last executing test programs: 25.9114356s ago: executing program 1 (id=1110): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="39020000000000000000140000000c00078007000200"], 0x20}}, 0x0) (async) r2 = getpgrp(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f00000007c0)={0x83b, 0x8000006, 0x3}) (async) syz_clone(0x2000, &(0x7f0000000d40)="5b3590dbd89d4023c284007fead8c0c36342053a8ccad3aba96e3ba391c8c9e1b7aead048e6b3cc5d1141466d7494211b50baa05494821f1e0ace0eea66e7d170f1670021a3cdca5c61ccb325dfa166675aa671d5b9fc150cd7104900feea5ada45daa6983c059a6472a964695d8bef0f2475d34ddb91b9d7d7867ddabdd1b567d14a2d7cedc3d4cfea06e5c6bdafa97d4129297a28902852fd8ec6bedfe1ef0292776440baab7a05bb71d40606961e8e11dbe9af4ca2a987a543b06e17938901f280e4d53b219", 0xc7, &(0x7f0000000900), &(0x7f0000000e40), &(0x7f0000000e80)="86af0fa268fad9b341bec2dbf9054e5846bd89a54ee73a03514cfb1cccc13c68ec8f91c5077016a3776a2e78b03ffed483a5970a5abf16f036259085d21e49e752749d220fa2ec90678b42c9e3283e97fed5ef1c51ca5fc13244035e6fd2ac4c0f24f3f95b10af5b8d017fac9853974f80c1b249afcaf01395b7145d9f5ec113756106b6513a90d5f0344d138dff7494") (async) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) read$FUSE(r4, &(0x7f0000002bc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000009c0)={0x0, 0x0}) waitid(0x1, r6, &(0x7f0000000a40), 0x80000000, &(0x7f0000000840)) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x40000a0}, 0x5000) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x17) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r9, 0x407, 0x0) fcntl$setpipe(r9, 0x407, 0x10ae) (async) sendmsg$nl_generic(r9, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000f40)=ANY=[@ANYBLOB="f00200002200000825bd7000fddbdf2510000000297d1f55a673876113d539c06c087d235093ec7e5dfb7002b2f784efa3ebfcfe4fab20446b618911e0e97a7d2e8c35f2ec4b378c808ad45dec8d22f558edb1a25d2927f4bf27bd8effcaaa6a0feec9991a2b4df2fed2ba49fb5a5ad2a35fb5eef5854dc2cc74e0044b8430f4e16184b56d016a71f4bb0bd30e806fca00887dbfc75d135ddf25f04fa6d205e2757505946e318bfb67708b3b6115ff97537ba60fa7f67af1599129e6bf781dc1014c1a3527a8391317ae5324fc5d363e20b36532434027ef65421c31049097a84e59020d6b2e8efc3cc2f3a0ca8e73a6076bd8799c78d0cddb968b04dfdf09f617e7132b8f4569db47d845f5f869bc0322b64cf2445e4ca7d4d034987cd70cc3fc56b15d385308b14c1846930f40e68fcadb966ff9588cc00187333c85e3e2a32e020aeda02a070a200d15b93aa08e69f1b3a31604026539f17e50176ebb1ad5d3f165b8fd61ae78ebbf02b982e43e24bfd50a1c36b157eaffc3d389b6356888ace70a8dd3ef826c905fcebfd6b3b94a2dbb2c3ea836120f5adc1857a8a218bd684f6761c59488688e36bf44203f9691d6526552d36cca1c35f8a3f41e09646e1527b6e4e623176b7caf933878bb42e38bc6c1e4025079843e0d1377bb8567e69b9239df11672e34be45a1700a65c611f7f95621b7ae003a8008005a00", @ANYRES32=r8, @ANYRESOCT=r7, @ANYRES32=r5, @ANYBLOB="060051007d00000052b3d3fc05cc369c325b6c214fb7067afb0a1e11d5f68200bc749305d5e4bacdb069617cb7690469b37704c181a26c241963a3a767b71fe0157600fd747b41874dae9848a5e81925d8e7557aa1536961d6fe1a07679ea8175dd5"], 0x2f0}, 0x1, 0x0, 0x0, 0x4004001}, 0x1) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) (async) creat(&(0x7f00000014c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) readv(r8, &(0x7f00000000c0)=[{0x0, 0xffea}, {&(0x7f0000000100)=""/237, 0xe5}], 0x2) 25.549683972s ago: executing program 1 (id=1123): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000007fd) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x30}, 0xc4) (async) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x30}, 0xc4) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x5, 0x0, 0x3f}, @fda={0x66646185, 0x9, 0x2, 0x3}, @fd}, 0x0}}], 0x0, 0x0, 0x0}) 25.501274842s ago: executing program 1 (id=1125): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x41a503, 0x131) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x2084, &(0x7f0000000540)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@appraise}, {@uid_eq={'uid', 0x3d, r2}}, {@fowner_gt={'fowner>', r2}}, {@obj_role={'obj_role', 0x3d, '/dev/ptmx\x00'}}, {@dont_hash}, {@appraise}, {@fowner_lt={'fowner<', r2}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/kvm\x00'}}]}}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x10040, 0x3) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000500)={0x1ffff, 0x0, &(0x7f0000ff8000/0x4000)=nil}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000080)=0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0021002bbd7000000000000a000000050000000000000008000880"], 0x24}}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') 25.477849182s ago: executing program 1 (id=1128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="19002dbd7000fcffffff1b000000180001801400020064756d6d7930"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 25.394824673s ago: executing program 1 (id=1129): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x80000000, 0x4, 0x0, 0x0, 0x0, 0x100000, 0x800}, 0x1c) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000000c0)) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000040)={0xe, {0x3, 0x9, 0x7}}, 0xc) socket(0x1e, 0x5, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x80000000, 0x4, 0x0, 0x0, 0x0, 0x100000, 0x800}, 0x1c) (async) socket(0x1e, 0x805, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000000c0)) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, 0x0) (async) getpid() (async) syz_pidfd_open(r7, 0x0) (async) setns(r8, 0x24020000) (async) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000040)={0xe, {0x3, 0x9, 0x7}}, 0xc) (async) 25.388327473s ago: executing program 1 (id=1132): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x535d81, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ftruncate(r1, 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, 0x0, 0x0) dup2(r5, r3) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x51, 0xfc, 0x57, 0x40, 0x19d2, 0x1111, 0x775, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x80, 0x0, [{{0x9, 0x4, 0xbe, 0x0, 0x0, 0x2, 0x6, 0x0, 0xf9}}]}}]}}, 0x0) write(r0, &(0x7f0000000400)="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", 0xc01) 10.360789534s ago: executing program 32 (id=1132): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x535d81, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ftruncate(r1, 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, 0x0, 0x0) dup2(r5, r3) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x51, 0xfc, 0x57, 0x40, 0x19d2, 0x1111, 0x775, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x80, 0x0, [{{0x9, 0x4, 0xbe, 0x0, 0x0, 0x2, 0x6, 0x0, 0xf9}}]}}]}}, 0x0) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa", 0xc01) 2.354617747s ago: executing program 2 (id=1596): arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000080)) syz_usb_connect(0x4, 0x80, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='system_u:object_r:kloSd_var_run_t:s0 /usr/lib/telepathy/mission-control-5 00000000000000000000\x00'], 0x5f) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000008000d"], 0xd0060) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = dup2(r0, r2) readv(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000240)=""/65, 0x41}, {&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000340)=""/172, 0xac}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)=""/54, 0x36}], 0x7) 2.113622098s ago: executing program 4 (id=1604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8932, &(0x7f0000000040)={'sit0\x00', @local}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000400)={0xb1a, {{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}, 0x88) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) r4 = inotify_init() mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000002c0)={0x2, 0x9, 0x2d, &(0x7f0000000280)=""/45}) (async) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x68181, 0x9) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c00, 0x3) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) (rerun: 32) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x258600, 0x8) setsockopt$inet_udp_int(r6, 0x11, 0xb, &(0x7f0000000100), 0x4) 2.104720688s ago: executing program 4 (id=1605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000140)={0x38, r1, 0x400, 0x70bd27, 0x25dfdc04, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) (async) socket(0xf, 0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x1, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) (async) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)={0x14, r7, 0x5, 0x70bd2c, 0x0, {0x22}}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x2000c094) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r8, 0x9d709648213f508a, 0x72bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008845}, 0x800) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$TCFLSH(r5, 0x400455c8, 0x0) (async) syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) close_range(r9, 0xffffffffffffffff, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.063681458s ago: executing program 4 (id=1606): getpgrp(0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x1802, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x31, 0x0, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) listen(r1, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0xfd, 0x2, 0x9, 0x42, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x80, 0x40, 0x9, 0x8}}) 1.997050649s ago: executing program 4 (id=1607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@empty, 0x2, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1ec}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00143fffffffda060200000000e80001dd0008040d000400"/41, 0x29}], 0x1) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4001, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95e, 0x4, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x51, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0xffff, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xff, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x401, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x5, 0x8d2, 0x9, 0x5, 0x7ffe, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xffffffff, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x2, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000ec"]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r6, 0x0, 0x23, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@updpolicy={0x1a8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075b, 0x7f}}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e24, 0x18dc, 0x4e21, 0x7b, 0xa, 0x120, 0x80, 0xf9959a22f9587ad2, r8, 0xffffffffffffffff}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x2b}, @in6=@private0, {0x6, 0x1000, 0x9, 0xca, 0x9, 0x0, 0x9, 0xc}, {0x1, 0x8, 0x6, 0x5a5e}, {0x333b, 0x6, 0xa}, 0x70bd25, 0x0, 0xa, 0x1, 0x3, 0x60}}]}, 0x1a8}}, 0x2c000010) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40}], 0x0, 0x0, 0x0}) 1.85450214s ago: executing program 4 (id=1615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100e2ffffffffff400101c0"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf00"]) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) 1.83549586s ago: executing program 2 (id=1618): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x10}) syz_clone3(&(0x7f0000003400)={0x100000, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200), {0x3f}, &(0x7f0000001240)=""/46, 0x2e, &(0x7f0000003300)=""/223, &(0x7f0000001280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r1}}, 0x58) syz_open_dev$loop(&(0x7f0000003480), 0x68, 0x1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r2, &(0x7f0000000240)={0x1, 0x2, 0x2, 0x1}, 0x8) fstat(r1, &(0x7f0000001100)) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e9c31000000000001090224000154c0a449090400000103000000092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) renameat2(r1, &(0x7f0000003840)='./file1\x00', r1, &(0x7f0000003880)='./file1\x00', 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x30, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200e77"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x90, 0x89, [{{0x9, 0x4, 0x0, 0xba, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x2, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0xd, 0x9}}]}}}]}}]}}, &(0x7f00000037c0)={0x0, 0x0, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB=' \x00 \x00\x00'], 0x8, [{0xf2, &(0x7f00000034c0)=ANY=[@ANYBLOB="f20385f11c73e345541bca5dd90161f4ca3b1454d317bf252f7f508ae3ae1bb5a7861efa363a3d23679089a555d11c049badfd4feab5f1e2ea5bdca08497b881d2351cea787c63b06cceb25cc59c005e803a2a7ea2613a9985374154c8e5118aaf810fc7bc9d9456bb85041861637c9b579d8db8d455b4ef124fda96d424c4b057bada6d9d486ba8c5bf4a5766430cbdf40c0d7e2fcbe6f1b908cf59037f04e7740fb3d5ef77ad3fac27cee65a70f6bb20f142ccdf82f955cd797d029a32d2e3cc90c7c7b2ec8c5177dce0d2d5453268bff2cb2c958d7f2770b30180fdf28a87dffd6bd74618a7b8e210b330f1c0f63e169c"]}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000003600)=@lang_id={0x4, 0x3, 0x445}}, {0x49, &(0x7f0000003640)=@string={0x49, 0x3, "0e2aba047c422b15551c9b579fc4121f88c7b6bde716bd2d4d189293191114c547d282a021458e299fa8307acb04aede8eca386158b2c92b06b080eb9b01d536d5550b2ce0156e"}}, {0x39, &(0x7f00000036c0)=@string={0x39, 0x3, "0b9b4a233055e8cde4fed3a990ca820f53327cfb175aeafcda4c9717de513fb1039ed41db137a0750737f26191e0d82eeed69d6a24ee01"}}, {0x4, &(0x7f0000003700)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000003740)=@lang_id={0x4, 0x3, 0x816}}, {0x32, &(0x7f0000003780)=@string={0x32, 0x3, "02b12675fdb34316250b9695125069c219bf11bfec854bc8348429fb9be3a6882fb69069124e2c7b9b14d44408ad4630"}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001000)=ANY=[], 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f00000010c0), 0xa1c081, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$FUSE(r5, &(0x7f00000012c0)={0x2020}, 0x2020) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xc0}}, 0x488d4) fcntl$addseals(r2, 0x409, 0x1) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0xb, 0x20011, 0xffffffffffffffff, 0x4e650000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) 1.75882896s ago: executing program 4 (id=1620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000140), 0x1e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 896.405485ms ago: executing program 0 (id=1628): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x1, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000007, 0x80000001}, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) sendfile(r1, r1, 0x0, 0x1000007fd) 846.798715ms ago: executing program 0 (id=1629): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fff0000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 845.450955ms ago: executing program 0 (id=1630): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) 843.969675ms ago: executing program 0 (id=1631): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) read$eventfd(r1, &(0x7f0000000100), 0x8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff}, 0x4000) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000006c0), 0x20000, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@privport}, {@nodevmap}, {@noextend}, {}, {@aname}, {@noextend}, {@afid={'afid', 0x3d, 0x3e}}], [{@smackfsdef={'smackfsdef', 0x3d, ')&/'}}, {@euid_gt={'euid>', r3}}, {@dont_measure}, {@obj_type={'obj_type', 0x3d, '*$/&:\\$[,/\xdf.%*\''}}, {@measure}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_role}]}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x100, 0x0, &(0x7f00000007c0)=[@increfs_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1000, 0x2}, @flat=@handle={0x73682a85, 0x10a, 0x1}, @fda={0x66646185, 0x5, 0x1, 0x22}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0xb}, @flat=@handle={0x73682a85, 0x1001, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/246, 0xf6, 0x2, 0x1c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @exit_looper, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x901, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0), 0x0, 0x0, 0x11}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}, 0x400}], 0x44, 0x0, &(0x7f00000005c0)="6bfd0f0c95d1d52f0f3e88196673a985f1be71ab4378a2e8988cd932df9da3d49c7fc28b65a1b917927eec918015d0c33a5e806062b78fec73129cfe94bcdc093cc1e222"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) 657.479736ms ago: executing program 3 (id=1633): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x7, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)={0x0, {{0xa, 0x4e20, 0x40000007, @mcast2, 0x4}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, {{0xa, 0x4e24, 0x9e, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xff}}]}, 0x190) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x94}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 606.891156ms ago: executing program 3 (id=1634): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@deltfilter={0x24, 0x2d, 0x319, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x8}, {0x4, 0xfff1}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008055}, 0x4040854) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x2e, 0x300000000000000}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000480)={0x8000}) close_range(r0, 0xffffffffffffffff, 0x0) 606.336556ms ago: executing program 3 (id=1635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000020}}, &(0x7f00000001c0)={0x0, 0x3, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 605.924876ms ago: executing program 3 (id=1636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @mcast1, @private0, 0x7800, 0x1, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0}) 595.939836ms ago: executing program 3 (id=1637): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)={'ip_vti0\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x101) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0xfff, 0x4) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write(r3, &(0x7f0000000400)="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", 0x1f000) 535.393897ms ago: executing program 3 (id=1638): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000017c0)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, &(0x7f00000001c0)={0x0, 0x5, 0x55, {0x55, 0xc, "5da9fa7eca609229be38a803f93d5f350ffdd0d1708d30d3e746d72ed60e098b4908cb5d9281cc56a24d1bbd27f15d4dabaeb574088275b90a3b0827a429290200bffc0d5d8754f05245c835f97aaeac310000"}}, &(0x7f00000002c0)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "de1da85e5034905364f85b049c496e8ffa1354b8495a270768e8a6cb1831c5f9928942cfe897a520957ad423bc9d87625b98ccf7bc45021930b99e77b2778c5f9bc74874e0ccb7df4aa8bda3ea6eaa9814db11ce17fc549bf430db6ee1"}}, &(0x7f0000000640)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "0f482976"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x2, 0x1, {0x22, 0x73b}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000700)=ANY=[], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000500)={0x20, 0x1, 0xfe, "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"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xac}}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="001c04000200f1983431"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES32=r1], 0x0, 0x0}, 0x0) ioprio_set$uid(0x3, 0x0, 0xf6ff3fd78fa5d57f) (async) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, &(0x7f0000000700)="f3416df30fa7d8660f3a0b2a00c46129dd4b98c7442400fcffffffc74424027a000000c7442406000000000f011424650f01c9470f01dfc403c5790ba70f01c3c4c251bb7e95", 0x46}], 0x1, 0x13, &(0x7f00000007c0), 0x0) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)="1e0e", 0x2) (async) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000003100)=ANY=[], 0x10448) r7 = dup(r3) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x4a0020, 0x7d, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4}}, 0x50) (async) r8 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}], [], 0x6b}}) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x3b, 0x0, &(0x7f0000000040)) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 298.827238ms ago: executing program 2 (id=1639): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1b, 0x8, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cce0a1fcaed1e831fa79a", "67523760fd40f7da2cfc03d81a8ca55ba139c01802c4dae4162e43039cb7ad33", [0x4, 0x7]}}) (async) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, 0x0) splice(r5, &(0x7f0000001080)=0xfffffffffffffffd, r1, &(0x7f0000000100)=0x13, 0x4, 0x8) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000001000)={0xd2, 0x4e}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 110.420459ms ago: executing program 2 (id=1640): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c031}, 0x404a05c) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) recvfrom(r2, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x5a9602, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000040)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000001c0)=[@request_death, @release, @acquire_done={0x40106309, 0x3}], 0xf1, 0x0, &(0x7f0000000280)="930cf8ca8b5e15453e4cc277daabf37d864675c03eb4e5ba733a75861740b7c006b9ccbfad6b3c39aa2f571110d861ac152840ed90b2fb1452157bd54e1476c5c47fc865617565a6306a6d1529b131c2cc2ef847d3933ab3fd5e485ff09617a3c7c7b4073a46c4b9bd0f2bc3fd05293e9bc8ed0ffc675b4245532e609d8b4b37e81712dbc981f872b711fea636d295b7ab5b48e8bb809f43b8b7585cc43c2c23f75a95c37371db6b2cdc61364b009ea332c67db0959e1214920d23e5aa6e0e202436c07afb7602964e4da5c9861478040a43078c118820a398d35ea0504bf5b6f2f839764d86079ab8e207dab16e84fb15"}) prctl$PR_SET_PDEATHSIG(0x1, 0xe) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000080)=0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r0, 0xffffb000) ppoll(&(0x7f00000000c0)=[{r0, 0x50ec}, {r0, 0x220}, {}, {r0, 0x5010}, {r0, 0x100}], 0x5, &(0x7f0000000100), &(0x7f0000000140)={[0x5]}, 0x8) 100.562949ms ago: executing program 2 (id=1641): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00') linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unshare(0x2a020400) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000280)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) (async) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) lremovexattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00') (async) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x1000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) unshare(0x2a020400) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) (async) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000280)) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') (async) 6.821609ms ago: executing program 2 (id=1642): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x14801) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x101040, 0x162) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000140), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x104, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_IOCTL(r4, &(0x7f0000000940)={0x20, 0x0, 0x0, {0x81, 0x0, 0x9, 0xf}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) removexattr(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x27800000000, 0x0, 0x2}) lsetxattr$trusted_overlay_upper(&(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, 0x0, 0x1) llistxattr(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)=""/21, 0x1fe) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r8, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc45, 0x4}) openat(r8, 0x0, 0x0, 0x152) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 6.26048ms ago: executing program 0 (id=1643): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x5, &(0x7f0000000100)=[{0x4, 0x0, 0x2, 0x288b}, {0xb, 0x3, 0x7f, 0x7}, {0x3, 0x3, 0x1, 0xfffffff3}, {0x200, 0x3a, 0x0, 0x8e0}, {0x200, 0x8, 0x7, 0x5}]}, 0x10) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2, 0x6, 0xdeff, 0x9, 0x7}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x315000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)=[@register_looper, @decrefs, @increfs={0x40046304, 0x2}], 0x1000, 0x0, &(0x7f0000000400)="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"}) (rerun: 64) 0s ago: executing program 0 (id=1644): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0xffffff87, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="4011af000000b7"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000003e40), 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, &(0x7f00000002c0)={0x40, 0xf, 0xc0, {0xc0, 0x24, "613fbf1a5935fe3416bed557e8dce3015f395b303711180bc9ac3ba5d53573f2c67166ac5d2b16c0f4d764c23c288292a7c67c39f10705f193e0935d807bd269accc6d820803da58c7af8a712da9978d281c3ba0dba945870ce138168d623568f6d24663c7b90c1f3352bb355fac00f7fbd00fa4aee9048f1e8e1950cdf7d4e56e170ca5dd5be30e7a89d645295b2c214c50143014ed99275bae7a8da1a21274d8fcde8a7a18ba678addd8c28b2168d969f40f7e964b09d8cd156a41dc26"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0xe, 0x45, "eec72d8f0577cde593388b6257317682eb728cd9853e22825a1278cbb11dd78cd8fe55f3eac6c100ed535c28a9f51156f51db87b04bca4b778f635208927e30d5f95975648"}, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x1, 0x70, "f2d8d45b836d79f3d28e35abb0487af947d7dd02eabb564107562adf09d1455fed3e6a2cc54bc9c737c3d3fa6098c6432661554cec9cc549eb790c28ca1484596597a5a2c9cb94e541799aa5fc07df1b1a84ede8be5846cdbd6208625653f2a62dbe6716851f7ad51a064ad18d555621"}, 0x0}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x6, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0xfffffffd}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 4, error -71 [ 32.847415][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 32.857126][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 32.866811][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.880037][ T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 32.889234][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.898022][ T31] usb 4-1: config 0 descriptor?? [ 33.068485][ T10] usb 2-1: device descriptor read/64, error -71 [ 33.112188][ T31] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 33.142863][ T31] usb 4-1: USB disconnect, device number 5 [ 33.151169][ T31] usblp0: removed [ 33.210679][ T707] futex_wake_op: syz.2.118 tries to shift op by -1; fix this program [ 33.318502][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 33.458474][ T10] usb 2-1: device descriptor read/64, error -71 [ 33.718471][ T10] usb 2-1: device descriptor read/64, error -71 [ 33.719613][ T732] netlink: 164 bytes leftover after parsing attributes in process `syz.2.125'. [ 33.733722][ T607] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.743015][ T732] rust_binder: Error while translating object. [ 33.743049][ T732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.749365][ T732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 33.828633][ T10] usb usb2-port1: attempt power cycle [ 33.888476][ T607] usb 4-1: Using ep0 maxpacket: 32 [ 33.899357][ T607] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 33.907709][ T607] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 33.941060][ T607] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 33.961454][ T742] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 33.978479][ T607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.988141][ T607] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.998951][ T607] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 34.011968][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.019648][ T607] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 34.033947][ T607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.054400][ T607] usb 4-1: config 0 descriptor?? [ 34.173908][ T750] 9pnet_fd: Insufficient options for proto=fd [ 34.180055][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 34.185639][ T31] usb 3-1: too many configurations: 80, using maximum allowed: 8 [ 34.188547][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 34.200253][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 34.210852][ T31] usb 3-1: can't read configurations, error -61 [ 34.231432][ T10] usb 2-1: device descriptor read/8, error -71 [ 34.262814][ T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.272165][ T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.284653][ T607] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 34.338487][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.369472][ T10] usb 2-1: device descriptor read/8, error -71 [ 34.438484][ T331] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.483740][ T9] usb 4-1: USB disconnect, device number 6 [ 34.490432][ T9] usblp0: removed [ 34.491346][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 34.504089][ T31] usb 3-1: too many configurations: 80, using maximum allowed: 8 [ 34.513163][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 34.520922][ T31] usb 3-1: can't read configurations, error -61 [ 34.527259][ T31] usb usb3-port1: attempt power cycle [ 34.588455][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 34.609233][ T331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.614005][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 34.619369][ T331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.637274][ T331] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.646474][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.654677][ T331] usb 1-1: Product: syz [ 34.658998][ T331] usb 1-1: Manufacturer: syz [ 34.663625][ T331] usb 1-1: SerialNumber: syz [ 34.663741][ T10] usb 2-1: device descriptor read/8, error -71 [ 34.799555][ T10] usb 2-1: device descriptor read/8, error -71 [ 34.878475][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.889140][ T331] usb 1-1: 0:2 : does not exist [ 34.896527][ T331] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 34.908022][ T331] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 34.915720][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 34.921491][ T31] usb 3-1: too many configurations: 80, using maximum allowed: 8 [ 34.927062][ T10] usb usb2-port1: unable to enumerate USB device [ 34.930741][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 34.943429][ T31] usb 3-1: can't read configurations, error -61 [ 34.951033][ T331] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 34.965260][ T331] usb 1-1: USB disconnect, device number 7 [ 35.078466][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.098889][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 35.104437][ T31] usb 3-1: too many configurations: 80, using maximum allowed: 8 [ 35.113388][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 35.121005][ T31] usb 3-1: can't read configurations, error -61 [ 35.127388][ T31] usb usb3-port1: unable to enumerate USB device [ 35.248486][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 35.402048][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.422017][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 35.433374][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 35.448577][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 35.460684][ T10] usb 4-1: SerialNumber: syz [ 35.468093][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 35.477053][ T10] usb-storage 4-1:1.0: USB Mass Storage device detected [ 35.485249][ T10] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 35.485736][ T754] kvm: faulting far call emulation tainted memory [ 35.499617][ T754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 35.500574][ T10] scsi host1: usb-storage 4-1:1.0 [ 35.625177][ T769] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 35.632800][ T769] SELinux: failed to load policy [ 35.637822][ T768] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 35.645520][ T768] SELinux: failed to load policy [ 35.730841][ T772] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 35.788478][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.938507][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 35.944667][ T31] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 35.953175][ T31] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 35.961372][ T31] usb 1-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 35.971634][ T31] usb 1-1: config 0 has no interface number 0 [ 35.978930][ T31] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 35.987944][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.997070][ T31] usb 1-1: Product: syz [ 36.001294][ T31] usb 1-1: Manufacturer: syz [ 36.005881][ T31] usb 1-1: SerialNumber: syz [ 36.011095][ T31] usb 1-1: config 0 descriptor?? [ 36.022533][ T783] /dev/rnullb0: Can't open blockdev [ 36.088505][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 36.218612][ T330] usb 1-1: USB disconnect, device number 8 [ 36.239505][ T10] usb 2-1: config 0 has an invalid interface number: 190 but max is 0 [ 36.247701][ T10] usb 2-1: config 0 has no interface number 0 [ 36.253866][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=1111, bcdDevice= 7.75 [ 36.262948][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.271517][ T10] usb 2-1: config 0 descriptor?? [ 36.477768][ T10] usb 2-1: string descriptor 0 read error: -71 [ 36.484462][ T10] usb 2-1: bad CDC descriptors [ 36.490758][ T10] usb 2-1: USB disconnect, device number 13 [ 36.732226][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 36.732378][ T36] audit: type=1400 audit(1762679034.340:257): avc: denied { create } for pid=784 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.750502][ T10] usb 4-1: USB disconnect, device number 7 [ 36.792368][ T792] rust_binder: Error while translating object. [ 36.792392][ T792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 36.798695][ T792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:135 [ 36.821959][ T795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:138 [ 36.832203][ T36] audit: type=1400 audit(1762679034.440:258): avc: denied { execute } for pid=794 comm="syz.2.145" name="file0" dev="ramfs" ino=6765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 36.862993][ T36] audit: type=1400 audit(1762679034.450:259): avc: denied { execute_no_trans } for pid=794 comm="syz.2.145" path="/file0" dev="ramfs" ino=6765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 36.894419][ T797] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.178483][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 37.269757][ T36] audit: type=1400 audit(1762679034.880:260): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.338481][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 37.363654][ T829] tipc: Started in network mode [ 37.368949][ T829] tipc: Node identity 4, cluster identity 4711 [ 37.375179][ T36] audit: type=1400 audit(1762679034.980:261): avc: denied { ioctl } for pid=832 comm="syz.1.156" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 37.378836][ T829] tipc: Node number set to 4 [ 37.402703][ T36] audit: type=1400 audit(1762679035.010:262): avc: denied { mounton } for pid=812 comm="syz.2.150" path="/proc/153/task" dev="proc" ino=6878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 37.408641][ T833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 37.469761][ T36] audit: type=1400 audit(1762679035.080:263): avc: denied { create } for pid=839 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 37.489973][ T841] netlink: 44 bytes leftover after parsing attributes in process `syz.3.159'. [ 37.504630][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 37.517235][ T841] rust_binder: 97: no such ref 3 [ 37.518810][ T31] usb 3-1: no configurations [ 37.522612][ T841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 37.531788][ T31] usb 3-1: can't read configurations, error -22 [ 37.555204][ T36] audit: type=1400 audit(1762679035.160:264): avc: denied { accept } for pid=849 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.574828][ T36] audit: type=1400 audit(1762679035.160:265): avc: denied { read } for pid=849 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.597516][ T36] audit: type=1400 audit(1762679035.200:266): avc: denied { relabelfrom } for pid=849 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.635557][ T855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.164'. [ 37.645894][ T857] rust_binder: Write failure EFAULT in pid:102 [ 37.714638][ T861] cgroup: Invalid name [ 37.740329][ T865] rust_binder: Error while translating object. [ 37.740353][ T865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 37.746558][ T865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:133 [ 37.826520][ T882] /dev/rnullb0: Can't open blockdev [ 38.048480][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 38.069855][ T887] rust_binder: 886 RLIMIT_NICE not set [ 38.069882][ T887] rust_binder: 157: no such ref 0 [ 38.080563][ T331] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 38.158384][ T891] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 38.158400][ T891] rust_binder: Error while translating object. [ 38.170631][ T891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.176797][ T891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 38.197163][ T893] __vm_enough_memory: pid: 893, comm: syz.2.175, bytes: 18014402804453376 not enough memory for the allocation [ 38.219112][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 38.229878][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 38.239709][ T331] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 38.243258][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 38.252304][ T331] usb 4-1: config 1 has no interface number 0 [ 38.260534][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.267080][ T331] usb 4-1: config 1 interface 105 has no altsetting 0 [ 38.281497][ T10] usb 2-1: config 0 descriptor?? [ 38.285333][ T331] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 38.295545][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.303555][ T331] usb 4-1: Product: syz [ 38.307749][ T331] usb 4-1: Manufacturer: syz [ 38.312353][ T331] usb 4-1: SerialNumber: syz [ 38.490180][ T880] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.504233][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 38.510615][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 38.520130][ T331] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 38.524305][ T10] usb 2-1: USB disconnect, device number 14 [ 38.543237][ T331] usb 4-1: USB disconnect, device number 8 [ 38.549123][ T901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 38.558184][ T901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=901 comm=syz.1.178 [ 38.570643][ T901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.570660][ T901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 38.588493][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 38.662865][ T911] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 38.662881][ T911] rust_binder: Error while translating object. [ 38.675163][ T911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.681478][ T911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 38.709959][ T918] rust_binder: Write failure EFAULT in pid:145 [ 38.749550][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 38.764756][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.773584][ T31] usb 3-1: config 0 descriptor?? [ 38.858505][ T607] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 38.958486][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 39.009397][ T607] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.019350][ T607] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.025983][ T607] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 39.035478][ T607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.044601][ T607] usb 1-1: config 0 descriptor?? [ 39.109576][ T10] usb 2-1: config 4 has an invalid interface number: 168 but max is 0 [ 39.118285][ T10] usb 2-1: config 4 has no interface number 0 [ 39.124466][ T10] usb 2-1: config 4 interface 168 has no altsetting 0 [ 39.132612][ T10] usb 2-1: New USB device found, idVendor=059f, idProduct=105f, bcdDevice= f.69 [ 39.141876][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.150073][ T10] usb 2-1: Product: syz [ 39.154222][ T10] usb 2-1: Manufacturer: syz [ 39.158813][ T10] usb 2-1: SerialNumber: syz [ 39.182303][ T31] wacom 0003:056A:032A.0003: hidraw0: USB HID v1.01 Device [HID 056a:032a] on usb-dummy_hcd.2-1/input0 [ 39.338477][ T440] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 39.386940][ T31] usb 3-1: USB disconnect, device number 10 [ 39.452235][ T907] rust_binder: Write failure EFAULT in pid:141 [ 39.453264][ T607] usbhid 1-1:0.0: can't add hid device: -71 [ 39.465369][ T607] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.473960][ T607] usb 1-1: USB disconnect, device number 9 [ 39.488473][ T440] usb 4-1: Using ep0 maxpacket: 16 [ 39.494671][ T440] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.505744][ T440] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.512380][ T440] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 39.521439][ T440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.530214][ T440] usb 4-1: config 0 descriptor?? [ 39.742544][ T928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.752079][ T928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.764970][ T440] usbhid 4-1:0.0: can't add hid device: -71 [ 39.770977][ T440] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 39.781590][ T440] usb 4-1: USB disconnect, device number 9 [ 39.872244][ T10] usb-storage 2-1:4.168: USB Mass Storage device detected [ 39.880134][ T10] usb-storage 2-1:4.168: Quirks match for vid 059f pid 105f: 44000000 [ 39.920634][ T10] usb 2-1: USB disconnect, device number 15 [ 40.031120][ T943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 40.031149][ T943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:174 [ 40.083560][ T951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 40.111979][ T953] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.112000][ T953] rust_binder: Read failure Err(EFAULT) in pid:147 [ 40.174047][ T949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 40.329065][ T974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 40.338331][ T974] rust_binder: Write failure EFAULT in pid:123 [ 40.348409][ T967] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 40.363867][ T967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 40.398490][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 40.510592][ T985] rust_binder: 151: no such ref 3 [ 40.515625][ T985] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 40.522692][ T985] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 40.529793][ T985] rust_binder: Write failure EFAULT in pid:151 [ 40.558504][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 40.569730][ T607] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 40.578755][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.587059][ T31] usb 1-1: config 15 has an invalid interface number: 140 but max is 1 [ 40.595330][ T31] usb 1-1: config 15 has an invalid interface number: 26 but max is 1 [ 40.603493][ T31] usb 1-1: config 15 has no interface number 0 [ 40.609653][ T31] usb 1-1: config 15 has no interface number 1 [ 40.615807][ T31] usb 1-1: config 15 interface 140 altsetting 13 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 40.626933][ T31] usb 1-1: config 15 interface 140 altsetting 13 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 40.638054][ T31] usb 1-1: config 15 interface 140 altsetting 13 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 40.649263][ T31] usb 1-1: config 15 interface 26 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 64 [ 40.658485][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 40.659274][ T31] usb 1-1: config 15 interface 26 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 40.677376][ T31] usb 1-1: config 15 interface 26 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 40.688092][ T31] usb 1-1: config 15 interface 140 has no altsetting 0 [ 40.694961][ T31] usb 1-1: config 15 interface 26 has no altsetting 0 [ 40.703748][ T31] usb 1-1: string descriptor 0 read error: -22 [ 40.709971][ T31] usb 1-1: New USB device found, idVendor=05c6, idProduct=9235, bcdDevice=40.ed [ 40.719094][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.727652][ T31] usb 1-1: Interface #140 referenced by multiple IADs [ 40.738476][ T607] usb 3-1: Using ep0 maxpacket: 32 [ 40.748555][ T607] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 40.756646][ T607] usb 3-1: config 0 has no interface number 0 [ 40.756824][ T987] netlink: 'syz.1.207': attribute type 39 has an invalid length. [ 40.764244][ T607] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 40.779571][ T607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.787554][ T607] usb 3-1: Product: syz [ 40.791985][ T607] usb 3-1: Manufacturer: syz [ 40.796589][ T607] usb 3-1: SerialNumber: syz [ 40.807173][ T607] usb 3-1: config 0 descriptor?? [ 40.813515][ T607] smsc95xx v2.0.0 [ 40.829590][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.840846][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 40.848634][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 40.858246][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.870206][ T10] usb 4-1: config 0 descriptor?? [ 40.927309][ T997] /dev/rnullb0: Can't open blockdev [ 40.943251][ T961] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.199' resets device [ 40.953031][ T961] binder: Bad value for 'max' [ 40.958410][ T31] usb 1-1: USB disconnect, device number 10 [ 40.976647][ T1005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:172 [ 40.977296][ T1006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:172 [ 41.014715][ T1010] overlay: ./file0 is not a directory [ 41.038363][ T1010] fuseblk: Bad value for 'rootmode' [ 41.066190][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.072723][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.216408][ T607] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 41.227193][ T607] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.276956][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 41.283866][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 41.292626][ T10] usb 4-1: USB disconnect, device number 10 [ 41.789614][ T1048] rust_binder: Write failure EFAULT in pid:134 [ 41.797925][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 41.797942][ T36] audit: type=1400 audit(1762679039.400:293): avc: denied { append } for pid=1049 comm="syz.3.228" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.821235][ T1055] 9pnet_fd: Insufficient options for proto=fd [ 42.228509][ T331] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 42.277734][ T1073] binder: Unknown parameter 'defcontext01777777777777777777777' [ 42.340850][ T1075] 9pnet: Could not find request transport: fdrfdno=0x0000000000000003 [ 42.351464][ T1075] netlink: 'syz.1.236': attribute type 27 has an invalid length. [ 42.391103][ T331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.401648][ T331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.413372][ T331] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 42.422445][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 42.430482][ T331] usb 4-1: SerialNumber: syz [ 42.637054][ T1064] rust_binder: 150: no such ref 0 [ 42.642311][ T1064] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 42.649391][ T1064] rust_binder: 150: no such ref 2 [ 42.654522][ T1064] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 42.656304][ T331] usb 4-1: 0:2 : does not exist [ 42.673676][ T331] usb 4-1: USB disconnect, device number 11 [ 42.683046][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.938260][ T1079] sock: sock_timestamping_bind_phc: sock not bind to device [ 42.999536][ T1081] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.108515][ T586] Bluetooth: hci0: command 0x1003 tx timeout [ 43.114590][ T585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.167301][ T1089] netlink: 'syz.1.241': attribute type 4 has an invalid length. [ 43.176546][ T1089] overlay: ./file0 is not a directory [ 43.184325][ T1089] 9pnet_fd: Insufficient options for proto=fd [ 43.203317][ T1092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.205416][ T1092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.220855][ T1092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.229616][ T1092] fuse: Unknown parameter 'nC#yݩ*N/' [ 43.236823][ T1092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.236853][ T1092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 43.251813][ T1095] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 43.261252][ T1095] rust_binder: Error while translating object. [ 43.270504][ T1095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.276764][ T1095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 43.374843][ T1104] netlink: 'syz.3.246': attribute type 1 has an invalid length. [ 43.392494][ T36] audit: type=1400 audit(1762679041.000:294): avc: denied { setopt } for pid=1103 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.392669][ T1104] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 43.438520][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 43.473859][ T36] audit: type=1400 audit(1762679041.080:295): avc: denied { map } for pid=1111 comm="syz.0.250" path="socket:[8543]" dev="sockfs" ino=8543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 43.588837][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 43.595072][ T10] usb 2-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.605035][ T10] usb 2-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32 [ 43.615088][ T10] usb 2-1: config 1 interface 0 altsetting 254 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 43.626761][ T10] usb 2-1: config 1 interface 0 altsetting 254 endpoint 0x88 has invalid wMaxPacketSize 0 [ 43.636695][ T10] usb 2-1: config 1 interface 0 altsetting 254 bulk endpoint 0x88 has invalid maxpacket 0 [ 43.646606][ T10] usb 2-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 43.659827][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 43.667146][ T10] usb 2-1: New USB device found, idVendor=7fff, idProduct=a4a1, bcdDevice= 0.40 [ 43.676458][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 43.679348][ T378] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 43.684487][ T10] usb 2-1: SerialNumber: syz [ 43.698677][ T1091] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 43.706541][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 43.838478][ T378] usb 4-1: Using ep0 maxpacket: 16 [ 43.844878][ T378] usb 4-1: unable to get BOS descriptor or descriptor too short [ 43.853358][ T378] usb 4-1: config 4 has an invalid interface number: 254 but max is 1 [ 43.861558][ T378] usb 4-1: config 4 has an invalid interface number: 93 but max is 1 [ 43.869866][ T378] usb 4-1: config 4 has no interface number 0 [ 43.875953][ T378] usb 4-1: config 4 has no interface number 1 [ 43.882066][ T378] usb 4-1: config 4 interface 93 altsetting 3 endpoint 0x1 has invalid maxpacket 1552, setting to 1024 [ 43.893141][ T378] usb 4-1: config 4 interface 254 has no altsetting 0 [ 43.899981][ T378] usb 4-1: config 4 interface 93 has no altsetting 0 [ 43.906856][ T10] usb 2-1: USB disconnect, device number 16 [ 43.908010][ T378] usb 4-1: New USB device found, idVendor=12d1, idProduct=9851, bcdDevice=79.24 [ 43.922022][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.930035][ T378] usb 4-1: Product: syz [ 43.934192][ T378] usb 4-1: Manufacturer: syz [ 43.938799][ T378] usb 4-1: SerialNumber: syz [ 44.145488][ T1106] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 44.155614][ T378] cdc_mbim 4-1:4.254: CDC Union missing and no IAD found [ 44.162963][ T378] cdc_mbim 4-1:4.254: bind() failure [ 44.170741][ T378] usb 4-1: USB disconnect, device number 12 [ 44.248253][ T36] audit: type=1400 audit(1762679041.850:296): avc: denied { map } for pid=1132 comm="syz.0.256" path="socket:[8560]" dev="sockfs" ino=8560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 44.276189][ T607] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -61 [ 44.286985][ T607] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 44.424409][ T36] audit: type=1400 audit(1762679042.030:297): avc: denied { mount } for pid=1156 comm="syz.1.264" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 44.446436][ T36] audit: type=1326 audit(1762679042.040:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1156 comm="syz.1.264" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbbe98f6c9 code=0x0 [ 44.505355][ T1160] 9pnet_fd: Insufficient options for proto=fd [ 44.511806][ T36] audit: type=1400 audit(1762679042.120:299): avc: denied { remount } for pid=1154 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.519133][ T1160] netlink: 'syz.0.263': attribute type 27 has an invalid length. [ 44.685200][ T1162] loop7: detected capacity change from 0 to 7 [ 44.691636][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.700791][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 44.708745][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.717859][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 44.725754][ T1162] loop7: unable to read partition table [ 44.731526][ T1162] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 44.732731][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.754130][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 44.762436][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.771612][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 44.779671][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.788826][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 44.796851][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.805995][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 44.814073][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.823206][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 45.008496][ T440] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 45.159549][ T440] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.169378][ T440] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 45.178393][ T440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.187018][ T440] usb 4-1: config 0 descriptor?? [ 45.312839][ T36] audit: type=1400 audit(1762679042.920:300): avc: denied { execute } for pid=1191 comm="syz.0.274" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.345342][ T10] usb 3-1: USB disconnect, device number 11 [ 45.399356][ T440] usbhid 4-1:0.0: can't add hid device: -71 [ 45.405329][ T440] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 45.417170][ T440] usb 4-1: USB disconnect, device number 13 [ 45.425949][ T36] audit: type=1400 audit(1762679043.030:301): avc: denied { write } for pid=1199 comm="syz.3.276" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.452081][ T36] audit: type=1400 audit(1762679043.030:302): avc: denied { add_name } for pid=1199 comm="syz.3.276" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.541076][ T1207] cgroup: No subsys list or none specified [ 45.552951][ T1207] cgroup: No subsys list or none specified [ 45.573876][ T1212] netlink: 'syz.3.279': attribute type 27 has an invalid length. [ 45.668499][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 45.829642][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 45.840634][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 45.849777][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.859008][ T10] usb 3-1: config 0 descriptor?? [ 45.867238][ T1194] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 46.077395][ T1194] tipc: Started in network mode [ 46.082526][ T1194] tipc: Node identity 3e32bd38ecd1, cluster identity 4711 [ 46.090100][ T1194] tipc: Enabled bearer , priority 0 [ 46.098009][ T1194] syzkaller0: MTU too low for tipc bearer [ 46.104111][ T1194] tipc: Disabling bearer [ 46.328604][ T10] hid-generic 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 46.589747][ T330] usb 3-1: USB disconnect, device number 12 [ 46.598045][ T1244] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.612392][ T1248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60417 sclass=netlink_route_socket pid=1248 comm=syz.1.289 [ 46.631825][ T1248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60417 sclass=netlink_route_socket pid=1248 comm=syz.1.289 [ 46.644684][ T1248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60417 sclass=netlink_route_socket pid=1248 comm=syz.1.289 [ 46.657422][ T1248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60417 sclass=netlink_route_socket pid=1248 comm=syz.1.289 [ 46.670172][ T1248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60417 sclass=netlink_route_socket pid=1248 comm=syz.1.289 [ 46.682982][ T1248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60417 sclass=netlink_route_socket pid=1248 comm=syz.1.289 [ 46.695721][ T1248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60417 sclass=netlink_route_socket pid=1248 comm=syz.1.289 [ 46.708692][ T1248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60417 sclass=netlink_route_socket pid=1248 comm=syz.1.289 [ 46.721430][ T1248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60417 sclass=netlink_route_socket pid=1248 comm=syz.1.289 [ 46.734129][ T1248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60417 sclass=netlink_route_socket pid=1248 comm=syz.1.289 [ 46.767915][ T1260] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.779655][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 46.893960][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 46.893979][ T36] audit: type=1400 audit(1762679044.500:311): avc: denied { block_suspend } for pid=1263 comm="syz.1.294" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.937072][ T1268] fuse: Bad value for 'fd' [ 46.939198][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 46.950260][ T10] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 46.958355][ T10] usb 4-1: config 95 has no interface number 0 [ 46.963014][ T1270] overlayfs: failed to clone upperpath [ 46.964718][ T10] usb 4-1: config 95 interface 1 has no altsetting 0 [ 46.983196][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 46.995765][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.004307][ T10] usb 4-1: Product: syz [ 47.008929][ T36] audit: type=1400 audit(1762679044.610:312): avc: denied { mounton } for pid=1275 comm="syz.1.299" path="/80/file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 47.032280][ T10] usb 4-1: Manufacturer: syz [ 47.036889][ T10] usb 4-1: SerialNumber: syz [ 47.112433][ T1293] fuse: Unknown parameter 'fd90xffffffffffffffff' [ 47.123777][ T1293] fuse: Bad value for 'group_id' [ 47.128833][ T1293] fuse: Bad value for 'group_id' [ 47.180727][ T36] audit: type=1400 audit(1762679044.790:313): avc: denied { listen } for pid=1299 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.200376][ T36] audit: type=1400 audit(1762679044.790:314): avc: denied { accept } for pid=1299 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.245192][ T1238] rust_binder: Error while translating object. [ 47.245259][ T1238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.251740][ T1238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 47.278902][ T10] usb 4-1: USB disconnect, device number 14 [ 47.335459][ T36] audit: type=1400 audit(1762679044.940:315): avc: denied { bind } for pid=1311 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.358489][ T607] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 47.519441][ T607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.529258][ T607] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 47.538293][ T607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.547126][ T607] usb 3-1: config 0 descriptor?? [ 47.696091][ T1323] cgroup: subsys name conflicts with all [ 47.711033][ T1325] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 47.720876][ T1325] netlink: 'syz.1.317': attribute type 17 has an invalid length. [ 47.758018][ T36] audit: type=1400 audit(1762679045.360:316): avc: denied { getopt } for pid=1330 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.766143][ T1331] fuse: Bad value for 'fd' [ 47.827981][ T36] audit: type=1400 audit(1762679045.430:317): avc: denied { setopt } for pid=1344 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.210004][ T1295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.219442][ T1295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.232792][ T607] usbhid 3-1:0.0: can't add hid device: -71 [ 48.239113][ T607] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 48.250133][ T607] usb 3-1: USB disconnect, device number 13 [ 48.618461][ T36] audit: type=1400 audit(1762679046.220:318): avc: denied { map } for pid=1396 comm="syz.0.343" path="socket:[9103]" dev="sockfs" ino=9103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 48.782802][ T1418] __vm_enough_memory: pid: 1418, comm: syz.2.350, bytes: 21200544067584 not enough memory for the allocation [ 48.795265][ T36] audit: type=1400 audit(1762679046.400:319): avc: denied { map } for pid=1415 comm="syz.2.350" path="socket:[9468]" dev="sockfs" ino=9468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.795845][ T1418] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 48.818208][ T36] audit: type=1400 audit(1762679046.400:320): avc: denied { read } for pid=1415 comm="syz.2.350" path="socket:[9468]" dev="sockfs" ino=9468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.864091][ T1427] netlink: 80 bytes leftover after parsing attributes in process `syz.2.355'. [ 48.929555][ T1408] overlay: ./file0 is not a directory [ 48.935472][ T1408] 9pnet_fd: Insufficient options for proto=fd [ 48.958772][ T1451] rust_binder: Write failure EFAULT in pid:212 [ 49.496293][ T1486] netlink: 'syz.0.377': attribute type 16 has an invalid length. [ 49.539063][ T1494] rust_binder: Error while translating object. [ 49.539104][ T1494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.546260][ T1494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 49.565975][ T1497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.592465][ T1503] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 49.681210][ T1513] overlay: ./bus is not a directory [ 50.098650][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 50.249627][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.259793][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.269349][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.278418][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.286429][ T9] usb 3-1: SerialNumber: syz [ 50.499401][ T1529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.508082][ T1529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.525460][ T1569] 9pnet_fd: Insufficient options for proto=fd [ 50.530810][ T1568] 9pnet_fd: Insufficient options for proto=fd [ 50.555543][ T9] usb 3-1: 0:2 : does not exist [ 50.565076][ T9] usb 3-1: USB disconnect, device number 14 [ 50.574796][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.190284][ T1612] netlink: 393 bytes leftover after parsing attributes in process `syz.3.418'. [ 51.308505][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 51.459498][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 51.470392][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.481401][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.491149][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 51.504120][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 51.513305][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.521988][ T9] usb 3-1: config 0 descriptor?? [ 51.932528][ T9] wacom 0003:056A:0015.0005: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 51.951067][ T9] wacom 0003:056A:0015.0005: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.2-1/input0 [ 51.978649][ T9] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0015.0005/input/input7 [ 52.015273][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 52.015289][ T36] audit: type=1400 audit(1762679049.620:334): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=531 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.078535][ T36] audit: type=1400 audit(1762679049.620:335): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=531 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.118882][ T36] audit: type=1400 audit(1762679049.620:336): avc: denied { create } for pid=1629 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 52.142289][ T1599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.158525][ T36] audit: type=1400 audit(1762679049.630:337): avc: denied { write } for pid=1629 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 52.179299][ T1599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.207319][ T36] audit: type=1400 audit(1762679049.680:338): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=531 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.298517][ T607] usb 3-1: USB disconnect, device number 15 [ 52.362693][ T36] audit: type=1400 audit(1762679049.970:339): avc: denied { listen } for pid=1638 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 52.428071][ T1642] selinux_netlink_send: 25 callbacks suppressed [ 52.428092][ T1642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1642 comm=syz.3.428 [ 60.832396][ T36] audit: type=1326 audit(1762679058.440:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e118f6c9 code=0x7ffc0000 [ 60.835401][ T1672] rust_binder: Write failure EFAULT in pid:242 [ 60.859940][ T36] audit: type=1326 audit(1762679058.440:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff2e118f6c9 code=0x7ffc0000 [ 60.901424][ T36] audit: type=1326 audit(1762679058.440:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e118f6c9 code=0x7ffc0000 [ 60.924998][ T36] audit: type=1326 audit(1762679058.440:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e118f6c9 code=0x7ffc0000 [ 60.952757][ T36] audit: type=1326 audit(1762679058.440:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2e118f6c9 code=0x7ffc0000 [ 60.976144][ T36] audit: type=1326 audit(1762679058.440:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e118f6c9 code=0x7ffc0000 [ 60.999437][ T36] audit: type=1326 audit(1762679058.440:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff2e118f6c9 code=0x7ffc0000 [ 61.022977][ T36] audit: type=1326 audit(1762679058.440:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=244 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 61.047153][ T36] audit: type=1326 audit(1762679058.440:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e118f6c9 code=0x7ffc0000 [ 61.071502][ T36] audit: type=1326 audit(1762679058.440:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2e118f6c9 code=0x7ffc0000 [ 61.113844][ T1699] 9pnet_fd: Insufficient options for proto=fd [ 61.181162][ T1710] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.708041][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 62.102438][ T1741] loop2: detected capacity change from 0 to 8388607 [ 62.150663][ T1749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 62.175322][ T1755] fuse: Unknown parameter 'fq[0x0000000000000003' [ 62.244669][ T1764] netlink: 80 bytes leftover after parsing attributes in process `syz.0.468'. [ 62.634526][ T1799] rust_binder: 298: no such ref 1 [ 62.639639][ T1799] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 62.645040][ T1799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 62.653899][ T1801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.029180][ T378] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 63.188839][ T378] usb 3-1: Using ep0 maxpacket: 32 [ 63.195131][ T378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.206183][ T378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.215990][ T378] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 63.225041][ T378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.233594][ T378] usb 3-1: config 0 descriptor?? [ 63.373557][ T60] tipc: Subscription rejected, illegal request [ 63.640292][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 63.647110][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 63.653918][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 63.660704][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 63.667454][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 63.674254][ T378] savu 0003:1E7D:2D5A.0006: unbalanced collection at end of report description [ 63.683293][ T378] savu 0003:1E7D:2D5A.0006: parse failed [ 63.688953][ T378] savu 0003:1E7D:2D5A.0006: probe with driver savu failed with error -22 [ 63.843275][ T1813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.843307][ T1813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:310 [ 63.854001][ T440] usb 3-1: USB disconnect, device number 16 [ 64.368895][ T1875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=1875 comm=syz.2.503 [ 64.382099][ T1875] syzkaller0: refused to change device tx_queue_len [ 64.392933][ T1875] __vm_enough_memory: pid: 1875, comm: syz.2.503, bytes: 18014402804453376 not enough memory for the allocation [ 64.475305][ T1880] overlayfs: failed to resolve 'smackfsfloor=': -2 [ 64.504275][ T1880] overlayfs: failed to clone lowerpath [ 64.547013][ T1882] rust_binder: 314: no such ref 3 [ 64.552103][ T1882] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 64.559366][ T1882] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 64.566421][ T1882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:314 [ 64.577997][ T1891] __vm_enough_memory: pid: 1891, comm: syz.2.509, bytes: 18014402804453376 not enough memory for the allocation [ 64.607935][ T1893] rust_binder: Error while translating object. [ 64.607955][ T1893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 64.614192][ T1893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:319 [ 64.624144][ T1893] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.712114][ T1901] rust_binder: 327: no such ref 3 [ 64.717213][ T1901] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 64.725101][ T1901] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 64.733046][ T1901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:327 [ 64.825271][ T1922] netlink: 104 bytes leftover after parsing attributes in process `syz.1.519'. [ 64.988486][ T378] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 65.046647][ T1924] /dev/nullb0: Can't lookup blockdev [ 65.139869][ T378] usb 3-1: config 0 interface 0 has no altsetting 0 [ 65.146557][ T378] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 65.155632][ T378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.164149][ T378] usb 3-1: config 0 descriptor?? [ 65.572007][ T378] kye 0003:0458:501B.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 65.583193][ T378] kye 0003:0458:501B.0007: hidraw0: USB HID v1.01 Device [HID 0458:501b] on usb-dummy_hcd.2-1/input0 [ 65.603157][ T378] kye 0003:0458:501B.0007: tablet-enabling feature report not found [ 65.607297][ T1943] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 65.611193][ T378] kye 0003:0458:501B.0007: tablet enabling failed [ 65.778581][ T1918] tipc: Enabled bearer , priority 10 [ 65.793859][ T378] usb 3-1: USB disconnect, device number 17 [ 65.976291][ T1962] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 65.986200][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 65.986215][ T36] audit: type=1400 audit(1762679070.585:379): avc: denied { relabelto } for pid=1961 comm="syz.1.535" name="file0" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 66.028483][ T36] audit: type=1400 audit(1762679070.585:380): avc: denied { associate } for pid=1961 comm="syz.1.535" name="file0" dev="tmpfs" ino=821 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 66.558504][ T440] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 66.710637][ T2018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 66.719911][ T440] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 66.728983][ T440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.736984][ T440] usb 3-1: Product: syz [ 66.741164][ T440] usb 3-1: Manufacturer: syz [ 66.745744][ T440] usb 3-1: SerialNumber: syz [ 66.898499][ T440] tipc: Node number set to 3538140472 [ 66.952693][ T378] usb 3-1: USB disconnect, device number 18 [ 67.129107][ T2040] /dev/rnullb0: Can't lookup blockdev [ 67.150333][ T2044] fuse: blksize only supported for fuseblk [ 67.206960][ T36] audit: type=1400 audit(1762679071.805:381): avc: denied { bind } for pid=2054 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.716232][ T2094] /dev/rnullb0: Can't lookup blockdev [ 67.740293][ T2092] fuse: Bad value for 'group_id' [ 67.748489][ T2092] fuse: Bad value for 'group_id' [ 67.756417][ T2092] rust_binder: 338: no such ref 0 [ 67.769842][ T2102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.585'. [ 67.817602][ T2112] overlayfs: failed to clone upperpath [ 67.826368][ T2114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343 [ 67.856217][ T36] audit: type=1400 audit(1762679072.455:382): avc: denied { write } for pid=2119 comm="syz.2.592" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.913239][ T2126] netlink: 'syz.1.595': attribute type 27 has an invalid length. [ 67.921325][ T2126] netlink: 56 bytes leftover after parsing attributes in process `syz.1.595'. [ 68.060714][ T2141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'. [ 68.082343][ T2147] rust_binder: Write failure EFAULT in pid:355 [ 68.153796][ T2167] netlink: 96 bytes leftover after parsing attributes in process `syz.3.607'. [ 68.694794][ T36] audit: type=1400 audit(1762679073.295:383): avc: denied { accept } for pid=2182 comm="syz.2.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.775724][ T36] audit: type=1400 audit(1762679073.375:384): avc: denied { mount } for pid=2207 comm="syz.3.623" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.799226][ T2191] rust_binder: 363: no such ref 3 [ 68.804279][ T2191] rust_binder: inc_ref_done called when no active inc_refs [ 68.804299][ T2191] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 68.818561][ T2191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:363 [ 68.843687][ T36] audit: type=1326 audit(1762679073.445:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2221 comm="syz.3.628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f059038f6c9 code=0x0 [ 68.871120][ T2228] 9pnet_fd: Insufficient options for proto=fd [ 68.901746][ T2233] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.990237][ T36] audit: type=1400 audit(1762679073.595:386): avc: denied { getopt } for pid=2240 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.148515][ T440] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 69.278484][ T440] usb 3-1: device descriptor read/64, error -71 [ 69.518493][ T440] usb 3-1: device descriptor read/64, error -71 [ 69.758500][ T440] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 69.888526][ T440] usb 3-1: device descriptor read/64, error -71 [ 70.128511][ T440] usb 3-1: device descriptor read/64, error -71 [ 70.248640][ T440] usb usb3-port1: attempt power cycle [ 70.334905][ T2279] fuse: Bad value for 'user_id' [ 70.339873][ T2279] fuse: Bad value for 'user_id' [ 70.575855][ T2287] /dev/rnullb0: Can't lookup blockdev [ 70.576018][ T2288] /dev/rnullb0: Can't lookup blockdev [ 70.599947][ T440] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 70.619892][ T440] usb 3-1: device descriptor read/8, error -71 [ 70.749530][ T440] usb 3-1: device descriptor read/8, error -71 [ 70.988492][ T440] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 71.009501][ T440] usb 3-1: device descriptor read/8, error -71 [ 71.139552][ T440] usb 3-1: device descriptor read/8, error -71 [ 71.248586][ T440] usb usb3-port1: unable to enumerate USB device [ 71.329370][ T2311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 71.338232][ T2311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 71.492860][ T2339] 9pnet_fd: Insufficient options for proto=fd [ 71.586318][ T2358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.675'. [ 71.677941][ T2365] netlink: 'syz.3.678': attribute type 19 has an invalid length. [ 71.685826][ T2365] netlink: 5 bytes leftover after parsing attributes in process `syz.3.678'. [ 71.948674][ T2384] rust_binder: Write failure EFAULT in pid:371 [ 71.957900][ T2387] fuse: Bad value for 'fd' [ 72.280227][ T2420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.700'. [ 72.289215][ T2423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.700'. [ 72.298597][ T2422] x_tables: duplicate entry at hook 1 [ 72.305696][ T36] audit: type=1400 audit(1762679076.905:387): avc: denied { map } for pid=2421 comm="syz.3.701" path="socket:[12046]" dev="sockfs" ino=12046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.802498][ T2432] rust_binder: 376: no such ref 0 [ 72.807700][ T2432] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 72.815002][ T2432] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 72.867277][ T2442] netlink: 'syz.2.709': attribute type 4 has an invalid length. [ 72.885315][ T2443] netlink: 'syz.2.709': attribute type 17 has an invalid length. [ 72.903867][ T2442] rust_binder: Failed to allocate buffer. len:208, is_oneway:true [ 72.993464][ T2466] netlink: 44 bytes leftover after parsing attributes in process `syz.3.716'. [ 73.010190][ T2466] netlink: 51 bytes leftover after parsing attributes in process `syz.3.716'. [ 73.019066][ T2466] netlink: 51 bytes leftover after parsing attributes in process `syz.3.716'. [ 73.168492][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 73.298493][ T9] usb 3-1: device descriptor read/64, error -71 [ 73.547200][ T2482] 9pnet_fd: p9_fd_create_tcp (2482): problem connecting socket to 127.0.0.1 [ 73.555961][ T9] usb 3-1: device descriptor read/64, error -71 [ 73.562633][ T2482] netlink: 80 bytes leftover after parsing attributes in process `syz.1.723'. [ 73.635981][ T36] audit: type=1326 audit(1762679078.245:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2506 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbe98f6c9 code=0x7ffc0000 [ 73.659267][ T36] audit: type=1326 audit(1762679078.245:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2506 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbe98f6c9 code=0x7ffc0000 [ 73.682649][ T36] audit: type=1326 audit(1762679078.245:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2506 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbbe98f6c9 code=0x7ffc0000 [ 73.705797][ T36] audit: type=1326 audit(1762679078.245:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2506 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbe98f6c9 code=0x7ffc0000 [ 73.729331][ T36] audit: type=1326 audit(1762679078.245:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2506 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbe98f6c9 code=0x7ffc0000 [ 73.766267][ T36] audit: type=1326 audit(1762679078.255:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2506 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdbbe98f6c9 code=0x7ffc0000 [ 73.796361][ T36] audit: type=1326 audit(1762679078.255:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2506 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbe98f6c9 code=0x7ffc0000 [ 73.820635][ T36] audit: type=1326 audit(1762679078.255:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2506 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fdbbe98f6c9 code=0x7ffc0000 [ 73.828479][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 73.944143][ T2538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 73.954614][ T2538] overlayfs: failed to clone upperpath [ 73.978498][ T9] usb 3-1: device descriptor read/64, error -71 [ 73.980128][ T36] audit: type=1400 audit(1762679078.585:396): avc: denied { mount } for pid=2545 comm="syz.0.745" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 74.028993][ T2562] tc_dump_action: action bad kind [ 74.158240][ T2567] overlay: Unknown parameter 'fowner' [ 74.218531][ T9] usb 3-1: device descriptor read/64, error -71 [ 74.328612][ T9] usb usb3-port1: attempt power cycle [ 74.359738][ T2569] /dev/rnullb0: Can't lookup blockdev [ 74.366723][ T2569] /dev/rnullb0: Can't lookup blockdev [ 74.527775][ T2587] /dev/rnullb0: Can't lookup blockdev [ 74.533615][ T2587] raw_sendmsg: syz.0.760 forgot to set AF_INET. Fix it! [ 74.551809][ T440] kernel write not supported for file [eventfd] (pid: 440 comm: kworker/0:3) [ 74.588519][ T293] tipc: Subscription rejected, illegal request [ 74.668484][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 74.699463][ T9] usb 3-1: device descriptor read/8, error -71 [ 74.829439][ T9] usb 3-1: device descriptor read/8, error -71 [ 75.078517][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 75.099423][ T9] usb 3-1: device descriptor read/8, error -71 [ 75.229542][ T9] usb 3-1: device descriptor read/8, error -71 [ 75.338590][ T9] usb usb3-port1: unable to enumerate USB device [ 75.658698][ T2657] overlayfs: failed to clone upperpath [ 75.881751][ T2671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'. [ 75.925874][ T2676] netlink: 'syz.3.789': attribute type 14 has an invalid length. [ 76.555890][ T2709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 76.809606][ T2728] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 76.816802][ T2728] rust_binder: Write failure EINVAL in pid:398 [ 76.894967][ T2733] rust_binder: 2731 RLIMIT_NICE not set [ 76.901240][ T2733] rust_binder: 401: no such ref 0 [ 76.960500][ T2735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:405 [ 77.473059][ T2748] 9pnet_fd: Insufficient options for proto=fd [ 84.969938][ T2755] loop7: detected capacity change from 0 to 7 [ 84.978213][ T2761] /dev/rnullb0: Can't lookup blockdev [ 84.983873][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 84.983888][ T36] audit: type=1400 audit(1762679089.575:401): avc: denied { create } for pid=2752 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 85.009964][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.015451][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.016993][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.021428][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.029953][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.043461][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.045537][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.052706][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.058356][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.072368][ T2755] loop7: unable to read partition table [ 85.078067][ T2755] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 85.094182][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.097785][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.099968][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.114261][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.123489][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.131078][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.132670][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.138265][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.146421][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.151396][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.160361][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.165813][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.179352][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.179645][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.188489][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.193545][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.194055][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.201706][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.211122][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.216514][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.224324][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.229433][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 85.257550][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.263275][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.268955][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.274506][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.280705][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.286212][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.300478][ T2784] netlink: 100 bytes leftover after parsing attributes in process `syz.0.825'. [ 85.312282][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.317741][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.319071][ T2788] netlink: 'syz.1.827': attribute type 6 has an invalid length. [ 85.323500][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.333875][ T2788] netlink: 'syz.1.827': attribute type 4 has an invalid length. [ 85.338014][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.343940][ T2788] netlink: 'syz.1.827': attribute type 6 has an invalid length. [ 85.350249][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.356809][ T2788] netlink: 'syz.1.827': attribute type 13 has an invalid length. [ 85.363144][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.376908][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.377417][ T2788] netlink: 'syz.1.827': attribute type 15 has an invalid length. [ 85.382695][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.390206][ T2788] netlink: 'syz.1.827': attribute type 19 has an invalid length. [ 85.395728][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.403278][ T2788] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.827'. [ 85.408777][ T2761] /dev/rnullb0: Can't lookup blockdev [ 85.437358][ T36] audit: type=1400 audit(1762679090.035:402): avc: denied { mount } for pid=2794 comm="syz.3.829" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 85.502936][ T2808] netlink: 'syz.1.835': attribute type 4 has an invalid length. [ 85.511388][ T2808] netlink: 'syz.1.835': attribute type 4 has an invalid length. [ 85.787387][ T2848] netlink: 'syz.1.848': attribute type 3 has an invalid length. [ 85.795262][ T2848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 85.868477][ T331] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 86.029480][ T331] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.040526][ T331] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.050486][ T331] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.057148][ T331] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 86.066401][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.075991][ T331] usb 3-1: config 0 descriptor?? [ 86.119598][ T2860] devpts: called with bogus options [ 86.134124][ T36] audit: type=1400 audit(1762679090.735:403): avc: denied { mounton } for pid=2864 comm="syz.0.853" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 86.492719][ T331] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 86.500025][ T331] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 86.507298][ T331] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 86.514566][ T331] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 86.521815][ T331] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 86.529598][ T331] hid-steam 0003:28DE:1102.0008: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 86.693864][ T36] audit: type=1400 audit(1762679091.295:404): avc: denied { read } for pid=2832 comm="syz.2.843" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.716366][ T36] audit: type=1400 audit(1762679091.295:405): avc: denied { open } for pid=2832 comm="syz.2.843" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.857705][ T36] audit: type=1400 audit(1762679091.455:406): avc: denied { setopt } for pid=2894 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.909127][ T36] audit: type=1400 audit(1762679091.505:407): avc: denied { watch watch_reads } for pid=2899 comm="syz.3.865" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 86.932798][ T2900] netlink: 'syz.3.865': attribute type 27 has an invalid length. [ 86.934001][ T2910] netlink: 8540 bytes leftover after parsing attributes in process `syz.1.868'. [ 86.950393][ T2910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 86.959561][ T2910] netlink: 5 bytes leftover after parsing attributes in process `syz.1.868'. [ 87.246730][ T2946] syz.0.881 (2946): attempted to duplicate a private mapping with mremap. This is not supported. [ 87.512131][ T2963] overlayfs: failed to clone upperpath [ 87.589068][ T378] usb 3-1: USB disconnect, device number 27 [ 87.667526][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.968547][ T36] audit: type=1326 audit(1762679092.565:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.1.891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbbe98f6c9 code=0x0 [ 88.044862][ T2981] 9pnet_fd: Insufficient options for proto=fd [ 88.150646][ T3001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.900'. [ 88.671293][ T3045] overlay: Unknown parameter 'obj_user' [ 88.688941][ T3047] tmpfs: Unknown parameter '00000000000000000003' [ 88.696752][ T3047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 88.731508][ T36] audit: type=1326 audit(1762679093.335:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f059038f6c9 code=0x0 [ 88.838068][ T36] audit: type=1400 audit(1762679093.435:410): avc: denied { ioctl } for pid=3060 comm="syz.1.920" path="socket:[14123]" dev="sockfs" ino=14123 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.582330][ T3103] overlay: Unknown parameter 'fsname' [ 89.603859][ T3107] netlink: 'syz.3.934': attribute type 11 has an invalid length. [ 89.612641][ T3107] netlink: 'syz.3.934': attribute type 11 has an invalid length. [ 89.668602][ T586] Bluetooth: hci0: command 0x1003 tx timeout [ 89.674685][ T585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.713236][ T3121] rust_binder: Error while translating object. [ 89.713282][ T3121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 89.719732][ T3121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:445 [ 89.978486][ T378] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 90.140905][ T378] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.150052][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.158316][ T378] usb 3-1: Product: syz [ 90.162809][ T378] usb 3-1: Manufacturer: syz [ 90.167425][ T378] usb 3-1: SerialNumber: syz [ 90.729551][ T3162] overlay: ./file0 is not a directory [ 90.957359][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 90.957376][ T36] audit: type=1400 audit(1762679095.555:412): avc: denied { map } for pid=3172 comm="syz.1.958" path="socket:[14230]" dev="sockfs" ino=14230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 91.220865][ T36] audit: type=1400 audit(1762679095.825:413): avc: denied { setopt } for pid=3202 comm="syz.1.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.245770][ T36] audit: type=1400 audit(1762679095.825:414): avc: denied { setattr } for pid=3202 comm="syz.1.968" name="NETLINK" dev="sockfs" ino=14261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.349027][ T3229] 9pnet_fd: Insufficient options for proto=fd [ 91.433752][ T3243] 9pnet_fd: Insufficient options for proto=fd [ 91.467347][ T3245] overlayfs: failed to clone lowerpath [ 91.491848][ T3251] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 91.501045][ T3251] overlayfs: missing 'lowerdir' [ 91.585912][ T3261] netlink: 68 bytes leftover after parsing attributes in process `syz.3.988'. [ 91.735155][ T36] audit: type=1400 audit(1762679096.335:415): avc: denied { read } for pid=3263 comm="syz.3.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.854271][ T3286] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 92.060901][ T36] audit: type=1400 audit(1762679096.665:416): avc: denied { getopt } for pid=3314 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.759017][ T330] usb 3-1: USB disconnect, device number 28 [ 92.928208][ T3398] TCP: TCP_TX_DELAY enabled [ 93.516440][ T3427] batadv_slave_1: entered promiscuous mode [ 93.523071][ T3427] batadv_slave_1: left promiscuous mode [ 94.048503][ T378] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 94.198472][ T378] usb 3-1: Using ep0 maxpacket: 32 [ 94.204718][ T378] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 94.213088][ T378] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 94.221725][ T378] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 94.231338][ T378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 94.241215][ T378] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 94.250889][ T378] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.263908][ T378] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 94.272953][ T378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.281522][ T378] usb 3-1: config 0 descriptor?? [ 94.388679][ T3460] fuse: Unknown parameter 'qd' [ 94.436871][ T3472] 9pnet_fd: Insufficient options for proto=fd [ 94.488801][ T378] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 94.500807][ T378] usb 3-1: USB disconnect, device number 29 [ 94.507379][ T378] usblp0: removed [ 94.532991][ T36] audit: type=1400 audit(1762679099.135:417): avc: denied { setopt } for pid=3479 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.928501][ T378] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 95.078482][ T378] usb 3-1: Using ep0 maxpacket: 32 [ 95.084689][ T378] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 95.093226][ T378] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 95.101847][ T378] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 95.110809][ T378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.120451][ T378] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.130100][ T378] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 95.143148][ T378] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 95.152188][ T378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.160727][ T378] usb 3-1: config 0 descriptor?? [ 95.367399][ T378] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 95.719879][ T36] audit: type=1400 audit(1762679100.325:418): avc: denied { read write } for pid=3445 comm="syz.2.1047" name="lp0" dev="devtmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 95.720936][ T3513] validate_nla: 2 callbacks suppressed [ 95.720951][ T3513] netlink: 'syz.1.1071': attribute type 10 has an invalid length. [ 95.744512][ T36] audit: type=1400 audit(1762679100.325:419): avc: denied { open } for pid=3445 comm="syz.2.1047" path="/dev/usb/lp0" dev="devtmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 95.781644][ T9] usb 3-1: USB disconnect, device number 30 [ 95.789594][ T9] usblp0: removed [ 95.822174][ T3527] /dev/loop0: Can't lookup blockdev [ 95.896702][ T36] audit: type=1326 audit(1762679100.495:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.0.1078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x0 [ 96.095541][ T3543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 96.475967][ T36] audit: type=1400 audit(1762679101.075:421): avc: denied { watch } for pid=3555 comm="syz.2.1084" path="pipe:[15783]" dev="pipefs" ino=15783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 96.510743][ T36] audit: type=1400 audit(1762679101.115:422): avc: denied { ioctl } for pid=3558 comm="syz.2.1085" path="socket:[16686]" dev="sockfs" ino=16686 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.606253][ T36] audit: type=1400 audit(1762679101.205:423): avc: denied { listen } for pid=3566 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.635829][ T3572] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.636037][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 96.651599][ T3572] rust_binder: Error while translating object. [ 96.651645][ T3572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 96.657835][ T3572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:496 [ 96.680787][ T3580] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 96.697216][ T3580] rust_binder: Write failure EINVAL in pid:499 [ 96.706508][ T36] audit: type=1400 audit(1762679101.305:424): avc: denied { associate } for pid=3581 comm="syz.2.1091" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.731289][ T3584] fuse: Bad value for 'fd' [ 96.738017][ T36] audit: type=1400 audit(1762679101.305:425): avc: denied { append } for pid=3581 comm="syz.2.1091" name="pfkey" dev="proc" ino=4026532392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 96.760888][ T36] audit: type=1400 audit(1762679101.315:426): avc: denied { mounton } for pid=3583 comm="syz.0.1092" path="/297/file0" dev="tmpfs" ino=1616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.784485][ T3590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 96.801582][ T3595] overlayfs: failed to clone lowerpath [ 96.827845][ T3600] netlink: 'syz.0.1096': attribute type 4 has an invalid length. [ 96.840868][ T3604] rust_binder: Error while translating object. [ 96.840899][ T3604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 96.847146][ T3604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:509 [ 96.848635][ T3600] netlink: 'syz.0.1096': attribute type 4 has an invalid length. [ 96.932005][ T3614] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.952097][ T3618] overlay: Unknown parameter 'fsuuid' [ 96.967263][ T36] audit: type=1400 audit(1762679101.565:427): avc: denied { ioctl } for pid=3617 comm="syz.2.1103" path="socket:[15850]" dev="sockfs" ino=15850 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.008772][ T36] audit: type=1400 audit(1762679101.615:428): avc: denied { mounton } for pid=3623 comm="syz.2.1105" path="/171/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.056104][ T3627] rust_binder: Error while translating object. [ 97.056141][ T3627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.062451][ T3627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:521 [ 97.166803][ T36] audit: type=1400 audit(1762679101.765:429): avc: denied { execute } for pid=3628 comm="syz.2.1107" path="/173/rdma.current" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.240277][ T3643] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 97.260524][ T3643] overlayfs: overlapping lowerdir path [ 97.270217][ T3641] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.273644][ T36] audit: type=1400 audit(1762679101.875:430): avc: denied { getattr } for pid=3640 comm="syz.2.1111" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.379544][ T3652] rust_binder: Write failure EFAULT in pid:537 [ 97.566476][ T3676] binder: Binderfs stats mode cannot be changed during a remount [ 97.659367][ T3695] fuse: Bad value for 'fd' [ 98.329890][ T3750] rust_binder: Error while translating object. [ 98.329932][ T3750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.336169][ T3750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:559 [ 98.550737][ T3785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.559811][ T3785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.592329][ T3785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.602232][ T3785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.999973][ T3807] /dev/rnullb0: Can't lookup blockdev [ 99.481007][ T3841] syz.3.1175 uses obsolete (PF_INET,SOCK_PACKET) [ 100.050248][ T3855] 9pnet_fd: Insufficient options for proto=fd [ 100.071522][ T3866] syz.0.1183 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.536520][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.543687][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.551001][ T3879] bridge0: entered allmulticast mode [ 100.620595][ T3888] netlink: 'syz.0.1191': attribute type 8 has an invalid length. [ 100.700322][ T3904] netlink: 'syz.3.1196': attribute type 5 has an invalid length. [ 100.708253][ T3904] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1196'. [ 100.816488][ T3930] overlayfs: failed to resolve './file0': -2 [ 101.138013][ T3963] netlink: 'syz.0.1213': attribute type 4 has an invalid length. [ 101.145829][ T3963] netlink: 3649 bytes leftover after parsing attributes in process `syz.0.1213'. [ 101.159453][ T3963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=3963 comm=syz.0.1213 [ 101.187124][ T3968] 9pnet_fd: Insufficient options for proto=fd [ 101.249229][ T3961] GUP no longer grows the stack in syz.2.1212 (3961): 200000004000-20000000a000 (200000002000) [ 101.268700][ T3961] CPU: 0 UID: 0 PID: 3961 Comm: syz.2.1212 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 101.268733][ T3961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.268752][ T3961] Call Trace: [ 101.268758][ T3961] [ 101.268766][ T3961] __dump_stack+0x21/0x30 [ 101.268807][ T3961] dump_stack_lvl+0x10c/0x190 [ 101.268830][ T3961] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.268852][ T3961] ? find_vma+0xcd/0x110 [ 101.268870][ T3961] ? vma_is_secretmem+0x11/0x50 [ 101.268894][ T3961] dump_stack+0x19/0x20 [ 101.268924][ T3961] __get_user_pages+0x1e34/0x22d0 [ 101.268950][ T3961] ? populate_vma_page_range+0x230/0x230 [ 101.268973][ T3961] get_user_pages_remote+0x392/0xbe0 [ 101.268995][ T3961] ? __cfi_mtree_load+0x10/0x10 [ 101.269014][ T3961] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 101.269033][ T3961] ? __cfi_get_user_pages_remote+0x10/0x10 [ 101.269056][ T3961] __access_remote_vm+0x1e2/0x640 [ 101.269076][ T3961] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 101.269101][ T3961] ? access_remote_vm+0x60/0x60 [ 101.269121][ T3961] ? _raw_spin_lock+0x8c/0x120 [ 101.269143][ T3961] ? __cfi__raw_spin_lock+0x10/0x10 [ 101.269165][ T3961] access_remote_vm+0x39/0x60 [ 101.269185][ T3961] proc_pid_cmdline_read+0x4bb/0xbf0 [ 101.269208][ T3961] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 101.269230][ T3961] ? bpf_lsm_file_permission+0xd/0x20 [ 101.269253][ T3961] vfs_readv+0x62b/0xa50 [ 101.269273][ T3961] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 101.269294][ T3961] ? do_readv+0x2d0/0x2d0 [ 101.269318][ T3961] __x64_sys_preadv+0x197/0x2a0 [ 101.269337][ T3961] ? __cfi___x64_sys_preadv+0x10/0x10 [ 101.269356][ T3961] ? switch_fpu_return+0x12/0x20 [ 101.269376][ T3961] x64_sys_call+0x1ee9/0x2ee0 [ 101.269401][ T3961] do_syscall_64+0x58/0xf0 [ 101.269423][ T3961] ? clear_bhb_loop+0x50/0xa0 [ 101.269442][ T3961] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.269462][ T3961] RIP: 0033:0x7ff2e118f6c9 [ 101.269483][ T3961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.269499][ T3961] RSP: 002b:00007ff2e1ff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 101.269525][ T3961] RAX: ffffffffffffffda RBX: 00007ff2e13e5fa0 RCX: 00007ff2e118f6c9 [ 101.269540][ T3961] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 101.269552][ T3961] RBP: 00007ff2e1211f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.269564][ T3961] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 101.269580][ T3961] R13: 00007ff2e13e6038 R14: 00007ff2e13e5fa0 R15: 00007ffe9e518fc8 [ 101.269597][ T3961] [ 101.270081][ T3961] binder: Bad value for 'stats' [ 101.510517][ T3984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'. [ 101.576863][ T3985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'. [ 101.603387][ T3991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3991 comm=syz.3.1220 [ 101.662943][ T3995] binder: Unknown parameter 'defcontext01777777777777777777777' [ 101.882685][ T4013] 9pnet_fd: Insufficient options for proto=fd [ 101.944146][ T4019] 9pnet_fd: Insufficient options for proto=fd [ 101.958491][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 102.109550][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.120608][ T9] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 102.129646][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.138474][ T9] usb 3-1: config 0 descriptor?? [ 102.545617][ T9] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 102.553369][ T9] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 102.560833][ T9] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 102.568252][ T9] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 102.575693][ T9] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 102.583093][ T9] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 102.590483][ T9] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 102.598340][ T9] steelseries 0003:1038:12B6.0009: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 102.747580][ T9] steelseries 0003:1038:12B6.0009: hid_hw_raw_request() failed with -71 [ 102.757833][ T9] usb 3-1: USB disconnect, device number 32 [ 103.022986][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 103.023003][ T36] audit: type=1326 audit(1762679107.625:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x50000 [ 103.052180][ T36] audit: type=1326 audit(1762679107.625:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x50000 [ 103.075440][ T36] audit: type=1326 audit(1762679107.625:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x50000 [ 103.098523][ T36] audit: type=1326 audit(1762679107.625:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x50000 [ 103.121689][ T36] audit: type=1326 audit(1762679107.625:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x50000 [ 103.144806][ T36] audit: type=1326 audit(1762679107.625:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x50000 [ 103.167985][ T36] audit: type=1326 audit(1762679107.625:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x50000 [ 103.191203][ T36] audit: type=1326 audit(1762679107.625:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x50000 [ 103.214272][ T36] audit: type=1326 audit(1762679107.625:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x50000 [ 103.237305][ T36] audit: type=1326 audit(1762679107.625:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e51f8f6c9 code=0x50000 [ 103.291034][ T4047] rust_binder: Error while translating object. [ 103.291075][ T4047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.297318][ T4047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:634 [ 103.402602][ T4056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 103.421238][ T4056] __vm_enough_memory: pid: 4056, comm: syz.2.1243, bytes: 18014402804453376 not enough memory for the allocation [ 103.598781][ T4073] /dev/rnullb0: Can't lookup blockdev [ 103.688125][ T4086] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1254'. [ 104.210062][ T4104] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 104.210092][ T4104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:658 [ 104.458507][ T378] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 104.619475][ T378] usb 3-1: No LPM exit latency info found, disabling LPM. [ 104.637464][ T378] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 104.648571][ T378] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.662011][ T378] usb 3-1: config 1 interface 0 has no altsetting 0 [ 104.670633][ T378] usb 3-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.40 [ 104.679920][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.687978][ T378] usb 3-1: Product: Ῑ㱰麥퓖愜ᮅ捯∫祻䣒⿹䪂⛇ጻ၅쀩䧝蕳ﰫ擆틳쫀ﷂ䝕砱ꋍۜʵ묃Ꜣﴱۂ᯷榞⧦ꥌᜫ [ 104.702288][ T378] usb 3-1: Manufacturer: 荒髿ꐏ鹖驁礃ᩧ웡颀勲乢例鿝䃟ế憾틍ꬌ씍ᄯ뇞漧瑜겯밳ﷶ縤剥횄ꮻ떏뢑ທ薥펉큭ḯ捳㕖ｚ盿緖䞩ి↙鷺㒍ခ澰휍歗䮈쎧ﮏ仈㨯㔨抨㾥ᷜ㨫㲕蜪꾿쿁恏ख़ꝙ鲞웸ꆐ䐓踨엱ጟᚹ﨎晀∀螣떿ⴣ㈅쁋琿䉃聶缞냹ᚙꓩ魌 [ 104.733161][ T378] usb 3-1: SerialNumber: 积늲۶櫹᫿ꁍ삵컨䐃坕蠠뫵횱镮㩰꬗諛窱蠝ￖ媯颫詬㣨ቩ铗 [ 104.747437][ T4104] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.754817][ T4104] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.968519][ T378] usbhid 3-1:1.0: can't add hid device: -71 [ 104.974476][ T378] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 104.984738][ T378] usb 3-1: USB disconnect, device number 33 [ 105.307593][ T4137] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaa [ 105.317110][ T4137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=4137 comm=syz.0.1270 [ 105.337913][ T4140] netlink: 'syz.0.1271': attribute type 4 has an invalid length. [ 105.345722][ T4140] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1271'. [ 105.357220][ T4140] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 105.364958][ T4140] netlink: 'syz.0.1271': attribute type 2 has an invalid length. [ 105.391121][ T4143] batadv_slave_1: entered promiscuous mode [ 105.398734][ T4142] batadv_slave_1: left promiscuous mode [ 105.546025][ T4159] /dev/rnullb0: Can't lookup blockdev [ 106.258360][ T4161] fuse: Unknown parameter '0x0000000000000003' [ 106.355100][ T4188] /dev/rnullb0: Can't lookup blockdev [ 106.366312][ T4187] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 107.142153][ T4203] overlayfs: failed to clone upperpath [ 107.166633][ T4209] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1293'. [ 107.182319][ T4214] netlink: 'syz.3.1294': attribute type 16 has an invalid length. [ 107.191170][ T4214] netlink: 'syz.3.1294': attribute type 16 has an invalid length. [ 107.548765][ T4243] usb usb8: usbfs: process 4243 (syz.2.1304) did not claim interface 0 before use [ 107.560261][ T4243] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 107.592496][ T4249] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1306'. [ 107.601628][ T4249] gretap0: entered promiscuous mode [ 107.899798][ T4258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.909760][ T4266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.918600][ T4266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.148490][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 108.846480][ T4295] veth0_virt_wifi: entered allmulticast mode [ 109.097038][ T4322] netlink: 'syz.3.1332': attribute type 2 has an invalid length. [ 109.104878][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 109.115503][ T4322] netlink: 'syz.3.1332': attribute type 2 has an invalid length. [ 109.123267][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 109.573955][ T4292] veth0_virt_wifi: left allmulticast mode [ 109.637607][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 109.690943][ T4363] netlink: 'syz.0.1346': attribute type 5 has an invalid length. [ 109.699228][ T4363] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1346'. [ 109.749745][ T4375] overlayfs: regular lower layers cannot follow data lower layers [ 109.773737][ T4382] 9pnet_fd: Insufficient options for proto=fd [ 110.153154][ T4390] fuse: Bad value for 'fd' [ 110.632144][ T4402] netlink: 'syz.0.1360': attribute type 11 has an invalid length. [ 110.758456][ T4413] /dev/loop0: Can't lookup blockdev [ 111.021357][ T4456] netlink: 'syz.3.1379': attribute type 12 has an invalid length. [ 111.033725][ T4456] tipc: Failed to remove unknown binding: 66,1,1/4:947360594/947360596 [ 111.042656][ T4456] tipc: Failed to remove unknown binding: 66,1,1/4:947360594/947360596 [ 111.050959][ T4456] tipc: Failed to remove unknown binding: 66,1,1/4:947360594/947360596 [ 111.363355][ T36] kauditd_printk_skb: 139 callbacks suppressed [ 111.363372][ T36] audit: type=1400 audit(1762679115.965:590): avc: denied { bind } for pid=4471 comm="syz.0.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.517855][ T4489] /dev/rnullb0: Can't lookup blockdev [ 111.568475][ T10] usb 3-1: device descriptor read/64, error -71 [ 111.666906][ T36] audit: type=1400 audit(1762679116.265:591): avc: denied { bpf } for pid=4496 comm="syz.0.1392" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.716374][ T36] audit: type=1400 audit(1762679116.315:592): avc: denied { read } for pid=4498 comm="syz.0.1393" name="/" dev="configfs" ino=2533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.738477][ T36] audit: type=1400 audit(1762679116.315:593): avc: denied { open } for pid=4498 comm="syz.0.1393" path="/" dev="configfs" ino=2533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.838473][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 111.857656][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 111.867252][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.869656][ T4515] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 111.875680][ T10] usb 3-1: Product: syz [ 111.887504][ T10] usb 3-1: Manufacturer: syz [ 111.892268][ T10] usb 3-1: SerialNumber: syz [ 111.898098][ T10] usb 3-1: config 0 descriptor?? [ 111.898758][ T4518] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1399'. [ 111.915978][ T4518] EXT4-fs: Conflicting test_dummy_encryption options [ 111.923464][ T4518] 9pnet_fd: Insufficient options for proto=fd [ 112.122390][ T10] usb 3-1: USB disconnect, device number 34 [ 112.140312][ T4528] /dev/rnullb0: Can't lookup blockdev [ 112.656965][ T4541] fuse: Unknown parameter 'K' [ 112.669968][ T4543] /dev/rnullb0: Can't lookup blockdev [ 112.852331][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.859464][ T4550] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.866598][ T4550] bridge_slave_0: entered allmulticast mode [ 112.873132][ T4550] bridge_slave_0: entered promiscuous mode [ 112.879533][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.886625][ T4550] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.893933][ T4550] bridge_slave_1: entered allmulticast mode [ 112.900307][ T4550] bridge_slave_1: entered promiscuous mode [ 112.946221][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.953289][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.960563][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.967584][ T4550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.988306][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.995831][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.006775][ T3379] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.013818][ T3379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.021361][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.028369][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.051553][ T4550] veth0_vlan: entered promiscuous mode [ 113.061699][ T4550] veth1_macvtap: entered promiscuous mode [ 113.079465][ T36] audit: type=1400 audit(1762679117.685:594): avc: denied { mounton } for pid=4550 comm="syz-executor" path="/root/syzkaller.Vf4DxX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 113.116081][ T4564] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 113.191212][ T4570] 9pnet_fd: Insufficient options for proto=fd [ 113.206439][ T36] audit: type=1400 audit(1762679117.805:595): avc: denied { read write } for pid=4571 comm="syz.0.1414" name="file0" dev="tmpfs" ino=2267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.229814][ T36] audit: type=1400 audit(1762679117.805:596): avc: denied { open } for pid=4571 comm="syz.0.1414" path="/416/file0" dev="tmpfs" ino=2267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.266193][ T36] audit: type=1400 audit(1762679117.865:597): avc: denied { create } for pid=4578 comm="syz.0.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 113.468515][ T440] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.519093][ T36] audit: type=1400 audit(1762679118.125:598): avc: denied { watch } for pid=4584 comm="syz.2.1419" path="/238/file0" dev="tmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.554592][ T36] audit: type=1326 audit(1762679118.155:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.2.1420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2e118f6c9 code=0x0 [ 113.606657][ T4588] rust_binder: Failed copying remainder into alloc: EFAULT [ 113.606672][ T4588] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 113.614004][ T4588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 113.619563][ T440] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 113.622278][ T4588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:740 [ 113.632026][ T440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.658304][ T440] usb 5-1: config 0 descriptor?? [ 113.664100][ T440] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 113.672088][ T440] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 113.874428][ T440] usb 5-1: USB disconnect, device number 2 [ 113.883913][ T440] ftdi_sio 5-1:0.0: device disconnected [ 113.888514][ T64] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 114.049558][ T64] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 114.068718][ T64] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 114.088751][ T64] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 98, changing to 4 [ 114.101277][ T64] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.110497][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.118608][ T64] usb 3-1: Product: syz [ 114.122764][ T64] usb 3-1: Manufacturer: syz [ 114.127416][ T64] usb 3-1: SerialNumber: syz [ 114.264411][ T4618] /dev/rnullb0: Can't lookup blockdev [ 114.286030][ T4622] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1433'. [ 114.809375][ T4686] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.878002][ T4690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 114.878110][ T4690] rust_binder: Write failure EINVAL in pid:26 [ 114.908903][ T4694] rust_binder: 28: no such ref 0 [ 114.919993][ T4694] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 114.927046][ T4694] rust_binder: 28: no such ref 2 [ 114.932355][ T4694] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 114.973777][ T4698] overlayfs: failed to clone upperpath [ 115.020627][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1465'. [ 115.226522][ T4728] rust_binder: 39: no such ref 1 [ 115.300068][ T4733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 115.496089][ T4745] 9pnet_fd: p9_fd_create_tcp (4745): problem connecting socket to 127.0.0.1 [ 115.523309][ T4749] overlayfs: failed to clone lowerpath [ 115.641122][ T4779] fuse: Bad value for 'fd' [ 115.800326][ T4816] /dev/rnullb0: Can't lookup blockdev [ 115.818614][ T4819] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1505'. [ 115.829484][ T4819] overlayfs: failed to clone upperpath [ 115.881034][ T4828] /dev/rnullb0: Can't lookup blockdev [ 116.115847][ T4838] rust_binder: Error while translating object. [ 116.115887][ T4838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 116.122378][ T4838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 116.220954][ T4841] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 116.463508][ T4850] overlayfs: failed to clone upperpath [ 116.479975][ T4850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1516'. [ 116.568820][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 116.568836][ T36] audit: type=1400 audit(1762679121.175:676): avc: denied { append } for pid=4860 comm="syz.2.1519" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.570774][ T64] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 116.609631][ T64] usb 3-1: USB disconnect, device number 35 [ 116.626521][ T4863] overlayfs: failed to clone upperpath [ 116.813388][ T4890] binder: Bad value for 'stats' [ 116.832823][ T36] audit: type=1400 audit(1762679121.435:677): avc: denied { mount } for pid=4891 comm="syz.3.1531" name="/" dev="ramfs" ino=21320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.848356][ T4894] loop7: detected capacity change from 0 to 7 [ 116.862358][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.871510][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 116.879498][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.888674][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 116.896636][ T4135] loop7: unable to read partition table [ 116.903288][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.912442][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 116.914896][ T36] audit: type=1400 audit(1762679121.515:678): avc: denied { setattr } for pid=4893 comm="syz.2.1532" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.920900][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.953104][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.962285][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 116.970219][ T4894] loop7: unable to read partition table [ 116.976001][ T4894] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 116.976490][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.998649][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 117.008650][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.011840][ T36] audit: type=1400 audit(1762679121.615:679): avc: denied { execute_no_trans } for pid=4896 comm="syz.4.1533" path="/19/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.017775][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 117.018033][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.057885][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 117.078636][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.087792][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 117.095835][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.104295][ T4908] netlink: 393 bytes leftover after parsing attributes in process `syz.0.1537'. [ 117.104983][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 117.119987][ T36] audit: type=1400 audit(1762679121.725:680): avc: denied { read } for pid=4907 comm="syz.0.1537" laddr=fe80::50d5:87ff:fe98:56b3 lport=4 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.198489][ T10] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 117.218661][ T36] audit: type=1400 audit(1762679121.825:681): avc: denied { remount } for pid=4913 comm="syz.0.1539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 117.308476][ T330] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.349961][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 117.362128][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.371317][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.379479][ T10] usb 3-1: Product: ш [ 117.384170][ T10] usb 3-1: Manufacturer: 叐ᛱꦸ鶣ニ婈⸣놳๰ଝ㵷铯玽럎얨織艧꩓䶌슢钎奼怣䙲큋Ꭾ풜峝䣒ޟ塡騕㉋@襳嵣苓ㅎዤᓤ峩뺂氘繛╵撟渘硍䇗꟔譥៻ᓹ㐯躽悤겯㇊𢡊쒧ᆖ어袻贩釠㙻㌏묞쾰⥩垰杊翋㗰賌啸縑饹ᄋ팶ע㊪힔㸋峝䓷뮟 [ 117.391267][ T36] audit: type=1400 audit(1762679121.985:682): avc: denied { create } for pid=4930 comm="syz.3.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 117.413390][ T10] usb 3-1: SerialNumber: ఇ [ 117.458464][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 117.464915][ T330] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.473831][ T330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.484409][ T330] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 117.495121][ T330] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.846774][ T10] cdc_ncm 3-1:1.0: bind() failure [ 117.853005][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 117.859854][ T10] cdc_ncm 3-1:1.1: bind() failure [ 117.867859][ T10] usb 3-1: USB disconnect, device number 36 [ 118.078775][ T4956] cgroup: subsys name conflicts with all [ 118.684376][ T36] audit: type=1400 audit(1762679123.285:683): avc: denied { mounton } for pid=4975 comm="syz.3.1558" path="/" dev="configfs" ino=2533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.756793][ T4984] sock: sock_set_timeout: `syz.3.1562' (pid 4984) tries to set negative timeout [ 118.863555][ T36] audit: type=1400 audit(1762679123.465:684): avc: denied { getopt } for pid=4994 comm="syz.3.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.318195][ T4998] __vm_enough_memory: pid: 4998, comm: syz.2.1567, bytes: 18014402804453376 not enough memory for the allocation [ 119.818497][ T31] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 119.969556][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.979681][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 119.990788][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 120.000559][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.013355][ T31] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 120.022390][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.030977][ T31] usb 3-1: config 0 descriptor?? [ 120.037083][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 120.064552][ T330] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.074153][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.086914][ T330] usb 5-1: can't set config #1, error -71 [ 120.093559][ T330] usb 5-1: USB disconnect, device number 3 [ 120.233040][ T5039] rust_binder: Write failure EINVAL in pid:62 [ 120.243698][ T5043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5043 comm=syz.4.1582 [ 120.246587][ T64] usb 3-1: USB disconnect, device number 37 [ 120.322723][ T36] audit: type=1400 audit(1762679124.925:685): avc: denied { read } for pid=5052 comm="syz.4.1585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 121.011104][ T5110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 121.011135][ T5110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:86 [ 121.095250][ T5122] netlink: 'syz.4.1607': attribute type 4 has an invalid length. [ 121.112493][ T5122] tmpfs: Bad value for 'nr_inodes' [ 121.123923][ T5122] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1607'. [ 121.159697][ T5126] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 121.284622][ T5146] fuse: Bad value for 'user_id' [ 121.289570][ T5146] fuse: Bad value for 'user_id' [ 121.529585][ T5169] incfs: Options parsing error. -22 [ 121.534882][ T5169] incfs: mount failed -22 [ 121.546683][ T5171] IPv6: Can't replace route, no match found [ 121.553374][ T5171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5171 comm=syz.3.1626 [ 121.568527][ T330] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.576167][ T10] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 121.632377][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 121.632393][ T36] audit: type=1400 audit(1762679126.235:688): avc: denied { map } for pid=5172 comm="syz.3.1627" path="socket:[22137]" dev="sockfs" ino=22137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.728496][ T330] usb 5-1: Using ep0 maxpacket: 32 [ 121.734762][ T10] usb 3-1: config 84 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.745859][ T330] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 121.754270][ T330] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 121.762887][ T10] usb 3-1: config 84 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.772906][ T330] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 121.781893][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 121.790995][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.800639][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.808645][ T330] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 121.818266][ T330] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 121.831547][ T330] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 121.840861][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.851061][ T330] usb 5-1: config 0 descriptor?? [ 122.057782][ T330] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 122.069940][ T330] usb 5-1: USB disconnect, device number 4 [ 122.076399][ T330] usblp0: removed [ 122.250564][ T5148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.254637][ T5180] /dev/rnullb0: Can't lookup blockdev [ 122.260619][ T5148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.277152][ T10] usb 3-1: string descriptor 0 read error: -71 [ 122.290853][ T10] usbhid 3-1:84.0: can't add hid device: -71 [ 122.296871][ T10] usbhid 3-1:84.0: probe with driver usbhid failed with error -71 [ 122.305733][ T10] usb 3-1: USB disconnect, device number 38 [ 122.508502][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.668471][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 122.674642][ T64] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.683032][ T64] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 122.691634][ T64] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 122.700582][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.710240][ T64] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.719989][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.732969][ T64] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 122.742000][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.750509][ T64] usb 5-1: config 0 descriptor?? [ 122.956790][ T5154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.965714][ T5154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.984545][ T64] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 123.036986][ T36] audit: type=1400 audit(1762679127.635:689): avc: denied { setattr } for pid=5208 comm="syz.2.1641" name="/" dev="incremental-fs" ino=1433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.060522][ T36] audit: type=1400 audit(1762679127.665:690): avc: denied { bind } for pid=5208 comm="syz.2.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.081839][ T291] ------------[ cut here ]------------ [ 123.087298][ T291] WARNING: CPU: 1 PID: 291 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 123.096605][ T291] Modules linked in: [ 123.100519][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 123.112154][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.122231][ T291] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 123.127878][ T291] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 123.147508][ T291] RSP: 0018:ffffc9000b6efb68 EFLAGS: 00010293 [ 123.153601][ T291] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff8881076d2600 [ 123.161606][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.169591][ T291] RBP: ffffc9000b6efb90 R08: ffff888120d1a4ff R09: 1ffff110241a349f [ 123.177558][ T291] R10: dffffc0000000000 R11: ffffed10241a34a0 R12: 0000000000000000 [ 123.185532][ T291] R13: dffffc0000000000 R14: ffff888120d1a460 R15: ffff888112b0d220 [ 123.193524][ T291] FS: 000055555d16d500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 123.202838][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.209443][ T291] CR2: 000055555d198528 CR3: 000000012a40c000 CR4: 00000000003526b0 [ 123.217407][ T291] Call Trace: [ 123.220694][ T291] [ 123.223617][ T291] ovl_do_remove+0x7b8/0xcf0 [ 123.228200][ T291] ? ovl_set_redirect+0x780/0x780 [ 123.233234][ T291] ? down_write+0xe9/0x2a0 [ 123.237652][ T291] ? __cfi_down_write+0x10/0x10 [ 123.242503][ T291] ovl_rmdir+0x1e/0x30 [ 123.246571][ T291] vfs_rmdir+0x3dd/0x560 [ 123.250814][ T291] incfs_kill_sb+0x109/0x230 [ 123.255404][ T291] deactivate_locked_super+0xd5/0x2a0 [ 123.260780][ T291] deactivate_super+0xb8/0xe0 [ 123.265451][ T291] cleanup_mnt+0x3f1/0x480 [ 123.269875][ T291] __cleanup_mnt+0x1d/0x40 [ 123.274285][ T291] task_work_run+0x1e0/0x250 [ 123.278877][ T291] ? __cfi_task_work_run+0x10/0x10 [ 123.283983][ T291] ? __x64_sys_umount+0x126/0x170 [ 123.289005][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 123.294373][ T291] ? __kasan_check_read+0x15/0x20 [ 123.299408][ T291] resume_user_mode_work+0x36/0x50 [ 123.304512][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 123.309975][ T291] do_syscall_64+0x64/0xf0 [ 123.314387][ T291] ? clear_bhb_loop+0x50/0xa0 [ 123.319067][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.324955][ T291] RIP: 0033:0x7ff2e11909f7 [ 123.329408][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 123.332029][ T10] usb 5-1: USB disconnect, device number 5 [ 123.349080][ T291] RSP: 002b:00007ffe9e517168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 123.358703][ T10] usblp0: removed [ 123.363273][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff2e11909f7 [ 123.374848][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9e517220 [ 123.382836][ T291] RBP: 00007ffe9e517220 R08: 0000000000000000 R09: 0000000000000000 [ 123.390834][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9e518310 [ 123.398818][ T291] R13: 00007ff2e1211d7d R14: 000000000001e0a4 R15: 00007ffe9e5193e0 [ 123.406785][ T291] [ 123.409819][ T291] ---[ end trace 0000000000000000 ]--- [ 123.415519][ T291] ------------[ cut here ]------------ [ 123.421016][ T291] WARNING: CPU: 0 PID: 291 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 123.430339][ T291] Modules linked in: [ 123.434228][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 123.447711][ T291] Tainted: [W]=WARN [ 123.451531][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.461613][ T291] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 123.467251][ T291] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 123.486864][ T291] RSP: 0018:ffffc9000b6efb68 EFLAGS: 00010293 [ 123.492975][ T291] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff8881076d2600 [ 123.500953][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.508982][ T291] RBP: ffffc9000b6efb90 R08: ffff888120d1a4ff R09: 1ffff110241a349f [ 123.516955][ T291] R10: dffffc0000000000 R11: ffffed10241a34a0 R12: 0000000000000000 [ 123.524928][ T291] R13: dffffc0000000000 R14: ffff888120d1a460 R15: ffff888112b0d220 [ 123.532912][ T291] FS: 000055555d16d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 123.541851][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.548467][ T291] CR2: 00007f86f05d5f98 CR3: 000000012a40c000 CR4: 00000000003526b0 [ 123.556527][ T291] Call Trace: [ 123.559816][ T291] [ 123.562737][ T291] ovl_do_remove+0x7b8/0xcf0 [ 123.567311][ T291] ? ovl_set_redirect+0x780/0x780 [ 123.572335][ T291] ? down_write+0xe9/0x2a0 [ 123.576748][ T291] ? __cfi_down_write+0x10/0x10 [ 123.581599][ T291] ovl_rmdir+0x1e/0x30 [ 123.585664][ T291] vfs_rmdir+0x3dd/0x560 [ 123.589924][ T291] incfs_kill_sb+0x1a0/0x230 [ 123.594514][ T291] deactivate_locked_super+0xd5/0x2a0 [ 123.599888][ T291] deactivate_super+0xb8/0xe0 [ 123.604564][ T291] cleanup_mnt+0x3f1/0x480 [ 123.608999][ T291] __cleanup_mnt+0x1d/0x40 [ 123.613498][ T291] task_work_run+0x1e0/0x250 [ 123.618163][ T291] ? __cfi_task_work_run+0x10/0x10 [ 123.623281][ T291] ? __x64_sys_umount+0x126/0x170 [ 123.628307][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 123.633684][ T291] ? __kasan_check_read+0x15/0x20 [ 123.638732][ T291] resume_user_mode_work+0x36/0x50 [ 123.643835][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 123.649292][ T291] do_syscall_64+0x64/0xf0 [ 123.653705][ T291] ? clear_bhb_loop+0x50/0xa0 [ 123.658363][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.664261][ T291] RIP: 0033:0x7ff2e11909f7 [ 123.668773][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 123.688412][ T291] RSP: 002b:00007ffe9e517168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 123.696857][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff2e11909f7 [ 123.704854][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9e517220 [ 123.712840][ T291] RBP: 00007ffe9e517220 R08: 0000000000000000 R09: 0000000000000000 [ 123.720829][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9e518310 [ 123.728831][ T291] R13: 00007ff2e1211d7d R14: 000000000001e0a4 R15: 00007ffe9e5193e0 [ 123.736801][ T291] [ 123.739827][ T291] ---[ end trace 0000000000000000 ]---