ 246.015137][T10830] bridge_slave_0: entered promiscuous mode [ 246.022042][T10830] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.029338][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.036456][T10830] bridge_slave_1: entered allmulticast mode [ 246.043249][T10830] bridge_slave_1: entered promiscuous mode [ 246.102292][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 246.109058][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.117635][ T10] usb 2-1: config 10 contains an unexpected descriptor of type 0x2, skipping [ 246.126636][ T10] usb 2-1: config 10 has an invalid descriptor of length 173, skipping remainder of the config [ 246.137507][ T10] usb 2-1: config 10 has 0 interfaces, different from the descriptor's value: 1 [ 246.148207][ T10] usb 2-1: New USB device found, idVendor=067b, idProduct=aaa0, bcdDevice= c.c6 [ 246.157747][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.166235][ T10] usb 2-1: Product: syz [ 246.170938][ T10] usb 2-1: Manufacturer: syz [ 246.176113][ T10] usb 2-1: SerialNumber: syz [ 246.176812][T10830] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.187888][T10830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.195168][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.202473][T10830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.225538][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.233015][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.243728][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.250802][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.260348][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.267415][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.301821][T10830] veth0_vlan: entered promiscuous mode [ 246.316075][T10830] veth1_macvtap: entered promiscuous mode [ 246.359961][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3348'. [ 246.371332][T10841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10841 comm=syz.3.3348 [ 246.385353][T10841] __vm_enough_memory: pid: 10841, comm: syz.3.3348, bytes: 18014402804453376 not enough memory for the allocation [ 246.402576][ T10] usb 2-1: USB disconnect, device number 96 [ 246.573192][T10852] can: request_module (can-proto-0) failed. [ 246.846842][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 246.929014][T10854] kvm: pic: non byte read [ 246.933682][T10854] kvm: pic: level sensitive irq not supported [ 246.933735][T10854] kvm: pic: non byte read [ 246.976786][ T10] usb 4-1: device descriptor read/64, error -71 [ 247.216783][ T10] usb 4-1: device descriptor read/64, error -71 [ 247.456794][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 247.586744][ T10] usb 4-1: device descriptor read/64, error -71 [ 247.826779][ T10] usb 4-1: device descriptor read/64, error -71 [ 247.935742][ T339] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 247.946408][ T339] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 247.946955][ T10] usb usb4-port1: attempt power cycle [ 247.976434][T10889] fido_id[10889]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 248.226765][ T339] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 248.306789][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 248.327904][ T10] usb 4-1: device descriptor read/8, error -71 [ 248.376783][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 248.384554][ T339] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 248.393735][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.401804][ T339] usb 2-1: Product: syz [ 248.405968][ T339] usb 2-1: Manufacturer: syz [ 248.410985][ T339] usb 2-1: SerialNumber: syz [ 248.416496][ T339] usb 2-1: config 0 descriptor?? [ 248.422516][ T339] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 248.430447][ T339] usb 2-1: Detected FT4233HP [ 248.457931][ T10] usb 4-1: device descriptor read/8, error -71 [ 248.696751][ T10] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 248.718566][ T10] usb 4-1: device descriptor read/8, error -71 [ 248.741926][ T339] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 248.749030][ T339] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 248.756359][ T339] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 248.765652][ T339] usb 2-1: USB disconnect, device number 97 [ 248.772315][ T339] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 248.781992][ T339] ftdi_sio 2-1:0.0: device disconnected [ 248.847964][ T10] usb 4-1: device descriptor read/8, error -71 [ 248.957151][ T10] usb usb4-port1: unable to enumerate USB device [ 249.277659][T10921] rust_binder: Write failure EFAULT in pid:1574 [ 249.280695][T10921] rust_binder: Write failure EFAULT in pid:1574 [ 249.390943][T10928] rust_binder: Error while translating object. [ 249.397370][T10928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 249.403587][T10928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 249.881599][ T10] rust_binder: 10947: removing orphan mapping 0:8 [ 249.967031][T10971] fuse: Bad value for 'fd' [ 249.972361][T10971] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 250.054616][ T36] audit: type=1400 audit(1756472743.735:691): avc: denied { append } for pid=10973 comm="syz.3.3397" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.294625][T10981] tipc: Trying to set illegal importance in message [ 250.316765][ T3172] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 250.354414][T10989] tipc: Started in network mode [ 250.359352][T10989] tipc: Node identity ac14140f, cluster identity 4711 [ 250.366355][T10989] tipc: New replicast peer: 255.255.255.255 [ 250.372501][T10989] tipc: Enabled bearer , priority 10 [ 250.379924][T10989] overlayfs: failed to clone upperpath [ 250.468316][ T3172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 250.476403][ T3172] usb 4-1: not running at top speed; connect to a high speed hub [ 250.485256][ T3172] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 250.493875][ T3172] usb 4-1: config 0 has no interface number 0 [ 250.500068][ T3172] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 250.511291][ T3172] usb 4-1: config 0 interface 88 has no altsetting 0 [ 250.519732][ T3172] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 250.529582][ T3172] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 250.537826][ T3172] usb 4-1: Product: syz [ 250.541994][ T3172] usb 4-1: Manufacturer: syz [ 250.546599][ T3172] usb 4-1: SerialNumber: syz [ 250.552121][ T3172] usb 4-1: config 0 descriptor?? [ 250.771036][T10994] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 250.785176][T10994] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 250.811695][ T3172] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input33 [ 250.825659][ T3172] usb 4-1: USB disconnect, device number 13 [ 250.828687][T11001] overlayfs: failed to resolve './bus': -2 [ 250.839459][T10999] input: syz1 as /devices/virtual/input/input34 [ 250.850726][ T7371] udevd[7371]: Error opening device "/dev/input/event3": No such file or directory [ 250.860110][ T7371] udevd[7371]: Unable to EVIOCGABS device "/dev/input/event3" [ 250.863971][ T36] audit: type=1326 audit(1756472744.545:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.1.3408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd12178ebe9 code=0x0 [ 250.867962][ T7371] udevd[7371]: Unable to EVIOCGABS device "/dev/input/event3" [ 250.966335][ T825] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 250.974271][ T825] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.989680][T11005] fido_id[11005]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 251.250580][T11020] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 251.262206][T11020] overlayfs: missing 'lowerdir' [ 251.278041][T11022] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.340109][ T36] audit: type=1400 audit(1756472745.025:693): avc: denied { mounton } for pid=11021 comm="syz.4.3416" path="/435/file0" dev="tmpfs" ino=2396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 251.340177][T11022] 9pnet_fd: Insufficient options for proto=fd [ 251.496757][ T3172] tipc: Node number set to 2886997007 [ 251.704635][ T36] audit: type=1400 audit(1756472745.385:694): avc: denied { listen } for pid=11041 comm="syz.1.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 251.827567][T11053] overlayfs: conflicting lowerdir path [ 251.973951][T11066] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3432'. [ 252.676246][T11095] /dev/loop0: Can't lookup blockdev [ 252.768700][T11120] overlayfs: failed to clone upperpath [ 252.805279][T11127] overlayfs: failed to clone upperpath [ 253.116926][ T825] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 253.440525][T11155] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3461'. [ 253.543877][T11182] netlink: 'syz.4.3471': attribute type 4 has an invalid length. [ 253.551717][T11182] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3471'. [ 253.680979][T11199] 9pnet_fd: Insufficient options for proto=fd [ 253.832014][ T36] audit: type=1326 audit(1756472747.515:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.4.3490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x0 [ 254.003959][T11236] overlay: Unknown parameter 'audit' [ 254.827512][T11275] 9pnet_fd: Insufficient options for proto=fd [ 254.922632][T11303] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 254.922892][T11302] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 254.930288][T11303] SELinux: failed to load policy [ 254.938808][T11302] rust_binder: Write failure EINVAL in pid:1621 [ 255.186773][ T825] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 255.346776][ T825] usb 2-1: Using ep0 maxpacket: 32 [ 255.353023][ T825] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 255.361148][ T825] usb 2-1: config 0 has no interface number 0 [ 255.368721][ T825] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 255.378093][ T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.386170][ T825] usb 2-1: Product: syz [ 255.390350][ T825] usb 2-1: Manufacturer: syz [ 255.394955][ T825] usb 2-1: SerialNumber: syz [ 255.400509][ T825] usb 2-1: config 0 descriptor?? [ 255.406554][ T825] smsc95xx v2.0.0 [ 255.417477][ T36] audit: type=1326 audit(1756472749.105:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11309 comm="syz.4.3518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x0 [ 255.726387][T11350] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3530'. [ 255.819316][T11366] overlayfs: failed to clone upperpath [ 255.825256][ T825] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 255.846225][ T825] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 255.977191][T11377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11377 comm=syz.3.3539 [ 255.993892][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3539'. [ 256.004242][T11377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3662 sclass=netlink_route_socket pid=11377 comm=syz.3.3539 [ 256.268922][ T825] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 256.279935][ T825] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 256.289504][ T825] usb 2-1: USB disconnect, device number 98 [ 256.623506][ T36] audit: type=1400 audit(1756472750.305:697): avc: denied { accept } for pid=11401 comm="syz.3.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 256.867469][T11407] rust_binder: Write failure EFAULT in pid:1627 [ 257.228096][ T36] audit: type=1326 audit(1756472750.915:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.2.3552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ebf18ebe9 code=0x0 [ 257.387800][ T36] audit: type=1400 audit(1756472751.075:699): avc: denied { lock } for pid=11428 comm="syz.1.3556" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.511987][T11440] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3560'. [ 257.666783][ T3172] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 257.816748][ T3172] usb 2-1: Using ep0 maxpacket: 8 [ 257.824431][ T3172] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 257.834180][ T3172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.842401][ T3172] usb 2-1: Product: syz [ 257.846585][ T3172] usb 2-1: Manufacturer: syz [ 257.851429][ T3172] usb 2-1: SerialNumber: syz [ 258.059066][ T3172] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 99 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 258.113148][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'. [ 258.260759][ T36] audit: type=1400 audit(1756472751.945:700): avc: denied { read write } for pid=11431 comm="syz.1.3557" name="lp0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 258.284602][ T36] audit: type=1400 audit(1756472751.945:701): avc: denied { read write } for pid=11431 comm="syz.1.3557" name="lp0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 258.308360][ T36] audit: type=1400 audit(1756472751.945:702): avc: denied { open } for pid=11431 comm="syz.1.3557" path="/dev/usb/lp0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 258.434050][T11477] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 258.446166][ T36] audit: type=1400 audit(1756472752.125:703): avc: denied { relabelto } for pid=11476 comm="syz.3.3574" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 258.475723][ T36] audit: type=1400 audit(1756472752.125:704): avc: denied { associate } for pid=11476 comm="syz.3.3574" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=156 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 258.654078][T11481] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3575'. [ 258.663468][T11481] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3575'. [ 258.672570][T11481] netlink: 'syz.2.3575': attribute type 6 has an invalid length. [ 258.680417][T11481] netlink: 'syz.2.3575': attribute type 5 has an invalid length. [ 258.688265][T11481] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3575'. [ 258.738547][ T339] usb 2-1: USB disconnect, device number 99 [ 258.745916][ T339] usblp0: removed [ 258.816025][T11492] rust_binder: Error in use_page_slow: ESRCH [ 258.816043][T11492] rust_binder: use_range failure ESRCH [ 258.822171][T11492] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 258.827806][T11492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 258.835893][T11492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1639 [ 258.845435][T11493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1639 [ 258.972148][ T36] audit: type=1400 audit(1756472752.655:705): avc: denied { create } for pid=11496 comm="syz.3.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.276927][T11513] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.285339][T11513] overlayfs: failed to clone upperpath [ 259.367118][T11520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3589'. [ 259.683601][T11537] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 259.717458][T11537] rust_binder: Write failure EINVAL in pid:1645 [ 259.965215][T11568] overlayfs: failed to resolve './file0': -2 [ 260.007512][T11576] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3609'. [ 260.069523][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3613'. [ 260.135818][T11603] netlink: 'syz.3.3618': attribute type 64 has an invalid length. [ 260.172043][T11605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1659 [ 260.193679][T11607] pim6reg1: entered promiscuous mode [ 260.208666][T11607] pim6reg1: entered allmulticast mode [ 260.737638][ T36] audit: type=1326 audit(1756472754.425:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x7fc00000 [ 260.996440][T11668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11668 comm=syz.3.3641 [ 261.015418][T11668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65274 sclass=netlink_tcpdiag_socket pid=11668 comm=syz.3.3641 [ 261.032626][T11668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11668 comm=syz.3.3641 [ 261.289483][ T36] audit: type=1400 audit(1756472754.975:707): avc: denied { read } for pid=11690 comm="syz.3.3650" name="file0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.586737][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 261.736754][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 261.742922][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.753906][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.763910][ T10] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 261.773027][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.782033][ T10] usb 2-1: config 0 descriptor?? [ 262.194234][ T10] cherry 0003:046A:0027.001F: unknown main item tag 0x2 [ 262.207030][ T10] cherry 0003:046A:0027.001F: item 0 2 0 9 parsing failed [ 262.214940][ T10] cherry 0003:046A:0027.001F: probe with driver cherry failed with error -22 [ 262.224865][T11722] tmpfs: Bad value for 'huge' [ 262.356971][ T36] audit: type=1400 audit(1756472756.045:708): avc: denied { write } for pid=11752 comm="syz.4.3672" dev="sockfs" ino=49328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 262.379457][ T36] audit: type=1400 audit(1756472756.045:709): avc: denied { setattr } for pid=11752 comm="syz.4.3672" name="NETLINK" dev="sockfs" ino=49328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 262.455123][T11760] overlayfs: failed to resolve './file2': -2 [ 262.597493][T11796] overlayfs: failed to clone upperpath [ 262.623606][T11800] overlayfs: failed to clone upperpath [ 262.639362][ T36] audit: type=1400 audit(1756472756.325:710): avc: denied { nlmsg_write } for pid=11803 comm="syz.4.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 262.660197][ T36] audit: type=1107 audit(1756472756.325:711): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 262.897448][ T45] usb 2-1: USB disconnect, device number 100 [ 263.057870][ T36] audit: type=1400 audit(1756472756.745:712): avc: denied { accept } for pid=11819 comm="syz.1.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 263.167398][T11827] kvm: pic: non byte write [ 264.112347][T11864] incfs: Can't find or create .index dir in ./bus [ 264.114744][ T36] audit: type=1400 audit(1756472757.795:713): avc: denied { mounton } for pid=11861 comm="syz.2.3711" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 264.118875][T11864] incfs: mount failed -1 [ 274.194909][ T36] audit: type=1400 audit(1756472767.875:714): avc: denied { relabelfrom } for pid=11868 comm="syz.2.3714" name="NETLINK" dev="sockfs" ino=48867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 274.197097][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3714'. [ 274.254476][ T36] audit: type=1400 audit(1756472767.875:715): avc: denied { relabelto } for pid=11868 comm="syz.2.3714" name="NETLINK" dev="sockfs" ino=48867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 274.288559][T11877] fuse: Unknown parameter 'ÿÿÿÿfd<00000000000000000000Aùg ŽeøxÖhÆg &è÷ÿÒÞ›¹Ä¥ªMý~þþl@ð-~l¿ûëBze/w!§´ µá‚ô›µ7‰•û€W• º~¢Éo„¯Vrú‚UU´+5»' [ 274.291577][ T36] audit: type=1400 audit(1756472767.925:716): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 274.375417][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3724'. [ 274.434656][T11925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 274.434695][T11925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1720 [ 274.486800][T11934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.507600][T11934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.514298][T11934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.525817][T11934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.533324][T11934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.826738][ T339] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 274.989274][ T339] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 274.998428][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.006488][ T339] usb 2-1: Product: syz [ 275.010737][ T339] usb 2-1: Manufacturer: syz [ 275.015342][ T339] usb 2-1: SerialNumber: syz [ 275.070598][ T36] audit: type=1400 audit(1756472768.755:717): avc: denied { map } for pid=11979 comm="syz.4.3748" path="socket:[49908]" dev="sockfs" ino=49908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 275.284455][T12005] overlayfs: failed to clone upperpath [ 275.624277][ T339] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:cb:d0:2f:f5:70 [ 275.636735][ T339] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 276.832923][ C0] usb 2-1: Rx status -71 [ 276.833099][ T339] usb 2-1: USB disconnect, device number 101 [ 276.837258][ C0] usb 2-1: eth1: intr status -71 [ 277.077382][ T36] audit: type=1400 audit(1756472770.765:718): avc: denied { mount } for pid=12115 comm="syz.4.3785" name="/" dev="incremental-fs" ino=3081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 277.361060][T12132] rust_binder: Write failure EINVAL in pid:1730 [ 277.438725][T12137] /dev/rnullb0: Can't open blockdev [ 277.450778][ T36] audit: type=1400 audit(1756472771.135:719): avc: denied { read } for pid=12136 comm="syz.1.3792" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 277.472652][ T36] audit: type=1400 audit(1756472771.135:720): avc: denied { open } for pid=12136 comm="syz.1.3792" path="/syzcgroup/unified/syz1" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 277.496434][ T36] audit: type=1400 audit(1756472771.135:721): avc: denied { search } for pid=12136 comm="syz.1.3792" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 277.684548][T12157] 9pnet_fd: Insufficient options for proto=fd [ 277.701524][T12167] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12167 comm=syz.4.3801 [ 277.714556][T12166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12166 comm=syz.4.3801 [ 278.046608][ T36] audit: type=1326 audit(1756472771.725:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12200 comm="syz.2.3814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf18ebe9 code=0x0 [ 278.846739][ T825] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 278.996730][ T825] usb 2-1: Using ep0 maxpacket: 16 [ 279.002960][ T825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.013950][ T825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.023824][ T825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.036657][ T825] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 279.045813][ T825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.054550][ T825] usb 2-1: config 0 descriptor?? [ 279.461972][ T825] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 279.471034][ T825] microsoft 0003:045E:07DA.0020: unsupported Resolution Multiplier 0 [ 279.480040][ T825] microsoft 0003:045E:07DA.0020: implement() called with n (152) > 32! (kworker/0:4) [ 279.661796][T12256] rust_binder: Error while translating object. [ 279.661843][T12256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 279.668129][T12256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1761 [ 279.677943][T12256] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 279.695404][ T825] microsoft 0003:045E:07DA.0020: No inputs registered, leaving [ 279.703525][ T825] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 279.715011][ T825] microsoft 0003:045E:07DA.0020: no inputs found [ 279.721435][ T825] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 279.731677][ T825] usb 2-1: USB disconnect, device number 102 [ 280.270411][T12299] rust_binder: Write failure EFAULT in pid:1765 [ 281.067955][T12327] binder: Unknown parameter '' [ 281.089886][T12325] fuse: Bad value for 'rootmode' [ 281.175205][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 281.175226][ T36] audit: type=1326 audit(1756472774.855:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.4.3863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x0 [ 281.231498][T12352] devpts: called with bogus options [ 281.273356][T12354] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3870'. [ 281.286245][T12354] fuse: Bad value for 'fd' [ 281.310751][T12361] netlink: 'syz.2.3873': attribute type 1 has an invalid length. [ 281.319273][T12361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3873'. [ 281.332992][ T36] audit: type=1400 audit(1756472775.015:725): avc: denied { validate_trans } for pid=12366 comm="syz.1.3874" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 281.972486][T12406] overlayfs: failed to clone upperpath [ 282.770199][T12431] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 282.780704][ T36] audit: type=1400 audit(1756472776.465:726): avc: denied { relabelto } for pid=12430 comm="syz.2.3898" name="ptp0" dev="tmpfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 282.846775][ T36] audit: type=1400 audit(1756472776.465:727): avc: denied { associate } for pid=12430 comm="syz.2.3898" name="ptp0" dev="tmpfs" ino=2540 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 282.887220][ T36] audit: type=1326 audit(1756472776.575:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12435 comm="syz.4.3900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x50000 [ 282.910474][ T36] audit: type=1326 audit(1756472776.575:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12435 comm="syz.4.3900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x50000 [ 282.934007][ T36] audit: type=1326 audit(1756472776.575:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12435 comm="syz.4.3900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x50000 [ 282.957392][ T36] audit: type=1326 audit(1756472776.575:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12435 comm="syz.4.3900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x50000 [ 282.980730][ T36] audit: type=1326 audit(1756472776.575:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12435 comm="syz.4.3900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x50000 [ 283.004006][ T36] audit: type=1326 audit(1756472776.575:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12435 comm="syz.4.3900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099878ebe9 code=0x50000 [ 283.857393][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3909'. [ 284.393314][T12469] sit0: entered promiscuous mode [ 284.406459][T12469] netlink: 'syz.2.3912': attribute type 1 has an invalid length. [ 284.423622][T12469] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3912'. [ 284.816716][ T45] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 284.956736][ T45] usb 2-1: device descriptor read/64, error -71 [ 285.196715][ T45] usb 2-1: device descriptor read/64, error -71 Stopping sshd: stopped /usr/sbin/sshd (pid 205) OK Stopping crond: [ 285.456719][ T45] usb 2-1: new high-speed USB device number 104 using dummy_hcd stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... [ 285.599140][ T45] usb 2-1: device descriptor read/64, error -71 stopped /sbin/dhcpcd (pid 148) [ 285.729309][T12543] overlayfs: failed to clone upperpath Stopping network: [ 285.866739][ T45] usb 2-1: device descriptor read/64, error -71 [ 285.876189][T12552] overlayfs: failed to clone upperpath [ 285.976846][ T45] usb usb2-port1: attempt power cycle OK Stopping iptables: OK Stopping system message bus: [ 286.182016][ T36] kauditd_printk_skb: 25925 callbacks suppressed [ 286.182038][ T36] audit: type=1400 audit(1756472779.865:26659): avc: denied { ioctl } for pid=12592 comm="syz.3.3944" path="socket:[52844]" dev="sockfs" ino=52844 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 286.239759][T12596] netlink: 'syz.3.3945': attribute type 63 has an invalid length. done [ 286.249315][T12596] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3945'. [ 286.271290][ T4353] bridge_slave_1: left allmulticast mode [ 286.278244][ T4353] bridge_slave_1: left promiscuous mode [ 286.295224][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.303284][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3947'. [ 286.303303][ T4353] bridge_slave_0: left allmulticast mode [ 286.318084][ T45] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 286.322528][ T4353] bridge_slave_0: left promiscuous mode [ 286.336651][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.348303][ T45] usb 2-1: device descriptor read/8, error -71 [ 286.398212][T12619] overlayfs: failed to clone upperpath [ 286.431685][ T36] audit: type=1400 audit(1756472780.115:26660): avc: denied { create } for pid=12615 comm="syz.3.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 286.477273][ T4353] tipc: Disabling bearer [ 286.482722][ T4353] tipc: Left network mode [ 286.503306][ T45] usb 2-1: device descriptor read/8, error -71 Stopping klogd: [ 286.526290][ T4353] veth1_macvtap: left promiscuous mode [ 286.528095][ T36] audit: type=1400 audit(1756472780.215:26661): avc: denied { create } for pid=12629 comm="syz.3.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 286.536734][ T4353] veth0_vlan: left promiscuous mode [ 286.574562][ T36] audit: type=1400 audit(1756472780.255:26662): avc: denied { name_bind } for pid=12634 comm="syz.2.3954" src=20009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 OK [ 286.609023][ T36] audit: type=1400 audit(1756472780.255:26663): avc: denied { node_bind } for pid=12634 comm="syz.2.3954" saddr=2001::2 src=20009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 Stopping acpid: [ 286.648660][ T36] audit: type=1400 audit(1756472780.335:26664): avc: denied { write } for pid=95 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.672278][ T36] audit: type=1400 audit(1756472780.335:26665): avc: denied { remove_name } for pid=95 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.696457][ T36] audit: type=1400 audit(1756472780.335:26666): avc: denied { unlink } for pid=95 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 286.726047][T12594] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.733160][T12594] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.740264][T12594] bridge_slave_0: entered allmulticast mode [ 286.746427][T12594] bridge_slave_0: entered promiscuous mode [ 286.752760][T12594] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.759809][T12594] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.766877][T12594] bridge_slave_1: entered allmulticast mode [ 286.773030][T12594] bridge_slave_1: entered promiscuous mode [ 286.786768][ T45] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 286.807785][ T45] usb 2-1: device descriptor read/8, error -71 [ 286.815703][T12648] netlink: 'syz.2.3955': attribute type 4 has an invalid length. [ 286.840798][T12594] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.847907][T12594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.855186][T12594] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.862254][T12594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.882253][ T449] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.889718][ T449] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.899145][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.906341][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.915999][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.923190][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.947200][T12594] veth0_vlan: entered promiscuous mode [ 286.947861][ T45] usb 2-1: device descriptor read/8, error -71 [ 286.959174][T12594] veth1_macvtap: entered promiscuous mode [ 286.979420][ T36] audit: type=1400 audit(1756472780.665:26667): avc: denied { mounton } for pid=12594 comm="syz-executor" path="/root/syzkaller.hoiCrg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=50962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 287.008801][ T36] audit: type=1400 audit(1756472780.695:26668): avc: denied { mounton } for pid=12594 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 287.067671][ T45] usb usb2-port1: unable to enumerate USB device [ 287.082910][T12665] netlink: 'syz.4.3959': attribute type 16 has an invalid length. [ 287.090935][T12665] netlink: 'syz.4.3959': attribute type 2 has an invalid length. [ 287.098737][T12665] netlink: 64086 bytes leftover after parsing attributes in process `syz.4.3959'. [ 287.394645][T12690] netlink: 'syz.3.3968': attribute type 4 has an invalid length. [ 287.402616][T12690] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3968'. [ 287.640729][T12722] binder: Unknown parameter 'defcontext01777777777777777777777' [ 287.676393][T12724] tipc: Started in network mode [ 287.681460][T12724] tipc: Node identity ac14140f, cluster identity 4711 [ 287.688417][T12724] tipc: New replicast peer: 255.255.255.255 [ 287.694488][T12724] tipc: Enabled bearer , priority 10 OK Stopping syslogd: [ 287.724087][T12727] input: syz1 as /devices/virtual/input/input35 stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system isSent SIGTERM to all processes Connection to 10.128.0.67 closed by remote host. [ 288.360283][ T4353] bridge_slave_1: left allmulticast mode [ 288.365978][ T4353] bridge_slave_1: left promiscuous mode [ 288.383271][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.391399][ T4353] bridge_slave_0: left allmulticast mode [ 288.397207][ T4353] bridge_slave_0: left promiscuous mode [ 288.402996][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.528765][ T4353] veth1_macvtap: left promiscuous mode [ 288.534287][ T4353] veth0_vlan: left promiscuous mode [ 288.806768][ T825] tipc: Node number set to 2886997007 [ 288.867435][ T4353] bridge_slave_1: left allmulticast mode [ 288.873099][ T4353] bridge_slave_1: left promiscuous mode [ 288.878872][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.886556][ T4353] bridge_slave_0: left allmulticast mode [ 288.892303][ T4353] bridge_slave_0: left promiscuous mode [ 288.898373][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 289.048036][ T4353] tipc: Disabling bearer [ 289.053342][ T4353] tipc: Left network mode [ 289.058800][ T4353] veth1_macvtap: left promiscuous mode [ 289.064397][ T4353] veth0_vlan: left promiscuous mode [ 289.999646][T12737] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 290.006326][T12737] ACPI: PM: Preparing to enter system sleep state S5 [ 290.013292][T12737] kvm: exiting hardware virtualization [ 290.018811][T12737] reboot: Power down serialport: VM disconnected.