last executing test programs: 1m45.733802053s ago: executing program 1 (id=16): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0xfffffffffffffe83, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x1}], 0x43, 0x0, &(0x7f0000000740)="ff9388205610ea990eaaba1fb8f28d721321e0ee676b6be7e753dfed4627798d969499de1f768fb7f709a95a8827959fc3a7c7d5b2375ce7636e7fa23142d3c6fb86e6"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r1, 0x5bc7000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e23, @broadcast}, 0x4c, 0x0, 0x0, 0x0, 0x14, 0x0, 0xd303, 0xff, 0xda}) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000200)=0x5d3b, 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0x52, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000018", @ANYRES16=r4, @ANYBLOB="00032bbd7000fedbdf25820000000c0099000b00000079000000"], 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x400c010) close_range(r1, r2, 0x2) 1m45.678862884s ago: executing program 1 (id=17): wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0xb66f) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendfile(r0, r1, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/165, 0xa5, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x10201, 0x3, 0x0, 0x1000, &(0x7f0000019000/0x1000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x3d70000, 0x0}) unshare(0x20040600) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x4801000, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) getsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000080)=""/40, &(0x7f00000000c0)=0x28) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r6) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @empty}, 0x0, 0x0, 0x2}}, 0x27) 1m45.598420004s ago: executing program 1 (id=18): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363ad", 0x0, 0x5}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be047811ff060000000000000000000000000008aaff020000000000000000000000000001"], 0xfdef) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000000000)=0xfffffffc, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xdddd0000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x7, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x3f}, {0x100000, 0x0, 0x0, 0x78, 0x2, 0x1, 0x2, 0x80, 0xff, 0xff, 0x6}, {0x0, 0xeeee0000, 0xa, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0xc, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xffffffffffffffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r8, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@noxattr}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@cache_fscache}], [], 0x6b}}) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r11 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r11, r10, 0x0, 0xffffffff) 1m45.331035257s ago: executing program 1 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="a1", 0x1, 0x20008401, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x43, 0x20000141, 0x0, 0xff58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0}) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x101, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000080)) 1m45.330760126s ago: executing program 1 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000380), 0x0) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x180) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x130, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/23, 0x17, 0x1, 0xd}, @fda={0x66646185, 0x0, 0x2, 0x26}, @fda={0x66646185, 0x6, 0x1, 0x200000019}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x400}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000001c0)=[@enter_looper, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 1m45.330492066s ago: executing program 1 (id=21): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = geteuid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000400)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@cache_none}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@posixacl}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_eq={'uid', 0x3d, r1}}, {@dont_appraise}]}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1501000065ffff0010000008003950323030302e75"], 0x15) r5 = dup(r3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000040)={{0xc161, 0x2}, {0x4eb, 0x109003ff}, 0xdb3d, 0x1}) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x12) sendfile(r9, r8, 0x0, 0xffffffff) 1m44.219196034s ago: executing program 0 (id=31): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x80) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m44.218875114s ago: executing program 0 (id=32): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x60, 0x3, 0x16, {0x16, 0x3e, "3d91419d0946052dcdcf01956ccce47b47d1aab0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x60, 0x3, 0x16, {0x16, 0x3e, "3d91419d0946052dcdcf01956ccce47b47d1aab0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) (async) 1m43.171561612s ago: executing program 0 (id=41): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000100)='./bus\x00', 0x4, 0x100) (async) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='ext4\x00', 0x8080, &(0x7f00000001c0)='discard') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) (async) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x20, 0x11, 0xb3, {0xb3, 0x22, "8c8e529f2f1a8b622ac0097fd1eea290d899fe0d01910fabd76f08b17980bbc2b4b890768738e77e9a964f033d58119070eedcb2fc0ff74a7ff434638a9e0e8c69a8a0fa6abe8ec6a106b92582c899232fe7c0aa93dbf7ee95d44336ecb0fcf939120bfc4ea8697ab05b5162b1b2cda3deab05e318f7fe69f36c9cfb0e0ef3596b05a229128e41b8ff454843ac15caa3dab6c107388748a2d6f1c38db1ae18f3eb361e018ae732c9c71e0f278c67f0564e"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, &(0x7f00000002c0)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x13, 0x7, '_{24', "c9cd57e7"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x8, 0x5c, 0xf9, 0x4, 0x5, 0x3}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x11, 0xec, "15bd45b59e50873d69c8ac2567c58a6bb55b56618683deb045a9aae5ffb067449bf1380cf09fe23787a296aa4db65a648e4b818da416b828991d28d5b5406b0bb90d138201755b7e640f9ddaacb9bf3251c75981a2b1bfba5cb2a1a1e921ee26ec869e7bbabca7e47f6e5d622442d2cc4ef6c5711f5a6eefa43f13db5de2505a99d7637b322154b33a1b159c22e38e77e39501e33398f5918dec571fd6b11bba1e082cb36841a36a08a4cbc7512c2e8429750c4f30715b0b461434fe8132bf3368c6558031ab776faaa5a3e3ce628c5a7b0e5bffc5848e6762443b4e96877db997a2e2cbe36f1f412ebcb5f6"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x77}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x60}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x80, 0x2, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0xb, 0x2, "27b5"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'H_'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xb8}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x79}}) 1m40.155977502s ago: executing program 0 (id=61): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff00100000080039503212a3bf4d8b972867b1e4d8cb19d980307f32a6093780da2eb6cdc42034b01d98e72a15b2e0688b764c33581a132e014722cc7fe96462"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000140)=0xffffffff, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 1m40.123968712s ago: executing program 0 (id=62): syz_clone3(&(0x7f0000001200)={0x81010000, 0x0, 0x0, 0x0, {0x3a}, &(0x7f0000000000)=""/4112, 0x102b, 0x0, 0x0}, 0x58) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x12, 0x8000}, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0x6}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000013c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d2bbd1b36cfab675cb3976ee8100e2878c2a9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b35ee4e9a028975789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7") sched_setscheduler(r6, 0x0, &(0x7f0000000480)) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000000c0)=0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendfile(r7, r8, 0x0, 0x20000023892) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001040)="6dbb1e7b43cf0990c1b3546511811bcac50bc4954e6d067007f3076302dae43234498c72bc31ae9a33f77c201eb83bb45c0c4698e7797c2ae5083d43e2c2a067161e442b6b4849e1a50d9c730e0663700751f57f6383da0210f52f8ba217c58f5bc37db26b0492925a21aa7295e03015af7727e70a9dafc52cfe5d690ebefa87697aa5e6e62283f117132b2f5c0d852f69cf13fd82734492f3a387ec9735a1a9157f0a33f2bf4c530d186896523754dabf5ae29be8904982f56fcc7603a9c89585b7a1c8e8b899d345d8dd12098027417e524267b40c0b42722fbd93262c", 0xde}, {&(0x7f0000001140)="b239fb6d0b35ec7ebb3152cdad73345421d8d78f4bff207981f90ded8bef7010621a8a56dc60e6d4725cbd19c30dd3ee5210e55477f933a28a24fdaf4975ab910f461f18466454b78b309ec0fefced8db2e3", 0x52}, {&(0x7f00000011c0)="7ca025cc1033af4e2735fb3dc7a1b4bf7b37bc4c6fdbb3a1cb72fd97133048dc39779b9d3ad47a2dce7094", 0x2b}, {&(0x7f0000001280)="2079b06c0aa5dd98e54b92ce6e1bf29552ab16cc27066a79bdc174df66da058eeb880d08d848801b3c37b9f750e7205160d196ead889797dbea826f2d4b1e000085dc07794378b3e0d1650bac54df0e620e7aae5638d2e40f52b280876ddbd2aa0975523cb8f0dd46e2b300ca48e9e4e1ed3656163149c73b7b73bac9f9e300461f2f9d702195de99e940261b7d0fa77292e0fbfa0d4639cf67eb73b5a7493b7f0ff5d739e5667cc478b1f7ae9fc4f9bb620d2abe9cb6f02099a37de5ace73fcb7a1c7699170b6deb50e71ad7f1219c61256069c54ee3561abc5f3668f", 0xdd}], 0x4) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0}) 1m39.227074918s ago: executing program 0 (id=67): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x10, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/wake_lock', 0x82002, 0x105) write$cgroup_int(r1, &(0x7f0000000180)=0x4, 0x12) write$cgroup_pid(r1, &(0x7f0000000280), 0xa) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x126) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000040)=0x20004, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000012300090002000000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x95, 0xffff}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = timerfd_create(0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r6, 0x29, 0x11, 0x0, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 1m34.744464759s ago: executing program 2 (id=101): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000080)={0xc, 0x0, 0xfb}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) 1m34.743711039s ago: executing program 2 (id=102): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1, 0x110, r1, 0x80000000) getpid() (async) write(r0, &(0x7f0000000400)="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", 0x1f000) 1m34.735737349s ago: executing program 2 (id=103): unshare(0xe040d00) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') unshare(0x24000080) pread64(r0, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 1m34.71719512s ago: executing program 2 (id=104): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00fb15050d6e199486f37fb4e1c7c97627125da7db"], 0x15, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x4, 0x20000000, 0xff78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100"], 0x18, 0x8061}, 0x4c800) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x4008010) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00fb15050d6e199486f37fb4e1c7c97627125da7db"], 0x15, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x4, 0x20000000, 0xff78) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100"], 0x18, 0x8061}, 0x4c800) (async) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x4008010) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) (async) 1m31.486024912s ago: executing program 2 (id=118): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2880, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1m30.656281807s ago: executing program 2 (id=119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x9, 0x9, 0x0, 0x0, 0x5, 0x3, 0x100000000, 0x74, 0xff, 0x20, 0x200, 0x9, 0x7fff, 0x3, 0xd, 0x7], 0xeeee0000, 0x10000}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m29.265611957s ago: executing program 32 (id=21): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = geteuid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000400)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@cache_none}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@posixacl}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_eq={'uid', 0x3d, r1}}, {@dont_appraise}]}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1501000065ffff0010000008003950323030302e75"], 0x15) r5 = dup(r3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000040)={{0xc161, 0x2}, {0x4eb, 0x109003ff}, 0xdb3d, 0x1}) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x12) sendfile(r9, r8, 0x0, 0xffffffff) 1m23.684089806s ago: executing program 33 (id=67): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x10, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/wake_lock', 0x82002, 0x105) write$cgroup_int(r1, &(0x7f0000000180)=0x4, 0x12) write$cgroup_pid(r1, &(0x7f0000000280), 0xa) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x126) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000040)=0x20004, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000012300090002000000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x95, 0xffff}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = timerfd_create(0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r6, 0x29, 0x11, 0x0, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 1m14.662332568s ago: executing program 34 (id=119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x9, 0x9, 0x0, 0x0, 0x5, 0x3, 0x100000000, 0x74, 0xff, 0x20, 0x200, 0x9, 0x7fff, 0x3, 0xd, 0x7], 0xeeee0000, 0x10000}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 3.26317494s ago: executing program 4 (id=612): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') preadv(r1, &(0x7f0000000240), 0x0, 0x9f, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getuid() pread64(r2, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x810, r1, 0x10000000) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 3.26258417s ago: executing program 4 (id=613): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x14, 0x18, {0x1}}], 0x18}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r5, 0x0, 0x30, r4, 0x0) r7 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) read(r7, &(0x7f0000021000)=""/4096, 0x1000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x15c, r10, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x140, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x41, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x807, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "493d7f3b"}]}}, 0x0}, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r13, 0xae03, 0x88) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x6) syz_kvm_assert_syzos_uexit$x86(r6, 0xffffffffffffffff) r14 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r14, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x1, 0x200000, @mcast2={0xff, 0x3}}, 0x1c) socket$inet6(0xa, 0x5, 0x101) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r15, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r16, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.946816522s ago: executing program 6 (id=617): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000240)={0x4000, 0x3000, 0x8}) fadvise64(r0, 0x81, 0xc, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@metacopy_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@uuid_null}], [], 0x2f}) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f0000000500)={0xed, 0x0, 0x1000000000005}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) 2.877046452s ago: executing program 6 (id=618): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000080), 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210600, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) write$tun(r4, &(0x7f0000000040)={@void, @void, @llc={@llc={0x0, 0x80, "e58f", "820efee52450441205ff58b91a991d52ac621cacd4a6111392a3e389f01856f6b3252f114f4d63c31aae9d3d200dbc0a2b6bf18dc53a19e60d8d939386c7"}}}, 0x42) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2482, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7a, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x7d, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xab2a}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xffd, 0x8, 0xa9}, {0x6, 0x24, 0x1a, 0x4, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x2dd, 0x1ff, 0x8, 0x6, 0xdc7, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x79, 0x81, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x0, 0x23}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x9, 0x9}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.331259322s ago: executing program 5 (id=660): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, 0x0, 0x1, 0x81}, 0x14) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xa4, 0x0, 0x1}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r3) mount$bind(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000140)='./cgroup\x00', 0x0, 0x3a87406, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x1, 'syz_tun\x00', {}, 0x3}) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) ptrace$setregs(0xd, r7, 0x3, &(0x7f0000000200)="667dd48f1c5384887394f7351bf8ae531dcc4db26022c1eedc4f6d781aa9ffb21795997d559bc81f07883817cdf697b2e541569625520e7732d2cb7ace1d57c14d368b06076622709d8a4813b4bbaa2dcfebddb6aa0d5b00dae8d3fb9cd12d14ba803af714e1109790d949e3d2") close_range(r1, r2, 0x0) 1.279160162s ago: executing program 5 (id=661): unshare(0x22020600) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000100)={[{}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xa22b}) unshare(0x200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r2) keyctl$assume_authority(0x10, r2) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x2000}, {r3, 0x8}, {r0, 0x1000}, {r1, 0x8000}], 0x4, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180), 0x8) sendfile(r3, r3, 0x0, 0x7ffff000) 1.233054982s ago: executing program 5 (id=662): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) setreuid(0xee00, 0x0) setreuid(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) setreuid(0xee00, 0x0) (async) setreuid(0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) 1.221285922s ago: executing program 5 (id=663): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r2 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000300)={0x14, &(0x7f0000000180)={0x40, 0x3, 0xbc, {0xbc, 0x23, "408c7c35ccd35100d523b64acda06ecb8fbbd58de645679f5eaa0f559f6f017cf36e1150d460cbe5e2eab0029c2ac87ac173292c1069092302469c46f072db43bf9d177512bdbe60d68d0caa9f10365e52b8ed99562c973ddc2e49b59b1ac3149aed230c324afe911267889f03cc979e629e1a584bb19c016c088045019b38569613ed62840657f37bc2c2349877316db5a13d8d51086bf4a9077b1ec9865cfa9909811f34d06ace297a6c06ee89ae97fece3f44689ffcc0bb26"}}, &(0x7f0000000280)={0x0, 0x3, 0x79, @string={0x79, 0x3, "5d17d29a51a166e3d26061d69dca96a18335e4635fca3621d2317923842e51bf88c0eabf9279de37f12e1706b2681b8f35ef3f5322162bfc610d6955f1dbf767da4735354ce4670c1cbe34594ebb47c2b34d4459baa2d472420c959c3110ddf0b3ab0d77a2dc2390326224c7911b2e32295fc1da6e978d"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000500)={0x20, 0x18, 0x9c, "ab74ad44b31483de90c72addf856584e25bb9e234897ad00e305c8273153de9e3772e22d8c6227ad8b98952f8eba071fb291b29d3424a8c3e10d9f36080ce38b65cd6ccbabfa94a0a0eb906824685d85490f2c68a228861b6bdffce66b7e6c13494648cac9a83061076b3551110c21757f7593e4f7b123ca1ada45f78eab4fe43fdc6b7f63420784f404a87632f8896de00b94bd55e749d8d0601392"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0xcc29}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0xfffffe00}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "88fb9a8923cf03980323bce4c47ce5c3c6b079eb1ac898fd8c56ea623f7058f96e47bdb10b7bf4777d10844dbb37bc"}}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x3, 0x1, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0}) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x800) 709.852785ms ago: executing program 5 (id=667): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000008c0)="8b4ff4a01daf0082", 0x1c, 0x10000, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x101) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0xfffffffffffffffe) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d07, 0x0, 0x149}]}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 698.909775ms ago: executing program 5 (id=668): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x96, 0x20, 0x0, 0x5b, "80040f03000000294a349aa6ffc9d5af00"}) r3 = syz_open_pts(r2, 0x80) r4 = dup3(r3, r2, 0x80000) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000001c0)={0x3, 0x7b5b, 0xa, 0xfbffffcf, 0x3, "65bd2100", 0x5, 0xe}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002e000000101000000020000"], 0x14) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 330.176418ms ago: executing program 6 (id=673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x1, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x5, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x8000000, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 280.759488ms ago: executing program 6 (id=675): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r2, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg$unix(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}}], 0x1, 0x40002120, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 215.839809ms ago: executing program 3 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 215.504339ms ago: executing program 4 (id=680): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x1}) 159.037059ms ago: executing program 3 (id=681): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x380, 0x3}) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (async, rerun: 64) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) (async, rerun: 64) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x7fff, 0x4) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 158.641649ms ago: executing program 4 (id=682): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x803, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x22) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002280)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) syz_fuse_handle_req(r3, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x101, 0x1, 0x40000000000, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x8000, 0xffffffff, r5, r6, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10b800, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@fsname={'fsname', 0x3d, 'hugetlb.2MB.usage_in_bytes\x00'}}]}}) syz_clone(0x1020200, &(0x7f00000000c0)="7bb2fa4f14b45f187d3619161a46286684ad6bb89098802721a918f7c1dfbafd65b4b9910e6b7223660c90198c008c74a2c309c3a591b1c6cbcc40c376806bffefafba2de8a0ffaa2a526403de871aea6abd72de81d332f8f501de26b7f09cfc9cb064c3b0554244d2440c6ef3ab2e363b614174a3d288fd5c98588b12ddac42b049d6e6f789cdc956dad0940e8b9fa1a422acaf823be6e4a0c7fbac98563c30701442ddd15a52c9e0293bfe15e8f52f620ba61b7165cb7de5216191df33921e2416a7e4555e697b44eebf6bbd0f1b7e2c76e757c3964172", 0xd8, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 158.455709ms ago: executing program 3 (id=683): lsm_get_self_attr(0x67, 0xfffffffffffffffc, &(0x7f0000000080), 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r3 = socket$inet6(0xa, 0x80001, 0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x100000001, {{0xa, 0x0, 0xfffffffd, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0x2, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x5f4}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f00000001c0)={0xa3, 0x0, &(0x7f0000000100)}) unlink(&(0x7f0000000080)='./cgroup\x00') lsm_get_self_attr(0x67, 0xfffffffffffffffc, &(0x7f0000000080), 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) socket$inet6(0xa, 0x80001, 0x6) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x100000001, {{0xa, 0x0, 0xfffffffd, @mcast2}}}, 0x88) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0x2, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x5f4}}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) (async) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f00000001c0)={0xa3, 0x0, &(0x7f0000000100)}) (async) unlink(&(0x7f0000000080)='./cgroup\x00') (async) 156.504529ms ago: executing program 4 (id=684): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xeb3dd7ea3fc9e192}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 154.229069ms ago: executing program 6 (id=685): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x110b, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0}) 149.362859ms ago: executing program 3 (id=686): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (rerun: 32) 132.649479ms ago: executing program 6 (id=687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000080)) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000100007000000000000000000ff0200000000000000000000000000012e401035e0000002000000000000000000000000462000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000fe8000000000000000000000000000aa00000000000000000000000000000000020000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb10000a002abd70002cbd700003000000"], 0x114}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = geteuid() quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r3, &(0x7f0000000000)={0x2, 0xfffffffffffff6d4, 0x10, 0x7, 0x6, 0x0, 0xd410, 0x100000001, 0x5}) 346.39µs ago: executing program 3 (id=688): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0xfffffd25) 122.57µs ago: executing program 4 (id=689): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0xffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r6, r6, 0x0, 0x7a680000) read$FUSE(r6, 0x0, 0xeffd) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000140)={r7, 0x1, 0xc}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x600000000000000) 0s ago: executing program 3 (id=690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 723344.950:60): avc: denied { noatsecure } for pid=261 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.610777][ T36] audit: type=1400 audit(1761723344.950:61): avc: denied { write } for pid=261 comm="sh" path="pipe:[541]" dev="pipefs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.621878][ T36] audit: type=1400 audit(1761723344.950:62): avc: denied { rlimitinh } for pid=261 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.628923][ T36] audit: type=1400 audit(1761723344.950:63): avc: denied { siginh } for pid=261 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 27.439747][ T36] audit: type=1400 audit(1761723352.780:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.441091][ T283] cgroup: Unknown subsys name 'net' [ 27.462734][ T36] audit: type=1400 audit(1761723352.780:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.490013][ T36] audit: type=1400 audit(1761723352.810:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.490182][ T283] cgroup: Unknown subsys name 'devices' [ 27.654570][ T283] cgroup: Unknown subsys name 'hugetlb' [ 27.660205][ T283] cgroup: Unknown subsys name 'rlimit' [ 27.796080][ T36] audit: type=1400 audit(1761723353.140:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.819286][ T36] audit: type=1400 audit(1761723353.140:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.844102][ T36] audit: type=1400 audit(1761723353.140:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.854973][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.875977][ T36] audit: type=1400 audit(1761723353.220:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.901449][ T36] audit: type=1400 audit(1761723353.220:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.937489][ T36] audit: type=1400 audit(1761723353.280:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.963082][ T36] audit: type=1400 audit(1761723353.280:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.963459][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.802721][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.809796][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.816913][ T291] bridge_slave_0: entered allmulticast mode [ 28.823263][ T291] bridge_slave_0: entered promiscuous mode [ 28.839454][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.846533][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.853616][ T291] bridge_slave_1: entered allmulticast mode [ 28.859891][ T291] bridge_slave_1: entered promiscuous mode [ 28.902247][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.909306][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.916477][ T290] bridge_slave_0: entered allmulticast mode [ 28.922813][ T290] bridge_slave_0: entered promiscuous mode [ 28.932466][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.939532][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.946673][ T292] bridge_slave_0: entered allmulticast mode [ 28.952957][ T292] bridge_slave_0: entered promiscuous mode [ 28.959273][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.966396][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.973554][ T293] bridge_slave_0: entered allmulticast mode [ 28.979829][ T293] bridge_slave_0: entered promiscuous mode [ 28.986112][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.993218][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.000290][ T290] bridge_slave_1: entered allmulticast mode [ 29.006705][ T290] bridge_slave_1: entered promiscuous mode [ 29.019752][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.026870][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.034005][ T292] bridge_slave_1: entered allmulticast mode [ 29.040290][ T292] bridge_slave_1: entered promiscuous mode [ 29.046351][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.053425][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.060501][ T293] bridge_slave_1: entered allmulticast mode [ 29.066874][ T293] bridge_slave_1: entered promiscuous mode [ 29.243413][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.250489][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.257850][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.264903][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.277246][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.284320][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.291593][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.298682][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.313001][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.320160][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.327465][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.334508][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.347089][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.354260][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.361549][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.368618][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.404420][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.412066][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.419989][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.427896][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.435305][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.442723][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.449965][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.457237][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.477783][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.484967][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.500396][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.507583][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.524536][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.531684][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.539317][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.546393][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.554004][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.561033][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.568589][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.575662][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.585546][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.592706][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.602727][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.609779][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.667741][ T293] veth0_vlan: entered promiscuous mode [ 29.685410][ T290] veth0_vlan: entered promiscuous mode [ 29.697005][ T291] veth0_vlan: entered promiscuous mode [ 29.705707][ T293] veth1_macvtap: entered promiscuous mode [ 29.718153][ T292] veth0_vlan: entered promiscuous mode [ 29.727511][ T290] veth1_macvtap: entered promiscuous mode [ 29.753682][ T291] veth1_macvtap: entered promiscuous mode [ 29.761914][ T292] veth1_macvtap: entered promiscuous mode [ 29.797917][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.834784][ T334] rust_binder: Write failure EFAULT in pid:2 [ 29.868659][ T339] rust_binder: Failed copying remainder into alloc: EFAULT [ 29.879732][ T339] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 29.888942][ T342] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.893852][ T339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.915533][ T339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2 [ 29.931228][ T63] rust_binder: get_current_thread was called from the wrong process. [ 29.948343][ T348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.974769][ T351] 9p: Unknown uid 00000000004294967295 [ 29.991583][ T354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=354 comm=syz.2.5 [ 30.222091][ T367] binder: Unknown parameter 'rw¶' [ 30.241757][ T369] /dev/rnullb0: Can't open blockdev [ 30.334786][ T371] rust_binder: Write failure EFAULT in pid:12 [ 30.349094][ T373] input: syz1 as /devices/virtual/input/input4 [ 30.392285][ T377] rust_binder: Error while translating object. [ 30.392325][ T377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.398582][ T377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 30.419361][ T379] rust_binder: Write failure EINVAL in pid:17 [ 30.433075][ T332] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.595957][ T332] usb 1-1: config 151 has an invalid interface number: 131 but max is 0 [ 30.604776][ T332] usb 1-1: config 151 has no interface number 0 [ 30.605485][ T384] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.611168][ T332] usb 1-1: config 151 interface 131 has no altsetting 0 [ 30.628688][ T332] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=4b.2c [ 30.638158][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.646192][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.653894][ T332] usb 1-1: Product: syz [ 30.658193][ T332] usb 1-1: Manufacturer: syz [ 30.663593][ T332] usb 1-1: SerialNumber: syz [ 30.813973][ T392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 30.819459][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 30.840652][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.850486][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 30.863436][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 30.872702][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.883825][ T332] usb 1-1: unknown interface protocol 0xc1, assuming v1 [ 30.890968][ T332] usb 1-1: cannot find UAC_HEADER [ 30.899199][ T31] usb 4-1: config 0 descriptor?? [ 30.905410][ T332] snd-usb-audio 1-1:151.131: probe with driver snd-usb-audio failed with error -22 [ 30.920925][ T332] usb 1-1: USB disconnect, device number 2 [ 30.970630][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:151.131/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.162210][ T331] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 31.313282][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.326772][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 31.338165][ T31] wacom 0003:056A:5002.0001: hidraw0: USB HID v0.00 Device [HID 056a:5002] on usb-dummy_hcd.3-1/input0 [ 31.349288][ T331] usb 3-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 31.359594][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.368336][ T331] usb 3-1: config 0 descriptor?? [ 31.373616][ T398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.422417][ T405] rust_binder: 12: no such ref 0 [ 31.427423][ T405] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 31.434537][ T405] rust_binder: 12: no such ref 2 [ 31.439532][ T405] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 31.530732][ T373] 9pnet: Unknown protocol version 9 [ 31.634697][ T31] usb 4-1: USB disconnect, device number 2 [ 31.876788][ T421] rust_binder: Error while translating object. [ 31.876819][ T421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.883178][ T421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 32.152242][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.226888][ T432] tmpfs: Unknown parameter '•Þ' [ 32.313386][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.324412][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 32.333499][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.342575][ T10] usb 1-1: config 0 descriptor?? [ 32.401052][ T434] fuse: root generation should be zero [ 32.466927][ T445] rust_binder: 31: no such ref 0 [ 32.471966][ T445] rust_binder: Write failure EINVAL in pid:31 [ 32.473140][ T445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 32.749822][ T10] isku 0003:1E7D:3264.0002: item 0 1 0 9 parsing failed [ 32.766114][ T10] isku 0003:1E7D:3264.0002: parse failed [ 32.771798][ T10] isku 0003:1E7D:3264.0002: probe with driver isku failed with error -22 [ 32.902463][ T63] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.948825][ T428] rust_binder: Write failure EINVAL in pid:35 [ 32.949278][ T453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.949961][ T428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.970482][ T428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.984540][ T31] usb 1-1: USB disconnect, device number 3 [ 33.062205][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 33.068947][ T63] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.079009][ T63] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice=19.01 [ 33.088221][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.096278][ T63] usb 4-1: Product: syz [ 33.100470][ T63] usb 4-1: Manufacturer: syz [ 33.105137][ T63] usb 4-1: SerialNumber: syz [ 33.314309][ T451] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 33.323493][ T63] usb 4-1: USB disconnect, device number 3 [ 33.332370][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.462545][ T31] usb 1-1: device descriptor read/64, error -71 [ 33.702762][ T31] usb 1-1: device descriptor read/64, error -71 [ 33.850562][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 33.850600][ T36] audit: type=1400 audit(1761723359.190:170): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.909394][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 33.915764][ T331] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.924887][ T331] usb 3-1: USB disconnect, device number 2 [ 33.943217][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.983493][ T469] ======================================================= [ 33.983493][ T469] WARNING: The mand mount option has been deprecated and [ 33.983493][ T469] and is ignored by this kernel. Remove the mand [ 33.983493][ T469] option from the mount to silence this warning. [ 33.983493][ T469] ======================================================= [ 33.983533][ T36] audit: type=1400 audit(1761723359.330:171): avc: denied { remount } for pid=468 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 34.018516][ T469] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 34.048205][ T36] audit: type=1400 audit(1761723359.400:172): avc: denied { write } for pid=468 comm="syz.3.45" name="protocols" dev="proc" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.053500][ T469] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.084657][ T36] audit: type=1400 audit(1761723359.430:173): avc: denied { getopt } for pid=468 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.112433][ T31] usb 1-1: device descriptor read/64, error -71 [ 34.262229][ T331] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.352272][ T31] usb 1-1: device descriptor read/64, error -71 [ 34.362281][ T62] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.412213][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 34.418413][ T331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.428575][ T331] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.438832][ T331] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.447947][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.455993][ T331] usb 3-1: Product: syz [ 34.460167][ T331] usb 3-1: Manufacturer: syz [ 34.464915][ T331] usb 3-1: SerialNumber: syz [ 34.469874][ T31] usb usb1-port1: attempt power cycle [ 34.514110][ T62] usb 4-1: config 5 has an invalid interface number: 147 but max is 2 [ 34.522429][ T62] usb 4-1: config 5 has an invalid interface number: 223 but max is 2 [ 34.530607][ T62] usb 4-1: config 5 has an invalid interface number: 229 but max is 2 [ 34.538851][ T62] usb 4-1: config 5 has an invalid interface number: 241 but max is 2 [ 34.547096][ T62] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 34.555853][ T62] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 34.564608][ T62] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 34.573392][ T62] usb 4-1: config 5 has 4 interfaces, different from the descriptor's value: 3 [ 34.582804][ T62] usb 4-1: config 5 has no interface number 0 [ 34.588922][ T62] usb 4-1: config 5 has no interface number 1 [ 34.595307][ T62] usb 4-1: config 5 has no interface number 2 [ 34.601404][ T62] usb 4-1: config 5 has no interface number 3 [ 34.607557][ T62] usb 4-1: config 5 interface 147 altsetting 3 endpoint 0xD has invalid maxpacket 1032, setting to 64 [ 34.618544][ T62] usb 4-1: config 5 interface 147 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 34.629503][ T62] usb 4-1: config 5 interface 147 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 34.640424][ T62] usb 4-1: config 5 interface 223 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 34.651519][ T62] usb 4-1: config 5 interface 223 altsetting 128 endpoint 0xE has invalid maxpacket 503, setting to 64 [ 34.663107][ T62] usb 4-1: config 5 interface 223 altsetting 128 has a duplicate endpoint with address 0xE, skipping [ 34.674029][ T62] usb 4-1: config 5 interface 223 altsetting 128 bulk endpoint 0x8 has invalid maxpacket 1023 [ 34.684332][ T62] usb 4-1: config 5 interface 223 altsetting 128 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 34.697749][ T62] usb 4-1: too many endpoints for config 5 interface 229 altsetting 122: 180, using maximum allowed: 30 [ 34.709001][ T62] usb 4-1: config 5 interface 229 altsetting 122 has an invalid descriptor for endpoint zero, skipping [ 34.720107][ T62] usb 4-1: config 5 interface 229 altsetting 122 has a duplicate endpoint with address 0xD, skipping [ 34.731076][ T62] usb 4-1: config 5 interface 229 altsetting 122 has a duplicate endpoint with address 0x8, skipping [ 34.742007][ T62] usb 4-1: config 5 interface 229 altsetting 122 has a duplicate endpoint with address 0x1, skipping [ 34.744277][ T36] audit: type=1400 audit(1761723360.090:174): avc: denied { ioctl } for pid=461 comm="syz.2.44" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.753747][ T473] random: crng reseeded on system resumption [ 34.777500][ T36] audit: type=1400 audit(1761723360.100:175): avc: denied { write } for pid=461 comm="syz.2.44" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 34.783165][ T62] usb 4-1: config 5 interface 229 altsetting 122 has an invalid descriptor for endpoint zero, skipping [ 34.817126][ T62] usb 4-1: config 5 interface 229 altsetting 122 has 7 endpoint descriptors, different from the interface descriptor's value: 180 [ 34.817601][ T36] audit: type=1400 audit(1761723360.100:176): avc: denied { open } for pid=461 comm="syz.2.44" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 34.841848][ T62] usb 4-1: config 5 interface 241 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 34.853892][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.874920][ T62] usb 4-1: config 5 interface 241 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 34.885717][ T62] usb 4-1: config 5 interface 241 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 34.896553][ T62] usb 4-1: config 5 interface 241 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 34.903381][ T31] usb 1-1: device descriptor read/8, error -71 [ 34.915166][ T62] usb 4-1: config 5 interface 241 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 34.926051][ T62] usb 4-1: config 5 interface 241 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 34.936253][ T62] usb 4-1: config 5 interface 241 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 34.936369][ T478] rust_binder: Failed copying remainder into alloc: EFAULT [ 34.947117][ T62] usb 4-1: config 5 interface 241 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 34.947407][ T478] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 34.954396][ T62] usb 4-1: config 5 interface 241 altsetting 7 bulk endpoint 0xA has invalid maxpacket 32 [ 34.965575][ T478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.985590][ T478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:15 [ 34.990665][ T62] usb 4-1: config 5 interface 241 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 35.016942][ T62] usb 4-1: config 5 interface 147 has no altsetting 0 [ 35.023788][ T62] usb 4-1: config 5 interface 223 has no altsetting 0 [ 35.030573][ T62] usb 4-1: config 5 interface 229 has no altsetting 0 [ 35.037421][ T62] usb 4-1: config 5 interface 241 has no altsetting 0 [ 35.046034][ T62] usb 4-1: Dual-Role OTG device on HNP port [ 35.052339][ T62] usb 4-1: New USB device found, idVendor=07b8, idProduct=3074, bcdDevice=11.97 [ 35.057117][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.061439][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.077415][ T62] usb 4-1: Product: syz [ 35.079869][ T331] usb 3-1: 0:2 : does not exist [ 35.081605][ T62] usb 4-1: Manufacturer: п [ 35.091436][ T36] audit: type=1400 audit(1761723360.440:177): avc: denied { create } for pid=481 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.092423][ T62] usb 4-1: SerialNumber: syz [ 35.119772][ T36] audit: type=1400 audit(1761723360.440:178): avc: denied { ioctl } for pid=481 comm="syz.2.49" path="socket:[3752]" dev="sockfs" ino=3752 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.120990][ T62] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 35.146370][ T36] audit: type=1400 audit(1761723360.460:179): avc: denied { write } for pid=481 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.154660][ T62] usb 4-1: no configuration chosen from 1 choice [ 35.181576][ T331] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 35.197433][ T331] usb 3-1: USB disconnect, device number 3 [ 35.214916][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.322336][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.338816][ T496] rust_binder: Write failure EINVAL in pid:33 [ 35.339566][ T496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.343323][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.345925][ T496] rust_binder: Read failure Err(EFAULT) in pid:33 [ 35.361060][ T496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 35.440856][ T503] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.457947][ T503] IPv6: NLM_F_REPLACE set, but no existing node found! [ 35.469854][ T503] bridge0: port 3(veth0_to_bridge) entered blocking state [ 35.477494][ T503] bridge0: port 3(veth0_to_bridge) entered disabled state [ 35.484723][ T503] veth0_to_bridge: entered allmulticast mode [ 35.491200][ T503] veth0_to_bridge: entered promiscuous mode [ 35.497300][ T503] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 35.498270][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.509773][ T503] bridge0: port 3(veth0_to_bridge) entered blocking state [ 35.522951][ T503] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 35.635383][ T31] usb usb1-port1: unable to enumerate USB device [ 35.731996][ T512] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 35.732024][ T512] rust_binder: Error while translating object. [ 35.747293][ T512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.753623][ T512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 36.666709][ T527] binder: Unknown parameter 'contextÌðÔð[7’' [ 36.911427][ T539] overlayfs: failed to resolve './file1/file0': -2 [ 37.134108][ T62] usb 4-1: USB disconnect, device number 4 [ 37.166631][ T543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.166718][ T543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.676672][ T552] rust_binder: Write failure EFAULT in pid:76 [ 37.865517][ T557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.015614][ T560] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 38.051149][ T562] rust_binder: Write failure EFAULT in pid:58 [ 38.069813][ T565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.078402][ T565] rust_binder: 61: no such ref 0 [ 38.090301][ T565] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 38.097522][ T565] rust_binder: 61: no such ref 2 [ 38.104199][ T565] rust_binder: Error while translating object. [ 38.104254][ T565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.110492][ T565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 38.141082][ T568] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 38.158123][ T567] rust_binder: 63: no such ref 0 [ 38.163422][ T568] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 38.229819][ T573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.230204][ T573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.237038][ T573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 38.311773][ T579] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.321308][ T579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.328104][ T579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 38.543027][ T591] binder: Unknown parameter '´ÑX¯˜ªt‚' [ 38.972196][ T62] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.067660][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 39.067678][ T36] audit: type=1400 audit(1761723364.410:217): avc: denied { write } for pid=599 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.146806][ T62] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.162929][ T62] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.182228][ T62] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.197429][ T62] usb 3-1: config 1 has no interface number 1 [ 39.203794][ T62] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 39.216517][ T62] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.232187][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.243900][ T62] usb 3-1: Product: syz [ 39.266966][ T62] usb 3-1: Manufacturer: syz [ 39.273469][ T62] usb 3-1: SerialNumber: syz [ 39.398359][ T36] audit: type=1400 audit(1761723364.740:218): avc: denied { setopt } for pid=608 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.570494][ T62] usb 3-1: 2:1 : invalid UAC_AS_GENERAL desc [ 39.595331][ T62] usb 3-1: USB disconnect, device number 5 [ 39.648311][ T36] audit: type=1400 audit(1761723364.990:219): avc: denied { ioctl } for pid=616 comm="syz.2.93" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.678491][ T36] audit: type=1400 audit(1761723365.020:220): avc: denied { map } for pid=616 comm="syz.2.93" path="socket:[5823]" dev="sockfs" ino=5823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.702141][ T36] audit: type=1400 audit(1761723365.020:221): avc: denied { read accept } for pid=616 comm="syz.2.93" path="socket:[5823]" dev="sockfs" ino=5823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.764627][ T622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.764911][ T622] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 39.771490][ T622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:101 [ 39.982259][ T62] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.052209][ T452] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.154433][ T62] usb 3-1: config 1 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 40.165822][ T62] usb 3-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 32 [ 40.175904][ T62] usb 3-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 64 [ 40.187372][ T62] usb 3-1: config 1 interface 0 has no altsetting 0 [ 40.195810][ T62] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.205110][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.213335][ T62] usb 3-1: Product: 領膰涮那ꮎé”뒲鼤ю鷬洉↜↻҃â†ï‰‡é˜„볰鎋倆啺ï¬è£«äŒšå©ºë‡´é·´í®ç»î—ꮺŴ怈é¦é¸´â³ã±•ä“¾æ»›å…￮滮惑꾅瑷ჷᰗ䗋름ꕑ陷ྈ욱粟îŸå€ƒì¯¾ã™¢ï²»à²… [ 40.234726][ T62] usb 3-1: Manufacturer: 蜭鴕á«ï¼®î”ªê‰‡ç”«å¶†ãŸ‘쯡由ç§éª˜î©—홵ᘙ뾖ွﱟ辰√顑م箌ኾ⤽꯶탙俅Դ똎椇᥊裎乂뜅䴘ⶣ떻ᖸꭿᴳ캾ã˜ç†¬è¯Ù‚ç”—é€ì™‰ä¦²á’ªì¸ï–‰á¸ªé¿¤å¢¿î«¶æ©¦æ¹ç—¸áŠ™ç¥ï‰¼àµŽï®¬é¦€ï€°âº…̥ꇾⅣ⿑畠괙䊵䶷沮鈖✇癫瘂բᓿ䲓䚷뫽袮♺ᖭ캒諤꽾ä‚ﻋ蜤휚䩒ä…氮왻哕 [ 40.266955][ T62] usb 3-1: SerialNumber: à Œ [ 40.271779][ T452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.286854][ T452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.297642][ T617] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.305093][ T617] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.312361][ T452] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 40.321446][ T452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.332334][ T452] usb 4-1: config 0 descriptor?? [ 40.750589][ T62] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 40.777805][ T62] usb 3-1: USB disconnect, device number 6 [ 40.796648][ T627] overlay: ./file0 is not a directory [ 40.871681][ T629] netlink: 288 bytes leftover after parsing attributes in process `syz.2.97'. [ 40.881331][ T36] audit: type=1400 audit(1761723366.220:222): avc: denied { setattr } for pid=628 comm="syz.2.97" name="/" dev="incremental-fs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.017579][ T452] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71 [ 41.033297][ T452] usb 4-1: USB disconnect, device number 5 [ 41.145005][ T36] audit: type=1400 audit(1761723366.490:223): avc: denied { read write } for pid=644 comm="syz.2.100" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.172609][ T36] audit: type=1400 audit(1761723366.490:224): avc: denied { open } for pid=644 comm="syz.2.100" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.392896][ T36] audit: type=1400 audit(1761723366.740:225): avc: denied { map } for pid=648 comm="syz.2.102" path="socket:[5919]" dev="sockfs" ino=5919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.462200][ T36] audit: type=1400 audit(1761723366.740:226): avc: denied { read } for pid=648 comm="syz.2.102" path="socket:[5919]" dev="sockfs" ino=5919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.571191][ T655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.571317][ T655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 41.577977][ T655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:106 [ 41.732234][ T452] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.895900][ T660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.899860][ T662] rust_binder: Error in use_page_slow: ESRCH [ 41.906947][ T662] rust_binder: use_range failure ESRCH [ 41.913232][ T662] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 41.920279][ T452] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 41.938429][ T662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 41.938463][ T662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:111 [ 41.947981][ T452] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 41.971730][ T452] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 41.988753][ T452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.011887][ T452] usb 3-1: Product: syz [ 42.021121][ T452] usb 3-1: Manufacturer: syz [ 42.043730][ T452] usb 3-1: SerialNumber: syz [ 42.053426][ T452] usb 3-1: config 0 descriptor?? [ 42.059286][ T653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.066853][ T653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.074438][ T667] /dev/rnullb0: Can't open blockdev [ 42.161185][ T673] rust_binder: 124: no such ref 1 [ 42.166447][ T673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 42.281629][ T653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.301224][ T653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.513116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.525178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.537430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.549439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.561540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.573554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.585629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.597657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.609751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.621751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 43.077612][ T452] Error reading MAC address [ 44.512447][ T452] usb 3-1: USB disconnect, device number 7 [ 45.422928][ T693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 45.493936][ T452] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 45.945498][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 45.945518][ T36] audit: type=1400 audit(1761723371.280:235): avc: denied { append } for pid=695 comm="syz.2.119" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.443418][ T452] usb 4-1: Using ep0 maxpacket: 8 [ 46.484180][ T452] usb 4-1: config index 0 descriptor too short (expected 60004, got 92) [ 46.494455][ T452] usb 4-1: config 0 has too many interfaces: 92, using maximum allowed: 32 [ 47.522208][ C0] net_ratelimit: 98247 callbacks suppressed [ 47.522230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.522308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 47.528308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.540675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 47.552314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 47.564555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 47.576200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.588414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 47.600047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.612365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 47.663150][ T452] usb 4-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 47.683525][ T452] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 92 [ 48.112687][ T452] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 48.133539][ T452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.376241][ T452] usb 4-1: config 0 descriptor?? [ 50.953742][ T452] usb 4-1: can't set config #0, error -71 [ 51.198087][ T452] usb 4-1: USB disconnect, device number 6 [ 52.532212][ C0] net_ratelimit: 101082 callbacks suppressed [ 52.532236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.532482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 52.538315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.550671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 52.562327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 52.574516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 52.586224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.598415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 52.610046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.622372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 57.542152][ C0] net_ratelimit: 106544 callbacks suppressed [ 57.542318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 57.548221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.560611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 57.572228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.584507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 57.596122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.608419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 57.620012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.632387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 57.643892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.426214][ T36] audit: type=1400 audit(1761723385.770:236): avc: denied { mounton } for pid=707 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.552182][ C0] net_ratelimit: 107103 callbacks suppressed [ 62.552204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.552340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 62.558320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.570409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 62.582295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.594631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 62.606264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.618329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 62.630203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.642507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 67.562192][ C0] net_ratelimit: 108849 callbacks suppressed [ 67.562214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.562300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 67.568317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.580410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 67.592282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.604637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 67.616252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.628251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 67.640110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.652395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 72.572175][ C0] net_ratelimit: 102285 callbacks suppressed [ 72.572198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.572480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 72.578309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.590312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 72.602243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.614497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 72.626246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.638176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 72.650098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.662435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 74.727036][ T711] netlink: 56 bytes leftover after parsing attributes in process `syz.3.123'. [ 77.582223][ C0] net_ratelimit: 108232 callbacks suppressed [ 77.582247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.582545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 77.588445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.600542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 77.612410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.624801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 77.636388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.648362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 77.660254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.672508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 80.616588][ T36] audit: type=1400 audit(1761723405.960:237): avc: denied { watch watch_reads } for pid=718 comm="syz.3.125" path="/52" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.592153][ C0] net_ratelimit: 110634 callbacks suppressed [ 82.592175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.592261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 82.598273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.610295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 82.622208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.634488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 82.646034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.658110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 82.669952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.682405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 82.895701][ T706] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 83.506125][ T706] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.594422][ T706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 84.073328][ T706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.096854][ T706] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.125137][ T706] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.362736][ T706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.582580][ T706] usb 4-1: config 0 descriptor?? [ 84.633442][ T706] usb 4-1: can't set config #0, error -71 [ 84.800594][ T706] usb 4-1: USB disconnect, device number 7 [ 84.820708][ T36] audit: type=1400 audit(1761723410.160:238): avc: denied { ioctl } for pid=723 comm="syz.3.126" path="socket:[6341]" dev="sockfs" ino=6341 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.403758][ T36] audit: type=1400 audit(1761723410.200:239): avc: denied { create } for pid=723 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 87.132158][ C1] sched: DL replenish lagged too much [ 87.602152][ C0] net_ratelimit: 102217 callbacks suppressed [ 87.602175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.602483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 87.608268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.620384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 87.632286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.644518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 87.656160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.668131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 87.680031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.692322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 88.253560][ T36] audit: type=1400 audit(1761723413.570:240): avc: denied { create } for pid=727 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.612192][ C0] net_ratelimit: 113530 callbacks suppressed [ 92.612215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.612259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 92.618327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.630227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 92.642203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.654511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 92.666069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.678077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 92.689953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.701840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 97.175231][ T46] veth0_to_bridge: left allmulticast mode [ 97.232228][ T46] veth0_to_bridge: left promiscuous mode [ 97.622178][ C0] net_ratelimit: 122469 callbacks suppressed [ 97.622206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.622447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 97.628316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.640313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 97.652237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.664220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 97.676208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.688518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 97.700147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.712246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:01:07:5d:b1:66, vlan:0) [ 97.852932][ T46] bridge0: port 3(veth0_to_bridge) entered disabled state [ 97.879746][ T46] bridge_slave_1: left allmulticast mode [ 97.885495][ T46] bridge_slave_1: left promiscuous mode [ 97.891213][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.898763][ T46] bridge_slave_0: left allmulticast mode [ 97.904449][ T46] bridge_slave_0: left promiscuous mode [ 97.910059][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.032448][ T46] veth1_macvtap: left promiscuous mode [ 98.037995][ T46] veth0_vlan: left promiscuous mode [ 98.092007][ T707] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.099237][ T707] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.106611][ T707] bridge_slave_0: entered allmulticast mode [ 98.113050][ T707] bridge_slave_0: entered promiscuous mode [ 98.120649][ T707] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.127780][ T707] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.134962][ T707] bridge_slave_1: entered allmulticast mode [ 98.142653][ T707] bridge_slave_1: entered promiscuous mode [ 98.183344][ T714] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.190414][ T714] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.197609][ T714] bridge_slave_0: entered allmulticast mode [ 98.204883][ T714] bridge_slave_0: entered promiscuous mode [ 98.214591][ T714] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.221641][ T714] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.228758][ T714] bridge_slave_1: entered allmulticast mode [ 98.235088][ T714] bridge_slave_1: entered promiscuous mode [ 98.242252][ T332] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.275532][ T715] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.282630][ T715] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.289742][ T715] bridge_slave_0: entered allmulticast mode [ 98.296368][ T715] bridge_slave_0: entered promiscuous mode [ 98.310692][ T715] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.318297][ T715] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.325419][ T715] bridge_slave_1: entered allmulticast mode [ 98.331753][ T715] bridge_slave_1: entered promiscuous mode [ 98.393186][ T332] usb 4-1: config 127 has an invalid interface number: 54 but max is 0 [ 98.401511][ T332] usb 4-1: config 127 has no interface number 0 [ 98.407863][ T332] usb 4-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 98.416959][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.425904][ T46] bridge_slave_1: left allmulticast mode [ 98.431685][ T46] bridge_slave_1: left promiscuous mode [ 98.437357][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.444979][ T46] bridge_slave_0: left allmulticast mode [ 98.450633][ T46] bridge_slave_0: left promiscuous mode [ 98.456355][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.548235][ T707] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.555355][ T707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.562712][ T707] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.569770][ T707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.581326][ T714] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.588432][ T714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.595758][ T714] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.602835][ T714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.612079][ T46] veth1_macvtap: left promiscuous mode [ 98.618236][ T46] veth0_vlan: left promiscuous mode [ 98.632788][ T738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.642596][ T738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.660980][ T738] rust_binder: Write failure EFAULT in pid:165 [ 98.661685][ T332] usb 4-1: string descriptor 0 read error: -71 [ 98.682951][ T332] usb 4-1: Found UVC 0.00 device (1b3f:2002) [ 98.692214][ T332] usb 4-1: No valid video chain found. [ 98.698766][ T332] usb 4-1: USB disconnect, device number 8 [ 98.705370][ T715] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.712454][ T715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.719755][ T715] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.726820][ T715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.768366][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.775917][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.783268][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.790498][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.799407][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.806667][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.820345][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.827499][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.835731][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.842798][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.851790][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.858870][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.875006][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.882204][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.889754][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.896824][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.905528][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.912607][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.956459][ T707] veth0_vlan: entered promiscuous mode [ 98.962443][ T714] veth0_vlan: entered promiscuous mode [ 98.981753][ T714] veth1_macvtap: entered promiscuous mode [ 98.989300][ T707] veth1_macvtap: entered promiscuous mode [ 99.008784][ T715] veth0_vlan: entered promiscuous mode [ 99.029643][ T36] audit: type=1400 audit(1761723424.370:241): avc: denied { unmount } for pid=714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.038318][ T715] veth1_macvtap: entered promiscuous mode [ 99.094974][ T771] netlink: 'syz.5.122': attribute type 30 has an invalid length. [ 99.100304][ T36] audit: type=1400 audit(1761723424.440:242): avc: denied { create } for pid=770 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 99.123999][ T772] capability: warning: `syz.4.120' uses 32-bit capabilities (legacy support in use) [ 99.142457][ T36] audit: type=1400 audit(1761723424.440:243): avc: denied { sys_admin } for pid=770 comm="syz.4.120" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 99.200712][ T782] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.220439][ T36] audit: type=1400 audit(1761723424.560:244): avc: denied { mount } for pid=779 comm="syz.6.132" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.278953][ T36] audit: type=1400 audit(1761723424.570:245): avc: denied { watch watch_reads } for pid=779 comm="syz.6.132" path="/1/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 99.375190][ T36] audit: type=1400 audit(1761723424.720:246): avc: denied { block_suspend } for pid=800 comm="syz.6.140" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.403831][ T802] rust_binder: Write failure EINVAL in pid:9 [ 99.404356][ T802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.412563][ T802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 99.466880][ T36] audit: type=1400 audit(1761723424.800:247): avc: denied { create } for pid=806 comm="syz.5.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.529345][ T812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.529379][ T812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 99.619266][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.629761][ T805] rust_binder: Error while translating object. [ 99.650498][ T805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.670241][ T805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 99.999336][ T36] audit: type=1400 audit(1761723424.890:248): avc: denied { setopt } for pid=806 comm="syz.5.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.027989][ T36] audit: type=1400 audit(1761723425.010:249): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=470 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 100.049815][ T36] audit: type=1400 audit(1761723425.010:250): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=470 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 100.294596][ T823] /dev/rnullb0: Can't open blockdev [ 100.336779][ T825] capability: warning: `syz.5.149' uses deprecated v2 capabilities in a way that may be insecure [ 100.443998][ T836] rust_binder: Error while translating object. [ 100.444037][ T836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 100.450325][ T836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 100.549503][ T845] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 100.585720][ T846] /dev/md0: Can't lookup blockdev [ 100.605866][ T847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.735198][ T856] random: crng reseeded on system resumption [ 101.022790][ T865] rust_binder: Error while translating object. [ 101.022812][ T865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 101.029017][ T865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:15 [ 101.105904][ T871] rust_binder: got new transaction with bad transaction stack [ 101.115093][ T871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 101.331924][ T878] binder: Binderfs stats mode cannot be changed during a remount [ 101.632184][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 101.782423][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 101.790126][ T10] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 101.799313][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.821488][ T10] usb 4-1: config 0 descriptor?? [ 101.984489][ T902] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 101.984521][ T902] rust_binder: Error while translating object. [ 101.993259][ T902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.999736][ T902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 102.032174][ T10] usb 4-1: Found UVC 0.00 device (2833:0201) [ 102.056091][ T10] usb 4-1: No valid video chain found. [ 102.123182][ T912] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 102.123207][ T912] rust_binder: Error while translating object. [ 102.131951][ T912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 102.141502][ T912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 102.198103][ T917] netlink: 104 bytes leftover after parsing attributes in process `syz.4.174'. [ 102.207343][ T918] netlink: 104 bytes leftover after parsing attributes in process `syz.4.174'. [ 102.216439][ T917] netlink: 104 bytes leftover after parsing attributes in process `syz.4.174'. [ 102.225604][ T917] netlink: 104 bytes leftover after parsing attributes in process `syz.4.174'. [ 102.236150][ T918] netlink: 104 bytes leftover after parsing attributes in process `syz.4.174'. [ 102.245507][ T917] netlink: 104 bytes leftover after parsing attributes in process `syz.4.174'. [ 102.260551][ T918] netlink: 104 bytes leftover after parsing attributes in process `syz.4.174'. [ 102.261772][ T10] usb 4-1: USB disconnect, device number 9 [ 102.272467][ T917] netlink: 104 bytes leftover after parsing attributes in process `syz.4.174'. [ 102.307978][ T925] rust_binder: 190: no such ref 6 [ 102.313291][ T925] rust_binder: 190: no such ref 3 [ 102.318397][ T925] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 102.392194][ T940] netlink: 144 bytes leftover after parsing attributes in process `syz.3.181'. [ 102.402268][ T940] SELinux: security_context_str_to_sid () failed with errno=-22 [ 102.565532][ T960] netlink: 64 bytes leftover after parsing attributes in process `syz.3.188'. [ 102.749828][ T978] syz.5.195: attempt to access beyond end of device [ 102.749828][ T978] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 102.772303][ T978] exFAT-fs (loop5): unable to read boot sector [ 102.778853][ T978] exFAT-fs (loop5): failed to read boot sector [ 102.795721][ T978] exFAT-fs (loop5): failed to recognize exfat type [ 102.922761][ T992] veth1_to_bridge: entered promiscuous mode [ 102.930644][ T989] rust_binder: Write failure EFAULT in pid:61 [ 102.939027][ T992] veth1_to_bridge: entered allmulticast mode [ 102.974044][ T991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.187154][ T1013] 9pnet: Could not find request transport: v©ÄŠpd~o=0x0000000000000003 [ 103.263963][ T1016] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.302292][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 103.362849][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.362880][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.369358][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.382199][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.403925][ T1025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 103.405931][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.432056][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.432085][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.439856][ T1030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.439887][ T1030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 103.462279][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.470035][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.487053][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.487079][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.499427][ T1032] Zero length message leads to an empty skb [ 103.510108][ T1034] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.511011][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.533155][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.533191][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.537020][ T1025] rust_binder: Error in use_page_slow: ESRCH [ 103.540961][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.552526][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.569830][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.569859][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.576642][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 103.596250][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.596279][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.602932][ T9] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 103.618820][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.618847][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.630907][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.645759][ T1025] rust_binder: use_range failure ESRCH [ 103.645786][ T1025] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 103.651339][ T1025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 103.677883][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.677912][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.685291][ T9] usb 4-1: config 0 descriptor?? [ 103.701778][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.701807][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.723112][ T1025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:33 [ 103.739273][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.739318][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.784759][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.784788][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.798413][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.798443][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.812767][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.812796][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.850165][ T1043] deleting an unspecified loop device is not supported. [ 103.998845][ T1049] rust_binder: Write failure EFAULT in pid:115 [ 104.058730][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 104.058749][ T36] audit: type=1400 audit(1761723429.400:317): avc: denied { read append } for pid=1053 comm="syz.6.218" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.097620][ T1054] syz.6.218 (1054) used obsolete PPPIOCDETACH ioctl [ 104.106102][ T36] audit: type=1400 audit(1761723429.450:318): avc: denied { open } for pid=1053 comm="syz.6.218" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.143215][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 104.149275][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.157936][ T36] audit: type=1400 audit(1761723429.450:319): avc: denied { ioctl } for pid=1053 comm="syz.6.218" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.184369][ T9] usb 4-1: USB disconnect, device number 10 [ 104.344340][ T1056] rust_binder: 72: no such ref 1 [ 104.349419][ T1056] rust_binder: Write failure EINVAL in pid:72 [ 104.362465][ T36] audit: type=1400 audit(1761723429.710:320): avc: denied { read write } for pid=1057 comm="syz.5.220" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 104.391813][ T36] audit: type=1400 audit(1761723429.710:321): avc: denied { open } for pid=1057 comm="syz.5.220" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 104.414897][ T36] audit: type=1400 audit(1761723429.710:322): avc: denied { mounton } for pid=1057 comm="syz.5.220" path="/27/file0" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.437386][ T36] audit: type=1400 audit(1761723429.710:323): avc: denied { mount } for pid=1057 comm="syz.5.220" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 104.459220][ T36] audit: type=1400 audit(1761723429.790:324): avc: denied { create } for pid=1057 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.478550][ T36] audit: type=1400 audit(1761723429.790:325): avc: denied { create } for pid=1057 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.498003][ T36] audit: type=1400 audit(1761723429.790:326): avc: denied { setopt } for pid=1057 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.541568][ T1066] netlink: 'syz.5.222': attribute type 5 has an invalid length. [ 104.562366][ T1069] cgroup: Name too long [ 104.697256][ T1078] 9pnet: Could not find request transport: tc [ 104.782200][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 104.835293][ T1089] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.836553][ T1089] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 104.868821][ T1092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.943322][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.960906][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.971128][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 104.980270][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.989415][ T9] usb 7-1: config 0 descriptor?? [ 105.102187][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 105.116383][ T1106] rust_binder: Error in use_page_slow: ESRCH [ 105.116405][ T1106] rust_binder: use_range failure ESRCH [ 105.122644][ T1106] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 105.128271][ T1106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 105.136360][ T1106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:135 [ 105.146454][ T1106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.255484][ T45] usb 4-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 105.266075][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.276002][ T45] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.285308][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.294555][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 105.303655][ T45] usb 4-1: SerialNumber: syz [ 105.308869][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 105.318815][ T1114] SELinux: failed to load policy [ 105.324375][ T1114] rust_binder: 142: no such ref 0 [ 105.329466][ T1114] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 105.334288][ T9] usb 7-1: USB disconnect, device number 2 [ 105.337249][ T1114] rust_binder: 142: no such ref 2 [ 105.347986][ T1114] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 105.477482][ T1138] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 105.521542][ T1092] rust_binder: inc_ref_done called when no active inc_refs [ 105.531644][ T1143] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 105.531675][ T1144] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 105.567475][ T1148] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 105.582828][ T1148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 105.829483][ T1190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 105.864799][ T1187] overlayfs: unescaped trailing colons in lowerdir mount option. [ 106.023298][ T45] usb 4-1: 0:2 : does not exist [ 106.028267][ T45] usb 4-1: unit 5: unexpected type 0x0b [ 106.052111][ T1202] /dev/rnullb0: Can't open blockdev [ 106.054139][ T45] usb 4-1: USB disconnect, device number 11 [ 106.492187][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.642184][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 106.652557][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.663533][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.673499][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.682678][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.691355][ T45] usb 5-1: config 0 descriptor?? [ 106.697474][ T45] hub 5-1:0.0: USB hub found [ 106.890601][ T1260] mmap: syz.3.285 (1260) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.902592][ T45] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 106.922180][ T706] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 106.945167][ T1265] /dev/loop0: Can't lookup blockdev [ 107.073230][ T706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.084257][ T706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.094776][ T706] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 107.103893][ T706] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.104651][ T1234] fuse: Unknown parameter 'ûÝT‚¤hÌÏ º€]ÊHfd' [ 107.118713][ T706] usb 7-1: Manufacturer: syz [ 107.125102][ T706] usb 7-1: config 0 descriptor?? [ 107.125476][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 107.137045][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 107.162660][ T45] usb 5-1: USB disconnect, device number 2 [ 107.497590][ T1274] __nla_validate_parse: 1 callbacks suppressed [ 107.497611][ T1274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 107.535694][ T706] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 107.542735][ T706] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 107.549632][ T706] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 107.556697][ T706] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 107.563955][ T706] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 107.571133][ T706] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 107.578210][ T706] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 107.586238][ T706] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 107.651441][ T1288] __vm_enough_memory: pid: 1288, comm: syz.4.293, bytes: 18014402804453376 not enough memory for the allocation [ 107.663641][ T1288] __vm_enough_memory: pid: 1288, comm: syz.4.293, bytes: 18014402804453376 not enough memory for the allocation [ 107.675731][ T1288] __vm_enough_memory: pid: 1288, comm: syz.4.293, bytes: 18014402804453376 not enough memory for the allocation [ 107.687742][ T1288] __vm_enough_memory: pid: 1288, comm: syz.4.293, bytes: 18014402804453376 not enough memory for the allocation [ 107.699782][ T1288] __vm_enough_memory: pid: 1288, comm: syz.4.293, bytes: 18014402804453376 not enough memory for the allocation [ 107.711830][ T1288] __vm_enough_memory: pid: 1288, comm: syz.4.293, bytes: 18014402804453376 not enough memory for the allocation [ 107.723887][ T1288] __vm_enough_memory: pid: 1288, comm: syz.4.293, bytes: 18014402804453376 not enough memory for the allocation [ 107.735899][ T1288] __vm_enough_memory: pid: 1288, comm: syz.4.293, bytes: 18014402804453376 not enough memory for the allocation [ 107.747922][ T1288] __vm_enough_memory: pid: 1288, comm: syz.4.293, bytes: 18014402804453376 not enough memory for the allocation [ 107.759939][ T1288] __vm_enough_memory: pid: 1288, comm: syz.4.293, bytes: 18014402804453376 not enough memory for the allocation [ 108.062197][ T332] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.213745][ T332] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.222375][ T332] usb 5-1: config 192 has an invalid interface number: 162 but max is 0 [ 108.230762][ T332] usb 5-1: config 192 has no interface number 0 [ 108.237075][ T332] usb 5-1: config 192 interface 162 has no altsetting 0 [ 108.245544][ T332] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 108.254647][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.262661][ T332] usb 5-1: Product: syz [ 108.266832][ T332] usb 5-1: Manufacturer: syz [ 108.271448][ T332] usb 5-1: SerialNumber: syz [ 108.388306][ T1244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 108.388626][ T1244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 108.397773][ T1244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:68 [ 108.407706][ T706] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 108.424254][ T706] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 108.431720][ T706] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 108.441477][ T706] usb 7-1: USB disconnect, device number 3 [ 108.464302][ T1315] fido_id[1315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 108.552702][ T332] usb-storage 5-1:192.162: USB Mass Storage device detected [ 108.561185][ T332] usb-storage 5-1:192.162: device ignored [ 108.605709][ T332] usb 5-1: USB disconnect, device number 3 [ 108.657666][ T1327] devpts: called with bogus options [ 108.725185][ T1331] batadv_slave_1: entered promiscuous mode [ 108.731887][ T1331] batadv_slave_1: left promiscuous mode [ 108.967378][ T1339] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.978943][ T1341] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 208, size: 226) [ 108.985655][ T1341] rust_binder: Error while translating object. [ 108.996473][ T1341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.002683][ T1341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 109.024491][ T1343] No source specified [ 109.080908][ T1350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82 [ 109.081598][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 109.081615][ T36] audit: type=1400 audit(1761723434.420:401): avc: denied { watch watch_reads } for pid=1345 comm="syz.6.314" path="/26" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 109.100697][ T1350] rust_binder: Write failure EFAULT in pid:82 [ 109.127766][ T36] audit: type=1400 audit(1761723434.470:402): avc: denied { read write } for pid=1345 comm="syz.6.314" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.158482][ T36] audit: type=1400 audit(1761723434.470:403): avc: denied { open } for pid=1345 comm="syz.6.314" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.264139][ T36] audit: type=1400 audit(1761723434.610:404): avc: denied { read write } for pid=1358 comm="syz.6.318" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.289627][ T36] audit: type=1400 audit(1761723434.610:405): avc: denied { open } for pid=1358 comm="syz.6.318" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.314073][ T36] audit: type=1400 audit(1761723434.640:406): avc: denied { read write } for pid=1358 comm="syz.6.318" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.342096][ T36] audit: type=1400 audit(1761723434.640:407): avc: denied { open } for pid=1358 comm="syz.6.318" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.372215][ T399] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 109.378382][ T36] audit: type=1400 audit(1761723434.640:408): avc: denied { ioctl } for pid=1358 comm="syz.6.318" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.405221][ T36] audit: type=1400 audit(1761723434.680:409): avc: denied { create } for pid=1362 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.420913][ T1376] netlink: 'syz.3.325': attribute type 4 has an invalid length. [ 109.425307][ T36] audit: type=1400 audit(1761723434.760:410): avc: denied { setopt } for pid=1375 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.537612][ T399] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 109.546357][ T1369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:91 [ 109.546479][ T1369] rust_binder: Read failure Err(EFAULT) in pid:91 [ 109.555597][ T399] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 109.573062][ T399] usb 5-1: config 8 has no interface number 0 [ 109.579238][ T399] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.594001][ T399] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 109.603335][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.611418][ T399] usb 5-1: Product: syz [ 109.615906][ T399] usb 5-1: Manufacturer: syz [ 109.620595][ T399] usb 5-1: SerialNumber: syz [ 109.829808][ T1352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.839590][ T1352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.848251][ T1352] binder: Unknown parameter 'max0000000000001' [ 109.862799][ T399] usb 5-1: USB disconnect, device number 4 [ 110.079396][ T1395] net_ratelimit: 3129 callbacks suppressed [ 110.079421][ T1395] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 110.128187][ T1400] netlink: 25 bytes leftover after parsing attributes in process `syz.3.334'. [ 110.322619][ T1407] option changes via remount are deprecated (pid=1405 comm=syz.6.337) [ 110.331042][ T1407] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 110.339104][ T1407] netlink: 28 bytes leftover after parsing attributes in process `syz.6.337'. [ 110.383138][ T1410] tipc: Started in network mode [ 110.388159][ T1410] tipc: Node identity ac14140f, cluster identity 4711 [ 110.396488][ T1410] tipc: New replicast peer: 255.255.255.255 [ 110.402834][ T1410] tipc: Enabled bearer , priority 10 [ 110.464294][ T1411] rust_binder: Write failure EFAULT in pid:202 [ 111.522256][ T706] tipc: Node number set to 2886997007 [ 117.920293][ T1421] rust_binder: 102: no such ref 3 [ 117.922316][ T1422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.341'. [ 117.937846][ T1421] rust_binder: 102: no such ref 1 [ 117.943482][ T1421] rust_binder: Write failure EFAULT in pid:102 [ 117.946091][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 117.946109][ T36] audit: type=1400 audit(1761723443.290:423): avc: denied { mount } for pid=1419 comm="syz.4.341" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.982161][ T36] audit: type=1400 audit(1761723443.330:424): avc: denied { read } for pid=1424 comm="syz.3.344" path="socket:[10727]" dev="sockfs" ino=10727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.998205][ T1430] /dev/rnullb0: Can't open blockdev [ 118.018184][ T1434] /dev/rnullb0: Can't open blockdev [ 118.106613][ T1444] overlayfs: failed to clone upperpath [ 118.113707][ T36] audit: type=1326 audit(1761723443.460:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.5.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc753d8efc9 code=0x7ffc0000 [ 118.137107][ T36] audit: type=1326 audit(1761723443.460:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.5.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc753d8efc9 code=0x7ffc0000 [ 118.160417][ T36] audit: type=1326 audit(1761723443.460:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.5.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc753d8d810 code=0x7ffc0000 [ 118.183751][ T36] audit: type=1326 audit(1761723443.460:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.5.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc753d8d810 code=0x7ffc0000 [ 118.207310][ T36] audit: type=1326 audit(1761723443.460:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.5.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc753d8efc9 code=0x7ffc0000 [ 118.230649][ T36] audit: type=1326 audit(1761723443.460:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.5.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc753d8efc9 code=0x7ffc0000 [ 118.253969][ T36] audit: type=1326 audit(1761723443.460:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.5.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc753d8efc9 code=0x7ffc0000 [ 118.277435][ T36] audit: type=1326 audit(1761723443.460:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.5.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc753d8efc9 code=0x7ffc0000 [ 118.302207][ T706] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.332183][ T399] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 118.453259][ T706] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.464996][ T706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.480666][ T706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 118.490546][ T706] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.503680][ T706] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.513665][ T399] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 118.520635][ T706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.527998][ T399] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 118.540563][ T706] usb 5-1: config 0 descriptor?? [ 118.544024][ T399] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.561510][ T399] usb 7-1: config 0 descriptor?? [ 118.572465][ T1442] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 118.961994][ T706] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 118.971106][ T706] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 118.986873][ T399] kone 0003:1E7D:2CED.0006: unknown main item tag 0x1 [ 119.002361][ T399] kone 0003:1E7D:2CED.0006: hidraw1: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 119.190247][ T1489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.200365][ T1489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.216189][ T706] usb 7-1: USB disconnect, device number 4 [ 119.274566][ T1504] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 119.274592][ T1504] rust_binder: Read failure Err(EFAULT) in pid:214 [ 119.422361][ T1524] netlink: 104 bytes leftover after parsing attributes in process `syz.5.378'. [ 120.213319][ T1546] 9pnet_fd: Insufficient options for proto=fd [ 120.231639][ T1548] batadv_slave_1: entered promiscuous mode [ 120.238758][ T1548] netlink: 288 bytes leftover after parsing attributes in process `syz.3.386'. [ 120.248743][ T1548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.386'. [ 120.259728][ T1548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1548 comm=syz.3.386 [ 120.278106][ T1554] No source specified [ 120.285632][ T1551] batadv_slave_1: left promiscuous mode [ 120.302772][ T1556] netlink: 'syz.5.388': attribute type 16 has an invalid length. [ 120.311699][ T1556] 9pnet_fd: Insufficient options for proto=fd [ 120.335035][ T1563] cgroup: Bad value for 'name' [ 120.335184][ T1562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.390'. [ 120.958166][ T1601] /dev/rnullb0: Can't open blockdev [ 121.062608][ T706] usb 5-1: USB disconnect, device number 5 [ 121.498370][ T1617] netlink: 'syz.5.408': attribute type 10 has an invalid length. [ 122.017524][ T1630] 9pnet_fd: p9_fd_create_tcp (1630): problem binding to privport [ 122.433105][ T1634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.417'. [ 123.042176][ T399] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 123.172188][ T399] usb 7-1: device descriptor read/64, error -71 [ 123.412219][ T399] usb 7-1: device descriptor read/64, error -71 [ 123.635938][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.642311][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.648830][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.652197][ T399] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 123.659109][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.669301][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.675795][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.682010][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.688485][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.700350][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.706632][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.712942][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.719179][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.725422][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.731649][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.737991][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.744335][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.750561][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.756797][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.763026][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.769263][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.775493][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.781696][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.788521][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.791728][ T1671] GUP no longer grows the stack in syz.4.431 (1671): 200000004000-20000000a000 (200000002000) [ 123.794762][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 123.805306][ T399] usb 7-1: device descriptor read/64, error -71 [ 123.811083][ T1671] CPU: 0 UID: 0 PID: 1671 Comm: syz.4.431 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 123.811122][ T1671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.811151][ T1671] Call Trace: [ 123.811161][ T1671] [ 123.811172][ T1671] __dump_stack+0x21/0x30 [ 123.811213][ T1671] dump_stack_lvl+0x10c/0x190 [ 123.811246][ T1671] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.811278][ T1671] ? find_vma+0xcd/0x110 [ 123.811302][ T1671] ? vma_is_secretmem+0x11/0x50 [ 123.811334][ T1671] dump_stack+0x19/0x20 [ 123.811364][ T1671] __get_user_pages+0x1e34/0x22d0 [ 123.811398][ T1671] ? populate_vma_page_range+0x230/0x230 [ 123.811431][ T1671] get_user_pages_remote+0x392/0xbe0 [ 123.811462][ T1671] ? __cfi_mtree_load+0x10/0x10 [ 123.811486][ T1671] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 123.811511][ T1671] ? __cfi_get_user_pages_remote+0x10/0x10 [ 123.811542][ T1671] __access_remote_vm+0x1e2/0x640 [ 123.811571][ T1671] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 123.811606][ T1671] ? access_remote_vm+0x60/0x60 [ 123.811633][ T1671] ? _raw_spin_lock+0x8c/0x120 [ 123.811663][ T1671] ? __cfi__raw_spin_lock+0x10/0x10 [ 123.811694][ T1671] access_remote_vm+0x39/0x60 [ 123.811721][ T1671] proc_pid_cmdline_read+0x4bb/0xbf0 [ 123.811753][ T1671] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 123.811783][ T1671] ? bpf_lsm_file_permission+0xd/0x20 [ 123.811816][ T1671] vfs_readv+0x62b/0xa50 [ 123.811844][ T1671] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 123.811873][ T1671] ? do_readv+0x2d0/0x2d0 [ 123.811906][ T1671] __x64_sys_preadv+0x197/0x2a0 [ 123.811939][ T1671] ? __cfi___x64_sys_preadv+0x10/0x10 [ 123.811965][ T1671] ? switch_fpu_return+0x12/0x20 [ 123.811995][ T1671] x64_sys_call+0x1ee9/0x2ee0 [ 123.812031][ T1671] do_syscall_64+0x58/0xf0 [ 123.812063][ T1671] ? clear_bhb_loop+0x50/0xa0 [ 123.812090][ T1671] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.812122][ T1671] RIP: 0033:0x7f392bf8efc9 [ 123.812148][ T1671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.812169][ T1671] RSP: 002b:00007f392cd88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 123.812199][ T1671] RAX: ffffffffffffffda RBX: 00007f392c1e5fa0 RCX: 00007f392bf8efc9 [ 123.812220][ T1671] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 123.812235][ T1671] RBP: 00007f392c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 123.812251][ T1671] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 123.812267][ T1671] R13: 00007f392c1e6038 R14: 00007f392c1e5fa0 R15: 00007fffe9232048 [ 123.812290][ T1671] [ 123.812622][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 124.072214][ T399] usb 7-1: device descriptor read/64, error -71 [ 124.074358][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 124.096226][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 124.102493][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 124.108811][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 124.115224][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 124.121466][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 124.127702][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 124.134032][ T1667] 9pnet_fd: Insufficient options for proto=fd [ 124.146551][ T1675] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 124.146579][ T1675] rust_binder: Error while translating object. [ 124.158780][ T1675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.165014][ T1675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 124.183202][ T399] usb usb7-port1: attempt power cycle [ 124.190764][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 124.190784][ T36] audit: type=1400 audit(1761723449.530:513): avc: denied { append } for pid=1678 comm="syz.4.434" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.229945][ T1679] netlink: 3 bytes leftover after parsing attributes in process `syz.4.434'. [ 124.240620][ T1679] netlink: 3 bytes leftover after parsing attributes in process `syz.4.434'. [ 124.249575][ T1679] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 124.287450][ T1688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:247 [ 124.287886][ T1688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 124.297397][ T1688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:247 [ 124.301579][ T1690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 124.340373][ T1692] rust_binder: Write failure EFAULT in pid:249 [ 124.359177][ T1697] netlink: 'syz.5.441': attribute type 4 has an invalid length. [ 124.385542][ T1699] netlink: 80 bytes leftover after parsing attributes in process `syz.5.442'. [ 124.395184][ T36] audit: type=1400 audit(1761723449.750:514): avc: denied { create } for pid=1698 comm="syz.5.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 124.416255][ T36] audit: type=1400 audit(1761723449.760:515): avc: denied { sys_admin } for pid=1698 comm="syz.5.442" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 124.465060][ T36] audit: type=1400 audit(1761723449.760:516): avc: denied { associate } for pid=1700 comm="syz.5.442" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 124.532205][ T399] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 124.554452][ T399] usb 7-1: device descriptor read/8, error -71 [ 124.580146][ T1707] rust_binder: Write failure EFAULT in pid:252 [ 124.683287][ T399] usb 7-1: device descriptor read/8, error -71 [ 124.932212][ T399] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 124.953181][ T399] usb 7-1: device descriptor read/8, error -71 [ 125.083306][ T399] usb 7-1: device descriptor read/8, error -71 [ 125.087497][ T36] audit: type=1400 audit(1761723450.430:517): avc: denied { read } for pid=1723 comm="syz.5.452" name="/" dev="configfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.111338][ T36] audit: type=1400 audit(1761723450.430:518): avc: denied { open } for pid=1723 comm="syz.5.452" path="/" dev="configfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.133334][ T36] audit: type=1400 audit(1761723450.440:519): avc: denied { write } for pid=1723 comm="syz.5.452" name="/" dev="configfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.156743][ T36] audit: type=1400 audit(1761723450.440:520): avc: denied { add_name } for pid=1723 comm="syz.5.452" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.177397][ T36] audit: type=1400 audit(1761723450.440:521): avc: denied { create } for pid=1723 comm="syz.5.452" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 125.202301][ T399] usb usb7-port1: unable to enumerate USB device [ 125.317355][ T36] audit: type=1400 audit(1761723450.660:522): avc: denied { map } for pid=1737 comm="syz.4.457" path="socket:[12302]" dev="sockfs" ino=12302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 125.457410][ T1747] netlink: 144 bytes leftover after parsing attributes in process `syz.3.460'. [ 125.476960][ T1749] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 125.485926][ T1749] fuseblk: Unknown parameter 'á[ÄVùf19allow_other' [ 125.547649][ T1761] overlayfs: disabling nfs_export due to verity=on [ 125.554225][ T1761] overlayfs: missing 'lowerdir' [ 125.583946][ T1768] netlink: 'syz.3.468': attribute type 16 has an invalid length. [ 125.591764][ T1768] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.468'. [ 125.653655][ T1778] netlink: 152 bytes leftover after parsing attributes in process `syz.3.471'. [ 125.889186][ T1805] 9p: Unknown uid 00000000004294967295 [ 126.034584][ T1821] netlink: 96 bytes leftover after parsing attributes in process `syz.6.485'. [ 126.044033][ T1821] rust_binder: 134: no such ref 1 [ 126.049111][ T1821] rust_binder: inc_ref_done called when no active inc_refs [ 126.096818][ T1823] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 126.123934][ T1823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.124281][ T1823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.131061][ T1823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 126.172035][ T1828] fuse: Unknown parameter 'rootmodŸ' [ 126.281557][ T1835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.282068][ T1835] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 126.290168][ T1835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 126.298301][ T1835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:139 [ 126.373204][ T1857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.394179][ T1859] 9pnet_fd: Insufficient options for proto=fd [ 126.622188][ T45] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 126.632505][ T1878] netlink: 'syz.5.506': attribute type 1 has an invalid length. [ 126.783264][ T45] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.792078][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.802313][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.811263][ T45] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.825278][ T45] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.834432][ T45] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.842473][ T45] usb 7-1: Product: syz [ 126.846657][ T45] usb 7-1: Manufacturer: syz [ 126.852701][ T45] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 127.331662][ T1904] fuse: Unknown parameter '00000000000000000005fd%' [ 127.360121][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.368432][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.377034][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.385243][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.393474][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.401515][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.409873][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.418082][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.426312][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.434498][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.446051][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.458629][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.466926][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.475102][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.483347][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.491391][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.499726][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.507962][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.516223][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.524441][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.532697][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.540751][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.549091][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.557283][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.565521][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.573721][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.581810][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.590105][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.598319][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.606480][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.614699][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.624607][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.632854][ T1909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 127.692357][ T1919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.519'. [ 127.833399][ T1930] netlink: 44 bytes leftover after parsing attributes in process `syz.5.522'. [ 127.984035][ T1948] /dev/rnullb0: Can't open blockdev [ 128.015417][ T1950] rust_binder: Write failure EFAULT in pid:286 [ 128.264013][ T706] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.422271][ T706] usb 5-1: Using ep0 maxpacket: 16 [ 128.428726][ T706] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.445761][ T706] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.465819][ T706] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.472725][ T706] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 128.497651][ T706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.507838][ T706] usb 5-1: config 0 descriptor?? [ 128.928271][ T706] hid (null): report_id 32841 is invalid [ 129.120441][ T1950] __vm_enough_memory: 55 callbacks suppressed [ 129.120470][ T1950] __vm_enough_memory: pid: 1950, comm: syz.4.529, bytes: 18014402804453376 not enough memory for the allocation [ 129.139677][ T706] usb 5-1: USB disconnect, device number 6 [ 129.308952][ T1996] __nla_validate_parse: 2 callbacks suppressed [ 129.308980][ T1996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.547'. [ 129.435349][ T399] usb 7-1: USB disconnect, device number 9 [ 129.574021][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 129.574040][ T36] audit: type=1400 audit(1761723454.920:535): avc: denied { create } for pid=2010 comm="syz.6.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.582720][ T2013] netlink: 'syz.6.552': attribute type 63 has an invalid length. [ 129.607285][ T2013] netlink: 5 bytes leftover after parsing attributes in process `syz.6.552'. [ 129.611336][ T36] audit: type=1400 audit(1761723454.960:536): avc: denied { mount } for pid=2014 comm="syz.3.553" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 129.616103][ T2013] gretap0: entered allmulticast mode [ 129.639178][ T36] audit: type=1400 audit(1761723454.990:537): avc: denied { watch watch_reads } for pid=2014 comm="syz.3.553" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 129.645443][ T2013] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 129.717957][ T2013] syzkaller0: entered promiscuous mode [ 129.723526][ T2013] syzkaller0: entered allmulticast mode [ 129.851024][ T2018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.859659][ T2018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.932173][ T706] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.012182][ T399] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 130.162183][ T399] usb 7-1: Using ep0 maxpacket: 32 [ 130.168545][ T399] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 130.176941][ T399] usb 7-1: config 0 has no interface number 0 [ 130.184707][ T399] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 130.193857][ T399] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.201908][ T399] usb 7-1: Product: syz [ 130.206161][ T399] usb 7-1: Manufacturer: syz [ 130.210822][ T399] usb 7-1: SerialNumber: syz [ 130.216633][ T399] usb 7-1: config 0 descriptor?? [ 130.222026][ T36] audit: type=1400 audit(1761723455.570:538): avc: denied { setattr } for pid=2032 comm="syz.5.557" name="/" dev="configfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.245398][ T399] ftdi_sio 7-1:0.217: FTDI USB Serial Device converter detected [ 130.253790][ T399] usb 7-1: Detected SIO [ 130.258718][ T399] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 130.472702][ T36] audit: type=1400 audit(1761723455.820:539): avc: denied { map } for pid=2024 comm="syz.6.556" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 130.498297][ T399] usb 7-1: USB disconnect, device number 10 [ 130.512579][ T399] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 130.627343][ T399] ftdi_sio 7-1:0.217: device disconnected [ 130.642305][ T2080] netlink: 68 bytes leftover after parsing attributes in process `syz.3.572'. [ 130.671539][ T2085] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.573'. [ 131.711903][ T36] audit: type=1400 audit(1761723457.050:540): avc: denied { getopt } for pid=2138 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.768787][ T36] audit: type=1400 audit(1761723457.110:541): avc: denied { read } for pid=2145 comm="syz.3.596" path="socket:[12222]" dev="sockfs" ino=12222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.065613][ T2153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.066677][ T36] audit: type=1400 audit(1761723457.410:542): avc: denied { create } for pid=2152 comm="syz.6.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.066690][ T2153] rust_binder: 165: no such ref 1 [ 132.066708][ T2153] rust_binder: Write failure EINVAL in pid:165 [ 132.117389][ T2156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.127222][ T2158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.133773][ T2158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 132.182825][ T2163] SELinux: security_context_str_to_sid () failed with errno=-22 [ 132.250730][ T2164] SELinux: security_context_str_to_sid () failed with errno=-22 [ 132.622798][ T36] audit: type=1400 audit(1761723457.970:543): avc: denied { bpf } for pid=2169 comm="syz.3.603" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.658732][ T2174] fuse: Bad value for 'fd' [ 132.772321][ T36] audit: type=1400 audit(1761723458.120:544): avc: denied { relabelfrom } for pid=2185 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 132.774471][ T2186] overlay: ./file0 is not a directory [ 132.812895][ T2188] rust_binder: Write failure EINVAL in pid:299 [ 132.813773][ T2189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.819989][ T2189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 133.027838][ T2201] rust_binder: Write failure EFAULT in pid:179 [ 133.185093][ T2215] overlayfs: failed to resolve 'metacopy=off': -2 [ 133.289077][ T722] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.321312][ T2223] netlink: 'syz.3.620': attribute type 13 has an invalid length. [ 133.329854][ T2223] erspan0: refused to change device tx_queue_len [ 133.343006][ T706] usb 5-1: device descriptor read/64, error -71 [ 133.434903][ T2238] fuse: Bad value for 'fd' [ 133.554255][ T2262] 9pnet: Could not find request transport: fc [ 133.623209][ T706] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.636416][ T706] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 133.646092][ T706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.655572][ T706] usb 5-1: config 0 descriptor?? [ 133.707056][ T2274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 134.069139][ T706] sony 0003:054C:0268.0008: unbalanced delimiter at end of report description [ 134.078307][ T706] sony 0003:054C:0268.0008: parse failed [ 134.084090][ T706] sony 0003:054C:0268.0008: probe with driver sony failed with error -22 [ 134.528429][ T2346] netlink: 32 bytes leftover after parsing attributes in process `syz.3.656'. [ 134.537387][ T2346] tipc: Invalid UDP bearer configuration [ 134.537426][ T2346] tipc: Enabling of bearer rejected, failed to enable media [ 134.616080][ T2348] process 'syz.3.657' launched './file1' with NULL argv: empty string added [ 134.625065][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 134.625080][ T36] audit: type=1400 audit(1761723459.970:558): avc: denied { execute_no_trans } for pid=2347 comm="syz.3.657" path="/277/file1" dev="tmpfs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.790125][ T2353] netlink: 'syz.5.659': attribute type 6 has an invalid length. [ 134.799988][ T2353] netlink: 'syz.5.659': attribute type 4 has an invalid length. [ 134.807672][ T2353] netlink: 17 bytes leftover after parsing attributes in process `syz.5.659'. [ 134.840939][ T36] audit: type=1400 audit(1761723460.180:559): avc: denied { mount } for pid=2358 comm="syz.5.661" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 135.302273][ T2218] Bluetooth: hci0: command 0x1003 tx timeout [ 135.302727][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.750848][ T36] audit: type=1400 audit(1761723461.090:560): avc: denied { bind } for pid=2383 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.770087][ T36] audit: type=1400 audit(1761723461.090:561): avc: denied { name_bind } for pid=2383 comm="syz.3.670" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 135.791214][ T36] audit: type=1400 audit(1761723461.090:562): avc: denied { node_bind } for pid=2383 comm="syz.3.670" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 135.885517][ T399] usb 5-1: USB disconnect, device number 7 [ 136.080649][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.088842][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.120900][ T2434] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 136.122160][ T36] audit: type=1400 audit(1761723461.460:563): avc: denied { write } for pid=2433 comm="syz.4.689" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.133573][ T2434] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 136.133594][ T2434] CPU: 1 UID: 0 PID: 2434 Comm: syz.4.689 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 136.159173][ T36] audit: type=1400 audit(1761723461.460:564): avc: denied { open } for pid=2433 comm="syz.4.689" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.162500][ T2434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.162517][ T2434] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 136.180132][ T36] audit: type=1400 audit(1761723461.460:565): avc: denied { read } for pid=2433 comm="syz.4.689" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.195161][ T2434] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 136.195186][ T2434] RSP: 0018:ffffc900056d7820 EFLAGS: 00010202 [ 136.195207][ T2434] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881320c5f00 [ 136.212099][ T36] audit: type=1400 audit(1761723461.530:566): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 136.231875][ T2434] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7fffffffffff0000 [ 136.231894][ T2434] RBP: ffffc900056d7a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 136.231913][ T2434] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 136.251764][ T36] audit: type=1400 audit(1761723461.530:567): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.257585][ T2434] R13: 7fffffffffff0000 R14: ffff888113b31010 R15: ffff888113b31000 [ 136.257609][ T2434] FS: 00007f392cd886c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 136.257633][ T2434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.355915][ T2434] CR2: 000000110c34005b CR3: 000000011df2c000 CR4: 00000000003526b0 [ 136.363891][ T2434] Call Trace: [ 136.367173][ T2434] [ 136.370111][ T2434] ? __cfi_iter_file_splice_write+0x10/0x10 [ 136.376014][ T2434] ? __kmalloc_noprof+0x271/0x530 [ 136.381032][ T2434] ? activate_task+0x38b/0x3d0 [ 136.385791][ T2434] ? __kasan_check_write+0x18/0x20 [ 136.390925][ T2434] ? __cfi_iter_file_splice_write+0x10/0x10 [ 136.396829][ T2434] direct_splice_actor+0x279/0x4b0 [ 136.401943][ T2434] splice_direct_to_actor+0x4fb/0xbc0 [ 136.407315][ T2434] ? __cfi_direct_splice_actor+0x10/0x10 [ 136.412955][ T2434] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 136.418864][ T2434] do_splice_direct+0x182/0x270 [ 136.423709][ T2434] ? __cfi_do_splice_direct+0x10/0x10 [ 136.429076][ T2434] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 136.434967][ T2434] ? security_file_permission+0x2e/0xc0 [ 136.440524][ T2434] ? rw_verify_area+0xac/0x230 [ 136.445309][ T2434] do_sendfile+0x5c8/0xfb0 [ 136.449724][ T2434] ? vfs_writev+0xcf0/0xcf0 [ 136.454254][ T2434] ? __se_sys_futex+0x28f/0x300 [ 136.459097][ T2434] __x64_sys_sendfile64+0x193/0x1f0 [ 136.464307][ T2434] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 136.470030][ T2434] ? switch_fpu_return+0x12/0x20 [ 136.474992][ T2434] x64_sys_call+0xa26/0x2ee0 [ 136.479592][ T2434] do_syscall_64+0x58/0xf0 [ 136.484008][ T2434] ? clear_bhb_loop+0x50/0xa0 [ 136.488682][ T2434] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.494583][ T2434] RIP: 0033:0x7f392bf8efc9 [ 136.499006][ T2434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.518609][ T2434] RSP: 002b:00007f392cd88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 136.527027][ T2434] RAX: ffffffffffffffda RBX: 00007f392c1e5fa0 RCX: 00007f392bf8efc9 [ 136.534999][ T2434] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 136.542980][ T2434] RBP: 00007f392c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.550971][ T2434] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 136.558937][ T2434] R13: 00007f392c1e6038 R14: 00007f392c1e5fa0 R15: 00007fffe9232048 [ 136.566905][ T2434] [ 136.569930][ T2434] Modules linked in: [ 136.573931][ T2434] ---[ end trace 0000000000000000 ]--- [ 136.579467][ T2434] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 136.586264][ T2434] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 136.606238][ T2434] RSP: 0018:ffffc900056d7820 EFLAGS: 00010202 [ 136.612605][ T2434] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881320c5f00 [ 136.620670][ T2434] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7fffffffffff0000 [ 136.628754][ T2434] RBP: ffffc900056d7a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 136.636830][ T2434] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 136.644863][ T2434] R13: 7fffffffffff0000 R14: ffff888113b31010 R15: ffff888113b31000 [ 136.652960][ T2434] FS: 00007f392cd886c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 136.661901][ T2434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.668521][ T2434] CR2: 000000110c34005b CR3: 000000011df2c000 CR4: 00000000003526b0 [ 136.676547][ T2434] Kernel panic - not syncing: Fatal exception [ 136.683062][ T2434] Kernel Offset: disabled [ 136.687401][ T2434] Rebooting in 86400 seconds..