last executing test programs: 1m21.765934953s ago: executing program 1 (id=2374): futex(0x0, 0x80, 0x2, 0x0, 0x0, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) (async) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$tipc(r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) (async) unshare(0x2a020400) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) (async) socket$inet6(0xa, 0x3, 0x20) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, 0x0, 0x0) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f00000000c0)=0x3, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, &(0x7f0000000100)=0xfffffffffffffdea) (async) r4 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x7, 0x2000, 0x2000, &(0x7f000091c000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1m21.725317444s ago: executing program 1 (id=2375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) sendto$inet6(r1, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1002, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) sendto$inet6(r1, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m21.655858565s ago: executing program 1 (id=2376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)='e', 0x1}, {&(0x7f0000000000)="96", 0x1}], 0x3}}], 0x4, 0x4048841) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.654963995s ago: executing program 1 (id=2377): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x48900, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)=0x7) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 1m21.651520825s ago: executing program 1 (id=2378): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe80"], 0x58}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r6 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r6], 0x20}}, 0x40816) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r7}}]}) r8 = eventfd(0xd36d) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffffb, 0x2, 0x8, r8, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.602635966s ago: executing program 1 (id=2379): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00003fe000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m21.572958886s ago: executing program 32 (id=2379): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00003fe000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 50.750406834s ago: executing program 4 (id=2947): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, &(0x7f0000000200)="2e89b5a44cb2adb01086cd131e41c6e8b41cc64a227045a25f4d3badac728aed4b91738d347348a36523fa97353724b2d8a1e64ff34aba043d56470a7100e0397615d0ec9a84fed98ec6", 0x4a, 0x800, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3}, 0x80) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x80a0000}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x40, &(0x7f0000000240)=ANY=[], 0xd0060) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00003fe000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x1000, 0xc000, 0x3}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 50.695347804s ago: executing program 4 (id=2949): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xac506000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x1d2, 0x2}, 0xe) (async) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x7, 0x4) 50.665095525s ago: executing program 4 (id=2951): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) fchdir(r1) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000d80)=ANY=[@ANYBLOB="12010102000000406a05ef02400001020301090224"], &(0x7f00000010c0)={0x0, 0x0, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="000f0c0001071002200000"]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000640)={0x17, 0x2, {0x2, @struct={0x2, 0x3}, 0x0, 0xffffffffffffffff, 0x155b, 0x4, 0xea3, 0xa, 0x60, @struct={0x7006, 0xffffffff}, 0x24cd, 0x7, [0xf06, 0x8, 0x5, 0xb, 0x101, 0x100000001]}, {0x8, @struct={0x80000001, 0x85}, 0x0, 0x8, 0xfffffffffffffff7, 0xfffffffffffffff7, 0x0, 0x4, 0x46b, @struct={0x9, 0x1e8d5494}, 0x1ff, 0x3, [0x8, 0xfffffffffffffffd, 0x5, 0x7, 0x7, 0x10000]}, {0x4, @usage=0x7, 0x0, 0x5, 0x3, 0xbac, 0x100000000, 0x6, 0x4d0, @struct={0x4, 0x4}, 0x4, 0x6, [0x80000000, 0x7, 0xffffffffffffffff, 0xdc, 0x80000000, 0x1]}, {0x100005eab, 0xffffffffffffffed, 0x8000000000000000}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x620101, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000180)={0xffffffffffffffff}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x9800a8, &(0x7f0000000040)={[{@xino_auto}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x28}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000180)='./file0\x00', 0x0, 0x109122, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 50.111428013s ago: executing program 4 (id=2957): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0xdebb, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x6}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026, r5}, &(0x7f0000000140)={0x3, 0x7fff, 0x0, 0xc1d, 0x8}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x931766f6319eed40) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 50.089278184s ago: executing program 4 (id=2958): socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$key(0xf, 0x3, 0x2) r3 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) socket$key(0xf, 0x3, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00003fe000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.959865976s ago: executing program 4 (id=2959): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xe, 0x0, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000029e000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r3}, 0xffffffffffffff7f, 0x200, 0x6}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="66410f221f660f3a228bb6d000008166b8e5000f00d065400f01dfc4417852e0c74424003b010000c74424020d000000ff1c24c4a29da766cf66ba410066ed26260fc79e00800000266436460fc71d69935430", 0x53}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 49.955559046s ago: executing program 33 (id=2959): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xe, 0x0, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000029e000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r3}, 0xffffffffffffff7f, 0x200, 0x6}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="66410f221f660f3a228bb6d000008166b8e5000f00d065400f01dfc4417852e0c74424003b010000c74424020d000000ff1c24c4a29da766cf66ba410066ed26260fc79e00800000266436460fc71d69935430", 0x53}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 5.12320191s ago: executing program 2 (id=3742): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) pipe2$9p(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000002000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(0x0, 0x84880) futex_waitv(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) (async) futex_waitv(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xb) (async) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xb) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="c4e169f865000f380a3f66baf80cb8bcb25b81ef66bafc0cb807000000ef0fc798dc45000066b8bb000f00d8660f6078360f01c50f01c20f08eaf2ff00007900"}], 0xaaaaaaaaaaaac3d, 0xa8, 0x0, 0x43) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x10000a, 0xe4, 0x40000}, 0x20) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[]) poll(&(0x7f00000001c0)=[{r7, 0x2}], 0x1, 0x39e6290c) (async) poll(&(0x7f00000001c0)=[{r7, 0x2}], 0x1, 0x39e6290c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9, 0x4}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9, 0x4}) r8 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0x1) inotify_add_watch(r8, &(0x7f0000000180)='./file0\x00', 0xa30) 5.014821232s ago: executing program 2 (id=3746): r0 = getpid() r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x5a2}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) r3 = eventfd(0x4) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x3, r3, 0x1}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000100)={0x1b3e, 0x4000, 0x1, r3, 0x1}) rt_sigprocmask(0x3, &(0x7f0000000140)={[0x9]}, &(0x7f0000000180), 0x8) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000001c0)={0x0, r2, 0x1}) fchdir(r1) write$vga_arbiter(r4, &(0x7f0000000200), 0xf) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2}, 0x4, 0x1, 0x4, 0x2}}, 0x2e) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000280)={0x9, 0x5}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000002c0)={@remote, @local, 0x0}, &(0x7f0000000300)=0xc) bind$can_raw(r2, &(0x7f0000000340)={0x1d, r5}, 0x10) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0xfb, 0x1f, 0x4, 0x9, "ce1697c04956c81900d217e2acdba8d9", "7f2f5ec15f07bdfd6255"}, 0x1f, 0x0) r6 = fcntl$dupfd(r3, 0x0, r4) socket(0x29, 0x3, 0x90) ioctl$ASHMEM_GET_PROT_MASK(r6, 0x7706, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', r5, 0x2f, 0x9, 0x7, 0xfffffffd, 0x30, @remote, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7800, 0x7, 0x2, 0x1908}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000540)={0x0, @initdev, @local}, &(0x7f0000000580)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000001100)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f00000005c0)={0xafc, 0x0, 0x112, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x2f0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa016}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/selinux/policy\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&]*}#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/selinux/policy\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/selinux/policy\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'target default\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6cb}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbc54}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/selinux/policy\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'target default\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^\x87!-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':,}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'\x0f,$)\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'target default\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/selinux/policy\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%\xf2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/selinux/policy\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'target default\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "8d7bb670d8980a454c7d70936472d005f45cff127e9c5c8aead774dfc96f8bec16707ae33c409711b5966d771d2ec3b8c42ce90252945857e161dc9c7e4641ddc61bb160a159ccf88110f9dd38ff3def6b040516c01e4b72e7fba6f43431547efbabba2c1f4d5d03ac9247c9ede024f60f32084fc936cd16a3d328187c5bc14b8411e39113f421791ce360eb55851f07b024dd553402b6a3c6d6fd81834a575a2c471be37e45c4555a657a2088a2927f2d52c95b8f56af027a6b8d8d1d9073346c7bb0cd5ff16f0fbfc87e2eb1482c9f0484b6bbff21e28730d40bd60026d31cd9aeb7db71813f358c1fa2136cc03ff6453cf920"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffeed}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbb, 0x4, "9c58667cbff5a05c0a7cadc1c09b71fa8945cf0c52e3d5220f3160f8c1144cc071e04e63849f4e8b14f58cb5f9882de7ed1f3866d9d201e8a4c5cd07f068becb0cc9651cfe26d1fdb2867383d0bc86aa0e4742d12051080bcedca76190aee9577725b533b41354235215b939fa726c19fedd1ecacc44270188a0e95a678b0636ee01b58a224bea798ba8b444efa520e0609d2c86423766911f055c4a2678f41a442731aa672cbe20e6e21d5495cd47bef3940e716a0900"}]}, @ETHTOOL_A_FEATURES_WANTED={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "36cfed5a71c3bf757a1529c9aa17abca32319dbca3596ffa59ed74a235e7728f37763ed4f7add298849f242cdd6752fd1a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "e71b21f7553534ef893e6042c2d20de6d5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffa}, @ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "678fed9739dcd6911338e8db455ebad78e3c1afbde808dde8a1bbe7fd007b7c21751a8d9646b6119a19ce627d2be5ff6030156e1d26fff6a08f7d2f1f36321f87a143c9ed133cfa56759c77fd6"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x70, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'target default\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4c5}]}]}, @ETHTOOL_A_BITSET_MASK={0x18, 0x5, "1f2f36b37a570ef3f0a51012c02febf5257f3ecd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x7c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x71, 0x5, "ce8e94196e77369a8d9fa667851c889da82394255f98fe29c0f184561275c21d16902af9388872ab312275012184699c4f154e57d049c4087e58cb7a17848157f5fe8bf6cfd18cdc4f0a7b8a72edb556fb7fee2c972843c0597a76fb4f697d16d673cc09e6b5b9938c655eab3d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x414, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'trusted.overlay.upper\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/selinux/policy\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')`\')}(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x596}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'trusted.overlay.upper\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*,:\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'trusted.overlay.upper\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8409}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42b3fe95}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/selinux/policy\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{@/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbe, 0x4, "efa19f5843f1d02b78e9985f3f0c8ea17f2e318d2d2156cf1069212bf618bd74c17c05e0e36ca80156be690c277d69d349a3c7306fb9b009b3dbc721f0b2c81144a7ab22a4cc48a97f0d2617f446190a5e84b9e901d4ac67811a27a835a70f3c3c9583952d01005e3e502f3660bc4df93b2133809ab331109471b198ec1f686b864f49109e92a6daba1cb05fa0542f5d698c216b1ef756de3c24cbe1a62894690a7667a3dada1facf68432dd7fc5ce1e72f1fe16597b4c5ae595"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "3862205e2c8ee74728ce5d09a6de9734a2dc51cc89bc03f625983ced5f8d630cae3bbb319367a31c582c29d8d90a67099c6842edde8db82d6f84dd0cfba4c6c46af6652f92ef"}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "8e32adc5858b69436c275d6ba429a61476f1a9be911597ff48ddb967dcde99ce069c92cca6b8723166f92c444b377733d9a05f9cc4fb7db0d04043cd5c08da61ccfca851ac8b3e10a9c09e428e4519714c175fed20bb0f96f3c92406e8c544f6ce4c1c1a56389e128288251c7c9ed9d31d48cf380898e7e6df8ec0b3f48a627940262482067bee37c5fec0570e07ebee502d468be0fdf593fbabd7c9319c9a5262b649a07f91803bb7cfc271e55c6992476b83ea5f024a59c801daeec5107de5e0996a80113314c3b29c3534b068e9ba1fe337c4e4fb59a4f8185dafc27f191e2bddc6c0c8fc1c7143633d37e16fb2233a7ba12c569dbd496c0b58040925"}, @ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "dc5069ee1424"}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xafc}, 0x1, 0x0, 0x0, 0x80}, 0x11) process_mrelease(r6, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000001140)='[]%\x00') socket$nl_xfrm(0x10, 0x3, 0x6) rt_sigtimedwait(&(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001240)={0x77359400}, 0x8) socket(0x9, 0xa, 0x401) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, &(0x7f0000001280)) bind$can_raw(r2, &(0x7f00000012c0)={0x1d, r8}, 0x10) 4.156012535s ago: executing program 2 (id=3749): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) readv(r0, 0x0, 0xffffffffffffffec) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) prctl$PR_GET_SECUREBITS(0x1b) ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x2) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r4, &(0x7f0000000040)=""/21, 0x15, 0x20, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7}, 0x1c) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 4.035494447s ago: executing program 2 (id=3751): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async, rerun: 32) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0xc040) r1 = socket(0x10, 0x803, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) (async, rerun: 64) r3 = memfd_secret(0x0) (rerun: 64) ftruncate(r3, 0x51a9497) (async, rerun: 32) pipe2(0x0, 0x0) (rerun: 32) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) (async) timer_create(0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x3e9c, &(0x7f0000000340)={0x0, 0xc12f, 0x8, 0x3, 0x15}, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0)=0x0) chown(&(0x7f0000000000)='./file0\x00', r4, 0xffffffffffffffff) (async, rerun: 64) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r0, 0x770a, 0x2) 4.032351587s ago: executing program 2 (id=3754): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x7fffffff, 0xc1, "2f1bbe30104b9f2ce53b3598ce80d737b4fc61166e631aa8e4e4fd172efd451bf13b9de237a9176fa903c8e6f59e7a236dead65bfc330f84a24b0dc5c0271e0d98585d2fddc22dbdba604df2dbe0ab2e9362c1a90a853110c8af7df291c284fa95d5b7800232e2ca2cd35fc3725ddc403260ea36b8e5e41344138e4621a081efd9db4ffe1c871da42bdfd45f37a5dc22d83363f6836b7596d5f9b7246ca12c83acab4b85e55cd3aca6c14c673152af668b6b56c52764e332ddd9dd1848224e5b63"}) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x100, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() r4 = fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000dc0)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001180)=0x0) statx(0xffffffffffffffff, &(0x7f00000011c0)='./file0\x00', 0x100, 0x200, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000003340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000005380)='./file0\x00', &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005440)='./file0\x00', &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r18 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000005500)='./binderfs/binder-control\x00', 0x2, 0x0) r19 = openat2(0xffffffffffffff9c, &(0x7f0000005540)='./file0\x00', &(0x7f0000005580)={0x602001, 0x180}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000056c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc, &(0x7f0000001100)=[{&(0x7f0000000180)={0x170, 0x24, 0x100, 0x70bd26, 0x25dfdbfd, "", [@generic="51a854beb39dc812e358195604e456e867c649d50c52df76fbb800cdc521ac4613e5428c406f85e2eb01fb6c5ed4c2edea0ab92db00685dad786223350624cfe83455d666a78640933a7f8e0a7ab56558684902d1d0f4e56550025335db65c2181207f521ce519b33e77ca1c470984", @nested={0xee, 0x14, 0x0, 0x1, [@generic="ee4fd54d901e9dc95a9c29884b979fd0d1007e139624c8a554aa8eb202080ba4ce39addcca6cda140b5b51f9505cdb1aa6e27ab519920c098ddbcf16384c0ee3ca24998a5cd97c903e8f0c0dd8278ff2bb405486fb783b291248a6779da1023ee508b86009306352d4d00bb4eef660ffe16d49184d28d7104c0e0164dc7a9c968887d4c1654cf5ab1c0e2ed1fa17fc3153a50f3c5cde829829dc7f2f219257d5dffee5a1caa187acc9744943b961a58edcee14d14956c8a46b44334d36d60566a93f20c9ed06772728a014ab47d40a4647e7bc5fbe8f3be1ba2a24b9a1078c871190a2d6c6148697d02f"]}]}, 0x170}, {&(0x7f0000000440)={0x294, 0x28, 0x300, 0x70bd27, 0x25dfdbfd, "", [@nested={0x24, 0x119, 0x0, 0x1, [@generic="ccd4595d60f8f00e176cf353a5678268481350fbe6847a68413f8b16e5993c6c"]}, @nested={0xa2, 0x13d, 0x0, 0x1, [@typed={0x14, 0xcb, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="b0923d302d624b7757b030edd257720139e4c12b91946d26e7bd4966e0aea51acda10ef1f5c398adbc6d20baa72528e1cee938ee5f2cbc111d10ff400caad82f4454a1017214208d80199af6ea35440bef4b0ac412cd4fa4f5cccc4d47f8f387623abbd802b9ed37e4fb271baa49", @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x7d}, @nested={0x4, 0xfb}, @typed={0x8, 0x45, 0x0, 0x0, @uid=r1}, @nested={0x4, 0xb5}]}, @typed={0x89, 0x31, 0x0, 0x0, @binary="d5070155419f9b646cf378e3d28492b69f6851201ae230c562c1ac9637b62186cee7441989233461739eb53bc5e8c7b19a4b81fecf16f4f5eb88106bd19faceee8c1373fb11151c6512af0cc023ee3f0da6216cf73929df5fd6f8131420f42b63d8abfc0af1bc30b88d0a23b983c36f3f4340bacf383c24b39a94c50ac1c0c19333acbea84"}, @typed={0x6, 0x11c, 0x0, 0x0, @str='+\x00'}, @generic="813b3e59f268cf83d4252b90fd83f2fc8bf724e64b2f67a084fa50866beb5d23318007126fd5fb617e7f6c51a7626c1f9ee87e235a3fa5c4b73f9a45daa543b71f3b9a1fd519de0617686d216a0fbfb0123f57e91bc105fb9cd2019e57559f8be88e7f3979a18e4739894f7d9c67022420838d628f13e6e3756278f38a48132c87de3a8e8dd21e84f4e3839ab1303032b7ec9c9955b829c25d7983b8e8427beb3d22851fa20a67425a2c5d66230ed5f26b804845212f30c028bdb9a4d0574f6a87f640d6499b49dcd3dd8114541a6eaf29ec848cf79beb", @generic="dc9be0dfab3d391f8a04b44c535850ad9249dec2734f6d2e80a2eb5e28b4d58a4863a8f9d0b59169078d7268b12394ff3b69185fc12cb830e059269376c07998bed84d6aa3ada4b02006b5346755"]}, 0x294}, {&(0x7f0000000700)={0x118, 0x33, 0x300, 0x70bd28, 0x25dfdbfd, "", [@nested={0x106, 0xae, 0x0, 0x1, [@generic="b708d056a5066636da5b5bf4fec9e8859aff2c92d0ed4cb5257bfecc008ecbe3b1d60798870d3cd5ca11ec08ed086d295bdc349054c2f72594650124777f7f193d9b4ca927152ef43ab39ba1b55f2f8b0dbd83a8b0b7607fc2966d55dfc52ee432029ce80a3e2375b7774188499b62cecc2495b03288a3dce220265f91f6637e7aa2369e2eaa8bd09035f8d3c8a680bf1fed9fed92d7a5c773efd46b0b038463484e3b36a3b5af61203e55efb7e29c6f797a27b5392faa38b3a56ccc1d5ce5fa4f19926ebd9b5b6e04e3f6baa01ad6af3acb0269", @nested={0x4, 0x41}, @generic="a0395a03b25098f7b763152421db6c9ff9c0e2e8999a800ff8950bb17a0baab43819b631b7017ef4cc3d"]}, @generic]}, 0x118}, {&(0x7f0000000880)={0x524, 0x25, 0x4, 0x70bd27, 0x25dfdbfb, "", [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @uid=r3}]}, @generic="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", @generic="e01a2208761808672ab6b5126c97ae5dfe22a20965158d01fcae747a6eaf3b626e094ea5fc002a54718f0e4cbc7c68671c16369a64054b2554d927c0470a598242f2ad8586dd22", @generic="4a33a0303566e4d2356b7d5283bf064ee67f531471231d87f1590ddd00a04121103654152772eb54b93cfa9dc9595db5df7c27411a0f29d03674b5de812ce86754286d6135e60977397938206504cbc8504ea8993f90c4302932fc25507b763a75ef083312b56536a01ddb4f4e430dd638e92746de5c15efe79ef1c30a6adf7b53351b1ef57e451d7f63147c47d123311d29ff7d112edf4db16e643cdc0faafc209466a6489f571e399f2cc026c1165064a6129e9f02d823db426cec80c1d7b8d6c481f5d6fa5291942db22b50221d5c6db7916064ebce20acf39d0ef2c16350d76dde3081bba5ad377e2e06957a086f4c", @nested={0x171, 0x102, 0x0, 0x1, [@generic="c3a11bbbbde992a51f5bb7677899f32aeb51e2e5003587de6293f0aef88c2d1b85bb5f5a8e7ca7dbfe568434bcbfc242276722bd653d1abad50cb117591b73e22620c5bd7c1fb3412cb8baf90d1fb423e2f0f8d121909cf5db4e61ab7e8bd61c272b0d30151222edb2f87519bec1d34c0fc8800dc987a9734c0be498c4f9e46687c38bf5e864f726d5fafb88fa3f36650cd249db", @generic="5bd72526e2a9e278e6092634986d7ab1918ab7d040c584adf43ce0b747a0733cf19740a0349859444f158a4619c4d708daa525d2af16c2e5629b4115936ed51cd0abc15cf1e0c4a4ecede5e5c984118267d5ae04aa4f8dce110fa414e5a274429c20cd04b6c2e22c5ee9f2415a6621a5e0583946c9ba06cba895a97f80029e04b4ae9673c0cea34fa93c57e99042fe572ae8c7a87eb0f53ba296f36b9abcfc85f580fb56ae892e4fd08ee4e48a24825450553911fd3cadf49ba26e2a1f40bf1261", @typed={0xb, 0xbd, 0x0, 0x0, @str='#$&\x9c^\x9a\x00'}, @nested={0x4, 0x5f}, @nested={0x4, 0x116}, @nested={0x4, 0x13b}, @generic]}, @generic="d153fbd40f468be775abc935b2c0742932abdac386dc21bc3cbf23e34514cafd06aadd0e738fef77a6307d383dd12475d9c6f07897e9dd19f63d3897b65f0b11b3f29c33bf3ea4c303f6c216ed63f7f7635f33d53aeae1bafa8aeea6764b5c85fa937b3c4c8e2b77d9329005fc91e05d3f448022c526c68b92bfa26d169e557a553098e261c1c3e2ec00bd60ceb84d7c111e041d86d69a401346120f7423ed5661aabd74ae01ec28919e9b294a8707769ddb40101d00478cba42b73dbe29e809d265", @typed={0x8, 0x54, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x59}, @nested={0x93, 0x73, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @pid=r5}, @generic="874b550f5ec62f4a35bac517bd91d3f442e3d5864b1f5dd339a09ae38f88cfeb6352dd51a779f6e8f20b54e85c0cb740c433b9896d009cea7320e31c505b4a0ae09227e7d30ec9c25aa2e7873be9ffe84a86d071a8f5e9eba67baf6567eec7cf5dbeebd0c2eb2abbdd812684bc29481a4b1555b76619eaa6f5743c", @nested={0x4, 0x9a}, @nested={0x4, 0xdf}, @typed={0x4, 0x2d}]}]}, 0x524}, {&(0x7f0000000e40)={0x284, 0x1d, 0x100, 0x70bd26, 0x25dfdbfd, "", [@generic="13c82f3fe9b2c70f335439caab1fbbe9ce8d0dd0b98fac3b3653e49691cc80f18f93c0797ec1864cd0ef2f3046c539eac5ea815f9ab0bd01a7430fc8ac41d61a1b147c32f7b2ac685d0c9cb5835c72302789eb1a254af07a2d4d35c13709205e661da9af5a9ac7730b33c90bd3932d09293d91a0fe769821f066456938ccbd9c9b27c3f0d5c6c4", @nested={0x1c, 0x12c, 0x0, 0x1, [@nested={0x4, 0x8d}, @nested={0x4, 0xab}, @typed={0x8, 0x127, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x19}, @nested={0x4, 0x120}]}, @typed={0x8, 0x7f, 0x0, 0x0, @str='(^#\x00'}, @nested={0x118, 0xc0, 0x0, 0x1, [@generic="a11d724c0dfad1ee0012ba81b7a66a758af321d5b28470010c8746bd3ec0075463a810cdd5bf4bab77d1ecf3763d663e95ada10f5f21761a7736a6e4a07afae3eac9eb55f2743e656df8d17fa608d6992e8aaa5ea8a9b99775bd19424138957991858bbeeb50f3292205bc3318b9c831113ce6d6dcd2beb0550cf06d03dd798b9c9368647b6e0599d2c72df11f1f83f1aca98c3fcd4d56710f946fb3bf6a181993cefc48ef06f961967e45fa227a56f21062abc774f477355fc279626b7187eda99fb556d96c7a26b9a5f9f8301a4205a273efde8f11b36ca36a748fcfe6f6b43d806b528f7e323a61d6af3695a71df4a94c69520f7bcd29", @typed={0x4, 0x43}, @typed={0x8, 0x12e, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x4f}, @nested={0x4, 0xfd}, @typed={0x8, 0x119, 0x0, 0x0, @u32=0x12}]}, @generic="e1bf645fc161d4f551caa51743b9cad6fba5987fde06bad005d9183d716ddcfef36121ddd42c0fc6a3494a1438fa21a3d7bfb3d13d25a74d89aa8ffd6c23acc2eee09bd22a58c9c8faea3743266622b115627f08040b3b34ff24a45b39a82b5af32692f1e2e4e7f30333b918edc31d532e22cd8866598897ffa26bfc723a7f2740413255a66c95ae188ea8164d77cad3bf8ff171b794cb4105f57739b3b979d5f3ccf763af5db3bfff99c7dd9e56ae31"]}, 0x284}], 0x5, &(0x7f00000055c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r11}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r16}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r17, r18, r19, r0]}}], 0xd0, 0xc005}, 0x8000) syz_usb_connect(0x1, 0x89f, &(0x7f0000005700)={{0x12, 0x1, 0x310, 0x21, 0xc6, 0x57, 0x20, 0x5d8, 0x810a, 0x11c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88d, 0x3, 0x1, 0x2, 0xd0, 0x0, [{{0x9, 0x4, 0x35, 0x8, 0x1, 0x13, 0xfc, 0x60, 0x40, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0xb, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xe30a5730f38250f5, 0xa, 0x5}]}}]}}, {{0x9, 0x4, 0xb5, 0x6b, 0xa, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0xa, 0x68, 0x3}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x6, 0xfc, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x7, 0x92}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0xff, 0x0, 0xe, [@generic={0xc9, 0x10, "051d25476dac643839f4648607e810181f5cf8224de00c82ef1d73b36d92c6258fc1edcc0a17e1920bba5e325b041176791e8f0a0d7aff0ce784d3eaf87f3295e2a56584dd0fe29444dae32bab955819c97214e1ebe0240ecfe65fb01e0ede7c0362b1a1de08d2f37e0a941954330715ef064151017c4f31f797870fabffd0efdd6f17ce647b36ec93259f9b879a3ac6440ec655038129852e8befe79bc8e928ebb4ebb0fe71fe368583ad01063cc0a7b1a638c2f61fa7d65970963a0c4a889e3e046499b0168b"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x3, 0x9, 0x2}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x0, 0xa, 0x3}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0xfa, 0xc, 0xfe, [@generic={0x62, 0x11, "ce00a3e20f25b7193c8c9ffb243ececfa16da2b095109dc0f52cb4514bac39096a9303be84ebc289306eb3129582c4883f864b6bd51e1fdc5b28e28ab922f6fa02378c1b1b61a2dc14c5959b5f9538c95eccb853aa860ba50438bb43c01220b8"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x4, 0x4, 0x1, [@generic={0xc4, 0xb, "6a3ac36d14d73e36265a9444c051ee8d7ab555102502ed3c24c8168b50e8b5776138a007b9e9ba11ea4e2cfcbe4ffa12bc71221a18a17db28d4ae93d06492f0ad6479c27f3fbfbcdb456dc74087645794ea32ad37f8c71ae0c2afa3f938d1e9091c0564c054651e237402fb9e4f8b19390c0857bf39d5c6dc55513e269d8dc1cb98d96f478ddc17ad4df93e079d999f044597efb552628ba69442c0e29a8acb74fe969ef05f17e151a1d42664def1b261463a2b6f711a4183699b92fbbca3134a3bf"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x0, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x80}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x4b, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc3, 0x4d9}, @generic={0x9b, 0xc, "b81dcda1e932c69330378fc894bae2d92c9c148cb47549a90448bab42917ed548ef8045b4cb1345b752817da97c3b7dc42915fb875b6778429ae808193ae6fb4dca17755843d386819c6e23f539b6bd67e331e7da9c71fe91e2710bda941137dae15aa2ebb010bc5c2c8130d8dd1241d0fe5865ceec904f8a47e5225e16f69f716f0a69f42e598f852202453b16ae5e7edec108296278e174b"}]}}]}}, {{0x9, 0x4, 0x37, 0x6, 0xe, 0xff, 0x5d, 0x1, 0xb4, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0xff, 0x2, [@generic={0xd3, 0x23, "68fae09a5987c136dce61d2d9edfa30a639dbf79e99d19815df7269854c67b6b9642f96e7e746efb2a956b4caad9bae2af01f330c0c0fcaeb318ba6b4a448fdc86facb3d85bf3e7dacd4f47367e70714f2d506513b9b4138e73e44f0ae679826f2c31f439347b7ecf7c98aff5510bd1d4b2103e24e46f06ccc954fb16ebdb777853f2c892dcce575d86fd3b09d513dea97d33c8318906638420337c88d6f378cfdbbb55eda389248a8ecb6c40edb41280092185bcbd63c6d2ecc240bc3d4ee9a6436aa7dc42fd3a5ee4457677635e8ab15"}, @generic={0xea, 0x1, "933ec7031bcaf763cbd3dfa389b20fae480ffaa4b2c74765e3536e80ed589dfcec1dc81863bae03ae4380cd8d3539aede0f9c52adfc8b1a0cf47d0b67f9b24d893dd2ed2b7163cc392598aab1e41d907bd32cbbf1932bc6d7df43eb2588228786324805c19b4a5070c4e5573a1005b72c22273d2f35b3e11e84ae86bb8dd9faf17e9a2a7be380e51a63664e5718d633f5fb6af44377320fd6a47907b035730f7a1974ef5a3255f7b4317651244a55ea12c3a8e088f00f12fa30dce735f9379a610fe9c445733161633e7c8378ed90f3d8abdecf1a55d8b1af5bf11ab8c6ceebed103915bd2921d6b"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x8, 0x7, 0x80}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0xd, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x1, 0x18, 0xc5, 0x0, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x8, 0x1}}, {{0x9, 0x5, 0xb, 0x4, 0x60, 0x3, 0x34, 0x5, [@generic={0xe5, 0xf, "6b26ec1c85226479c6c14e817a6c548acb504f3a395358627864b748d059a218f0de3f6e743f16c1ef1a56e58dbb6256e9c9e2a390dacce87740ab9264c4e8f7fc389166ccd8e0f5c277143e03316ba8d12c025bd7503a2dee3d63883a6bf9c99fd7776fa6358699b7201c67860217972332e8a1a8500822635a9044747b825f40da507072a2e08ec42247aeca3ca8fd6b6bca79aafd50363ce4de811e451d866f5119e971e5dfa994d25f0ee26c318cd86170ed78103eacc012d1490c98cbeb17f29381c239220c51c74c63fb173f98878b2e059bcb3e44d8faa78d31b725a97c1188"}, @generic={0x2b, 0x8, "e9e34a5add558de1afc4e77a266a651b99cf6a772ed67d6f35e34c4b6a518c56373d2c24bc5abdcc22"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x3, 0x0, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x89, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0xd, 0xc, 0x813b96ab2a2a00ef, 0x7, 0x74, 0x3, [@generic={0x81, 0x2f, "9d518cf4fe3ed08cfbc6c8ceaaf8ac20d696832d919ab67f734b291630bfc1c986ef2e8a47972d5688cc1ef875da491f47f8efde11df1313ec488882f4fb039138b7b44281680af91a1a1d0c9f17baac8985f2d0c9f2106ff2d853793a24d7589bc0bf77ec5706ceed42846a88db386c1911a87f47d20dc1935bd09f553258"}, @generic={0x64, 0x11, "da942ff995771697edde15482db6ea32134d83ffb5169fafb8d610b2f58742fa2ff29b937e2c7b53817c3e7e7fa21883265b15c5e6560bd3f5dfc1bbad2e692679dda95739a7eeb2338b246f7a5e251c3dc9706d93cab009b5737bc3268b5bb0d0f0"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x600, 0x5, 0xd, 0xfa, [@generic={0x9e, 0x23, "955218e26d6beb27f1162cb7db52066f94c2972bf6b261a601851c543559b9ca3d8d16754d63f8fd85d2283117c65b1173a4e8411be3d9f8722b59caccb2e904b82151dde8bc8591312cfb5fca01713a53b2ff58fe78860c69b881c8428383c69dd03651fc595b64f71f7958b1cd1742b53eea9dcb107e879f7ba920ffdd3130bd498c7604335a67f799ce6a07a2f6e7f502346e50440f1db15d3085"}]}}, {{0x9, 0x5, 0x0, 0xd, 0x40, 0x8, 0x3, 0x1}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x3, 0x0, 0x10, [@generic={0x10, 0x22, "3357f2de193f2609da3f6e5d903d"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x7e, 0x1, 0x10, [@generic={0x5f, 0x7, "0897a1224728010244b3f469e3490be114ff7b975301fa2cef14f9620099e77feb6fd4be3afa04c379d2bf9a3b4ee2789e3bf9dd5b422b1f8bcaf729823d47ef2ccf0ed888b1f6a28ca2cbbf8daf47310f6d47ac7fa16d53b45e50fa6a"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x3}]}}]}}]}}]}}, &(0x7f0000006300)={0xa, &(0x7f0000005fc0)={0xa, 0x6, 0x110, 0x16, 0x1f, 0x9, 0x40, 0x18}, 0x5, &(0x7f0000006000)={0x5, 0xf, 0x5}, 0x5, [{0xfe, &(0x7f0000006040)=@string={0xfe, 0x3, "d8c497131e222fcebbc594737ad74f6f0dc3b2d694f69d65811f9f26c4696433113a6cd7118d7de012f7cdf518e275687ba4ba7372ea7bf0332d7f7367ee530a88bb90eb6c97b1a87fe389e930d109af110d2fb59773b8755332d7bbb92413dc489a0153a5d7c54a4333b6bbe8ec422de899cb24b119a65ca4208d252c094c6b6712b31ebc4e63c62d0f09131e7e26fb5fbac1ad33fa50d3d093f4dde64f5c57e058d502fcaa290cf21ad5b1b934aec5d2f4e3ab9c4fdfcf7dc4fb8854fb21bf41dc078d0212eea5d4793baadc0aff194f44a70d78994c637cb4e1fd0a3ce35b3c86a1acb783759b2386ef19618fc0144e459deae8529d85149b5568"}}, {0x3, &(0x7f0000006140)=@string={0x3, 0x3, ']'}}, {0x6, &(0x7f0000006180)=@string={0x6, 0x3, "5b81785e"}}, {0x4, &(0x7f00000061c0)=@lang_id={0x4, 0x3, 0x445}}, {0xd1, &(0x7f0000006200)=@string={0xd1, 0x3, "314d7f18f519cfad74a92248a5f901ffcab756918c159f8a7b86bfb7f9effdac19fa2e7625e04f5117b8119d148d35e97b889f00d84c694ff107efa65270200b5fdaa97431e5e51f618ee268ff0dcfd699c14f93a0354cf6568c8d727e25aa0b0d12c0ffa3aa7e1dddc279e0ad90836483626e84becb6f811e8c372bf3ee1f93dd5fae20524c69c42e17142fff301e3b91f2f518bcf6df2b0350c0c4a1e0e410aaa5a3451ccfdda848a728d28eca2b87beb38db8beff4bcecee0597d2aea05a04ee78230bc66c968d5f743d182eefd"}}]}) r20 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006380)='/proc/bus/input/devices\x00', 0x0, 0x0) sendto$inet_nvme_icreq_pdu(r20, &(0x7f00000063c0)={{0x0, 0x8, 0x80, 0x3}}, 0x80, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000006480)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000006440)="4b29745a184e839ab90ef0c9cc86b9719250d91b9f3de8abbd358e6f51953f94046c3c1be1efb9659eb02968c7f94a90b228ec20098df4bb8cf386", 0x3b, r0}, 0x68) write$P9_RATTACH(r20, &(0x7f0000006500)={0x14, 0x69, 0x1, {0x2, 0x1}}, 0x14) stat(&(0x7f00000065c0)='./file0\x00', &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000006540)='./file0\x00', &(0x7f0000006580)='system.posix_acl_default\x00', &(0x7f0000006680)={{}, {}, [{0x2, 0xe, r13}, {0x2, 0x3, r8}, {0x2, 0x1, r10}, {0x2, 0x1, r15}], {0x4, 0x1}, [{0x8, 0x2, r2}, {0x8, 0x7, r14}, {0x8, 0x1, r21}, {0x8, 0x4, r16}, {0x8, 0x5, r16}, {0x8, 0x4, r9}], {0x10, 0x1}, {0x20, 0x4}}, 0x74, 0x2) syz_open_dev$hiddev(&(0x7f0000006700), 0x80, 0x202080) r22 = open_tree(r19, &(0x7f0000006740)='./file0\x00', 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r20, 0xc020f509, &(0x7f0000006780)={r22, 0x6, 0xa4d6, 0xde84}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000067c0)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000006840)) 3.592227894s ago: executing program 2 (id=3765): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = memfd_secret(0x80000) close_range(r1, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540), 0x40001b6, 0x4054) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.990449969s ago: executing program 3 (id=3789): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00313005e7b0000009de2b7fb00ef9d3c298561edae7c01005000000000000000000000000000000000000000001700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2]}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) close_range(r0, 0xffffffffffffffff, 0x0) 1.855997231s ago: executing program 3 (id=3792): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fadvise64(r1, 0x1, 0xb36, 0x3) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r0, 0x0) 1.807710872s ago: executing program 3 (id=3794): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x802, 0x0) r0 = socket(0x2, 0x1, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fadvise64(r1, 0x1, 0xb36, 0x3) (async) listen(r0, 0x0) (async) accept$inet6(r0, 0x0, 0x0) (async) shutdown(r0, 0x1) (async, rerun: 32) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x7079, 0x0, 0x4, 0x288}, 0x0, 0x0) (rerun: 32) socket$netlink(0x10, 0x3, 0x4) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) close(0x3) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) 1.667947664s ago: executing program 3 (id=3796): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@updsa={0xf0, 0x1a, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {{@in=@private=0xa010101, @in6=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0xa0, 0x11}, {@in=@multicast1, 0x4d4, 0x6c}, @in6=@mcast2, {0x100000000, 0x0, 0x1, 0xfffffffffffffffd, 0x4000007ff, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0x3, 0x0, 0xfffffffffffffffe, 0xa6}, {0x936d, 0x3dc9, 0x4002}, 0x0, 0x3503, 0xa, 0x0, 0x4, 0x60}}, 0xf0}}, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x2, 0x101000) (async, rerun: 64) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) syz_io_uring_setup(0x31c7, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (rerun: 64) capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x20000000, 0x4, 0x2}) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000240)={0x400, 0xfffffffd, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\t']) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 32) 1.666341304s ago: executing program 3 (id=3798): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) r2 = userfaultfd(0x801) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x18, 0x69, 0x15, 0x8000000, 0xffffffff, "", [@generic="fdee1438fa"]}, 0x18}], 0x1}, 0x8000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xc7}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r5, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r7, &(0x7f0000000280)="050350038f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) close_range(r0, 0xffffffffffffffff, 0x0) 1.534624256s ago: executing program 3 (id=3804): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002000000404355050000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000780)={0xfffffffffffffff5, &(0x7f0000000500)={0x40, 0x7, 0xffffffffffffff7a, {0x8, 0x1, "c09176639828"}}, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0xf}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r3, 0xfffff000) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000400)={0x0, 0x0}) 1.044340984s ago: executing program 0 (id=3819): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x11, r0, 0x45808000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) epoll_create1(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffddd, "207d3d00000055c51b08700c1e0adb4f000000001200000000000900"}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) 978.769994ms ago: executing program 0 (id=3820): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf4, 0x40020}, 0x20) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 978.290495ms ago: executing program 0 (id=3821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x49, &(0x7f0000000100)=0xfffffff3, 0x4) 969.445175ms ago: executing program 0 (id=3822): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd010701010109050102"], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003620000000003"]}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb5de) syz_usb_control_io(r1, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0000fffffffe00000004"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0xffff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x46d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0x2, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 678.828759ms ago: executing program 5 (id=3826): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async) setrlimit(0x40000000000008, &(0x7f0000000000)) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) (async, rerun: 64) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 667.9114ms ago: executing program 5 (id=3827): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x2d0002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4000fffffffe) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r3 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0) (rerun: 64) r4 = dup(r3) write$nbd(r4, &(0x7f0000000240)=ANY=[], 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0401000016000100000000000000000000000000000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033"], 0x104}}, 0x0) finit_module(r4, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_test={0x1a, 0x4, 0x4}}) (rerun: 32) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000080)=@other={'trylock', ' ', 'mem'}, 0xc) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414680, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 619.03021ms ago: executing program 5 (id=3828): r0 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000012c0)={0x3, 0x3, 0xfffffffd, 0x101, 0x5, 0x41000000}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x20, 0x200000}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x80, 0x7800, 0x6, 0x3b4f, {{0x6, 0x4, 0x3, 0x18, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @private=0xa010100, {[@ra={0x94, 0x4}]}}}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000b, 0x11, r3, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)={0x2, 'pim6reg0\x00', {0x1}, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xd90, 0x0, 0x6}]}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/69, 0x45, 0x0, 0x2000000000000018}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 552.025901ms ago: executing program 5 (id=3829): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x27, 0x0, &(0x7f0000000300)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x17}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 550.982531ms ago: executing program 5 (id=3830): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000140)="b71afafa127f119abc861f96a729e3763a388abfbb46129696d4081fa825c2fd7b0b46472242fd00f1e9813a909927144976d42e671b9ef938c6e00c15143faca89fba70109cb51cec542fb725e6e0bd298c4a2e288fcf68dea8c11f86bb973f719a21a7deff198aed8916c4e26e51189de4653e80f4cd2c66bdb7aef0fa8d916e52c58c33bb9440") ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffffb, 0x2, 0x8, 0xffffffffffffffff, 0x8}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000200)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x9, 0x3b3bb000, 0x2, 0xffffffffffffffff, 0x8}) r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xf0, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0xf8, 0xd}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x6, 0x4}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x3, 0x67, 0x9, 0x48, 0x3}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "5fb9d084bb651bdaa38cb08b6ab2c2f4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x3, 0x43}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x34, &(0x7f0000000300)=@string={0x34, 0x3, "da0c7bdf817aadcd08d455e07a892ae95898ada6113150164d008f0962572242775550992508625405a01a25a93d67af70b2"}}, {0xdd, &(0x7f0000000340)=@string={0xdd, 0x3, "9194ae155033736c13ff6f878ad8c7bd544857833e7dd625f4a023700b497129e3e93a1331227b1f97c62bf490ec2ab72a7475ae5758d7c3291f31d7e6825ad1d11ac6926bb0b6314ab7869daf1421bea90ad11a7e28b94a2af65217c325e9b93c67016207c00ca1d938361bdb3aabe44223f8e08eee4a36dd2ffe0a688df7befa9dca001006420d941b55413d5b3fbd086d74111439f528c225cbf9dd0ebe2eeab338170ca8d4bf2d5aaf10b883431d35d49d9f2f9d046e491334e388838dfc6882cb1f05f2f715ce98dc17dd95c5de8f5ad02caee1a4d46dab3d"}}, {0xbc, &(0x7f0000000440)=@string={0xbc, 0x3, "cbf081fc6ff0f3dab24f0af56eacec52bad10a865e9d45264eab52f99c3b30564e95ad822d2fe98d88e628cef76e15544660b33b8c1469be61f62ac452f5dcf065a2ba87d8770baa3ce2ab4f136a99dae07ca9766dcfc663d4987833c4d1ce34c7d713182fa80e2d43905733fc1dff5986c47a1f35ef6a795a8131e970776f5d7293314c0df3cd7326400650e2aebec331185911c4a758b22eb1b65e821738b273e8c826960e23bbde4176a9125c428e8f148cb660b7e0a3e257"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000800)={0x14, &(0x7f0000000640)={0x40, 0x30, 0xe4, {0xe4, 0xb, "713a7f009130ed3945637bf188660f8dfb62c7779ad44606adae3d91868db92bf424530e49d30ba6084610b952691538e207b37b7e1b133eee5d9c5b818c1109db7a2912082d5d5ebb12c84f071aece7b199b3fd614f5af86c628eaee31d4554e0a1bed09968ce6a1f1f30f7ede865d036403276569e33aa8fdcb8f195d5253b44fcba7ccb2bf6caa90677311d851610cd835df6d6971bdcb33255524c95f3010ab111f3c5ea1a738f6f6963d68d5af1b874493e2db2baebb48b8bc9f368c664765b2b1fe7a71b526c42e7227749f5dcaaef6e41efdce85d777deee6e6e5fd734e90"}}, &(0x7f0000000740)={0x0, 0x3, 0x83, @string={0x83, 0x3, "da1f21116e11ed9add47f9a759e4adfec625f92ab2acd184f762c327b1f41229b5f72dee0bba5fbc74234d742be5d353e619d451c52765950d9764efbe3595711007bdb57f9e1aa80f6d317f92cb51417fb71c7f05e1148ee131bf1671a968cf4b55fb06711baee6c11993fd6d2f3d02fbfdeaafcdbd502d21cb3a1c41f9c9d225"}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000840)={0x0, 0x17, 0xff, "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"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xca}, &(0x7f0000000a00)={0x20, 0x0, 0x4f, {0x4d, "cbe5a888523de19276abef58614155850e8db6db511fb6eebb96d203f13a94faf18ff19753b86db188a9600615049f65b2009791ff0020879e63b74960ce0890bd75309bc60f2b9dee5f7525a7"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000ac0)={0x20, 0x0, 0x1}}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0xb1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x80, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x1010, 0x10, 0x20010, 0x10, 0x2, 0x10, 0x10, 0xf, 0x10, 0x10, 0x10, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f00000011c0)={0x14, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71, r10}) 440.857323ms ago: executing program 0 (id=3831): setregid(0x0, 0xee01) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) pivot_root(0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 420.501833ms ago: executing program 0 (id=3832): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r0 = gettid() timer_create(0x5, &(0x7f0000000240)={0x0, 0x34, 0x4, @thr={&(0x7f0000000140)="06c46d4f62eaeca484f5fa4da9fb188412a46a6828479d5922f9995b5ae7ac5f3b24cf0572bfbb25baf9e64a7b60f1e92dd692e30a047154d45275d9ca492df91203ced0e92579c78b01c428b2cb22843a7acb043f5cd6fe2943b4e490bc5e29e834a33aaf302f0ebc1b8db75805634c3608e578925c9986312c966a57349452eec9bcc2fcd596ea112802cd6dd7404cae3a24a835ecfea9a926124b2325636e4d484532e10a56b6b49ae6caf4380c668e8ecf477f152694147ac3aaaaf3f4d395acb6757318102947449acdbb829b2cee88e7eda4c54cab4f70159ca1fb08cd59359b19656cf5d2b4c271822ae38501e10ff968e40e1e9e45", &(0x7f0000000980)="376beffb5466241c0259a00ab7116f6253b63b73959c99aba1804a37448f8944d7127061da2c0f9781e55972f11e35add869bc3f5b99356b4b84a2b8e4ad4377e7a05c1fa5b37708a4b9b9bad307f38a2b9f948956c27baa64ae9cd8877d6e9db06c2b1d3b619fefcf4f939f6abc748b4391bdf1a1a3a921794e2e91d7ec605a2c6dcb84d3edc9b09d151266c7ccd4a40bddfe908d0e7468a10b82ba38725bb0f2fd0cc4e9b8616b1dfa92cf36752018e38ea5085476a7a9bd9895e3d4110caa850db22b8c4aa8504540b18b3252d7bae1c7ebbcee8a57d6bd775e61d6768fb177d36d78ba81564ef802ae73bcd773076bf42f8f6a258fd3d5da5e0b63fa452ae76320d8ad02808eafb2f671f5001d041ce06cd8961257e53ca38e4287116c772a2565cc2d69c1b45204e5ee4cce3795330406806a5defc004f2809f9615369b7ad20ed171e7ad4e7523f05ad6b5d579fd551bfdaee0ba7fde11476aeb0abfb1f24b989b4dc412dd95515320ce82ca1799c8f13ec2a5c9c7366da8b6990318ce72eff1f81570a91be03574e98bbd36dbba1d57f95b66d1d3b40e69e7b93da59fee39d711945bde5d8d1ad30dbbfc9a0e7c1481463eb5bda0c7f3f8bb12ea59b0d442b88e3df7b057daeda751ff61c864afe959e83372c33bacdfc6e2b8c9bd2fef7519da85aa4d54ac54626f89d943fd88b81f1bb3df298c3af6ab5799ce22972ccf627dd8af5870de2c9013a54ac53962f4c9ae667c4a00a3d6460becb8aac8f710b302844d87cafe4ccdd58621de27f9c55153551456667a9eaf345e616ad9903cd25fb60577542cfac535620797617f00d3f0e06b4f925d94c13615bd690ce4ed516f63d3fdbdd97f1cfe7b5a6c12682ebf2e38e76fb35ddf8897b058c7a22a0a2acc6ad13d4bac90df99d5ceb0f0372f2f4d924bdcf4a082ee5997ce351e7c173dfcacd26e758d6dc83defacc7d03f83c32ed30f06430b29f35b8b2a9a4b7aa832bca7dda48cef5b93637787769c4291335931e6192aa6087f7e3e5fbcf5d27b6e2dd6fc226050bf458eaf8c6dc90ded06a7e8f913ee602f0e9ae2e58a35fa947c09d3144b4686ccc5e2ccbae60626d2d7b6f380591608740f6524b1f54a47141f56f80fcd90405562795ec4738b8fe3cda18ddc2344425caea44b16d256fa663e0cd5ab624f6928126c0bd269d6cdc0cb3d8545d84c2f8b05282fa7317fc59fd880f361f9ff445406b73633c185ec51c5e782bbb8396168c1a30fe8d29737cdfaec97f99cc1b843cdd465e8edfba6308b94295a91423d2d3075ae0b6a2bc24600a1344099521791ddc40e6c4832749814ebdd67524c87d4d7b347ae5dba1cd81e11f2e5ed9b945e4ac1de554133146be6f56270a5dbfa98122c678f56e98c348a48cadb01fa601af20a3c753b77122975c993a7d0d66ebaa6fecc542c5c02e4fe9a03c757a009333cca977cf3064a7cdabbbe91b4133a7f87d8cd266bbb48de6014aea4d73304afc60ec6ed16a534a0fd53c8bb4b796f07371a431cf36200a9bd524cda31d099a4cc377d8f135b0f1a82f1ecfe389c45157fab3a2d6a96a52f3ea4ecdeb5b779c09fab73f4e194738f4d3ffd3e629dd58b5ff36fe0fbb9969f534a340986b6862e3e47c5ee0fcb5d89214f00ee60166068772c36d0c17e3779904199a0afbe3d0262927c466de92b9637e00d83d2f6e7d9c7f28178782d1fc60878beda242bcca3d2530eb4c0c6e8dc0657f861994a7a1cf6fa1aa5f76b3e3e3751c7a0bc526bd932e7fb18808e18bc811d93a7cfa27d4e7389d97194b88e5026219b011c5d4337f895ab94256bdfc613d2aa090a62cafc8fc7f431c76daf7d398298621da46fcde3ff5f43c2ad4d7b3892fac7cf7d3c832e046e83e2e920a2cdd350ea1c9b39b596e6a7b0e5004f0650a54c5fc891ffa73fae1d08c40eef8b2356053745bf690bf74c66213390687de5312446f4bd2b8825c35d683f28a993e5464ecacea3f23705beb7e26b8a9c6341e026584ec91234d3895d98440a329b95f6fb633dc93e73d483ffa0a68f3e03b6168672edde4a422b9239aec5338803162b420683164aed90fd2543fe657ee4ad8a33771485938d47e23be04bf893e3c89d519423518e48f15be207a09e9cc9d261ab59e3f97f9b4ee1f3654342d4185eb55d2df9e7335a1282f621a30850a23c0489ee4ea4311beb3f44094f4243fed705b797a49ec114be6d1d3665dbd996729cf33d3d173c81fa4a8fb62d4fe2d7c3026dfcc22f972e8d6a79aafaf512956b617a20c18a56dfb3623bd30de8e54ea1546da300d1c53c72d62b100e0f8bca46e1e7b94a7f3ef1e4c572d1dc7c6fc99194d6fb7af96df197ebb1740d73c8a6e7ae029a443eaa295148dbaa446c3459b68dba5728e76ddf6c511871f35325b58c81f4340083debe1e0eb16a364bbe7ca7a3f43c29679ee9ee9e861b4339c2d6431469a4a358a2aae100dd21fc9404d12fe293ba2d9ab4d2d50cd04baca981b433c98cb1aa84b90675282ca486d8182d0a6c025a1720fce12dcb27614e6fd80cf96b392f23e0c1fb4d94fa6e4ec3cf581bfbdfad191a48046ffaf405cf381e4955cf6651e21fbbb70fd81215a2a41a11e7393caf90a9f16f68f5630f44450c63f457a93d9f3f7d0bb866db0e62884639b70762977e04c24e755ff7613eecaef8204b5e7706cace54046708f37ebd8cc44cdf44055eba4d21f04409357f29f7a75b8c5ba579b67c9bf5066e945d2e16967937991e367ef34010f8f9c1ab947385ff03ed83e9288fad8e8959dd80e2df480b91b939f3698fd60b8530e5fa9fc8a4aecbe9e9fa54efc3ac4b07c643eccda81d92df38479690a76998e249ac98f746b2553be28340cf875b33a41556df4417ab2f2cc97ae9f78e8974c8d233c5dcce4491dff03861632773677aed94d773ef373b71bc466ece52f873d7f8d4cca87de24e72f333ada88fe6aada40fd621be6e7a6648aa27067ad13f1e0b3b43e6ded72929220a90f443f505c5aa752195e6a195185a325d39a908dae887e16b22b823d41f5b13bb020ad8eb96846a381ea85fed8e20216c7de8cc1219d6ece5753ff60401d821d9a3b476c80fa36856101bbaac9891ed511e50a056fb0698970c482f7f4585aa98c5da7a34ccc06aa90e214d96ca7ed55ae640284b99967ed0cad262af24b04b9325b739b7e560c616a685a3885c763e3674687af5ec0143a0c93b4561f2c2477f1c0e2ef444327b5e0f1add46cad64caf11f3bd974a597687b94d1999f642d4d59a8169d3bdfff1df242837139cd0957d74a51c6fa83bd2756aeb604a1df1515e818af52d694d38dd89ed75f76099f8ee87f7e9cb7f687e97f174fb073570f0e5c76ddd53f96668ccd6c775a75edaa40a5f1720b77bda9162b2558d55381a883e6cee724881dd642e60a467e1cee0fcc84b48fa782be377ec1cb40556529c522d17eed65d4374012e9693b399defad2b0e0aa43cd08f3e7c91c5f5135406295d521c9e71e17d12f2d0a97c895a8bd65f6bdbd3069bae0af35889035f37e4adb8240368698cac17257ad0f9056ef8a9be06544cb8a4b3d5365811c3e7942b401a5f033c8d1ef21d4350a30cebef3e62a26a32d1dbe805eebc2865f1b0c1f0978c5a9eaec53252267a48c49f6252d95796dc2fb49bcd21d99ee696f04f5b23c75e479bf79dcec0c6aaf4fecb48e4da27aca68f8248351f406b841f502d9b598cdf5d70dbb140cc4c662e96c27fdc3dd2f805ea00529e11c92b689bb0093965260ca3cd64da85655180891b5d934710c7175239c75afb80f1a3ea63ed95f01022bd74139b3a82c3bc9a9aa8b2e6b9efcc358a7e92df4588ec7e7fd6dbcdccbd98bc704e5a009777e257dafbde4798f72cfdf7e2a94df96094c41d53e7bd7f0bc7877f186a8d6ee1518cdede87db423afa7596b0c48a07fb7b6f7979313a22f01544f94dc1ccb2db39373714bc8c71b20051006a08ab3d877c8e07d29a00444ae7ef0011d61da7efaf7e9e3d3e5e57af4646f05c22675e994032276eee92ae569389f250ca32f2da83430641cf7616bf062fa4ce4b565de2fbd23da855ea750851196c887fc68b5dd5205d32f3bddbff237dff99495057d835c8fbff3062e30a8a2ba11c883c319d2fbb6dec0de9d642bcfd57f5935f5d428ca72e4020ff735d25af30028b9defce0dca41c1c2649e909e0a3df3af52300aac3bb2e958263ec8fe29ac6754d175ab14b9ebf73051bb76fe3dade359d1bd408d0e7d32d031c8417b13cbde06316ad0a27acf64d104ac8fd74b3b0ec0ec4ba65f13581e34ec05075cccf4841599c2470d65d8b4b2cf29d01c234e9d8a915cf157cafc2d2710939a10536d9fdbe92950794c37835cf58c1ba952cad31771ccb2e20808a29d764205676a4959c6af1476bfba0321745c8a57159ade3e096fe6c710dc55ca2864a157da6632e05c69487b264b754a944529d7aabb4c3d6368cc7a19fe854fe2b4ad728b7d1cad5e7ba37d527d8c9a62823c3aa1675a55b7555d0b3c15525e3b690c9ea003994e93611f24ed80a6f98804d99a09cb3fb24ac1bd2f3a92e991ee5ebd2b70fc7b18a5f01e7d70dad27568356310c10414adb9f2e23fd77c559b016ab6e182a20a12bede370ec11729dac617428f58cd4c933902b25c738cddbdfac115ce4c4c5ed64942b00840fabc0b05eddcd23de64a86635b21aec68d3bb4827e8dc18d8d71a89e21083e4831c6db74bf08bf97073517ecd549be1597a01f40dc0153a2286b346186531e3fc0e78f7de0b13c7afd1b0ee3ceab90e63933345b974da09c0ee89f0abb4a1fff47f011569917a1a8dbd03b8c9af1c5092d1e104bd98f10c6abcd225b0b587bf9b83bc4ad3a64f3b97cda3f15bd15e3af7aec7a2d10d9cfc493b82588a92fe04f435722d5522912ce45d2e4a4f0441bf62a28fbe4fd0c2ab47554bf78d61e935097c4dc4eca5de0a97096c469fcc853466cda02d74b3fee3c63209ce9ea9011fb45686385d8ac73dfda979e711b21c3b6ef5749d93a75673f88cfd73128d0c026b44ea0219852b4d989400e28794c5c43f3e3153143b6dafbe94e9e57d9073568b2856c053ef58bff3b70cb7a5b62954dc664960d3d0083d263e63c4956a5ec39e4fc7124ec6bd89ede372b21ac2cb33197df1b7b83e70d086f8231a8a516b8f5beeee60484676ac4eaac723066ada2e9fb751722ea3427f5167aac24b5ea6b1241b07b06d7f43863917fe49427be3a83015ad93bef40cb5e03d6a0ee2a34d59db29b60d7b868ee69a2d1c1956e713fbca40d7f8676a9037800252f4eed6b6a666c74bd410ed5b7e600b3b82844503792d6e6a791fc3de95ec51ef53f0d791bd0d2073c851486e05697b9d8f147f5cc274ea4a4cc92764d7778282a0091400e435de9e04db3d57e337f3b1a99ef580b5210463dfedec4c2b054a2e5ff47f7bd3716684c4a955478de109607913919deb2bd4e86d6bc1f782d0a4d2ea9b16a23ad76a02bae4fcd59511ef7203ffcb2197816a2f63339bbb725fdb5806ed1b56dadeea3e409575525f453f5e68cc954dd46317371649146f4f736934a9438a5f5d3b0d7e9d62aaacc2f2b2e66826e730003b260f158072a9761cfc5e06be745fdfb6b90d8b9ec2cbac97911ba6e9aba1a0ed1e7f7f7255804fd5142dc7ddf8d7087adb664199e1852de493bb1c940b37498857dbf96d01e9c63b4220ec480c04aefce9b94e2f5f0f666380433b355f02995bd4d344c5fe44b730ebc4181212844107e70"}}, &(0x7f0000000280)) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) r2 = eventfd(0x7) write$eventfd(r2, &(0x7f00000002c0)=0x9, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r3, &(0x7f0000003200)=""/4096, 0x1000, 0x8101, &(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, "e5"}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_012={0x2, 0x1, 0x2, '$R'}, @local]}}, 0x0}, 0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(r1, &(0x7f0000000040)) madvise(&(0x7f0000931000/0x3000)=nil, 0x3000, 0x14) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000080)="0e7ceb8782e523d6549fc6e16e2403f71d624f5c44601d54c6f339ade49c8f3829b29fa56803ae34516e53919b8dba396764a267498cbf96f0e25cc616078fb4de28d2f8b34694235fedbee2e1fdf2e18c6e65fbab40e3019db9cae48385f6f6fe7a0cb9b18715b0d94e7b97ab464d6d2a0291329639010c0de597c6b048984db1d66c06c433ef76390fee6dec86b74bb0cc", 0x92}, {0x0}, {&(0x7f0000004200)="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"/4100, 0x1004}], 0x3) 0s ago: executing program 5 (id=3833): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noxattr}, {@access_uid}]}}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 0s ago: executing program 3 (id=3836): chdir(0x0) r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[], 0xa) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x4, 0xfffffffffffffffd, 0x81}}, 0x30) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a80)=ANY=[@ANYRESHEX=r2, @ANYBLOB="3336cdd6af36a025450cadd822c06c6d3bb70731d2bc711ff18c0b1851e4c8e1f714c3ec98fac24fbe8764e17ac5274ddc7b5cd5593eb59043d03c90a7158f28d2fb3aa6c74f3dc6ea6d48944fb20efa3d323b311e9e73acbf68b0e8917fe82d70be1b4e16561ad9f50e790ac5b2fbc950c19f008e94ca77d51a80418211b33723ebb2af44284af5"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040084) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000006c0)=ANY=[@ANYBLOB="0400000000000000036b564ba2ac10b6c1ba8a19ce48e0005e5f36bb4014b7e663c4e3cfbb7b"]) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="0c7766646e6f1defa99a3cb9f0a344e9f568d55b65e2e322093aee6ff3976a7f5d4d745edf1b0bf93b855d08dc8916d6b745d2d3a40058ed39a0730bf731296c9aefd914e70dd2aa544dfd31d9e2a98d3f03ba78551542bc1ff25f1edb3f2a4b884cb30978e91b21fecebbab34c3f926b8f3cd9b8ae5c89b007d406810d255a1a8882ecaaaadba787d1df1b4c46c38dac9a43093f4f2c6f773d9f116f924180e8789911f798fbe491ad7b403b70ab9a9b2db5e0082b41568fab0c82bad3385a033a5de4ecdb00df7beed607b6e05b86551fb4d390a23b5682666f84ef6561ce9909e2fb92d19bada2e8296611e926abc155d44fb31bd9445a188581ae06416aba3dcf2c7796298635240c87e96c4064a1b2576ab", @ANYRESHEX=r2, @ANYBLOB=',nodevmap,uname=wfdno,\x00']) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r9, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r9, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="d95d0fc56996764fd44fdc07ad3a8e149bf2652b133e5dd7c036894feba71790cc5153c4f157551c3b43da9025b5c88654947c46523adb05006ccd515ff223b5c2f98ea6527b997d02df", 0x4a}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0xffffff8b}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000480)="61a044999c069ae907194fbfc8dc2a0741c03f8eb93d2cefc0f04b1e3bcaa05527e98b397fb706b240e7996d01000000a6797da38a5d0686e16d54b7a10ec70000000000cc688b4f85e6164138ed8d05ae7878e800", 0x55}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='\x00', 0x1}, {&(0x7f0000000880)="56e6e241377967f0ff6b50f3d07440ebd7baf409897c4d8ac481f2e30721a0011d5ca7712564f9784b37e41c315bb2d2b67b5933b3b4fe148ff554ab83ea041e5d159fb60fcfef1fcf4d139132820c2e1162799d5a", 0x55}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c) sendfile(r8, 0xffffffffffffffff, 0x0, 0x80000000) kernel console output (not intermixed with test programs): 54.766964][ T7131] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 154.793317][ T36] audit: type=1400 audit(1751632537.119:6903): avc: denied { read write } for pid=6826 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.829650][ T36] audit: type=1400 audit(1751632537.119:6904): avc: denied { read write open } for pid=6826 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.854697][ T36] audit: type=1400 audit(1751632537.119:6905): avc: denied { ioctl } for pid=6826 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.886789][ T36] audit: type=1400 audit(1751632537.149:6906): avc: denied { write } for pid=7113 comm="syz.2.2330" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.928356][ T2301] usb 2-1: device descriptor read/64, error -71 [ 154.989841][ T45] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 155.016195][ T45] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.178351][ T2301] usb 2-1: device descriptor read/64, error -71 [ 155.218320][ T719] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 155.288875][ T2301] usb usb2-port1: attempt power cycle [ 155.348309][ T719] usb 3-1: device descriptor read/64, error -71 [ 155.588502][ T719] usb 3-1: device descriptor read/64, error -71 [ 155.648362][ T2301] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 155.670164][ T2301] usb 2-1: device descriptor read/8, error -71 [ 155.748318][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.755825][ T309] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 155.800561][ T2301] usb 2-1: device descriptor read/8, error -71 [ 155.828313][ T719] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 155.888348][ T9] usb 1-1: device descriptor read/64, error -71 [ 155.910541][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.921431][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.931162][ T309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.944085][ T309] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.953123][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.962218][ T309] usb 4-1: config 0 descriptor?? [ 155.968300][ T719] usb 3-1: device descriptor read/64, error -71 [ 155.976802][ T309] hub 4-1:0.0: USB hub found [ 156.048337][ T2301] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 156.070241][ T2301] usb 2-1: device descriptor read/8, error -71 [ 156.138299][ T9] usb 1-1: device descriptor read/64, error -71 [ 156.177330][ T309] hub 4-1:0.0: 14 ports detected [ 156.182511][ T309] hub 4-1:0.0: insufficient power available to use all downstream ports [ 156.200161][ T2301] usb 2-1: device descriptor read/8, error -71 [ 156.208326][ T719] usb 3-1: device descriptor read/64, error -71 [ 156.308431][ T2301] usb usb2-port1: unable to enumerate USB device [ 156.318769][ T719] usb usb3-port1: attempt power cycle [ 156.388319][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.528317][ T9] usb 1-1: device descriptor read/64, error -71 [ 156.597925][ T309] usb 4-1: USB disconnect, device number 48 [ 156.668307][ T719] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 156.701591][ T719] usb 3-1: device descriptor read/8, error -71 [ 156.768330][ T9] usb 1-1: device descriptor read/64, error -71 [ 156.840203][ T719] usb 3-1: device descriptor read/8, error -71 [ 156.878742][ T9] usb usb1-port1: attempt power cycle [ 156.928317][ T2301] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 157.078330][ T719] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 157.088815][ T2301] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.097083][ T2301] usb 2-1: not running at top speed; connect to a high speed hub [ 157.106504][ T2301] usb 2-1: config 11 has an invalid interface number: 229 but max is 0 [ 157.114808][ T2301] usb 2-1: config 11 has no interface number 0 [ 157.121034][ T719] usb 3-1: device descriptor read/8, error -71 [ 157.127220][ T2301] usb 2-1: config 11 interface 229 altsetting 241 endpoint 0xA has invalid wMaxPacketSize 0 [ 157.137320][ T2301] usb 2-1: config 11 interface 229 has no altsetting 0 [ 157.146671][ T2301] usb 2-1: New USB device found, idVendor=0582, idProduct=be1e, bcdDevice=cf.ce [ 157.155745][ T2301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.163748][ T2301] usb 2-1: Product: syz [ 157.167886][ T2301] usb 2-1: Manufacturer: syz [ 157.172475][ T2301] usb 2-1: SerialNumber: syz [ 157.238369][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 157.260698][ T9] usb 1-1: device descriptor read/8, error -71 [ 157.267373][ T719] usb 3-1: device descriptor read/8, error -71 [ 157.378392][ T719] usb usb3-port1: unable to enumerate USB device [ 157.397995][ T9] usb 1-1: device descriptor read/8, error -71 [ 157.412374][ T2301] usb 2-1: USB disconnect, device number 28 [ 157.441160][ T6925] udevd[6925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:11.229/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.648306][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.680695][ T9] usb 1-1: device descriptor read/8, error -71 [ 157.742480][ T7175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1137 [ 157.830190][ T9] usb 1-1: device descriptor read/8, error -71 [ 157.948763][ T9] usb usb1-port1: unable to enumerate USB device [ 157.962687][ T7181] /dev/nbd1: Can't lookup blockdev [ 158.522029][ T7219] overlayfs: missing 'lowerdir' [ 158.540633][ T7219] rust_binder: Error while translating object. [ 158.540737][ T7219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.547279][ T7219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 158.676903][ T309] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 158.861547][ T309] usb 2-1: not running at top speed; connect to a high speed hub [ 158.889947][ T309] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 158.901483][ T7234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7234 comm=syz.2.2369 [ 158.923082][ T7235] rust_binder: Error while translating object. [ 158.923113][ T7235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.927860][ T309] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.939668][ T309] usb 2-1: config 1 interface 0 has no altsetting 0 [ 158.958691][ T7235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244 [ 158.961898][ T309] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 158.980627][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.010568][ T309] usb 2-1: Product: 䐊 [ 159.018235][ T309] usb 2-1: Manufacturer: ◉º挣蛲唅糺큆쎪绳쥜댾͑ꨱ㚶抸잎킲㘜㒄龚ꕚꄗΊ稹딗ꬽ幻⥘탥똿譔ఞ䦋㾟糥綿 [ 159.033099][ T309] usb 2-1: SerialNumber: х [ 159.040607][ T7210] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.251739][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.260280][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.271911][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.280427][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.297905][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.306322][ T10] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 159.310832][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.327154][ T309] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 159.343577][ T309] usb 2-1: USB disconnect, device number 29 [ 159.351857][ T309] usblp0: removed [ 159.448359][ T2301] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 159.456522][ T36] kauditd_printk_skb: 832 callbacks suppressed [ 159.456535][ T36] audit: type=1400 audit(1751632542.049:7739): avc: denied { ioctl } for pid=7244 comm="syz.0.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.470529][ T10] usb 3-1: config 129 has an invalid interface number: 99 but max is 0 [ 159.487767][ T36] audit: type=1400 audit(1751632542.059:7740): avc: denied { ioctl } for pid=7244 comm="syz.0.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.497538][ T10] usb 3-1: config 129 has an invalid interface number: 3 but max is 0 [ 159.520774][ T36] audit: type=1400 audit(1751632542.059:7741): avc: denied { ioctl } for pid=7241 comm="syz.2.2372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.530562][ T10] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 159.554547][ T36] audit: type=1400 audit(1751632542.059:7742): avc: denied { ioctl } for pid=7241 comm="syz.2.2372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.565061][ T10] usb 3-1: config 129 has no interface number 0 [ 159.588339][ T36] audit: type=1400 audit(1751632542.059:7743): avc: denied { ioctl } for pid=7241 comm="syz.2.2372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.594662][ T10] usb 3-1: config 129 has no interface number 1 [ 159.620412][ T36] audit: type=1400 audit(1751632542.059:7744): avc: denied { ioctl } for pid=7241 comm="syz.2.2372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.625884][ T10] usb 3-1: config 129 interface 99 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.650448][ T2301] usb 1-1: Using ep0 maxpacket: 16 [ 159.663795][ T10] usb 3-1: too many endpoints for config 129 interface 3 altsetting 0: 81, using maximum allowed: 30 [ 159.670385][ T36] audit: type=1400 audit(1751632542.059:7745): avc: denied { ioctl } for pid=7241 comm="syz.2.2372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.679684][ T10] usb 3-1: config 129 interface 3 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 81 [ 159.708408][ T36] audit: type=1400 audit(1751632542.089:7746): avc: denied { ioctl } for pid=7241 comm="syz.2.2372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.717958][ T10] usb 3-1: config 129 interface 99 has no altsetting 0 [ 159.743338][ T36] audit: type=1400 audit(1751632542.089:7747): avc: denied { ioctl } for pid=7244 comm="syz.0.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.754441][ T10] usb 3-1: string descriptor 0 read error: -22 [ 159.780225][ T36] audit: type=1400 audit(1751632542.159:7748): avc: denied { ioctl } for pid=7244 comm="syz.0.2373" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.780924][ T10] usb 3-1: New USB device found, idVendor=07b8, idProduct=200c, bcdDevice=4c.00 [ 159.805191][ T2301] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 159.814575][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.825024][ T2301] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.843511][ T2301] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.858083][ T2301] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.867152][ T2301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.875233][ T2301] usb 1-1: Product: syz [ 159.879422][ T2301] usb 1-1: Manufacturer: syz [ 159.884012][ T2301] usb 1-1: SerialNumber: syz [ 160.211969][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.219129][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.226189][ T7260] bridge_slave_0: entered allmulticast mode [ 160.232618][ T7260] bridge_slave_0: entered promiscuous mode [ 160.239985][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.247018][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.254100][ T7260] bridge_slave_1: entered allmulticast mode [ 160.260296][ T7260] bridge_slave_1: entered promiscuous mode [ 160.329833][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.336932][ T7260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.344223][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.351260][ T7260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.397710][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.405697][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.420613][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.427672][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.438215][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.445301][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.516444][ T7260] veth0_vlan: entered promiscuous mode [ 160.548576][ T7260] veth1_macvtap: entered promiscuous mode [ 160.623269][ T2301] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 160.651519][ T2301] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 160.691295][ T2301] usb 1-1: USB disconnect, device number 12 [ 160.787737][ T6810] udevd[6810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 160.804509][ T7269] rust_binder: Error while translating object. [ 160.804547][ T7269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 160.820756][ T7269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113 [ 161.458369][ T7311] netlink: 'syz.0.2393': attribute type 64 has an invalid length. [ 161.481725][ T7311] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2393'. [ 161.492755][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 161.501442][ T305] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.520130][ T7311] input: syz1 as /devices/virtual/input/input14 [ 161.774557][ T7320] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 161.791730][ T7320] syzkaller0: entered promiscuous mode [ 161.803771][ T7320] syzkaller0: entered allmulticast mode [ 161.928593][ T7327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 161.951252][ T7327] rust_binder: Error while translating object. [ 161.967583][ T7327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 161.974453][ T7327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 162.063047][ T2301] usb 3-1: USB disconnect, device number 25 [ 162.235720][ T7350] overlayfs: failed to clone upperpath [ 162.353984][ T7361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.354018][ T7361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 162.438377][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 162.587627][ T7376] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 162.621493][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.638295][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.648040][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.661762][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.672032][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.683403][ T10] usb 1-1: config 0 descriptor?? [ 162.690939][ T10] hub 1-1:0.0: USB hub found [ 162.892997][ T10] hub 1-1:0.0: 14 ports detected [ 162.899447][ T10] hub 1-1:0.0: insufficient power available to use all downstream ports [ 163.052299][ T13] bridge_slave_1: left allmulticast mode [ 163.057984][ T13] bridge_slave_1: left promiscuous mode [ 163.070058][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.080501][ T13] bridge_slave_0: left allmulticast mode [ 163.086820][ T13] bridge_slave_0: left promiscuous mode [ 163.095303][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.226220][ T13] veth1_macvtap: left promiscuous mode [ 163.235299][ T13] veth0_vlan: left promiscuous mode [ 163.314859][ T10] usb 1-1: USB disconnect, device number 13 [ 163.594728][ T7461] netlink: 'syz.3.2449': attribute type 16 has an invalid length. [ 163.618358][ T7461] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2449'. [ 163.647250][ T7468] 9pnet_fd: Insufficient options for proto=fd [ 163.668778][ T7470] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2451'. [ 163.898343][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 163.921648][ T7497] overlayfs: missing 'workdir' [ 164.003139][ T7502] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2463'. [ 164.058302][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 164.065219][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 164.073798][ T10] usb 3-1: config 0 has no interface number 0 [ 164.082413][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 164.093744][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.102749][ T10] usb 3-1: Product: syz [ 164.106923][ T10] usb 3-1: Manufacturer: syz [ 164.111794][ T10] usb 3-1: SerialNumber: syz [ 164.117625][ T10] usb 3-1: config 0 descriptor?? [ 164.124967][ T10] smsc95xx v2.0.0 [ 164.508056][ T36] kauditd_printk_skb: 975 callbacks suppressed [ 164.508071][ T36] audit: type=1400 audit(1751632547.099:8724): avc: denied { read write } for pid=6826 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.532628][ T7519] batadv_slave_0: entered promiscuous mode [ 164.545882][ T7519] batadv_slave_0: left promiscuous mode [ 164.553015][ T36] audit: type=1400 audit(1751632547.099:8725): avc: denied { read write open } for pid=6826 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.587513][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 164.599028][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 164.609302][ T36] audit: type=1400 audit(1751632547.109:8726): avc: denied { ioctl } for pid=6826 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.635632][ T36] audit: type=1400 audit(1751632547.119:8727): avc: denied { read write } for pid=7517 comm="syz.0.2470" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.660817][ T36] audit: type=1400 audit(1751632547.119:8728): avc: denied { read write open } for pid=7517 comm="syz.0.2470" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.686635][ T36] audit: type=1400 audit(1751632547.119:8729): avc: denied { write } for pid=7517 comm="syz.0.2470" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.746224][ T36] audit: type=1400 audit(1751632547.119:8730): avc: denied { write } for pid=7517 comm="syz.0.2470" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.774475][ T7528] overlayfs: failed to clone upperpath [ 164.781740][ T36] audit: type=1400 audit(1751632547.129:8731): avc: denied { create } for pid=7517 comm="syz.0.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.803297][ T36] audit: type=1400 audit(1751632547.129:8732): avc: denied { setopt } for pid=7517 comm="syz.0.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.823587][ T36] audit: type=1400 audit(1751632547.129:8733): avc: denied { create } for pid=7517 comm="syz.0.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.862976][ T7536] tipc: Enabled bearer , priority 0 [ 164.970549][ T7556] netlink: 584 bytes leftover after parsing attributes in process `syz.3.2482'. [ 165.531066][ T7571] fuse: Unknown parameter 'fw' [ 165.892223][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 165.902986][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 165.978335][ T10] tipc: Node number set to 3377349418 [ 167.013038][ T7606] 9pnet_fd: Insufficient options for proto=fd [ 167.042661][ T7609] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 167.626288][ T7617] overlayfs: failed to clone upperpath [ 167.821518][ T10] usb 3-1: USB disconnect, device number 26 [ 167.875414][ T7620] overlay: filesystem on ./bus not supported as upperdir [ 168.278311][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 168.428302][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 168.435268][ T10] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 168.444406][ T10] usb 3-1: config 0 has no interface number 0 [ 168.450500][ T10] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 168.461648][ T10] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 168.476019][ T10] usb 3-1: config 0 interface 255 has no altsetting 0 [ 168.486111][ T10] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 168.495691][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.503711][ T10] usb 3-1: Product: syz [ 168.507866][ T10] usb 3-1: Manufacturer: syz [ 168.512456][ T10] usb 3-1: SerialNumber: syz [ 168.518144][ T10] usb 3-1: config 0 descriptor?? [ 168.660788][ T7640] netlink: 'syz.0.2511': attribute type 5 has an invalid length. [ 168.664660][ T7644] overlayfs: conflicting options: nfs_export=on,index=off [ 168.668818][ T7640] netlink: 'syz.0.2511': attribute type 5 has an invalid length. [ 168.683430][ T7640] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2511'. [ 168.769917][ T7656] /dev/rnullb0: Can't lookup blockdev [ 168.851388][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.859991][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.984258][ T2301] kernel write not supported for file [eventfd] (pid: 2301 comm: kworker/1:6) [ 169.801785][ T36] kauditd_printk_skb: 534 callbacks suppressed [ 169.801802][ T36] audit: type=1400 audit(1751632552.399:9268): avc: denied { mounton } for pid=7697 comm="syz.3.2530" path="/447/file0" dev="tmpfs" ino=2453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 169.830985][ T36] audit: type=1400 audit(1751632552.399:9269): avc: denied { create } for pid=7697 comm="syz.3.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.850600][ T36] audit: type=1400 audit(1751632552.399:9270): avc: denied { getopt } for pid=7697 comm="syz.3.2530" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.908128][ T36] audit: type=1400 audit(1751632552.499:9271): avc: denied { create } for pid=7702 comm="syz.3.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.928667][ T36] audit: type=1400 audit(1751632552.499:9272): avc: denied { name_bind } for pid=7702 comm="syz.3.2533" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 169.955179][ T36] audit: type=1400 audit(1751632552.499:9273): avc: denied { node_bind } for pid=7702 comm="syz.3.2533" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 169.978158][ T36] audit: type=1400 audit(1751632552.509:9274): avc: denied { name_bind } for pid=7702 comm="syz.3.2533" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 170.000977][ T36] audit: type=1400 audit(1751632552.509:9275): avc: denied { node_bind } for pid=7702 comm="syz.3.2533" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 170.023671][ T36] audit: type=1400 audit(1751632552.559:9276): avc: denied { create } for pid=7708 comm="syz.0.2534" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 170.046336][ T7718] overlayfs: failed to clone upperpath [ 170.048223][ T36] audit: type=1400 audit(1751632552.559:9277): avc: denied { create } for pid=7708 comm="syz.0.2534" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 170.074550][ T7718] overlayfs: failed to clone upperpath [ 170.081249][ T7718] overlayfs: failed to clone upperpath [ 170.664854][ T13] tipc: Subscription rejected, illegal request [ 170.933654][ T10] hub 3-1:0.255: bad descriptor, ignoring hub [ 170.948323][ T10] hub 3-1:0.255: probe with driver hub failed with error -5 [ 170.976037][ T7757] rust_binder: Write failure EFAULT in pid:285 [ 170.988826][ T10] usb 3-1: USB disconnect, device number 27 [ 171.049229][ T6925] udevd[6925]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.255/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.198459][ T7766] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 171.207513][ T7766] overlayfs: missing 'lowerdir' [ 171.215615][ T7766] binder: Bad value for 'max' [ 171.257583][ T7768] x_tables: duplicate underflow at hook 1 [ 171.263945][ T7769] x_tables: duplicate underflow at hook 1 [ 172.118316][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 172.268345][ T10] usb 3-1: device descriptor read/64, error -71 [ 172.508445][ T10] usb 3-1: device descriptor read/64, error -71 [ 172.748312][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 172.878324][ T10] usb 3-1: device descriptor read/64, error -71 [ 173.019153][ T7837] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2580'. [ 173.118313][ T10] usb 3-1: device descriptor read/64, error -71 [ 173.228389][ T10] usb usb3-port1: attempt power cycle [ 173.406856][ T7861] batadv_slave_1: entered promiscuous mode [ 173.413136][ T7860] batadv_slave_1: left promiscuous mode [ 173.456587][ T7868] tipc: Started in network mode [ 173.461501][ T7868] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 173.470437][ T7868] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 173.478621][ T7868] tipc: Enabled bearer , priority 10 [ 173.568309][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 173.600172][ T10] usb 3-1: device descriptor read/8, error -71 [ 173.734040][ T10] usb 3-1: device descriptor read/8, error -71 [ 173.978304][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 174.010520][ T10] usb 3-1: device descriptor read/8, error -71 [ 174.052347][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 174.094272][ T7954] overlayfs: failed to clone upperpath [ 174.150537][ T10] usb 3-1: device descriptor read/8, error -71 [ 174.197200][ T7967] bridge0: port 3(veth0_vlan) entered blocking state [ 174.203945][ T7967] bridge0: port 3(veth0_vlan) entered disabled state [ 174.210677][ T7967] veth0_vlan: entered allmulticast mode [ 174.216582][ T7967] bridge0: port 3(veth0_vlan) entered blocking state [ 174.223277][ T7967] bridge0: port 3(veth0_vlan) entered forwarding state [ 174.258770][ T10] usb usb3-port1: unable to enumerate USB device [ 174.566794][ T7971] sit0: entered promiscuous mode [ 174.572818][ T7971] netlink: 'syz.4.2631': attribute type 1 has an invalid length. [ 174.580711][ T7971] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2631'. [ 174.598312][ T10] tipc: Node number set to 1 [ 174.809538][ T36] kauditd_printk_skb: 692 callbacks suppressed [ 174.809556][ T36] audit: type=1400 audit(1751632557.409:9970): avc: denied { create } for pid=7979 comm="syz.0.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.855075][ T36] audit: type=1400 audit(1751632557.429:9971): avc: denied { setopt } for pid=7979 comm="syz.0.2635" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.927662][ T36] audit: type=1400 audit(1751632557.429:9972): avc: denied { accept } for pid=7979 comm="syz.0.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 174.939790][ T7985] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 174.983591][ T36] audit: type=1400 audit(1751632557.449:9973): avc: denied { name_bind } for pid=7979 comm="syz.0.2635" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 175.005955][ T36] audit: type=1400 audit(1751632557.459:9974): avc: denied { unmount } for pid=6127 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 175.043980][ T36] audit: type=1400 audit(1751632557.489:9975): avc: denied { read write } for pid=6127 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.069522][ T36] audit: type=1400 audit(1751632557.489:9976): avc: denied { read write open } for pid=6127 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.119338][ T36] audit: type=1400 audit(1751632557.489:9977): avc: denied { ioctl } for pid=6127 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.153417][ T36] audit: type=1400 audit(1751632557.509:9978): avc: denied { mount } for pid=7984 comm="syz.3.2637" name="/" dev="ramfs" ino=40141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 175.193654][ T36] audit: type=1400 audit(1751632557.509:9979): avc: denied { execute } for pid=7984 comm="syz.3.2637" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.478311][ T45] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 175.630767][ T45] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 175.640253][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.650410][ T45] usb 3-1: config 0 descriptor?? [ 176.237106][ T8034] overlayfs: failed to resolve './file0': -2 [ 176.237129][ T8033] overlayfs: failed to resolve './file0': -2 [ 176.275020][ T8036] netlink: 'syz.4.2656': attribute type 3 has an invalid length. [ 176.515285][ T8063] 9pnet_fd: Insufficient options for proto=fd [ 176.637196][ T8072] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2670'. [ 176.761075][ T8084] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 177.443944][ T8106] veth1_macvtap: left promiscuous mode [ 177.450657][ T8106] macsec0: entered allmulticast mode [ 177.494893][ T8109] fuse: Bad value for 'fd' [ 177.789750][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.798223][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.807738][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 177.817820][ T45] asix 3-1:0.0: probe with driver asix failed with error -71 [ 177.825991][ T45] usb 3-1: USB disconnect, device number 32 [ 178.522369][ T8141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 178.522402][ T8141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:326 [ 179.159161][ T8168] overlay: Unknown parameter 'uid>00000000000000016640' [ 179.407587][ T8180] rust_binder: Error while translating object. [ 179.407624][ T8180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.414246][ T8180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 179.798886][ T8213] overlayfs: failed to resolve './file2': -2 [ 179.819530][ T36] kauditd_printk_skb: 399 callbacks suppressed [ 179.819545][ T36] audit: type=1400 audit(1751632562.419:10379): avc: denied { create } for pid=8211 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.849053][ T8213] netlink: 'syz.3.2724': attribute type 12 has an invalid length. [ 179.863142][ T8213] overlayfs: failed to clone upperpath [ 179.866641][ T36] audit: type=1400 audit(1751632562.419:10380): avc: denied { create } for pid=8216 comm="syz.0.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.888321][ T36] audit: type=1400 audit(1751632562.429:10381): avc: denied { setopt } for pid=8216 comm="syz.0.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.908470][ T36] audit: type=1400 audit(1751632562.429:10382): avc: denied { create } for pid=8216 comm="syz.0.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.932379][ T36] audit: type=1400 audit(1751632562.429:10383): avc: denied { setopt } for pid=8216 comm="syz.0.2725" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.953424][ T36] audit: type=1400 audit(1751632562.429:10384): avc: denied { connect } for pid=8216 comm="syz.0.2725" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.974049][ T36] audit: type=1400 audit(1751632562.429:10385): avc: denied { setopt } for pid=8216 comm="syz.0.2725" laddr=fe80::a8aa:aaff:feaa:aa16 lport=58 faddr=ff02::1 fport=65531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.006664][ T36] audit: type=1400 audit(1751632562.429:10386): avc: denied { execmem } for pid=8216 comm="syz.0.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 180.029726][ T36] audit: type=1400 audit(1751632562.439:10387): avc: denied { write } for pid=8211 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.050798][ T36] audit: type=1400 audit(1751632562.439:10388): avc: denied { read } for pid=8211 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.192316][ T8239] overlayfs: failed to resolve './file0/file0': -2 [ 180.202242][ T8241] tipc: Trying to set illegal importance in message [ 180.210183][ T8241] 9pnet_fd: Insufficient options for proto=fd [ 180.517819][ T8249] binder: Unknown parameter 'context' [ 180.767510][ T8262] incfs: Error accessing: ./file0. [ 180.772747][ T8262] incfs: mount failed -20 [ 180.798343][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 180.968437][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 180.979627][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 180.988447][ T10] usb 3-1: config 0 has no interface number 0 [ 180.994551][ T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 181.005293][ T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 181.015831][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 181.027951][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 181.037483][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.045946][ T10] usb 3-1: Product: syz [ 181.050606][ T10] usb 3-1: Manufacturer: syz [ 181.055207][ T10] usb 3-1: SerialNumber: syz [ 181.062030][ T10] usb 3-1: config 0 descriptor?? [ 181.068212][ T8251] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.077836][ T8251] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.289332][ T8251] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.296854][ T8251] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.406176][ T8306] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2755'. [ 181.708907][ T10] Error reading MAC address [ 181.714923][ T8251] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.722796][ T8251] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.038845][ T8348] overlayfs: failed to resolve './file0': -2 [ 182.550467][ T10] sr9700 3-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, 3a:23:26:2a:ec:a7 [ 182.564042][ T8353] netlink: 'syz.3.2772': attribute type 3 has an invalid length. [ 182.593748][ T10] usb 3-1: USB disconnect, device number 33 [ 182.610357][ T10] sr9700 3-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 183.504517][ T8390] netlink: 'syz.3.2784': attribute type 15 has an invalid length. [ 183.515891][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2784'. [ 183.888735][ T8409] rust_binder: 8409: no such ref 0 [ 183.898462][ T8409] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 183.898481][ T8409] rust_binder: Read failure Err(EFAULT) in pid:380 [ 183.989429][ T8414] netlink: 'syz.4.2791': attribute type 28 has an invalid length. [ 184.349089][ T8436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2800'. [ 184.865027][ T36] kauditd_printk_skb: 710 callbacks suppressed [ 184.865044][ T36] audit: type=1400 audit(1751632567.459:11099): avc: denied { read write } for pid=6127 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.902599][ T36] audit: type=1400 audit(1751632567.459:11100): avc: denied { read write open } for pid=6127 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.951023][ T36] audit: type=1400 audit(1751632567.459:11101): avc: denied { ioctl } for pid=6127 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.990243][ T36] audit: type=1400 audit(1751632567.509:11102): avc: denied { read write } for pid=8445 comm="syz.2.2805" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.014107][ T36] audit: type=1400 audit(1751632567.509:11103): avc: denied { read write open } for pid=8445 comm="syz.2.2805" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.039370][ T36] audit: type=1400 audit(1751632567.539:11104): avc: denied { read } for pid=8445 comm="syz.2.2805" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.062573][ T36] audit: type=1400 audit(1751632567.539:11105): avc: denied { read open } for pid=8445 comm="syz.2.2805" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.099155][ T36] audit: type=1400 audit(1751632567.539:11106): avc: denied { ioctl } for pid=8445 comm="syz.2.2805" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.100928][ T8446] netlink: 'syz.2.2805': attribute type 12 has an invalid length. [ 185.124108][ T36] audit: type=1400 audit(1751632567.569:11107): avc: denied { mount } for pid=8447 comm="syz.0.2806" name="/" dev="ramfs" ino=43132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 185.161689][ T36] audit: type=1400 audit(1751632567.569:11108): avc: denied { create } for pid=8447 comm="syz.0.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.350702][ T8483] syz.0.2816 (8483): attempted to duplicate a private mapping with mremap. This is not supported. [ 185.449751][ T8499] 9pnet_fd: Insufficient options for proto=fd [ 185.542675][ T8501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8501 comm=syz.4.2822 [ 185.986061][ T8528] fuse: Bad value for 'fd' [ 186.078308][ T2301] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 186.228327][ T2301] usb 3-1: device descriptor read/64, error -71 [ 186.468329][ T2301] usb 3-1: device descriptor read/64, error -71 [ 186.708325][ T2301] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 186.838331][ T2301] usb 3-1: device descriptor read/64, error -71 [ 187.078369][ T2301] usb 3-1: device descriptor read/64, error -71 [ 187.188405][ T2301] usb usb3-port1: attempt power cycle [ 187.528346][ T2301] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 187.566920][ T2301] usb 3-1: device descriptor read/8, error -71 [ 187.710675][ T2301] usb 3-1: device descriptor read/8, error -71 [ 187.948323][ T2301] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 187.970367][ T2301] usb 3-1: device descriptor read/8, error -71 [ 188.079579][ T8674] overlayfs: failed to clone upperpath [ 188.110658][ T2301] usb 3-1: device descriptor read/8, error -71 [ 188.220625][ T2301] usb usb3-port1: unable to enumerate USB device [ 188.315856][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'. [ 188.904486][ T8734] rust_binder: 8734: no such ref 1 [ 188.914311][ T8736] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2900'. [ 188.950846][ T8738] overlayfs: failed to clone upperpath [ 189.761181][ T8764] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 189.775442][ T8764] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 189.856310][ T8765] netlink: 600 bytes leftover after parsing attributes in process `syz.2.2912'. [ 189.880556][ T36] kauditd_printk_skb: 693 callbacks suppressed [ 189.880571][ T36] audit: type=1400 audit(1751632572.479:11802): avc: denied { read write } for pid=8763 comm="syz.2.2912" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.946654][ T36] audit: type=1400 audit(1751632572.509:11803): avc: denied { read write open } for pid=8763 comm="syz.2.2912" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.975505][ T36] audit: type=1400 audit(1751632572.509:11804): avc: denied { ioctl } for pid=8763 comm="syz.2.2912" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.000213][ T36] audit: type=1400 audit(1751632572.509:11805): avc: denied { read } for pid=8763 comm="syz.2.2912" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.023683][ T36] audit: type=1400 audit(1751632572.509:11806): avc: denied { read open } for pid=8763 comm="syz.2.2912" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.077418][ T36] audit: type=1400 audit(1751632572.509:11807): avc: denied { ioctl } for pid=8763 comm="syz.2.2912" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.109755][ T36] audit: type=1400 audit(1751632572.529:11808): avc: denied { map } for pid=8763 comm="syz.2.2912" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.133689][ T36] audit: type=1400 audit(1751632572.529:11809): avc: denied { read } for pid=8763 comm="syz.2.2912" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.163468][ T36] audit: type=1400 audit(1751632572.539:11810): avc: denied { execmem } for pid=8766 comm="syz.0.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 190.182840][ T36] audit: type=1400 audit(1751632572.539:11811): avc: denied { execute } for pid=8766 comm="syz.0.2913" path="/202/cpuacct.usage_sys" dev="tmpfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.428208][ T8807] rust_binder: validate_parent_fixup: fixup_min_offset=70, parent_offset=63 [ 190.428233][ T8807] rust_binder: Error while translating object. [ 190.437067][ T8807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 190.448301][ T8807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404 [ 190.507946][ T8817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8817 comm=syz.3.2930 [ 190.691235][ T8838] overlayfs: failed to clone upperpath [ 191.191312][ T8883] binder: Bad value for 'defcontext' [ 191.661196][ T13] bridge_slave_1: left allmulticast mode [ 191.666913][ T13] bridge_slave_1: left promiscuous mode [ 191.679243][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.694271][ T13] bridge_slave_0: left allmulticast mode [ 191.706359][ T13] bridge_slave_0: left promiscuous mode [ 191.712156][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.830918][ T13] tipc: Disabling bearer [ 191.837053][ T13] tipc: Left network mode [ 191.846277][ T13] veth1_macvtap: left promiscuous mode [ 191.851931][ T13] veth0_vlan: left promiscuous mode [ 191.907516][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.914593][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.921667][ T8905] bridge_slave_0: entered allmulticast mode [ 191.942390][ T8905] bridge_slave_0: entered promiscuous mode [ 191.951625][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.958693][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.965750][ T8905] bridge_slave_1: entered allmulticast mode [ 191.972069][ T8905] bridge_slave_1: entered promiscuous mode [ 192.033699][ T8910] rust_binder: 8910: no such ref 7 [ 192.078832][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.085882][ T8905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.093143][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.100177][ T8905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.107442][ T8910] rust_binder: Read failure Err(EFAULT) in pid:427 [ 192.154935][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.168934][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.182780][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.189846][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.200712][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.207760][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.288179][ T8914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.290339][ T8914] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 192.296758][ T8914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 192.306286][ T8914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:431 [ 192.339533][ T8905] veth0_vlan: entered promiscuous mode [ 192.436227][ T8905] veth1_macvtap: entered promiscuous mode [ 192.488221][ T8928] netlink: 'syz.0.2969': attribute type 4 has an invalid length. [ 192.510309][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'. [ 192.644972][ T8938] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.670727][ T8938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 192.670758][ T8938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2 [ 192.680710][ T8942] batadv_slave_1: entered promiscuous mode [ 192.696755][ T8938] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 192.696775][ T8938] rust_binder: Read failure Err(EFAULT) in pid:2 [ 192.706667][ T8942] batadv_slave_1: left promiscuous mode [ 193.101012][ T8969] 9pnet_fd: Insufficient options for proto=fd [ 193.107719][ T8968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.188334][ T719] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 193.320516][ T8992] overlayfs: failed to clone upperpath [ 193.338053][ T8992] overlayfs: failed to clone upperpath [ 193.350692][ T8992] overlayfs: failed to clone upperpath [ 193.360427][ T8992] overlayfs: failed to clone upperpath [ 193.377836][ T8992] overlayfs: failed to clone upperpath [ 193.392571][ T8992] overlayfs: failed to clone upperpath [ 193.402306][ T8992] overlayfs: failed to clone upperpath [ 193.419508][ T8992] overlayfs: failed to clone upperpath [ 193.426333][ T8992] overlayfs: failed to clone upperpath [ 193.439940][ T8992] overlayfs: failed to clone upperpath [ 193.440531][ T9001] overlayfs: failed to clone lowerpath [ 193.465888][ T8992] overlayfs: failed to clone upperpath [ 193.473653][ T8992] overlayfs: failed to clone upperpath [ 193.490230][ T8992] overlayfs: failed to clone upperpath [ 193.506727][ T8992] overlayfs: failed to clone upperpath [ 193.516440][ T8992] overlayfs: failed to clone upperpath [ 193.526520][ T8992] overlayfs: failed to clone upperpath [ 193.536855][ T8992] overlayfs: failed to clone upperpath [ 193.546956][ T8992] overlayfs: failed to clone upperpath [ 193.554973][ T8992] overlayfs: failed to clone upperpath [ 193.565123][ T8992] overlayfs: failed to clone upperpath [ 193.579834][ T8992] overlayfs: failed to clone upperpath [ 193.599775][ T8992] overlayfs: failed to clone upperpath [ 193.615020][ T8992] overlayfs: failed to clone upperpath [ 193.627106][ T8992] overlayfs: failed to clone upperpath [ 193.642777][ T8992] overlayfs: failed to clone upperpath [ 193.664690][ T8992] overlayfs: failed to clone upperpath [ 193.679228][ T8992] overlayfs: failed to clone upperpath [ 193.697217][ T8992] overlayfs: failed to clone upperpath [ 193.702117][ T9013] __vm_enough_memory: pid: 9013, comm: syz.5.2998, bytes: 70373039144960 not enough memory for the allocation [ 193.715813][ T8992] overlayfs: failed to clone upperpath [ 193.723793][ T8992] overlayfs: failed to clone upperpath [ 193.732167][ T8992] overlayfs: failed to clone upperpath [ 193.746201][ T8992] overlayfs: failed to clone upperpath [ 193.758690][ T8992] overlayfs: failed to clone upperpath [ 193.782397][ T8992] overlayfs: failed to clone upperpath [ 193.795964][ T8992] overlayfs: failed to clone upperpath [ 193.815865][ T8992] overlayfs: failed to clone upperpath [ 193.825230][ T8992] overlayfs: failed to clone upperpath [ 193.840130][ T8992] overlayfs: failed to clone upperpath [ 193.852301][ T8992] overlayfs: failed to clone upperpath [ 193.859727][ T8992] overlayfs: failed to clone upperpath [ 193.866487][ T8992] overlayfs: failed to clone upperpath [ 193.873277][ T8992] overlayfs: failed to clone upperpath [ 193.879674][ T8992] overlayfs: failed to clone upperpath [ 193.886068][ T8992] overlayfs: failed to clone upperpath [ 193.893642][ T8992] overlayfs: failed to clone upperpath [ 193.900095][ T8992] overlayfs: failed to clone upperpath [ 193.906418][ T8992] overlayfs: failed to clone upperpath [ 193.913381][ T8992] overlayfs: failed to clone upperpath [ 193.919773][ T8992] overlayfs: failed to clone upperpath [ 193.926124][ T8992] overlayfs: failed to clone upperpath [ 193.933128][ T8992] overlayfs: failed to clone upperpath [ 193.939751][ T8992] overlayfs: failed to clone upperpath [ 193.946126][ T8992] overlayfs: failed to clone upperpath [ 193.953155][ T8992] overlayfs: failed to clone upperpath [ 193.960235][ T8992] overlayfs: failed to clone upperpath [ 193.966862][ T8992] overlayfs: failed to clone upperpath [ 193.973857][ T8992] overlayfs: failed to clone upperpath [ 193.980543][ T8992] overlayfs: failed to clone upperpath [ 193.987095][ T8992] overlayfs: failed to clone upperpath [ 193.994142][ T8992] overlayfs: failed to clone upperpath [ 194.000797][ T8992] overlayfs: failed to clone upperpath [ 194.007324][ T8992] overlayfs: failed to clone upperpath [ 194.014337][ T8992] overlayfs: failed to clone upperpath [ 194.018309][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.028792][ T8992] overlayfs: failed to clone upperpath [ 194.035465][ T8992] overlayfs: failed to clone upperpath [ 194.089452][ T9027] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3004'. [ 194.198342][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 194.209271][ T45] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 194.218608][ T45] usb 6-1: config 0 has no interface number 0 [ 194.228087][ T45] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 194.238762][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.246869][ T45] usb 6-1: Product: syz [ 194.251903][ T45] usb 6-1: Manufacturer: syz [ 194.256684][ T45] usb 6-1: SerialNumber: syz [ 194.275184][ T45] usb 6-1: config 0 descriptor?? [ 194.288839][ T45] smsc95xx v2.0.0 [ 194.584223][ T9046] syz.3.3011 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.699618][ T45] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 194.710407][ T45] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 194.925246][ T36] kauditd_printk_skb: 941 callbacks suppressed [ 194.925262][ T36] audit: type=1400 audit(1751632577.519:12753): avc: denied { ioctl } for pid=9018 comm="syz.5.3000" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.956479][ T36] audit: type=1400 audit(1751632577.519:12754): avc: denied { ioctl } for pid=9018 comm="syz.5.3000" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.956490][ T45] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 194.956561][ T45] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 194.981643][ T36] audit: type=1400 audit(1751632577.519:12755): avc: denied { ioctl } for pid=9018 comm="syz.5.3000" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.341101][ T36] audit: type=1400 audit(1751632577.939:12756): avc: denied { create } for pid=9076 comm="syz.3.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.345157][ T9077] overlayfs: failed to clone upperpath [ 195.361698][ T36] audit: type=1400 audit(1751632577.939:12757): avc: denied { setopt } for pid=9076 comm="syz.3.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.386335][ T36] audit: type=1400 audit(1751632577.939:12758): avc: denied { create } for pid=9076 comm="syz.3.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.407824][ T36] audit: type=1400 audit(1751632577.939:12759): avc: denied { write } for pid=9076 comm="syz.3.3020" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.428901][ T36] audit: type=1400 audit(1751632577.939:12760): avc: denied { mounton } for pid=9076 comm="syz.3.3020" path="/577/file0" dev="tmpfs" ino=3173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 195.452383][ T36] audit: type=1400 audit(1751632577.979:12761): avc: denied { ioctl } for pid=9018 comm="syz.5.3000" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.477445][ T36] audit: type=1400 audit(1751632577.979:12762): avc: denied { create } for pid=9076 comm="syz.3.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.927783][ T719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.943632][ T719] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 195.955091][ T719] usb 3-1: can't read configurations, error -71 [ 196.053151][ T9123] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 196.116962][ T9127] binder: Unknown parameter 'i:H*.' [ 196.166669][ T9126] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 196.166690][ T9126] rust_binder: Read failure Err(EFAULT) in pid:456 [ 197.058316][ T719] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 197.209329][ T2301] usb 6-1: USB disconnect, device number 2 [ 197.222136][ T719] usb 3-1: Using ep0 maxpacket: 16 [ 197.231025][ T719] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.242270][ T719] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.256052][ T719] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.268317][ T719] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 197.277746][ T719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.289386][ T9154] binder: Bad value for 'max' [ 197.298512][ T719] usb 3-1: config 0 descriptor?? [ 197.810045][ T719] usbhid 3-1:0.0: can't add hid device: -71 [ 197.816511][ T719] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 197.826977][ T719] usb 3-1: USB disconnect, device number 40 [ 198.112523][ T9194] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3057'. [ 198.418317][ T305] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 198.484094][ T9207] tmpfs: Unknown parameter '' [ 198.572538][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.583467][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.593230][ T305] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 198.602275][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.611717][ T305] usb 6-1: config 0 descriptor?? [ 198.826646][ T305] usbhid 6-1:0.0: can't add hid device: -71 [ 198.838318][ T305] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 198.847547][ T305] usb 6-1: USB disconnect, device number 3 [ 198.924003][ T9217] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3064'. [ 198.991883][ T9217] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 152, size: 208) [ 198.991900][ T9217] rust_binder: Error while translating object. [ 199.002481][ T9217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 199.008765][ T9217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 199.288313][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 199.448457][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 199.456748][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.467918][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.479354][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.488691][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.496691][ T10] usb 6-1: Product: ࠔ [ 199.500863][ T10] usb 6-1: Manufacturer: 돪ᗋᑓ패䞝霴켲ၘ淃鄹唜ퟡ㮮牓脬吉쫰쳡誤友⾶ꌬŀ晹 [ 199.512443][ T10] usb 6-1: SerialNumber: и [ 199.722864][ T10] usb 6-1: 0:2 : does not exist [ 199.736986][ T10] usb 6-1: USB disconnect, device number 4 [ 199.773137][ T6925] udevd[6925]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 199.928691][ T36] kauditd_printk_skb: 382 callbacks suppressed [ 199.928708][ T36] audit: type=1400 audit(1751632582.529:13145): avc: denied { ioctl } for pid=9219 comm="syz.5.3065" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.960885][ T36] audit: type=1400 audit(1751632582.539:13146): avc: denied { read write } for pid=6127 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.022593][ T36] audit: type=1400 audit(1751632582.539:13147): avc: denied { read write open } for pid=6127 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.068008][ T9232] netlink: 'syz.2.3070': attribute type 40 has an invalid length. [ 200.072046][ T36] audit: type=1400 audit(1751632582.539:13148): avc: denied { ioctl } for pid=6127 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.119441][ T36] audit: type=1400 audit(1751632582.549:13149): avc: denied { ioctl } for pid=9219 comm="syz.5.3065" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.161022][ T36] audit: type=1400 audit(1751632582.549:13150): avc: denied { ioctl } for pid=9219 comm="syz.5.3065" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.206267][ T36] audit: type=1400 audit(1751632582.549:13151): avc: denied { ioctl } for pid=9219 comm="syz.5.3065" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.235422][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 200.249675][ T36] audit: type=1400 audit(1751632582.589:13152): avc: denied { read write } for pid=9231 comm="syz.2.3070" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 200.273572][ T36] audit: type=1400 audit(1751632582.599:13153): avc: denied { read write open } for pid=9231 comm="syz.2.3070" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 200.299267][ T36] audit: type=1400 audit(1751632582.619:13154): avc: denied { create } for pid=9231 comm="syz.2.3070" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 200.331613][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.338665][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.345739][ T9234] bridge_slave_0: entered allmulticast mode [ 200.352073][ T9234] bridge_slave_0: entered promiscuous mode [ 200.359039][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.366051][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.374456][ T9234] bridge_slave_1: entered allmulticast mode [ 200.389288][ T9234] bridge_slave_1: entered promiscuous mode [ 200.399154][ T13] bridge_slave_1: left allmulticast mode [ 200.404810][ T13] bridge_slave_1: left promiscuous mode [ 200.410556][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.418091][ T13] bridge_slave_0: left allmulticast mode [ 200.423788][ T13] bridge_slave_0: left promiscuous mode [ 200.425567][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 200.429451][ T719] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 200.437930][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.453489][ T10] usb 6-1: config 1 interface 0 altsetting 108 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 200.468329][ T10] usb 6-1: config 1 interface 0 altsetting 108 endpoint 0x3 has invalid maxpacket 520, setting to 64 [ 200.479237][ T10] usb 6-1: config 1 interface 0 altsetting 108 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.493001][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 200.502095][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.511959][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.519965][ T10] usb 6-1: Product: syz [ 200.524117][ T10] usb 6-1: Manufacturer: ч [ 200.528647][ T10] usb 6-1: SerialNumber: syz [ 200.536846][ T9220] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 200.544361][ T9220] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 200.554089][ T13] tipc: Disabling bearer [ 200.590718][ T719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.600878][ T719] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.613083][ T719] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.622188][ T719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.630251][ T719] usb 3-1: Product: syz [ 200.634413][ T719] usb 3-1: Manufacturer: syz [ 200.639052][ T719] usb 3-1: SerialNumber: syz [ 200.653798][ T13] tipc: Left network mode [ 200.661906][ T13] veth1_macvtap: left promiscuous mode [ 200.667457][ T13] veth0_vlan: left promiscuous mode [ 200.767650][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 200.784392][ T10] usb 6-1: USB disconnect, device number 5 [ 200.803736][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.810797][ T9234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.818064][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.825101][ T9234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.853280][ T719] usb 3-1: 0:2 : does not exist [ 200.875835][ T719] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 200.893882][ T719] usb 3-1: USB disconnect, device number 41 [ 200.911309][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.918771][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.936281][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.943347][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.954053][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.961130][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.970315][ T6925] udevd[6925]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 201.055420][ T9234] veth0_vlan: entered promiscuous mode [ 201.082252][ T9234] veth1_macvtap: entered promiscuous mode [ 201.567031][ T9267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1297 sclass=netlink_route_socket pid=9267 comm=syz.5.3078 [ 201.627035][ T9270] : renamed from bridge0 (while UP) [ 201.643550][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 201.658441][ T9272] rust_binder: 9272: no such ref 7 [ 201.709380][ T9272] rust_binder: Read failure Err(EFAULT) in pid:486 [ 201.874537][ T9289] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3085'. [ 201.948305][ T305] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 202.033631][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3087'. [ 202.067509][ T9295] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.067550][ T9295] rust_binder: Read failure Err(EFAULT) in pid:497 [ 202.111075][ T305] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.129035][ T305] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 202.146017][ T305] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.157626][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.180160][ T305] usb 6-1: Product: syz [ 202.198300][ T305] usb 6-1: Manufacturer: syz [ 202.204926][ T305] usb 6-1: SerialNumber: syz [ 202.218053][ T9277] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 202.361024][ T9303] rust_binder: Error while translating object. [ 202.361069][ T9303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 202.367255][ T9303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:504 [ 202.715836][ T9327] binder: Unknown parameter 'fscontext?}Linux!' [ 203.049446][ T9338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.087672][ T9338] rust_binder: Error in use_page_slow: ESRCH [ 203.087697][ T9338] rust_binder: use_range failure ESRCH [ 203.102381][ T9338] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 203.114399][ T9338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 203.131995][ T9338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:515 [ 203.688318][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.688528][ T1566] Bluetooth: hci0: command 0x1003 tx timeout [ 203.713221][ T9267] Bluetooth: hci0: Opcode 0x1003 failed: -4 [ 203.717234][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.738128][ T305] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 203.764963][ T305] cdc_ncm 6-1:1.0: bind() failure [ 203.779720][ T305] usb 6-1: USB disconnect, device number 6 [ 203.863789][ T9365] overlayfs: failed to resolve 'pcr=00000000000000000059': -2 [ 204.182371][ T9387] new mount options do not match the existing superblock, will be ignored [ 204.544769][ T9414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.545541][ T9416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.740702][ T9432] netlink: 'syz.2.3134': attribute type 13 has an invalid length. [ 204.838316][ T45] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 204.988841][ T36] kauditd_printk_skb: 783 callbacks suppressed [ 204.988857][ T36] audit: type=1400 audit(1751632587.589:13938): avc: denied { ioctl } for pid=9417 comm="syz.5.3129" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.022510][ T45] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.031147][ T45] usb 6-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 205.042554][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.052404][ T36] audit: type=1400 audit(1751632587.589:13939): avc: denied { ioctl } for pid=9417 comm="syz.5.3129" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.077397][ T45] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.104003][ T45] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.118608][ T36] audit: type=1400 audit(1751632587.619:13940): avc: denied { ioctl } for pid=9417 comm="syz.5.3129" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.120415][ T9440] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.148303][ T45] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.160625][ T45] usb 6-1: Product: syz [ 205.162298][ T9438] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.164793][ T45] usb 6-1: Manufacturer: syz [ 205.178326][ T9418] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.184854][ T9418] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 205.185904][ T9440] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 205.194267][ T36] audit: type=1400 audit(1751632587.619:13941): avc: denied { ioctl } for pid=9417 comm="syz.5.3129" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.200250][ T9438] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 205.227136][ T45] cdc_wdm 6-1:1.0: skipping garbage [ 205.240052][ T45] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 205.428793][ T10] usb 6-1: USB disconnect, device number 7 [ 206.368755][ T9467] rust_binder: 9467: no such ref 0 [ 206.377772][ T9467] rust_binder: 9467: no such ref 2 [ 206.393624][ T9467] TCP: out of memory -- consider tuning tcp_mem [ 206.560779][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 206.639177][ T9484] overlayfs: failed to clone upperpath [ 206.645646][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.654770][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.665766][ T9488] overlayfs: missing 'lowerdir' [ 206.672088][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.686843][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.700118][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.715524][ T9491] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9491 comm=syz.0.3156 [ 206.719170][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.743986][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.754165][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.764317][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.786460][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.795394][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.805403][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.813981][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.820727][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.828994][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.835714][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.843897][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.850635][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.859672][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.866551][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.874964][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.876863][ T9505] incfs: Options parsing error. -22 [ 206.881738][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.886996][ T9505] incfs: mount failed -22 [ 206.895886][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.904901][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.913324][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.923877][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.932316][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.939234][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.948903][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.955792][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.964273][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.971127][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.980737][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.987533][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.996826][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.005006][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.014002][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.019825][ T9513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9513 comm=syz.2.3166 [ 207.020784][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.043166][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.050018][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.058520][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.065241][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.074922][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.081695][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.090053][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.096848][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.106214][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.112977][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.121647][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.132084][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.140769][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.147502][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.156722][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.163484][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.172862][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.179607][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.190391][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.197124][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.205536][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.213695][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.222764][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.229485][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.238597][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.246483][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.254936][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.261644][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.269886][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.276555][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.284792][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.291777][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.300507][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.307178][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.315473][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.322162][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.330505][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.337178][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.345390][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.352134][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.360471][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.367139][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.375602][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.382315][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.390266][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.396937][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.405028][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.411714][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.419847][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.426515][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.434606][ T9485] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.441285][ T9485] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.477395][ T9532] rust_binder: Write failure EFAULT in pid:118 [ 207.788329][ T64] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 207.951598][ T64] usb 6-1: unable to get BOS descriptor or descriptor too short [ 207.968326][ T64] usb 6-1: config 16 has an invalid interface number: 195 but max is 0 [ 207.976809][ T64] usb 6-1: config 16 has no interface number 0 [ 207.983044][ T64] usb 6-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023 [ 207.993420][ T64] usb 6-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024 [ 208.003794][ T64] usb 6-1: config 16 interface 195 altsetting 128 endpoint 0xB has an invalid bInterval 251, changing to 11 [ 208.015423][ T64] usb 6-1: config 16 interface 195 has no altsetting 0 [ 208.027953][ T64] usb 6-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce [ 208.037072][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.045087][ T64] usb 6-1: Product: syz [ 208.049266][ T64] usb 6-1: Manufacturer: syz [ 208.053859][ T64] usb 6-1: SerialNumber: syz [ 208.061803][ T9535] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 208.074001][ T9535] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 208.077480][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3187'. [ 208.286107][ T9593] /dev/loop0: Can't lookup blockdev [ 208.291645][ T9535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.303644][ T9535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.727817][ T9597] random: crng reseeded on system resumption [ 208.879243][ T9612] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 208.960060][ T9625] tipc: Enabling of bearer rejected, failed to enable media [ 209.966941][ T9638] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3210'. [ 209.999357][ T36] kauditd_printk_skb: 472 callbacks suppressed [ 209.999374][ T36] audit: type=1400 audit(1751632592.599:14387): avc: denied { mounton } for pid=9639 comm="syz.2.3211" path="/217/file0" dev="tmpfs" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.031141][ T36] audit: type=1400 audit(1751632592.629:14388): avc: denied { create } for pid=9641 comm="syz.2.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.051958][ T36] audit: type=1400 audit(1751632592.629:14389): avc: denied { create } for pid=9641 comm="syz.2.3212" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 210.074735][ T36] audit: type=1400 audit(1751632592.629:14390): avc: denied { ioctl } for pid=9641 comm="syz.2.3212" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47040 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 210.102261][ T36] audit: type=1400 audit(1751632592.629:14391): avc: denied { ioctl } for pid=9641 comm="syz.2.3212" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47040 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 210.129018][ T36] audit: type=1400 audit(1751632592.699:14392): avc: denied { create } for pid=9641 comm="syz.2.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.149131][ T36] audit: type=1400 audit(1751632592.699:14393): avc: denied { create } for pid=9644 comm="syz.0.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.170342][ T36] audit: type=1400 audit(1751632592.699:14394): avc: denied { create } for pid=9644 comm="syz.0.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.197147][ T36] audit: type=1400 audit(1751632592.699:14395): avc: denied { write } for pid=9644 comm="syz.0.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.218139][ T36] audit: type=1400 audit(1751632592.699:14396): avc: denied { read } for pid=9644 comm="syz.0.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.521426][ T64] usb 6-1: bad CDC descriptors [ 210.558404][ T64] usb 6-1: USB disconnect, device number 8 [ 210.760844][ T9672] netlink: 'syz.3.3222': attribute type 27 has an invalid length. [ 210.846920][ T9672] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.854142][ T9672] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.938755][ T64] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 211.078338][ T64] usb 6-1: device descriptor read/64, error -71 [ 211.318317][ T64] usb 6-1: device descriptor read/64, error -71 [ 211.326519][ T9696] rust_binder: Error while translating object. [ 211.326551][ T9696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.332803][ T9696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 211.382852][ T9698] 9p: Unknown Cache mode or invalid value 딊 [ 211.480598][ T9705] overlayfs: failed to clone upperpath [ 211.491537][ T9705] sit0: entered promiscuous mode [ 211.505039][ T9705] netlink: 'syz.2.3233': attribute type 1 has an invalid length. [ 211.514224][ T9705] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3233'. [ 211.530360][ T9707] netlink: 393 bytes leftover after parsing attributes in process `syz.3.3234'. [ 211.558310][ T64] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 211.698324][ T64] usb 6-1: device descriptor read/64, error -71 [ 211.938303][ T64] usb 6-1: device descriptor read/64, error -71 [ 212.058376][ T64] usb usb6-port1: attempt power cycle [ 212.198704][ T9744] futex_wake_op: syz.3.3246 tries to shift op by 144; fix this program [ 212.242258][ T9746] netlink: 328 bytes leftover after parsing attributes in process `syz.0.3248'. [ 212.406848][ T9768] overlayfs: failed to resolve './file0': -2 [ 212.418317][ T64] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 212.450495][ T64] usb 6-1: device descriptor read/8, error -71 [ 212.458303][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 212.507641][ T9774] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 212.591203][ T64] usb 6-1: device descriptor read/8, error -71 [ 212.628306][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 212.638484][ T10] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 212.649824][ T10] usb 4-1: config 0 has no interface number 0 [ 212.655918][ T10] usb 4-1: config 0 interface 225 has no altsetting 0 [ 212.689659][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=1720, bcdDevice=23.b4 [ 212.703321][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.712078][ T10] usb 4-1: Product: syz [ 212.716293][ T10] usb 4-1: Manufacturer: syz [ 212.720964][ T10] usb 4-1: SerialNumber: syz [ 212.729899][ T10] usb 4-1: config 0 descriptor?? [ 212.828311][ T64] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 212.859660][ T64] usb 6-1: device descriptor read/8, error -71 [ 212.990756][ T64] usb 6-1: device descriptor read/8, error -71 [ 213.108315][ T64] usb usb6-port1: unable to enumerate USB device [ 213.316876][ T9838] overlayfs: failed to clone upperpath [ 213.357477][ T9841] overlayfs: failed to clone upperpath [ 213.411245][ T9848] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 213.420008][ T9848] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 213.428307][ T9848] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 213.751178][ T10] asix 4-1:0.225 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 213.766961][ T10] asix 4-1:0.225: probe with driver asix failed with error -71 [ 213.775769][ T10] usb 4-1: USB disconnect, device number 49 [ 213.787990][ T9868] rust_binder: Error while translating object. [ 213.788010][ T9868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 213.794319][ T9868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:127 [ 214.086186][ T9897] overlayfs: failed to clone upperpath [ 214.364719][ T9909] 9pnet_fd: Insufficient options for proto=fd [ 215.008955][ T36] kauditd_printk_skb: 572 callbacks suppressed [ 215.008972][ T36] audit: type=1400 audit(1751632597.609:14969): avc: denied { ioctl } for pid=9930 comm="syz.5.3308" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.065093][ T36] audit: type=1400 audit(1751632597.609:14970): avc: denied { ioctl } for pid=9930 comm="syz.5.3308" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.093572][ T36] audit: type=1400 audit(1751632597.689:14971): avc: denied { create } for pid=9941 comm="syz.0.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.114450][ T36] audit: type=1400 audit(1751632597.709:14972): avc: denied { create } for pid=9941 comm="syz.0.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.136242][ T36] audit: type=1400 audit(1751632597.709:14973): avc: denied { ioctl } for pid=9930 comm="syz.5.3308" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.168818][ T36] audit: type=1400 audit(1751632597.729:14974): avc: denied { write } for pid=9941 comm="syz.0.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.193151][ T36] audit: type=1400 audit(1751632597.729:14975): avc: denied { nlmsg_write } for pid=9941 comm="syz.0.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.215001][ T36] audit: type=1400 audit(1751632597.759:14976): avc: denied { mounton } for pid=9941 comm="syz.0.3311" path="/325/file0" dev="tmpfs" ino=1795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.242461][ T36] audit: type=1400 audit(1751632597.759:14977): avc: denied { mount } for pid=9941 comm="syz.0.3311" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 215.266290][ T36] audit: type=1400 audit(1751632597.789:14978): avc: denied { ioctl } for pid=9930 comm="syz.5.3308" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.268317][ T64] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 215.445052][ T9924] random: crng reseeded on system resumption [ 215.448310][ T64] usb 6-1: Using ep0 maxpacket: 8 [ 215.460871][ T64] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 215.470448][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.481040][ T64] usb 6-1: config 0 descriptor?? [ 215.531452][ T9924] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 215.581693][ T9950] __vm_enough_memory: pid: 9950, comm: syz.3.3313, bytes: 70373039144960 not enough memory for the allocation [ 215.828322][ T45] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 215.998334][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 216.006591][ T45] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 216.027889][ T45] usb 4-1: config 4 has no interface number 0 [ 216.037874][ T45] usb 4-1: config 4 interface 15 has no altsetting 0 [ 216.048465][ T45] usb 4-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 216.057556][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.065611][ T45] usb 4-1: Product: syz [ 216.069852][ T45] usb 4-1: Manufacturer: syz [ 216.074460][ T45] usb 4-1: SerialNumber: syz [ 216.083543][ T45] ax88179_178a 4-1:4.15: probe with driver ax88179_178a failed with error -22 [ 216.211111][ T9981] cgroup: subsys name conflicts with all [ 216.219791][ T9981] netlink: 'syz.0.3324': attribute type 4 has an invalid length. [ 216.227591][ T9981] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3324'. [ 216.286368][ T45] usb 4-1: USB disconnect, device number 50 [ 216.977806][T10004] netlink: 'syz.3.3333': attribute type 4 has an invalid length. [ 216.987351][T10004] netlink: 'syz.3.3333': attribute type 4 has an invalid length. [ 217.249009][T10015] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 217.263335][T10015] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 217.988340][T10085] overlayfs: failed to clone upperpath [ 218.121979][ T64] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 218.146648][ T64] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 218.173676][ T64] asix 6-1:0.0: probe with driver asix failed with error -71 [ 218.188079][T10099] input: syz0 as /devices/virtual/input/input15 [ 218.200568][ T64] usb 6-1: USB disconnect, device number 13 [ 218.230978][T10099] netlink: 392 bytes leftover after parsing attributes in process `syz.5.3365'. [ 218.443781][T10111] overlayfs: failed to resolve './file2': -2 [ 218.782575][T10146] syzkaller0: entered promiscuous mode [ 219.383189][T10187] kvm: kvm [10185]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 219.662470][T10211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.664411][T10211] rust_binder: Got transaction with invalid offset. [ 219.671573][T10211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.678962][T10211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 219.726044][T10218] overlayfs: failed to resolve './file0': -2 [ 219.832294][T10228] netlink: 'syz.3.3408': attribute type 28 has an invalid length. [ 220.020497][ T36] kauditd_printk_skb: 967 callbacks suppressed [ 220.020514][ T36] audit: type=1400 audit(1751632602.619:15946): avc: denied { create } for pid=10248 comm="syz.3.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.048801][ T36] audit: type=1400 audit(1751632602.619:15947): avc: denied { write } for pid=10248 comm="syz.3.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.070154][ T36] audit: type=1400 audit(1751632602.619:15948): avc: denied { write } for pid=10248 comm="syz.3.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.097190][ T36] audit: type=1400 audit(1751632602.629:15949): avc: denied { read write } for pid=9234 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.122032][ T36] audit: type=1400 audit(1751632602.629:15950): avc: denied { read write open } for pid=9234 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.132118][T10251] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 220.155436][ T36] audit: type=1400 audit(1751632602.629:15951): avc: denied { ioctl } for pid=9234 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.163785][T10246] TCP: out of memory -- consider tuning tcp_mem [ 220.187753][ T36] audit: type=1326 audit(1751632602.699:15952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.2.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f112518e929 code=0x7fc00000 [ 220.212619][ T36] audit: type=1400 audit(1751632602.729:15953): avc: denied { mounton } for pid=10250 comm="syz.3.3416" path="/60/bus" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 220.251830][ T36] audit: type=1400 audit(1751632602.779:15954): avc: denied { block_suspend } for pid=10250 comm="syz.3.3416" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 220.297906][ T36] audit: type=1400 audit(1751632602.819:15955): avc: denied { create } for pid=10255 comm="syz.2.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.312603][T10260] overlayfs: failed to clone upperpath [ 220.457684][T10268] fuseblk: Bad value for 'fd' [ 220.464766][T10266] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 220.465213][T10266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 220.519335][T10272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10272 comm=syz.2.3424 [ 220.582225][T10272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10272 comm=syz.2.3424 [ 220.600333][T10272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10272 comm=syz.2.3424 [ 220.637531][T10272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10272 comm=syz.2.3424 [ 220.672229][T10284] /dev/rnullb0: Can't open blockdev [ 220.748304][ T2301] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 220.839603][T10300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3433'. [ 220.916039][ T2301] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 220.938295][ T2301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.954104][ T2301] usb 6-1: config 0 descriptor?? [ 220.964815][ T2301] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 220.972991][ T2301] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 221.177217][ T2301] usb 6-1: USB disconnect, device number 14 [ 221.183555][ T2301] ftdi_sio 6-1:0.0: device disconnected [ 221.735484][T10362] /dev/rnullb0: Can't lookup blockdev [ 221.789382][T10366] SELinux: policydb version -1560178591 does not match my version range 15-33 [ 221.808052][T10366] SELinux: failed to load policy [ 222.058316][ T45] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 222.188324][ T45] usb 4-1: device descriptor read/64, error -71 [ 222.311039][T10391] 9pnet_fd: Insufficient options for proto=fd [ 222.367938][T10399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10399 comm=syz.2.3468 [ 222.380462][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 222.448314][ T45] usb 4-1: device descriptor read/64, error -71 [ 222.528304][ T9] usb 6-1: device descriptor read/64, error -71 [ 222.688317][ T45] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 222.768312][ T9] usb 6-1: device descriptor read/64, error -71 [ 222.818306][ T45] usb 4-1: device descriptor read/64, error -71 [ 223.018321][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 223.058326][ T45] usb 4-1: device descriptor read/64, error -71 [ 223.095335][T10439] overlayfs: failed to clone upperpath [ 223.158303][ T9] usb 6-1: device descriptor read/64, error -71 [ 223.181428][ T45] usb usb4-port1: attempt power cycle [ 223.398348][ T9] usb 6-1: device descriptor read/64, error -71 [ 223.508766][ T9] usb usb6-port1: attempt power cycle [ 223.518318][ T45] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 223.540846][ T45] usb 4-1: device descriptor read/8, error -71 [ 223.670195][ T45] usb 4-1: device descriptor read/8, error -71 [ 223.848359][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 223.870172][ T9] usb 6-1: device descriptor read/8, error -71 [ 223.908317][ T45] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 223.930060][ T45] usb 4-1: device descriptor read/8, error -71 [ 224.000213][ T9] usb 6-1: device descriptor read/8, error -71 [ 224.060181][ T45] usb 4-1: device descriptor read/8, error -71 [ 224.168624][ T45] usb usb4-port1: unable to enumerate USB device [ 224.238355][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 224.260088][ T9] usb 6-1: device descriptor read/8, error -71 [ 224.390174][ T9] usb 6-1: device descriptor read/8, error -71 [ 224.501630][ T9] usb usb6-port1: unable to enumerate USB device [ 224.666124][T10524] tipc: Started in network mode [ 224.671023][T10524] tipc: Node identity 7f000001, cluster identity 4711 [ 224.677909][T10524] tipc: Enabled bearer , priority 10 [ 225.040869][ T36] kauditd_printk_skb: 933 callbacks suppressed [ 225.040887][ T36] audit: type=1400 audit(1751632607.629:16889): avc: denied { read write } for pid=8905 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.108867][ T36] audit: type=1400 audit(1751632607.669:16890): avc: denied { read write open } for pid=8905 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.141471][T10543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.150025][T10543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.158051][ T36] audit: type=1400 audit(1751632607.669:16891): avc: denied { ioctl } for pid=8905 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.235355][ T36] audit: type=1400 audit(1751632607.729:16892): avc: denied { create } for pid=10539 comm="syz.3.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.256971][ T36] audit: type=1400 audit(1751632607.729:16893): avc: denied { ioctl } for pid=10539 comm="syz.3.3516" path="socket:[50054]" dev="sockfs" ino=50054 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.282325][ T36] audit: type=1400 audit(1751632607.729:16894): avc: denied { read write } for pid=10539 comm="syz.3.3516" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.314798][ T36] audit: type=1400 audit(1751632607.729:16895): avc: denied { read write open } for pid=10539 comm="syz.3.3516" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.349670][T10557] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3523'. [ 225.361230][T10561] audit: audit_backlog=65 > audit_backlog_limit=64 [ 225.368409][T10561] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 225.388310][ T36] audit: type=1400 audit(1751632607.729:16896): avc: denied { read write } for pid=10539 comm="syz.3.3516" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.418325][ T45] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 225.569400][ T45] usb 4-1: device descriptor read/64, error -71 [ 225.784784][T10606] overlayfs: missing 'lowerdir' [ 225.789724][ T64] tipc: Node number set to 2130706433 [ 225.808308][ T45] usb 4-1: device descriptor read/64, error -71 [ 226.018916][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3546'. [ 226.042912][T10635] overlayfs: failed to clone upperpath [ 226.058310][ T45] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 226.104377][T10645] overlayfs: failed to resolve './file1': -2 [ 226.178333][T10655] overlayfs: failed to clone upperpath [ 226.208325][ T45] usb 4-1: device descriptor read/64, error -71 [ 226.458353][ T45] usb 4-1: device descriptor read/64, error -71 [ 226.547092][T10687] fuse: Bad value for 'fd' [ 226.568412][ T45] usb usb4-port1: attempt power cycle [ 226.669528][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3567'. [ 226.908332][ T45] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 226.930472][ T45] usb 4-1: device descriptor read/8, error -71 [ 227.060137][ T45] usb 4-1: device descriptor read/8, error -71 [ 227.298316][ T45] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 227.328198][ T45] usb 4-1: device descriptor read/8, error -71 [ 227.460459][ T45] usb 4-1: device descriptor read/8, error -71 [ 227.568434][ T45] usb usb4-port1: unable to enumerate USB device [ 228.152530][T10786] rust_binder: 10786: no such ref 0 [ 228.168347][T10786] rust_binder: 10786: no such ref 0 [ 228.173591][T10786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:247 [ 228.808453][ T64] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 228.968370][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 228.977916][ T64] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 228.987038][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.995045][ T64] usb 4-1: Product: syz [ 228.999258][ T64] usb 4-1: Manufacturer: syz [ 229.003854][ T64] usb 4-1: SerialNumber: syz [ 229.012079][ T64] r8152-cfgselector 4-1: Unknown version 0x0000 [ 229.018650][ T64] r8152-cfgselector 4-1: config 0 descriptor?? [ 229.392297][T10831] overlayfs: missing 'workdir' [ 229.431231][T10808] 9pnet_fd: Insufficient options for proto=fd [ 229.440054][ T45] r8152-cfgselector 4-1: USB disconnect, device number 59 [ 229.581001][T10842] overlay: ./file0 is not a directory [ 230.054694][ T36] kauditd_printk_skb: 583 callbacks suppressed [ 230.054710][ T36] audit: type=1400 audit(1751632612.649:17449): avc: denied { read } for pid=10851 comm="syz.3.3615" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 230.085379][ T36] audit: type=1400 audit(1751632612.659:17450): avc: denied { getopt } for pid=10845 comm="syz.0.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.106657][ T36] audit: type=1400 audit(1751632612.659:17451): avc: denied { create } for pid=10845 comm="syz.0.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.126968][ T36] audit: type=1400 audit(1751632612.659:17452): avc: denied { setopt } for pid=10845 comm="syz.0.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.147546][ T36] audit: type=1400 audit(1751632612.679:17453): avc: denied { read open } for pid=10851 comm="syz.3.3615" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 230.171356][ T36] audit: type=1400 audit(1751632612.679:17454): avc: denied { read write } for pid=10851 comm="syz.3.3615" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 230.195733][ T36] audit: type=1400 audit(1751632612.679:17455): avc: denied { read write open } for pid=10851 comm="syz.3.3615" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 230.220943][ T36] audit: type=1400 audit(1751632612.679:17456): avc: denied { ioctl } for pid=10851 comm="syz.3.3615" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 230.257895][ T36] audit: type=1400 audit(1751632612.679:17457): avc: denied { ioctl } for pid=10851 comm="syz.3.3615" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 230.284751][ T36] audit: type=1400 audit(1751632612.679:17458): avc: denied { ioctl } for pid=10851 comm="syz.3.3615" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 230.346220][T10861] tun0: tun_chr_ioctl cmd 1074025675 [ 230.352481][T10861] tun0: persist enabled [ 230.360247][T10861] tun0: tun_chr_ioctl cmd 1074025675 [ 230.366744][T10861] tun0: persist enabled [ 230.374914][T10861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 230.374943][T10861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:265 [ 230.384406][T10861] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 230.393538][T10861] rust_binder: Read failure Err(EFAULT) in pid:265 [ 230.527657][T10878] 9pnet_fd: Insufficient options for proto=fd [ 230.824198][T10897] sock: sock_set_timeout: `syz.0.3628' (pid 10897) tries to set negative timeout [ 230.871167][T10904] netlink: 'syz.2.3630': attribute type 16 has an invalid length. [ 231.540641][T10933] overlayfs: failed to clone upperpath [ 231.551131][T10933] tipc: Enabling of bearer rejected, failed to enable media [ 231.562002][T10934] tipc: Enabling of bearer rejected, failed to enable media [ 231.667653][T10950] fuse: Unknown parameter '2ϹV٣D9tHz^XTpM3U (Ko*VΛgX47 I-d6@ϞW Jpo"0x0000000000000003' [ 231.777401][T10961] /dev/loop0: Can't lookup blockdev [ 231.789919][T10961] /dev/loop0: Can't lookup blockdev [ 232.208339][ T719] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 232.316088][T11017] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3673'. [ 232.358307][ T719] usb 4-1: Using ep0 maxpacket: 16 [ 232.369843][ T719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.383129][ T719] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.396950][ T719] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.406618][ T719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.426913][ T719] usb 4-1: config 0 descriptor?? [ 232.548413][T11030] netlink: 'syz.2.3678': attribute type 4 has an invalid length. [ 232.801368][T11057] /dev/rnullb0: Can't lookup blockdev [ 232.922905][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 233.442335][T11094] overlayfs: failed to clone upperpath [ 233.474567][T11095] overlayfs: failed to clone upperpath [ 233.625680][T11103] netlink: 2885 bytes leftover after parsing attributes in process `syz.5.3701'. [ 234.168353][T11116] Invalid ELF header type: 2 != 1 [ 234.250252][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3707'. [ 234.425286][T11146] overlayfs: failed to clone upperpath [ 234.541776][T11157] fuse: Bad value for 'group_id' [ 234.546838][T11157] fuse: Bad value for 'group_id' [ 234.553727][T11157] fuse: Unknown parameter 'g]o_id' [ 234.583695][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.590599][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.597527][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.604679][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.611576][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.618453][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.625272][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.632325][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.639205][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.646059][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.652930][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.659760][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.666526][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.673402][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.680273][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.687048][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.693958][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.700744][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.707530][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.714377][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.721230][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.728441][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.735229][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.742244][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.749097][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.755878][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.762765][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.769596][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.776404][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.783287][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.790134][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.796904][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.803774][T11160] cgroup: Unknown parameter './binderfs/binder0' [ 234.861085][T11165] overlayfs: failed to clone upperpath [ 234.953461][ T719] usbhid 4-1:0.0: can't add hid device: -71 [ 234.970393][ T719] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 234.988185][ T719] usb 4-1: USB disconnect, device number 60 [ 235.206087][ T36] kauditd_printk_skb: 701 callbacks suppressed [ 235.206104][ T36] audit: type=1400 audit(1751632617.799:18160): avc: denied { mounton } for pid=11175 comm="syz.0.3726" path="/476/file0" dev="tmpfs" ino=2623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 235.235084][ T36] audit: type=1400 audit(1751632617.799:18161): avc: denied { mount } for pid=11175 comm="syz.0.3726" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 235.257502][ T36] audit: type=1400 audit(1751632617.809:18162): avc: denied { create } for pid=11175 comm="syz.0.3726" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.279335][ T36] audit: type=1400 audit(1751632617.809:18163): avc: denied { ioctl } for pid=11175 comm="syz.0.3726" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52641 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.305508][ T36] audit: type=1400 audit(1751632617.809:18164): avc: denied { ioctl } for pid=11175 comm="syz.0.3726" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52641 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.407768][ T36] audit: type=1400 audit(1751632617.999:18165): avc: denied { create } for pid=11177 comm="syz.2.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.428478][ T36] audit: type=1400 audit(1751632618.009:18166): avc: denied { create } for pid=11177 comm="syz.2.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 235.449810][ T36] audit: type=1400 audit(1751632618.009:18167): avc: denied { setopt } for pid=11177 comm="syz.2.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 235.470071][ T36] audit: type=1400 audit(1751632618.009:18168): avc: denied { create } for pid=11177 comm="syz.2.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.497955][T11180] binder: Bad value for 'stats' [ 235.508122][ T36] audit: type=1400 audit(1751632618.009:18169): avc: denied { ioctl } for pid=11177 comm="syz.2.3727" path="socket:[51959]" dev="sockfs" ino=51959 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.848345][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 235.954477][T11196] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3735'. [ 235.984742][T11201] overlayfs: missing 'lowerdir' [ 236.008301][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 236.015347][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.023400][ T9] usb 4-1: config 0 has no interface number 0 [ 236.029531][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.040418][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.050163][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 236.059208][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.068407][ T9] usb 4-1: config 0 descriptor?? [ 236.536518][T11222] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3742'. [ 237.085800][ T9] usbhid 4-1:0.1: can't add hid device: -71 [ 237.096294][ T9] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 237.105064][ T9] usb 4-1: USB disconnect, device number 61 [ 237.974823][T11275] 9pnet_fd: Insufficient options for proto=fd [ 239.161299][T11357] bridge0: entered promiscuous mode [ 239.171438][T11356] bridge0: left promiscuous mode [ 239.587490][T11368] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3784'. [ 240.212354][ T36] kauditd_printk_skb: 819 callbacks suppressed [ 240.212371][ T36] audit: type=1400 audit(1751632622.809:18989): avc: denied { create } for pid=11440 comm="syz.0.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.239255][ T36] audit: type=1400 audit(1751632622.809:18990): avc: denied { create } for pid=11440 comm="syz.0.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 240.264232][ T36] audit: type=1400 audit(1751632622.809:18991): avc: denied { create } for pid=11440 comm="syz.0.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.284286][ T36] audit: type=1400 audit(1751632622.809:18992): avc: denied { create } for pid=11440 comm="syz.0.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 240.290448][T11450] O3c: renamed from bridge_slave_0 (while UP) [ 240.308417][ T36] audit: type=1400 audit(1751632622.899:18993): avc: denied { ioctl } for pid=11438 comm="syz.3.3804" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.335275][ T36] audit: type=1400 audit(1751632622.909:18994): avc: denied { create } for pid=11449 comm="syz.5.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.378804][ T36] audit: type=1400 audit(1751632622.979:18995): avc: denied { ioctl } for pid=11438 comm="syz.3.3804" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.404092][ T36] audit: type=1400 audit(1751632622.979:18996): avc: denied { create } for pid=11453 comm="syz.0.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.425404][ T36] audit: type=1400 audit(1751632622.979:18997): avc: denied { create } for pid=11453 comm="syz.0.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.428736][T11461] overlayfs: failed to clone upperpath [ 240.447285][T11462] overlayfs: failed to clone upperpath [ 240.451628][ T36] audit: type=1400 audit(1751632622.979:18998): avc: denied { write } for pid=11453 comm="syz.0.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.457053][ T719] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 240.574165][T11478] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 240.582883][T11478] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 240.640648][ T719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.652114][ T719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.663341][ T719] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 240.672982][ T719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.683815][ T719] usb 4-1: config 0 descriptor?? [ 241.010139][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3827'. [ 241.020059][T11506] Invalid ELF header len 16 [ 241.114365][ T719] usbhid 4-1:0.0: can't add hid device: -71 [ 241.123926][ T719] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 241.139748][ T719] usb 4-1: USB disconnect, device number 62 [ 241.664607][T11524] batadv_slave_1: entered promiscuous mode [ 241.672485][T11524] batadv_slave_1: left promiscuous mode [ 241.739323][T11528] 9pnet_fd: Insufficient options for proto=fd [ 241.750264][T11527] TCP: out of memory -- consider tuning tcp_mem [ 241.756719][T11527] ------------[ cut here ]------------ [ 241.762218][T11527] WARNING: CPU: 1 PID: 11527 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790 [ 241.771824][T11527] Modules linked in: [ 241.775739][T11527] CPU: 1 UID: 0 PID: 11527 Comm: syz.3.3836 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 241.789484][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.799640][T11527] RIP: 0010:inet_sock_destruct+0x681/0x790 [ 241.805466][T11527] Code: a3 e8 d3 e6 c8 fc 0f 0b e9 53 fe ff ff e8 c7 e6 c8 fc 0f 0b e9 92 fe ff ff e8 bb e6 c8 fc 0f 0b e9 c4 fe ff ff e8 af e6 c8 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff [ 241.825333][T11527] RSP: 0018:ffffc90002f7fbe8 EFLAGS: 00010293 [ 241.831474][T11527] RAX: ffffffff84bcbc81 RBX: 0000000080003000 RCX: ffff88811bc9b900 [ 241.839679][T11527] RDX: 0000000000000000 RSI: 0000000080003000 RDI: 0000000000000000 [ 241.848088][T11527] RBP: ffffc90002f7fc30 R08: ffff888105b6297f R09: 1ffff11020b6c52f [ 241.856294][T11527] R10: dffffc0000000000 R11: ffffed1020b6c530 R12: ffff888105b62800 [ 241.864322][T11527] R13: ffff888105b62800 R14: ffff888105b62964 R15: 1ffff11020b6c502 [ 241.872334][T11527] FS: 000055556bfa9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 241.881309][T11527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.887893][T11527] CR2: 0000000000000000 CR3: 00000001151ac000 CR4: 00000000003526b0 [ 241.895947][T11527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.903957][T11527] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.911984][T11527] Call Trace: [ 241.915547][T11527] [ 241.918534][T11527] ? __cfi_inet_sock_destruct+0x10/0x10 [ 241.924093][T11527] __sk_destruct+0x68/0x6a0 [ 241.928658][T11527] ? __sk_free+0x304/0x410 [ 241.933090][T11527] __sk_free+0x313/0x410 [ 241.937333][T11527] sk_free+0x58/0xb0 [ 241.941269][T11527] tcp_close+0xc4/0x120 [ 241.945429][T11527] inet_release+0x1b4/0x2c0 [ 241.950060][T11527] sock_close+0xda/0x280 [ 241.954312][T11527] ? __cfi_sock_close+0x10/0x10 [ 241.959198][T11527] __fput+0x1fe/0xa00 [ 241.963183][T11527] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 241.968785][T11527] ____fput+0x20/0x30 [ 241.972774][T11527] task_work_run+0x1e3/0x250 [ 241.977367][T11527] ? __cfi_task_work_run+0x10/0x10 [ 241.982542][T11527] ? __kasan_check_write+0x18/0x20 [ 241.987662][T11527] resume_user_mode_work+0x36/0x50 [ 241.992843][T11527] syscall_exit_to_user_mode+0x64/0xb0 [ 241.998332][T11527] do_syscall_64+0x64/0xf0 [ 242.002756][T11527] ? clear_bhb_loop+0x50/0xa0 [ 242.007440][T11527] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 242.013376][T11527] RIP: 0033:0x7ff21998e929 [ 242.017800][T11527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.037421][T11527] RSP: 002b:00007fffef14e548 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 242.045909][T11527] RAX: 0000000000000000 RBX: 000000000003b029 RCX: 00007ff21998e929 [ 242.053919][T11527] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 242.061928][T11527] RBP: 00007ff219bb7ba0 R08: 0000000000000001 R09: 0000001eef14e83f [ 242.069930][T11527] R10: 00007ff219800000 R11: 0000000000000246 R12: 00007ff219bb5fac [ 242.077895][T11527] R13: 00007ff219bb5fa0 R14: ffffffffffffffff R15: 00007fffef14e660 [ 242.085886][T11527] [ 242.088922][T11527] ---[ end trace 0000000000000000 ]--- [ 242.285453][T11401] bridge_slave_1: left allmulticast mode [ 242.291197][T11401] bridge_slave_1: left promiscuous mode [ 242.296841][T11401] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.318682][T11401] bridge_slave_0: left allmulticast mode [ 242.324351][T11401] bridge_slave_0: left promiscuous mode [ 242.338704][T11401] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.689579][T11401] bridge_slave_1: left allmulticast mode [ 242.695226][T11401] bridge_slave_1: left promiscuous mode [ 242.700859][T11401] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.708369][T11401] bridge_slave_0: left allmulticast mode [ 242.713992][T11401] bridge_slave_0: left promiscuous mode [ 242.719597][T11401] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.810296][T11401] veth1_macvtap: left promiscuous mode [ 242.815780][T11401] veth0_vlan: left promiscuous mode [ 250.408379][ C0] TCP: out of memory -- consider tuning tcp_mem [ 250.417338][T11401] veth0_vlan: left allmulticast mode [ 250.422712][T11401] : port 3(veth0_vlan) entered disabled state [ 250.430104][T11401] bridge_slave_1: left allmulticast mode [ 250.435760][T11401] bridge_slave_1: left promiscuous mode [ 250.441444][T11401] : port 2(bridge_slave_1) entered disabled state [ 250.448833][T11401] O3c: left allmulticast mode [ 250.453770][T11401] O3c: left promiscuous mode [ 250.458874][T11401] : port 1(O3c) entered disabled state [ 250.539675][T11401] tipc: Disabling bearer [ 250.545059][T11401] tipc: Left network mode [ 250.550440][T11401] veth0_vlan: left promiscuous mode