last executing test programs: 44.776326245s ago: executing program 2 (id=43): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) (async) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) writev(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c1000000da7ff40d5c0cf50000e69c", 0xf}, {&(0x7f0000000480)="f1fe5fe0", 0x4}], 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r3, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x1b40}) (async) clock_gettime(0x4, &(0x7f00000004c0)) 44.773328836s ago: executing program 2 (id=44): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[], 0xfdef) syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="401546000000f63e12d474b343087edeb73f3588d0603e40dcfb01d649c065469d4a6467ee57550fb44e1e8452f8a132ff4425581146b91279e42b8830ff"], &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000100)={0x21, 0x0, 0x4, "dc01003f"}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) 42.50344267s ago: executing program 2 (id=52): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x917, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000080)={0x0, 0x48}}, 0x4001) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x20000000002, 0xffffffffffffffff, 0x4, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000080)='FREEZING\x00', 0x9) 41.622585447s ago: executing program 2 (id=60): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000010c0)={0x0, 0x3, 0x0, [0x5, 0x9, 0x8, 0x2], [0x6, 0xfffffffffffffff7, 0x2a, 0x4, 0x200, 0x7, 0xff, 0x6, 0x10001, 0x8000, 0x5, 0x400, 0x7fffffffffffffff, 0x8, 0x4, 0x5, 0x5, 0x8, 0x5, 0x6, 0xab5e, 0x2, 0xfffffffffffffffe, 0x3, 0x5, 0x8, 0xb25, 0xa, 0x5, 0xffffffff, 0x6e, 0x6, 0x7ff, 0x5, 0x9, 0xfffffffffffffffb, 0x6, 0x5, 0x6, 0x8, 0x7, 0x4, 0x4, 0x7ff, 0x9, 0x5, 0x3, 0xa87, 0x3, 0x28000000, 0x8, 0x29d5851b, 0x7, 0x1d066bae, 0xf, 0x100000001, 0xc, 0x1, 0xfff, 0x9, 0x6, 0x0, 0x15d0, 0x9, 0xa4b9, 0x200, 0x7, 0xcead, 0x6, 0x1, 0x0, 0x401, 0x800, 0x1, 0x5, 0xe, 0xafd, 0x4, 0xb, 0x8, 0x1, 0x8, 0x9, 0x6, 0x7, 0x3, 0x8001, 0x4, 0x3, 0xfffffffffffffffe, 0x6, 0x7, 0x7e, 0x4, 0x6, 0x9eb, 0xf, 0x4, 0x5, 0x7, 0x200, 0x902, 0x0, 0xfffffffffffffff7, 0x6, 0x9c45, 0x8, 0x10001, 0x7b, 0x4, 0x7, 0x1ff, 0x85, 0x8, 0xb, 0xffffffffffffffff, 0xb8bf, 0x7c0, 0xfffffffffffffff8, 0x100000001, 0x1]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001500)={r0, 0x2, 0x100000001, 0x1}) r1 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) unshare(0x6020400) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) lseek(r3, 0x0, 0x1) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000371900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r5, 0x0, 0x3) syz_fuse_handle_req(r2, &(0x7f0000006900)="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", 0x2000, &(0x7f0000000cc0)={0x0, &(0x7f0000000140)={0x18, 0x0, 0x7fffffffffffffff, {0x5c55804f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) r6 = syz_pidfd_open(r1, 0x0) close(0xffffffffffffffff) setns(r6, 0x24020000) r7 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) tkill(r7, 0x27) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x77d2c0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0) mount$bind(&(0x7f0000001040)='./file0\x00', &(0x7f0000001900)='./file0\x00', &(0x7f0000001940), 0x2000, 0x0) 40.608622317s ago: executing program 2 (id=67): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_require}], [{@smackfsroot={'smackfsroot', 0x3d, '%'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) chdir(&(0x7f00000003c0)='./bus\x00') mknod$loop(&(0x7f00000001c0)='./file7\x00', 0x6000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x20000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 40.538832328s ago: executing program 2 (id=71): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 40.501256859s ago: executing program 32 (id=71): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 37.733340613s ago: executing program 4 (id=102): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000001400)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0xd2bd4000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\xff\x02\x01\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000001400)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0xd2bd4000) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\xff\x02\x01\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) 37.691521064s ago: executing program 4 (id=103): r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x3032, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB='ag'], 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 37.064079406s ago: executing program 4 (id=108): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d80)={0x4c, 0x14, 0x403, 0x70bd2c, 0x25dfdbff, {0x1e, 0xda, 0x5, 0x7, {0x4e21, 0x4e22, [0x1000, 0x5, 0x2000000, 0x6], [0x2182, 0xfffffff4, 0x3ff, 0x128f], 0x0, [0xfffffffb, 0x7f]}, 0x4008, 0x200}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0) (async, rerun: 32) r3 = userfaultfd(0x801) (rerun: 32) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4f4}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00006a7000/0x1000)=nil, 0x1000}, 0x5}) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64) write(r2, &(0x7f0000001c00)="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", 0xfffffdbf) syz_usb_control_io(r1, 0x0, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) r5 = syz_open_dev$hidraw(&(0x7f0000000200), 0xe3c, 0x309001) (async) ptrace$peeksig(0x4209, r4, &(0x7f00000003c0)={0xe, 0x0, 0x2}, &(0x7f0000001200)=[{}, {}]) (async) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) pidfd_getfd(r6, r5, 0x0) (async) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000286000/0x1000)=nil, 0x1000, 0x2000003, 0x12, 0xffffffffffffffff, 0x8000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) fcntl$lock(r8, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) (async) fcntl$lock(r8, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x7}) (async) fcntl$lock(r8, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x11c, &(0x7f00000007c0)=0x331, 0x0, 0x4) (async, rerun: 32) syz_open_procfs(r4, &(0x7f0000000100)='environ\x00') (async, rerun: 32) syz_usb_connect(0x4, 0x341, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xa3, 0x36, 0x69, 0x8, 0x12d1, 0x7ff5, 0xab9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32f, 0x1, 0x7, 0x6a, 0xb0, 0x7, [{{0x9, 0x4, 0x75, 0x3, 0x7, 0xff, 0x5, 0x4b, 0x7b, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x3}]}, @generic={0x5c, 0xd, "7ac85494e39157f9b70fd6d00988f1b4871851b986074e57bde58a48859a3aa551a432531ec4f9342972040f1172cd7be392b1de3fbfd45810401a3ee90b26640d9b94c2fbbd184edcf999cf4bffdd77169416efeffe6314750d"}], [{{0x9, 0x5, 0x5, 0x15, 0x8, 0xb, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x1e}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x4, 0x55, 0x9, [@generic={0x99, 0x7, "89f91720c44e56c9386529fb03fbf97135dbf8f71b2dce9f19bf8606c87a0ac5b3b81523bf7d5ca7965a9b198b2489d31f88639166d2105e263847e9cf0c72f6737bdac444097d279eeaae7ec7931e2f087f1cf02906b77971455ca8cafef6be7a5670fe68701a0108fd8ab178d50a2c641633927d08f2667a00907fbe16463e7998b305939ad0602f09aab74e7ee9495f0d5257a47db6"}, @generic={0x8d, 0xc, "91cc9129a517534cdecca1089a9aeb7f7eba1037f1c360610fdbf068a3047e05e149e9e01443895d04a62c96ab16ea2b55c24cc781be76fae3d5cef06592d3a77aeac6e85a62575f3c5b21300d9d6df73e5343e94ed24c6844ff7a41b10559c2e5d500575ef11f45dad14b700877fd94bf5d04659961e70acc5695d3e4a9a877bc996ebda94edcdee8bbcc"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x80, 0x70, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfb, 0x6}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0xf, 0x76, 0x73, [@generic={0xe7, 0x11, "40d3a35714d1e98977b4ee9ded86841d463beeb8af78b2e4823c00d5d22e8abe831981433dda3a5a2afb522d948368b3c82a6e12a843a49f4660500a76d85beb62065481d20a8f5fd35548dac227d2e4495b09d56f6696458ee91da5859b4ea4818eba5180e3bd9fd33a31ec67eee4189a58392d86f15341f07e49aab35779c1d91afb5fab93eb00ca064f419ee1dc06a69aad56accd25210200274ad00670d47ab5aa267817a9c5679dd4feb3b92356f7698bb5bac35f4d93e8291fb793d174e784ba0daf96959425ce75f651aa353543c39de10945e1d57117370ac667ac2cb88c31ed43"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x9, 0xe, 0x6, [@generic={0x24, 0x1, "c05f07462fe02777ed9ffd0bd199168e275a88df24099ff5840ecfbe11f9e4148fe6"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x3bd8}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x47, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x56, 0xb}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x5b, 0x0, 0x0, [@generic={0x1f, 0x24, "8fcf81b2857f0e6c0b4e18012459bd1ad88404935e6e671f7518c8c5e7"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0x7}]}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x8, 0x81, 0x6, 0x20, 0x1}, 0x2a, &(0x7f00000008c0)=ANY=[], 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x455}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "2c5f11c4352510e3c1b51f28204dcda6090bb586aa49868ab9936a411c254a6a8b0bf7ac60b759a8a4ac4d954b41c65d065b4e124c1f7184428bf4be717c93698edf8875d8c6adeb85ddbe7f517b2ebb3a3f96f9a522aad158fe26b350ffc05c9d7a984c8211a3b7d058b1f291fd288ca04c7bce2866800b91ed85f94e2b616adc5b5d50ff924c010e5c83b52e29d21ca06e2cf94e891ff3f91edf6f591b51b11dc649bc8453015f4a21fb1ad238bfaf9f2c5c2fafa76ea182f97bf1430c2f33b793bc8a4c010359"}}, {0x1d, &(0x7f00000002c0)=@string={0x1d, 0x3, "442c6f115f6856c3fefa13ebead554743d712dd8022f0a92cbac7a"}}, {0xba, &(0x7f0000000d00)=@string={0xba, 0x3, "512efc20264ee31c6839752e0db1cdf56fadf8ca6f208aa2fcb73c324237c728611ff8c6e7827f247ea3359026e091893265b3f9450affe06491584dd641c0be802c559a28ac869c14f95439dbcfae6346b4dc14cf8f0cd1deeb700457e108b1d3e80302ed4ff92b041ca5b0f596a8f816912873672778f46a5cf5859c82e989f8cbf8281477c6d3ed9663b3c4893c2ed2d19946a917cba555ac10559710863d6d9ce5d47a934f6ce8f1875858212667aefc63c08747842f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x405}}, {0x7d, &(0x7f0000000f40)=@string={0x7d, 0x3, "9707e3e28a0081e3420720be13673fff083ecb2c4b5e77c149acfcff895d8ef0a36855fd5baf43cacaa5a875af7c03b31760ba6f53c6628654969d717d14ffa84857f791f405dc92151aa5481fd35e3022a5921882393d715d6da634654eb34603d81383208330467b9604f12c2279b2f975606d9be4d1ca03f503"}}, {0x46, &(0x7f0000000fc0)=@string={0x46, 0x3, "abb6600a73e1ac561c1a66638265cacdb47ee09eaad26db8378da2ca185f655f9334a6c06bfe1f0404d17572a2f84fd10572048ff849ff3f04881a7122334d32dfae32b2"}}, {0x2d, &(0x7f0000000180)=@string={0x2d, 0x3, "dbdbeac996eff33b6409bcd03ec2d81c5824003c820cc27bf67ae1a2089db872db8e7826e0e5d96a348576"}}, {0xc0, &(0x7f0000001040)=@string={0xc0, 0x3, "b47038b4cd6ee702123c43a0f327fb5fabe8bc27ed7abf81ed18e648acc5c31d2120fa2705ecd979bc3a1b8fffc99a69a7e4abf9d3ec64cd573a5020edccf4f549d67d6b304bb13a62357652de79ca96cab0176219a197acce00ca2dd21b7397ff21fe2b1b350e9f67ff42b84b7356afdfccf6c1c55ecdf0556068857fc387b3af7db2dfede93787eaa713bcbf28a91801586e1ecb074e2128d5fb3a1be2e98342d332da533d51b4469fce0343e38c916ba0411ab002fcc354bb5b1d9cc6"}}]}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 36.420312249s ago: executing program 4 (id=113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000d00)={0x2, {{0xa, 0x2, 0x5, @mcast1}}, 0x0, 0x22, [{{0xa, 0x4e24, 0x1, @empty, 0x801}}, {{0xa, 0x4e22, 0x7fff, @empty, 0x9}}]}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 17.91044811s ago: executing program 4 (id=114): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x30}}], 0x1, 0x4000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {0x0}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) 17.90951356s ago: executing program 4 (id=115): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000180)=""/160) 17.90925099s ago: executing program 33 (id=115): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000180)=""/160) 3.983850792s ago: executing program 0 (id=300): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffdfe}, 0x1, 0x0, 0x0, 0x40050}, 0x448d5) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffdfe}, 0x1, 0x0, 0x0, 0x40050}, 0x448d5) rt_sigtimedwait(&(0x7f0000000440)={[0x40]}, 0x0, 0xfffffffffffffffe, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) symlink(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000800)={{{@in=@broadcast, @in6=@local}}, {{@in=@private}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000900)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000800)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000900)=0xe8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r3, @ANYRES64=r4, @ANYBLOB="0000000001000000"], 0x48}}, 0x0) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) (async) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002dc0)={&(0x7f0000000a00)=@allocspi={0x2398, 0x16, 0x100, 0x70bd28, 0x25dfdbfb, {{{@in=@rand_addr=0x9, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x7, 0x4e21, 0x8000, 0x2, 0x0, 0x20, 0x88, 0x0, r2}, {@in6=@remote, 0x4d3, 0x2b}, @in=@empty, {0x2, 0x1, 0xe53c, 0x8, 0xa, 0x8, 0x7, 0xbc8c}, {0xa, 0x6, 0x5, 0x80000001}, {0x7, 0x10, 0x3}, 0x70bd25, 0x3505, 0x2, 0x2, 0x7, 0x80}, 0x9, 0x5}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5f}, @replay_thresh={0x8, 0xb, 0xfd9}, @user_kmaddress={0x2c, 0x13, {@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x2}}, @sa={0xe4, 0x6, {{@in=@loopback, @in=@rand_addr=0x64010102, 0x4e23, 0xf, 0x4e22, 0x9, 0xa, 0xa0, 0x80, 0x1, r4, r5}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xc, 0x5c9f852d, 0x7fff, 0x0, 0x9, 0x0, 0xba75}, {0x1, 0x4, 0x0, 0x1}, {0x7, 0x5, 0x6}, 0x70bd26, 0x0, 0xa, 0x1, 0x4}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "cceb2399a70cec5852f02010c6781ff9df3471ea3d26808900c3d40ba39b27f46d2b47d10c0c64032103d20de2cdb7d570157c48d9873d21f3652900274d70539bb1617eefd1dfcdbdc1047bbebb55efca1af513c07914b8619411c8fb2f1ad7a62bcff9dd3fa8ba55c2e5d4d3c0180415dc5be18d8836c318a1e740416b91ba485c4e0134e9cef36b655e529ea1a46099f679e26ff5521f084e4d14593b612acc7ed714bcff551fedd75a125ca5ef32d582cebb12322300ae98a1de0977cd7cca6c7afdbe8f6a066fec4b7bd0894559af63a586b3b38ee4dd04997945fa88391fb8085b9a6ee90c7852da9dee9df4478220ff80872bdc49dba88837daed5654c1f4c20f273e2fc65beaa2d2fd3d89742a9a5c5d61c888f82ba34a54193a3d139b071bdf1d2c05e8741c75c90c788177be7d34888ace8080e6cf80bdaf2db296f23a46787060c99fbbf201ec23ee3c4667afea6c9ed3b81540e6e4f0019ae2952f42b4ab0142df73df54076bf8ff8fa9af610bf0dc8102c883d4baacbb35b47130257d5d334aff6ba66f18a6b07bc0b8fa388209c817f816334b910777e5d67ac6b3bacfd09b73bde8d581c2e83d128ec6194743f0f71d16391e52f4053e9181e0b33b447a38ef613475f43f167f897321ca09b84afce4be581abc7869151256c1e129595197f588a23e318c70612e75db16b8558fc4883560dfde56b5ea512aad888fe9f56fbe5a70b1af8f8c1320b3c1031092a228dd140217446ee2a297d2e11051624977f927504004cd8653d92b46fc01277e754d05cfe9cfc8fcef27e6875e4faf67f50c020f8ce19b05987edad447856d876f0c64346439fc6e532408318b4892788b2b0b0560f6aa692194c1c9a12cf2d182cce037b45faa061ff3fdd4f73217fc418523cc56e19d7a730b2587ac6e57e5716cf3d0d07040f320ce5b695cb671dba7e4b5d838c64fc2ccd4a195bbc77b49e554d451f99e7cf10215b9ba9513248399b272d81ef225b41e43a65d3c94c9ccb1fb07021bb636aaa839d1cf6fcb3da219ef5024b66c5b190d75ab4d3ac3994ea4b6fdd7ef538bc7d18bfaf3b22b7554e5e3760dbbf23afca51c27ac7c44a21b18706df31190b9075a8fea203b01cf210c2f4d014e9214f827fb473687970416d85bd72ceab949c80f8cf9e34e579b956781c557aa86be65f036a90686ded6da433ee7ab98c4bb885ced3fce9656acacb635674ed7373639f8c84ea38ee9aa5b008457ae50b510e5a7342fc8e5814a1fd76a40fcad7d6c238897b27a097fbce67cc16bf24c1491ca2c09fe60cd24deb8ae1028e5d1bd942e2f66360b54c8554594bc259cbc28c8eaa46204e34a66c8bd285933285865967b81abc41ac685efa68561354693caae5a698f73ccdb99c714cc1ca2771bc166b16a60340a527894559a30239cb5bee440f0883c5f070a9434c1619ed258b13bc9da6051143bf61c6d72fb1c955faff7798d26fddae8c1beda0a7aa5e3e850a63890ceb0b42af44ccc06cb8767bec6fc2a0a7ebc2860e1e89b0b61fd155e7629aaf684670f9ca3e75f1e9de2a536003ba8b71ae4329670d446999eaf995b2850cfa910ae43df28f9d489cb387f934519d9d0cbaa5ff4f132215528d497b31e3b64bed27a2cc90cffbf6cdc392acb75795b4a6f1e10cab8e7b1f27fd0f8d4e7192a4806dd45e53bac4dc413458c1fcd2be8523898c153e740e0709fc285936792e97e662ca6103c384b8a0990e788026cb56f7e7fbb4cde81302ba92d8c28304421668e161f3a327f3880bfec72e85bb48780c5c990c1c4533b3950095c620581b015911df8268253798896b29870d4a33dde931ae7276079b51fe4d43b87856415bc34833a6eb18d6fd6127cc09a1efb4e72629e1f80679665bc57f03dd419e0099fb6cbf7ecf92f8c520838ed69ea3efb36f1781a3b11f8cd4295ab9d9770fce1c5dec76176388becb70691c02a142fab5e9330ea44ae4a0603d7cd8611a83e40d5170231f6f8070b7d2c55bf50fde64bf0b8b5c98465a167413134e3b089db6a92f475a5efa0932af0da2a69bc9070761888d5749c91e763822c611cc3550723b0a1db27abfe424064c74e133aa34d391dae2e11275a5b0fb5ca053d65f425f44c21f9893b09c4fef2979b7aa0bafb712b64efe34418ea2d49a8a5be2f7c8ae4eeb7d01e581609e7f85fecc6852aef26131a74685fef407bd2bbbe0bfe065024e8a2aee16c1707fe17552b680636e0cda52f015ed436c55a8b7889978200d065afa66cf09814bc3096dff3a6fcb85ad092dc15d201812df1eef0db909ea4b3195b8805b410577e6ac95f2a0b4c8fe98a07c2b8af22351396675cea7a11d04dc0790f485ade907a51d18b3e8b4d0dd248be92406212df94126c7a42b3367aa7ddcf58c7516d6cc4c00524d76ae4ec32928577270c15c3e62dc99f7485910d5f1986c7cbb49d9666712ebbacf562dc2fd7ee5a00d018dd209768395f013176070c0b98daf81d271ac8eceff4d1b3de5070636b32c34222bbb67dc38f7061bae4447709aad41ff066af418f35c48c5b65dd1c8679240599f67a86bbe4802d17146e8c3fc084a5983aca8563a3470e6abcbfa3685efbbfee4833a845e154984b58465cbb4f3b91536f451978eb72f33787512b79372db5eb50f681a03b56ac7d696f61b0d43b5554fbb687a1894c6542e291ad766f2c14890d9d4f9d9ab290b0a5a6bf8bfd2761b0a4e9a9e31d84980d1fc022172fc9c274f636a8c2c913a52d1772fe89892d5b426ce61ba567ab9d7475dece4872036365390755b1c16fdae0cdf7704cd89d45a1b09d345b609e9ac0b8bdadb6b11063e89c6a48fc41bd9da01d04eff08cf7c920e99dc3bef9affe17c1f8c4c1625e5dbf8f5cfa20d3a55b8e49e264d9102263d54dab91a82c4c00d230fccc4c7e47650653e9dca2abf91a937e157ef8ae242347d95b42d5cf1f237a50321dba51e7df00a8f0948ba1083c345f09e19cf1990483ed3aca43bf810e94bc83aa4b9f94547b81b9eebe361bef7d1c7508fb979043bed349556e66c0809ca37d8ad618332b95d0cd7146ac8753b567cb345b57dc431c8824f37b06a0e8707e4ad6c0ead15e260a3062337a9f846872cf668f08c7de7fa58d169c68c5ccfffeaa4e145c8aae89345ad7f7360650508dd166d3fc825ae1cf02667fbc0efec46bd5ba29fcfbd3583817fa1ed5726fe78132ccf6118fa1dd3a6ef587888fcb6fe9db9630539ed65d33551805712f2aa6f591508c13cfca227f9480d18ab7918e20ce5a8be525e64a03164a062ebd595fecb6c398011bddcb7782a488970ed6496b6d707fc8c70243df4294a1d600962b875ccaf7b36e0ff9c994df895c54e78ca4c374145f33bbbf3a6bfd5ab4213cf3d8348d5420be85ba2bc2482383c276545a39fc81209c293a395a053aee93d7950a2fbd4b5bbdcc655f5531158ebaf20f750a34925717ca8c4f3069d4cf9fec41b6db0626fb7b24ce6c24a94ea56ed70cb99d489ebcbdb32f76262d52f21442366f605a224fb1dea93fbcfb61439b4832e23b48d600110b677f1ea001324cbfa36a2a60b7515dab7742e1fb17a26d7f8fa8a349fbbfd4049714e230be9a2dbde3e1e865205daee143444efb7fb10fa4a085c3d9c28f76340429d446414064975e85911b32292bc796e83771aba5c87e111d9a6d75a964047a36c07fe64635aef34e5a5efc7691e7ebe0a3008e51d51858244b1d2c56102e9e55c3b4b22eb8e3306f099c8536c309086bcc1329a6b4f36cf0a5800b9c85c5d8a30865f41c9d56f56ad831aba643e403957b2fd45a110e28c727ea0e323abe7455f4e0d21dcaee511957a7262b5b9bb7c61a742856de33a8c46127a6ba50f7a6875ae3df6994ebf382c299df2e007b8678cb95931373b0e5b3f93673567b46ae77b102a8e99651affe1696a0b2442d948c7299a6a21bbd3dee40eb4a89af84b6a8a41576b627d6f25e0f3251c39d53aa242b7f9984662cbb8d2ffcc1aa0c37159d1c46318601603171ec96d545ea580406905402503f29023340bb172dfc83ffaee256461d14b0ff43ea907e044a423ee82b47077512a497cee58bb19b4def1a41f8a972bd7b7c0de975d731fc2132ad32d6943e69c04604ffc99482ab1c0e0d1fb6d241e70013e022b43d822779513d5b4890fc02f2e7c162db57fa72a887c3462a1c05d5f03d9685911f9d7d41348708357e3d26045693158e6b0659e71bd523c374284992d20bdc51b647643f0a2268d07e66a2dfe9462d7f44ba7b583ab4e07e068327eb08bb157044913022e0a504a9c69063dba6c7ba32a9edb77dd07cc4f64769458e5c7319f567e7c5ae7df1db51f2bae48e34908fa7adef0f76ccc9d1517d72adc69d9b1be8524b7289b677d1997d89cdcf34426cb9c297e65051d822a791864f0fe2932d94f80c75d974c5e1a9f9f8b49da458a38de6505209e1562119eae23432f6857f3305e9607d9034693c785a81611b01d0c23767a830255c827918d5a3011ecc951afbbead72b3f6459061770a6511307a9029e6e62bf488fdda2ed731b1e6351cc1d8ce8c5993676646b86ddbed4861e1a2be75aeabdf894bbde7adf60a35c59cb213a2ca63f087a136ed1bdc3dfec3b05d5d52cd2a18ae2acdc49b04f8d4531f5f2beafe5f5bd0300f5260943513cfe3ff7e77ccef973699e57be35a522dc01e6158d54952359696381e9d48783721d4409b2137bc54054cbe315b4fd082b7522986dcef8bfc459566e590e55eac5095525ba9c7b8382e28d44267201f7e3359035975db14e4de4abc4d34a20c4dd1d418de81bcfa8f1d6af61fb0208a8f0367d6dfa9eda6b40682a0b26e4961ed84b57bf5aff698932e50af6efe5ce1938ded67987d5100342cecd67b6814cd04520c513229bb317261d99bd77e8cba65551a0a0e2e302869dcb345e1a3e9d648b41aa773741c7b74d5600fb976e857fa31d7b9d4ba96e1591260dffc516d3d0e348e3134bebfd8710f3d7478d41bf01d2177eedf84cc1e6773f6bbcac78debba372f77599d928523a1fb4c152751d2cb9861029dfcb900769f6c1722a2e8b1e5434e8a68b2bc6528585a0b6168301a8413728b88ff6141dfbcd5ca25d43b3916af3696e402342a3fddc49ce90c7bee1ac1c0d9e48ccca75e3cd7ee65a643c7e7396502f111f2ab90a9d4922693c2fe8066c63b00a42f3aeb6a6e5cb1033e541b1faa14c5ee1fba708558ff126035e6fc096c08c76738ac0f64c8ce393bcd91240046b0fe7fcda3d857d37e5dcb77f76031e6055da70330f6530bd2948b1c301308e3005a6138127f8bf59e2716d6e05cc8e81f90d3f1acb0dd11d96a3ad70459cbf40e217cebbc3edb8b78b5a0528c09a34e8af0e23172cfb6a09eeb82392d2097b1a1d4c6afc0a7654d2592fc787320d6f80745e6f726ec89e8b4baf1159934ad3b20784ca8998ac25c53c518ac1e7682f5622c3316acecca8f47273da62fdd3571d0dd552a79f00a8a996529cd108d350e6281e2628ffb70ed16fc7e428fbefdc13f50b07b63def82153d2c0f87188059abed73b64274127e2f3306e0cf91f55a7615d3761843f38299fb801d4c10b6d4831f1b5791c0005ec3d90f8bfe136915cc8b18e2070db37390a355a5b4cc47d03a025d993b281231421b2ffd8c4c8354ac5861aa2924d614a2a83b416ab347adec2aa4808ec18022ca80c7077c4641144ddce876c84da008c7fd7c61c6b9147338d8c727c20e82ab107e0c96d57de16f580b4ab14"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x2, 0x1000, "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"}}, @algo_comp={0xf1, 0x3, {{'lzs\x00'}, 0x548, "072d0ba3efec1db35781e014598ec38eb5fd27f981c702df84449262315c6ceb67cbb67858ec1418bd84f4edb4c50a2c3fe8e7edc1869d1c42e7beb2a6d460fb32c7cc280e36f9a5fc0c309389596261b4f18685072f1bc9395761c345320a2ecbbd4789676e2145709e24fe04b2ea454f54449043a2f3c3b63c86e4254654470abb9f85e2103923592e457430f0b01f8c2da662bd7d9191da6f4f9bf2e1eef94f1b98a1239ac13724"}}, @encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e23, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x2398}, 0x1, 0x0, 0x0, 0x800}, 0x4c094) recvmsg(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/192, 0xc0}], 0x8, &(0x7f0000000000)=""/64, 0x40}, 0x10000) (async) recvmsg(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/192, 0xc0}], 0x8, &(0x7f0000000000)=""/64, 0x40}, 0x10000) 3.983350253s ago: executing program 0 (id=301): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000da7558b32d00202900002f05000000000000180000000000000000000000360000002c0000"], 0x30}}], 0x1, 0x4000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0xffffffffffffff38, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000011e, 0x2100, 0x0) 3.968541013s ago: executing program 0 (id=303): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1800}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x5, 0x0, 0x0) open(0x0, 0x141b42, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file1\x00', 0x50000563) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x1, 0xfffffffffffffffb) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r8, 0x1e, r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000) futex(&(0x7f000000cffc), 0x0, 0xffffffff, 0x0, &(0x7f0000000180), 0x4001) 3.892295384s ago: executing program 0 (id=305): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) r1 = syz_usb_connect$printer(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x44080, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4082, 0xff2}], 0x1) (async, rerun: 64) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, 0x0) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 3.545050341s ago: executing program 1 (id=311): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x30}}], 0x1, 0x4000000) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000002500)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x5, {{0xa, 0x4e21, 0x200000b, @mcast2, 0x10000}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xdbd4}}}, 0x108) r1 = socket(0x10, 0x803, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0xd000, 0xfffffffffffffffd, 0x1, 0x2}) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="1c0000001e00210000000000000000000a0000000540"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000680)={0x8, &(0x7f0000000640)=[{0xe, 0x0, 0x9, 0x481}, {0x3ff, 0x0, 0x10, 0x9}, {0x8, 0x0, 0x7, 0x80000000}, {0x594, 0x3, 0x8, 0x7}, {0x7, 0x9, 0x7, 0x909}, {0x8, 0x3, 0xf8, 0x7}, {0x3, 0x3, 0x0, 0x9}, {0x5, 0x81, 0x5, 0x1}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x2, 0xfffffffe) close_range(r7, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0xffffffffffffff38, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000011e, 0x2100, 0x0) syz_usb_connect(0x4, 0xb95, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x47, 0xfe, 0xac, 0x8, 0x1199, 0x9011, 0x9221, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb83, 0x3, 0x6, 0x0, 0xc0, 0xb2, [{{0x9, 0x4, 0x0, 0x2, 0xd, 0xa7, 0x48, 0x20, 0x8, [], [{{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x7, 0x51, 0xa}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x23, 0x7, 0x4, [@generic={0x100, 0x24, "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"}, @generic={0xb0, 0x0, "f0d2f9e546963487eb9e3b628bdc747203fbe87bb84b063dd62f955732b72f7cacfa541a2ee6f5a54098be2a39ffaa36a3e4030fc96ee4887857e6185265c66d8662142af2f3b15c45d22c7be9acaf18113a3f08e39ea1898525069da24c5f7adc00797dea90b78498061c60d019748d468d7997516e31b2af8b6869e99d903a8cde4be4c6b204ea507fb446b1989488d378053d92c63d6febb338088dcec5cc1272146383596a649ec677b5bc9c"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0x7, 0x1, [@generic={0x90, 0xf, "e2668fb6a036225a748d205c5136e7c5cba426d840ff3c12360654cd724b8a83cf2b4c0e75fc67b806e9a136ebbc8420b5c4a591bd34214fb937d9b9d9c5d0068859fd6588db86c582fdeec82e3dfff407462b06845a81154ec725af7747b40f05d02051e3124371dda7a00c7efc6ab5fa2741ed7f054a2068cbaf749a1cec3219fbca9280569aae4cb29b633dfc"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xc, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}, @generic={0xf8, 0xc, "8f49a7b1524ed23a4fb4905e32009867268abf01287ea410a63dbfb3dd85a8c3adbe4b3f75fd1d16a5f212cd4962379475cb997c3db128f1f6d58e51e91b3c89c7b31272b744a6894716f2421ec141f9b944b775a97971653f8b723bc6a89fb855f0273ef5011396adf3b35578f2ad860771d76544640676a2f22e0079a81645dc30143344e826f2b6a53fad4c03aecca1ce8f6a77474b01bdf5417a3125b329fe8955c9480011c5ad351ae5709c84200d7e79ead1afa23bd950d7f5b817af06b6278eeb581478ed50b080bb816d7f628267a1e668cee2e17723beb6964cb9b54812083a45055384efb05b15fe0b15a55ae8462d6a75"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x6, 0x9, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xc, 0x8, 0xe}}, {{0x9, 0x5, 0x97, 0x4, 0x400, 0x9, 0xf0, 0x81, [@generic={0x1d, 0x21, "2312c054c5046db7cf327a432615b140c236dd140c8acc0ce53498"}]}}, {{0x9, 0x5, 0xa, 0xd, 0x200, 0x8, 0xb, 0xed}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0xb0, 0xd, 0x66}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x7f, 0xac, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x43}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0xd, 0x9, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3, 0x40, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x1, 0x7}}]}}, {{0x9, 0x4, 0xa4, 0x4, 0x6, 0x33, 0x9b, 0x10, 0x3, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6e0, 0x401, 0x4, "1a51"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x4, 0x6, 0x2, "a930", 'G'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x83, 0x4, 0x7, 0x2, "6bb7f8ba7900cf"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x8, 0x1, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xfffc}, @generic={0x5d, 0xe, "7947cc7060453c0786edd95a8d2c1b6e7b902226f1e927b83c78740750bd919cc64f307c984bb72650a4238994fe564d80da0779acd026dd7a6fa06e0f96e79c4ff1bbb59f8c0895b1b7c29869da52362eb7fa6b2e416fd0f2d102"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x3, 0x6, 0x5, [@generic={0x4f, 0x21, "b377429da24e84d5495d0c1862f6d7c44d8bccdd1a4f517f9ac4af0d79ec61c5e689610be7cbb82118233009a6e9417a46ae886d35b8538d3322bee1e413e7ed10645bd61eb31ac8790c8dd328"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x7, 0x4, 0x4c}}, {{0x9, 0x5, 0xe, 0x0, 0x418, 0xfa, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xd0}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x7, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x6}, @generic={0xb7, 0x7, "dc2b3edd88f58726710b3369b2e218facdf8049774db39163861269757021c34551d26179a491372f0db11317cda2e6ae624e5aa3f1dae2e1b7fedda27e1cb7e429fbf3d933bd299c432d13b56df81981a0d2b73dc6ab53966bc778b570d6f902189a4069745af55ace7606bfad0564866df90db9afc083c3c98f8829fe069fd174938e0101d3c18039c988e8ddef92864ba81cd9c6290a5e4918b25cc1a7b0fcc8d707eaa370b10f22aadfb45fd921da27e99dbee"}]}}, {{0x9, 0x5, 0xc, 0x17, 0x40, 0x4, 0x20, 0x1, [@generic={0xb8, 0xe, "28449bbeaa693478b40675a067c05a34d6b898b1807e18044178870bf7f0525a2d7f9450b7f90e1b6a3738197a51328e9a1a914e76a288ccb46908689ff0819896ca29b9f140dbd2687ddf97a3f68b35ad81e66364ac90b1be8570e021a8bc4e859253dde615eb1b1c97b2bd4f450e3bbc2013aeee9876a00be8cef55b391969872c99a8c9d3488475492c93d367e5c6164abdf1f34f36e440432d6261c9d668a0e888d41956e74a013aa4180a903699a6f7a79d24eb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}]}}]}}, {{0x9, 0x4, 0xb6, 0x1b, 0xb, 0xff, 0x5, 0x6d, 0x8, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x3, 0x4, 0xb8, "ba53b69a1904a3e540"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa, 0x1, 0x6, 0x4, "2cc4939f6c0291"}]}], [{{0x9, 0x5, 0x7, 0x10, 0x7ff, 0x8, 0x3, 0xff, [@generic={0x9c, 0x9279b4621c3cb514, "213f9baaa75013bcaf6dc701b3919567d84c46588d14a4e3cfc5aa2413b2e1e5ba980c08a7cc30429087d8eda91f755aba2ac50f96fb9cf9998ee98e239731444785ba2102298223e39bed5fd08d45c042d10aef6a9f86917d82b1f97e7f102abdadcc0580b3bf6fad1387467416854e16a35407310f2ccdb9e7b8cacdc9d479906bd0f526be30313e1d375d7d802dfd1d78d58aa5a1ed22905e"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x7, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x3, 0x6, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd}, @generic={0x8, 0xb, "9477a96291d5"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x5}]}}, {{0x9, 0x5, 0x4, 0xc, 0x0, 0x9, 0x80, 0xfe, [@generic={0x8f, 0xe, "05adc7a6e64b1d0e1bea19b663c6a85cce835a0c0397842cbd1bc67d6939d6e946dc1704bdfd5955a265acf956bc7a056038e2baf641ba84583983099b98de56b103bea973cb267688680a93f57b9421e91d8e998130cc085e7109441778bd79e0bf3d7950454fa1410abf62476f737ed3f9b3275816619a2c20e1e1a022d33803c4ca6790c6cd46559e60f72f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x1, 0xc, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xfff7}]}}, {{0x9, 0x5, 0x80, 0x4, 0x0, 0x46, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x9}, @generic={0x5, 0x2, "28bc65"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x10, 0xc, 0xf7, [@generic={0xf1, 0x6, "d6b6bd94ac689c675d44286cf84008d9081838ec2cc9d904b0aeec6e95f3bb58c42f6881701f93b1218a43dad9c94d8aec6878b48977a140f8165f83af20377efd71c763aaf868558a33ccbe052dd6e8c9aca5a178797944981eb2081162e4eb5be67ba92156eba6b32ab5b9efcb097a8bbef41b0c896f1b328cf2e594247b43279c3613afa32aebf8c96fe48dff21e3fabed57d8574d262b8cb47903bf9a1b64bac93f5a9400a5560080e6f6895bff3a69666fd1fcdf57a5c7af3a7c1ffea32c2de79f693498f4f8ab71bd6bef5b4713a5de115813a22b2d89e76598aa9f6a6bf36ea6e9fcf502e54043b0214fed4"}, @generic={0xca, 0x23, "4d90b40d10f961ef95238ebd03a4e20c2783f28d377b3f24aa969989dafad68914a48c70296386626236bf57701b7c97964745a79547c2ef7498e77e0f60fb27c07827142ec2004851d2829a1fb3b012f791bf1b0d4b5507829b0b8cb27d615c2ffee601501912316e6df669c067f6e3b31a81658f201520e244b188e1551bada720b98aee9ba9c24b350f162d9f152408fa893ef6a43d9747699e249e1d4298a5801ab38c72278052b0031c4786ca8c4b2031ac07ceb44ae706eced9db40b887ac9dfdb072290ed"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x2, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x70, 0x2}, @generic={0xc3, 0x11, "7917e3b3ce66fe63fc13c5abad24ac0df68eddbec8cc383a5988e3fb8e5764b79031469d368f67837f5c6837ffb04a900040c626a9cfa0939c82e5f3208c645fa6d939d2a553fbab4ffbf74ab4fcc3d3a6c550cd70bf10d65ee36030e1e958439bf0a94ec40c1e70cce0fde406dd3959a0391a19c8b9742753fa9021ec3a87a5e2968941fa936107f0fa82dc6ee511ad33f800e9cdce31649464b7e934afb3aec4a0a540561c1f5a0ded16dbbc94b83001cf97869822d84dd9b9ba490f4aff55a5"}]}}, {{0x9, 0x5, 0xc, 0xa0144e69f8adfecf, 0x40, 0x8, 0xcc, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x7, 0x6, [@generic={0x76, 0x21, "3544a20de3c402ea27752c7433c68610fe2257ee092f6e0cd265a8859f54ba130b165cd23925462be11a87cd2e5136ddae237ad5edc14783593e511da83a0d2ba6827ae9d8826d17ed272bdc99e0c34fce45a88a01f95837ae63f9cc707a3412433a1fa51b00731de758444fc50578164740d2b5"}]}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x2, 0x41, 0x90, 0x40, 0xf4}, 0x41, &(0x7f0000000200)={0x5, 0xf, 0x41, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xd6, 0x5, 0x6, 0xf00, 0x7, [0x3fcf, 0x60, 0x1fefebf, 0xff7e00, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5d, 0x8, 0x9, 0x2, 0x81}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfd, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x2, 0x81}]}, 0x3, [{0x83, &(0x7f0000000280)=@string={0x83, 0x3, "53d3a629bd08478ddd0945ddcb7d08107f20d2d92d7703f9c1ba73ce00e16636a9a280e882a0b84fd1b775d2ed29049482706e14da72550d6165e7ba1d5329f28747e9934acd3e77c616c35658a81b653c4afb98b1417ffd98faac29be5cd52d14b7273f2123ffa04e8639153196cae437426fa6918b4e63d4f86f78368993241e"}}, {0x99, &(0x7f0000000340)=@string={0x99, 0x3, "4a1c3d3b51767136d04dfb0c08ed0557416cc0be75ff446511141cd64a4c9e524874bc1e53c3d6306d5ba8c91c29bb4883a252e01c0d51a715e721020fed3ef14caa39346b8ec835d7bf40afcfcc65754eb085256454189dfa832e8baa8ba82711fceee74a21653f1e7735d86c3b27e75fbda002a65f0c2fbaf4f9aefbab309441fdf3320db87f1ce72d998224dc076b2cc162cbca8d60"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}]}) 3.137161969s ago: executing program 5 (id=314): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x138}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r2, 0x7) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 1.061258099s ago: executing program 0 (id=330): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x90d0c000) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000000100)={0x10001, 0xe7, 0x2, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0xb52}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000180)=0x2) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xd2, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0xdddd0000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x4007}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r1, 0xffffffffffffffff, 0x0) 893.098603ms ago: executing program 3 (id=334): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x5, 0x7f, 0x6e8d, 0x5, 0x1, 0x3, "90fee19856"}}, 0x11d) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000002080)={0xe, {0x8, 0x51}}, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x88803, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x88803, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) (async) close_range(r1, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000080)=0x8) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000080)=0x8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x14) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff000000", 0x53}], 0x1) (async) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff000000", 0x53}], 0x1) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) (async) syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) (async) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18, 0x0, r7, {0x7}}, 0x18) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0x6, 0x8}]}, 0xc, 0x1) utime(&(0x7f0000000040)='./file0\x00', 0x0) 807.821835ms ago: executing program 0 (id=335): getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000080)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1, 0x0, 0x6}, 0x20) setresuid(0x0, 0xee01, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x0, 0x3, 0x1}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1c, r4, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2b85fcf330ca9af6, 0x12, r0, 0x8ee42000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 724.318826ms ago: executing program 3 (id=336): syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0xb20, 0x9, 0x8, 0xffffff01}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 722.705916ms ago: executing program 3 (id=337): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x30}}], 0x1, 0x4000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0xffffffffffffff38, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000011e, 0x2100, 0x0) (fail_nth: 9) 722.444056ms ago: executing program 3 (id=338): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a91000/0x2000)=nil, 0x2000, 0x3) 669.668537ms ago: executing program 3 (id=339): seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) r0 = getuid() quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0, 0x0}, &(0x7f0000002200)=0xc) write$FUSE_ENTRY(r1, &(0x7f0000002240)={0x90, 0x0, r2, {0x4, 0x2, 0x7, 0x9, 0x80, 0x1, {0x6, 0x9, 0x9, 0x7, 0x6, 0x7fff, 0x7, 0x8, 0x84, 0x6000, 0x3, r0, r3, 0x7, 0x100}}}, 0x90) write$FUSE_WRITE(r1, &(0x7f0000002300)={0x18, 0x0, r2, {0x7fff}}, 0x18) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x5c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xd, 0x1, '/dev/loop'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x7, 0x1, '*-\x00'}, @NFTA_COMPAT_NAME={0xe, 0x1, '/dev/fuse\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040014}, 0x2001044) syz_genetlink_get_family_id$ethtool(&(0x7f0000002480), 0xffffffffffffffff) r4 = dup(r1) epoll_create(0x9) fallocate(r4, 0x2, 0x9, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002500), r4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x80, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x74, 0x2, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffff00000001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004044}, 0x1004) lseek(r4, 0x6caf604e, 0x2) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000002780)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000027c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000002800)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x38, 0x2, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_PKTS={0xc}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x383}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x40180c4) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000002940)) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000002980), &(0x7f00000029c0)=0x4) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000002a00)) 655.229698ms ago: executing program 3 (id=340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000023c0)={0x73622a85, 0x7cab6ced6414682, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9) r1 = socket(0x10, 0x803, 0x0) clock_gettime(0x0, &(0x7f0000002280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000021c0)={0x7, 0x8, 0x8, 0x81, 0x4, 0x9, 0xb2, 0x4}, &(0x7f0000002200)={0x8, 0x1, 0x8, 0x7f, 0x9, 0x4, 0x3, 0x3}, &(0x7f0000002240)={0x8000, 0x8, 0x80000001, 0x7, 0xda, 0x7fffffff, 0x4}, &(0x7f00000022c0)={r2, r3+60000000}, &(0x7f0000002380)={&(0x7f0000002340)={[0x8]}, 0x8}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "3fb72a932325d560", "d2754beb616fd79605d84ccd1b3a91afae845cc075a59702f89188e0fcf97b96", "035c65b8", "ee2404089ab78eed"}, 0x38) r6 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x10) poll(&(0x7f0000000000)=[{r6, 0xd010}], 0x1, 0x9) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0], 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80a00, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) open(&(0x7f0000002080)='./file0\x00', 0x1c92c0, 0x1) r8 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r8, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000180)={0x2020}, 0x2020) ftruncate(r8, 0x3) 420.184062ms ago: executing program 1 (id=341): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x34d, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000040)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c1) (async) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r7) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66642c7204a4c0bca3", @ANYRESHEX=r8, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES64=r1]) 419.893782ms ago: executing program 1 (id=342): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000021c0), 0x40843, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000002200)={0x0, 0x4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'dvmrp0\x00', 0x8000}) ioctl$TUNSETLINK(r2, 0x400454ce, 0x321) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_int(r3, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x47df, @local, 0xb3e}, 0x1c) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 418.650672ms ago: executing program 1 (id=343): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x30}}], 0x1, 0x4000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x604}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0xffffffffffffff38, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000011e, 0x2100, 0x0) 418.016652ms ago: executing program 1 (id=344): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7472796c6fe36b206e68dec26a30b5f73da18cbe4bae09326f6e6500"], 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x113) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x8, 0x7, 0x400, 0x286a, 0x2, 0x0}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x4000cdd) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_procfs(r2, &(0x7f0000000100)='net/mcfilter\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x803, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) fsetxattr$security_capability(r8, &(0x7f0000000980), &(0x7f0000000a80)=@v1={0x1000000, [{0x7, 0x10000}]}, 0xc, 0x2) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r9, 0x4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x10000041) 383.255033ms ago: executing program 1 (id=345): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0x5, 0x4) (async) r2 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r3, &(0x7f0000000d40)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b800da4173b9e63544ee1f32fd585dab49f06f4e7e92a867080b7b83c0a31253633", 0x4a, 0x0) (async) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 69.484898ms ago: executing program 5 (id=346): socket$netlink(0x10, 0x3, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) close(0xffffffffffffffff) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) fsopen(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)='`', 0x1, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x15) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 12.3709ms ago: executing program 5 (id=347): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x30}}], 0x1, 0x4000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0xffffffffffffff38, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000011e, 0x2100, 0x0) (fail_nth: 10) 11.76946ms ago: executing program 5 (id=348): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x4, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) r1 = getpid() ptrace$setopts(0x4206, r1, 0x0, 0x200004) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0xa, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbe, 0x4002, 0x3, 0x7ff, 0x13b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x7, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="828e27bd7000fbdbdf25040000000802160000001000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11.51944ms ago: executing program 5 (id=349): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x30}}], 0x1, 0x4000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x111200, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback}, &(0x7f0000000340)=0xc) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000380)=r2) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000001c0)=""/197, 0xc5}], 0x6, 0x0, 0xfffffffffffffe30}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) 0s ago: executing program 5 (id=350): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000440)=0x4c65) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x3000000) move_mount(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]) kernel console output (not intermixed with test programs): cess permissive=1 [ 17.584239][ T36] audit: type=1400 audit(1757060402.870:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 25.199817][ T36] audit: type=1400 audit(1757060410.490:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.201238][ T281] cgroup: Unknown subsys name 'net' [ 25.222587][ T36] audit: type=1400 audit(1757060410.500:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.249882][ T36] audit: type=1400 audit(1757060410.530:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.250043][ T281] cgroup: Unknown subsys name 'devices' [ 25.432134][ T281] cgroup: Unknown subsys name 'hugetlb' [ 25.437755][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.573668][ T36] audit: type=1400 audit(1757060410.870:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.596854][ T36] audit: type=1400 audit(1757060410.870:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.614881][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.621766][ T36] audit: type=1400 audit(1757060410.870:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.653258][ T36] audit: type=1400 audit(1757060410.940:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.661856][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.678650][ T36] audit: type=1400 audit(1757060410.940:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.712957][ T36] audit: type=1400 audit(1757060410.950:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.738595][ T36] audit: type=1400 audit(1757060410.950:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.013971][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.021137][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.028213][ T290] bridge_slave_0: entered allmulticast mode [ 27.034692][ T290] bridge_slave_0: entered promiscuous mode [ 27.042328][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.049384][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.056526][ T290] bridge_slave_1: entered allmulticast mode [ 27.062949][ T290] bridge_slave_1: entered promiscuous mode [ 27.106179][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.113342][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.120469][ T289] bridge_slave_0: entered allmulticast mode [ 27.126708][ T289] bridge_slave_0: entered promiscuous mode [ 27.141844][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.148887][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.156016][ T288] bridge_slave_0: entered allmulticast mode [ 27.162409][ T288] bridge_slave_0: entered promiscuous mode [ 27.168498][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.175563][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.182647][ T289] bridge_slave_1: entered allmulticast mode [ 27.188957][ T289] bridge_slave_1: entered promiscuous mode [ 27.202637][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.209731][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.216799][ T288] bridge_slave_1: entered allmulticast mode [ 27.223169][ T288] bridge_slave_1: entered promiscuous mode [ 27.235995][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.243099][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.250239][ T291] bridge_slave_0: entered allmulticast mode [ 27.256517][ T291] bridge_slave_0: entered promiscuous mode [ 27.275866][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.282942][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.290048][ T291] bridge_slave_1: entered allmulticast mode [ 27.296352][ T291] bridge_slave_1: entered promiscuous mode [ 27.459077][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.466166][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.473518][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.480569][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.492787][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.499846][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.507146][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.514195][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.523299][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.530362][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.537629][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.544798][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.573635][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.580809][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.588087][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.595154][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.622386][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.629665][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.637562][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.645444][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.652668][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.660202][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.667433][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.674889][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.691631][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.698690][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.706385][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.713456][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.743048][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.750126][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.758027][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.765112][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.784044][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.791159][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.806113][ T289] veth0_vlan: entered promiscuous mode [ 27.823414][ T289] veth1_macvtap: entered promiscuous mode [ 27.832369][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.839431][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.868959][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.876030][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.883643][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.890699][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.916370][ T291] veth0_vlan: entered promiscuous mode [ 27.916998][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.937470][ T288] veth0_vlan: entered promiscuous mode [ 27.967027][ T290] veth0_vlan: entered promiscuous mode [ 27.988119][ T291] veth1_macvtap: entered promiscuous mode [ 27.995039][ T288] veth1_macvtap: entered promiscuous mode [ 28.019149][ T290] veth1_macvtap: entered promiscuous mode [ 28.058410][ T339] netlink: 'syz.2.3': attribute type 40 has an invalid length. [ 28.107547][ T344] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.131557][ T344] exFAT-fs (rnullb0): invalid boot record signature [ 28.141270][ T344] exFAT-fs (rnullb0): failed to read boot sector [ 28.147625][ T344] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.182484][ T353] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 28.192518][ T353] rust_binder: Failed copying remainder into alloc: EFAULT [ 28.192538][ T353] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 28.200130][ T353] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.208488][ T353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:9 [ 28.231226][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.252572][ T357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 28.289102][ T363] rust_binder: Write failure EFAULT in pid:4 [ 28.292475][ T361] SELinux: policydb version -355330322 does not match my version range 15-33 [ 28.318991][ T361] SELinux: failed to load policy [ 28.418344][ T378] rust_binder: Write failure EFAULT in pid:10 [ 28.418423][ T379] rust_binder: Write failure EFAULT in pid:10 [ 28.425754][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.441643][ T381] pim6reg1: entered promiscuous mode [ 28.448356][ T381] pim6reg1: entered allmulticast mode [ 28.454125][ T45] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 28.465890][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.479988][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.488201][ T45] usb 2-1: Product: syz [ 28.492796][ T45] usb 2-1: Manufacturer: syz [ 28.497575][ T45] usb 2-1: SerialNumber: syz [ 28.623983][ T397] ======================================================= [ 28.623983][ T397] WARNING: The mand mount option has been deprecated and [ 28.623983][ T397] and is ignored by this kernel. Remove the mand [ 28.623983][ T397] option from the mount to silence this warning. [ 28.623983][ T397] ======================================================= [ 28.659051][ T397] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 28.676820][ T395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.676855][ T395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 28.705424][ T333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.741354][ T45] cdc_mbim 2-1:1.0: bind() failure [ 28.748386][ T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 28.765793][ T45] cdc_ncm 2-1:1.1: bind() failure [ 28.783489][ T45] usb 2-1: USB disconnect, device number 2 [ 28.814767][ T415] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 29.066732][ T431] fuse: Unknown parameter '0x0000000000000007' [ 29.094356][ T436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35'. [ 29.118214][ T438] syzkaller0: entered promiscuous mode [ 29.123881][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.124114][ T438] syzkaller0: entered allmulticast mode [ 29.217693][ T440] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.275684][ T449] rust_binder: Failed copying remainder into alloc: EFAULT [ 29.275703][ T449] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 29.283138][ T449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.291466][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 29.291531][ T449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:37 [ 29.307619][ T45] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 29.321499][ T451] rust_binder: 448 RLIMIT_NICE not set [ 29.329641][ T45] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 29.344148][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 29.347374][ T9] rust_binder: 446: removing orphan mapping 0:4248 [ 29.355824][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.375306][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 29.380455][ T457] cgroup2: Unknown parameter 'me$' [ 29.385290][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 29.390857][ T457] cgroup2: Unknown parameter 'me$' [ 29.404632][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 29.408816][ T457] cgroup2: Unknown parameter 'me$' [ 29.418068][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.425650][ T457] cgroup2: Unknown parameter 'me$' [ 29.441430][ T461] rust_binder: 456 RLIMIT_NICE not set [ 29.441675][ T456] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 29.447334][ T45] usb 2-1: config 0 descriptor?? [ 29.470099][ T456] rust_binder: Error while translating object. [ 29.470145][ T456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.476366][ T456] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 29.486248][ T456] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:19 [ 29.511558][ T9] rust_binder: 454: removing orphan mapping 0:4248 [ 29.569940][ T330] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.582443][ T472] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 29.661762][ T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 29.682592][ T45] usb 2-1: USB disconnect, device number 3 [ 29.689234][ T45] usblp0: removed [ 29.729792][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 29.736456][ T330] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 29.744519][ T330] usb 4-1: config 0 has no interface number 0 [ 29.750654][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.758178][ T330] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.769090][ T330] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.779068][ T330] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 29.788158][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.797043][ T330] usb 4-1: config 0 descriptor?? [ 29.920855][ T31] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 29.930033][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.938785][ T31] usb 3-1: config 0 descriptor?? [ 30.012491][ T330] uclogic 0003:28BD:0094.0001: failed retrieving string descriptor #100: -71 [ 30.024697][ T330] uclogic 0003:28BD:0094.0001: failed retrieving pen parameters: -71 [ 30.032924][ T330] uclogic 0003:28BD:0094.0001: pen probing failed: -71 [ 30.039838][ T330] uclogic 0003:28BD:0094.0001: failed probing parameters: -71 [ 30.047342][ T330] uclogic 0003:28BD:0094.0001: probe with driver uclogic failed with error -71 [ 30.058130][ T330] usb 4-1: USB disconnect, device number 2 [ 30.099765][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.249767][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 30.256087][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 30.264614][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 30.273428][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 30.282456][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.292409][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 30.302155][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.315204][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 30.324320][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.333241][ T9] usb 2-1: config 0 descriptor?? [ 30.377844][ T36] kauditd_printk_skb: 106 callbacks suppressed [ 30.377862][ T36] audit: type=1400 audit(1757060415.670:180): avc: denied { append } for pid=479 comm="syz.0.47" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 30.406559][ T36] audit: type=1400 audit(1757060415.680:181): avc: denied { getopt } for pid=479 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.441231][ T36] audit: type=1400 audit(1757060415.740:182): avc: denied { write } for pid=481 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.492223][ T36] audit: type=1400 audit(1757060415.790:183): avc: denied { read } for pid=481 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.493121][ T483] netlink: 324 bytes leftover after parsing attributes in process `syz.0.48'. [ 30.523830][ T36] audit: type=1400 audit(1757060415.820:184): avc: denied { create } for pid=481 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 30.543285][ T36] audit: type=1400 audit(1757060415.820:185): avc: denied { append } for pid=481 comm="syz.0.48" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.567044][ T36] audit: type=1400 audit(1757060415.850:186): avc: denied { setopt } for pid=481 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.746388][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 30.758396][ T9] usb 2-1: USB disconnect, device number 4 [ 30.765175][ T9] usblp0: removed [ 31.271261][ T486] kvm: faulting far call emulation tainted memory [ 31.332212][ T491] rust_binder: 32: no such ref 0 [ 31.354500][ T36] audit: type=1400 audit(1757060416.650:187): avc: denied { mounton } for pid=490 comm="syz.0.51" path="/proc/32/task" dev="proc" ino=4065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 31.777880][ T31] usb 3-1: Cannot set autoneg [ 31.783254][ T31] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 31.798632][ T31] usb 3-1: USB disconnect, device number 2 [ 31.862336][ T36] audit: type=1400 audit(1757060417.160:188): avc: denied { ioctl } for pid=493 comm="syz.2.52" path="socket:[4075]" dev="sockfs" ino=4075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.270118][ T505] support for cryptoloop has been removed. Use dm-crypt instead. [ 32.295699][ T36] audit: type=1400 audit(1757060417.590:189): avc: denied { mounton } for pid=506 comm="syz.1.56" path="/6/file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.589766][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.667346][ T517] overlay: ./file0 is not a directory [ 32.739788][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 32.747033][ T31] usb 1-1: config 1 interface 1 has no altsetting 0 [ 32.755152][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.764276][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.772605][ T31] usb 1-1: Product: ᰊ [ 32.777013][ T31] usb 1-1: Manufacturer: 矊遢꣘᫜䬏읂扂괾䘏벞ᛠ瓻䟶䤛쒅挹謅讽虘濼ឃ똡쌈╿﬋䕭돊캿혩 [ 32.789766][ T31] usb 1-1: SerialNumber: syz [ 33.248246][ T527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 33.556096][ T31] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 33.568477][ T31] usb 1-1: USB disconnect, device number 2 [ 33.576734][ T536] rust_binder: Error while translating object. [ 33.576775][ T536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 33.584236][ T536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:45 [ 33.587977][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.644434][ T538] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 33.652114][ T538] rust_binder: Write failure EINVAL in pid:47 [ 33.676543][ T543] netlink: 'syz.0.69': attribute type 28 has an invalid length. [ 33.703784][ T13] bridge_slave_1: left allmulticast mode [ 33.709536][ T13] bridge_slave_1: left promiscuous mode [ 33.714195][ T546] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.715294][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.734594][ T13] bridge_slave_0: left allmulticast mode [ 33.740844][ T13] bridge_slave_0: left promiscuous mode [ 33.756841][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.901996][ T553] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.909053][ T553] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.916238][ T553] bridge_slave_0: entered allmulticast mode [ 33.922864][ T553] bridge_slave_0: entered promiscuous mode [ 33.930149][ T13] veth1_macvtap: left promiscuous mode [ 33.935664][ T13] veth0_vlan: left promiscuous mode [ 33.977515][ T553] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.984720][ T553] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.992230][ T553] bridge_slave_1: entered allmulticast mode [ 33.998528][ T553] bridge_slave_1: entered promiscuous mode [ 34.071819][ T553] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.078914][ T553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.086263][ T553] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.093363][ T553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.120669][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.128056][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.148397][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.155581][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.163799][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.170872][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.201107][ T553] veth0_vlan: entered promiscuous mode [ 34.214078][ T553] veth1_macvtap: entered promiscuous mode [ 34.247154][ T583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 34.247656][ T584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.290157][ T594] netlink: 'syz.0.81': attribute type 29 has an invalid length. [ 34.304516][ T594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 34.304723][ T330] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.314804][ T594] rust_binder: Error in use_page_slow: ESRCH [ 34.320832][ T594] rust_binder: use_range failure ESRCH [ 34.326923][ T594] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false [ 34.332672][ T594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.340830][ T594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:66 [ 34.429944][ T484] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.479742][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 34.486263][ T330] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 34.494907][ T330] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 34.507051][ T598] capability: warning: `syz.4.80' uses 32-bit capabilities (legacy support in use) [ 34.516845][ T330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 34.528220][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.539081][ T330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 34.549247][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 34.562891][ T330] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 34.572108][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.580956][ T330] usb 2-1: config 0 descriptor?? [ 34.610012][ T484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.621467][ T484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.631487][ T484] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 34.640657][ T484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.649444][ T484] usb 4-1: config 0 descriptor?? [ 34.700433][ T612] rust_binder: 22: no such ref 0 [ 34.718663][ T614] rust_binder: 610 RLIMIT_NICE not set [ 34.719383][ T610] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 34.732125][ T610] rust_binder: Error while translating object. [ 34.732175][ T610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.738365][ T610] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 34.747855][ T610] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:73 [ 34.766471][ T31] rust_binder: 609: removing orphan mapping 0:4248 [ 34.789142][ T330] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 34.803665][ T330] usb 2-1: USB disconnect, device number 5 [ 34.811234][ T330] usblp0: removed [ 34.939770][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.058816][ T484] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 35.100083][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 35.106342][ T45] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 35.115054][ T45] usb 5-1: config 0 has no interface number 0 [ 35.121358][ T45] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 35.131222][ T45] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 35.141180][ T45] usb 5-1: config 0 interface 41 has no altsetting 0 [ 35.149386][ T45] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 35.158508][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.166581][ T45] usb 5-1: Product: syz [ 35.170814][ T45] usb 5-1: Manufacturer: syz [ 35.175594][ T45] usb 5-1: SerialNumber: syz [ 35.180996][ T45] usb 5-1: config 0 descriptor?? [ 35.186272][ T612] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 35.193590][ T612] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 35.256608][ T484] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 35.459341][ T619] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 35.521054][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 35.521072][ T36] audit: type=1400 audit(1757060420.820:216): avc: denied { write } for pid=621 comm="syz.1.87" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.552730][ T45] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 35.568239][ T45] usb 5-1: USB disconnect, device number 2 [ 35.580980][ T36] audit: type=1400 audit(1757060420.880:217): avc: denied { read } for pid=625 comm="syz.4.88" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.606382][ T36] audit: type=1400 audit(1757060420.880:218): avc: denied { open } for pid=625 comm="syz.4.88" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.664436][ T36] audit: type=1400 audit(1757060420.960:219): avc: denied { setopt } for pid=632 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.683689][ T36] audit: type=1400 audit(1757060420.960:220): avc: denied { read } for pid=632 comm="syz.0.90" path="socket:[6448]" dev="sockfs" ino=6448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.699409][ T635] rust_binder: Error while translating object. [ 35.706589][ T635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.712862][ T635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 35.723937][ T36] audit: type=1400 audit(1757060421.030:221): avc: denied { connect } for pid=634 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.753337][ T635] rust_binder: Read failure Err(EAGAIN) in pid:35 [ 35.793418][ T36] audit: type=1400 audit(1757060421.090:222): avc: denied { bind } for pid=646 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.812896][ T36] audit: type=1400 audit(1757060421.100:223): avc: denied { read } for pid=625 comm="syz.4.88" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.836027][ T36] audit: type=1400 audit(1757060421.100:224): avc: denied { open } for pid=625 comm="syz.4.88" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.860607][ T36] audit: type=1400 audit(1757060421.110:225): avc: denied { connect } for pid=625 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.879955][ T649] rust_binder: Failed copying into alloc: EFAULT [ 35.880254][ T649] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 35.886763][ T649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.895270][ T649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:93 [ 36.009788][ T64] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.171298][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.179775][ T64] usb 2-1: config 1 has an invalid interface number: 6 but max is 2 [ 36.187782][ T64] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 36.197386][ T64] usb 2-1: config 1 has no interface number 1 [ 36.204083][ T64] usb 2-1: too many endpoints for config 1 interface 6 altsetting 1: 145, using maximum allowed: 30 [ 36.214945][ T64] usb 2-1: config 1 interface 6 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 36.228363][ T64] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 153, changing to 7 [ 36.239438][ T64] usb 2-1: config 1 interface 6 has no altsetting 0 [ 36.247627][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.256843][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.264989][ T64] usb 2-1: Product: syz [ 36.269145][ T64] usb 2-1: Manufacturer: syz [ 36.273754][ T64] usb 2-1: SerialNumber: syz [ 36.319725][ T484] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 36.485713][ T640] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 36.492816][ T668] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.496165][ T64] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 36.500939][ T668] rust_binder: Read failure Err(EFAULT) in pid:38 [ 36.517404][ T64] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 36.542543][ T64] hub 2-1:1.6: Invalid hub with more than one config or interface [ 36.559723][ T64] hub 2-1:1.6: probe with driver hub failed with error -22 [ 36.561642][ T676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.569057][ T64] usb 2-1: USB disconnect, device number 6 [ 36.592913][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.633827][ T679] rust_binder: Write failure EFAULT in pid:49 [ 37.022032][ T681] rust_binder: Error while translating object. [ 37.028238][ T681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.034572][ T681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 37.075383][ T683] 9pnet_fd: Insufficient options for proto=fd [ 37.284231][ T687] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 37.294244][ T687] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 37.302823][ T687] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 37.310794][ T687] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 37.459735][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 37.610941][ T31] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 37.620167][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.628870][ T31] usb 5-1: config 0 descriptor?? [ 37.629914][ T484] usb 4-1: device descriptor read/64, error -71 [ 37.679720][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.830773][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 37.842047][ T45] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 37.851344][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.866784][ T31] usb 5-1: Cannot read MAC address [ 37.873439][ T31] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 37.885265][ T45] usb 1-1: config 0 descriptor?? [ 37.894839][ T31] usb 5-1: USB disconnect, device number 3 [ 37.910179][ T484] usb 4-1: device firmware changed [ 37.916851][ T9] usb 4-1: USB disconnect, device number 3 [ 37.992219][ T13] bridge_slave_1: left allmulticast mode [ 37.998181][ T13] bridge_slave_1: left promiscuous mode [ 38.004432][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.012310][ T13] bridge_slave_0: left allmulticast mode [ 38.021112][ T13] bridge_slave_0: left promiscuous mode [ 38.026763][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.059748][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.106923][ T701] rust_binder: 104: no such ref 2 [ 38.112354][ T701] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 38.121203][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 38.127200][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.143062][ T13] veth1_macvtap: left promiscuous mode [ 38.148600][ T13] veth0_vlan: left promiscuous mode [ 38.154420][ T45] usb 1-1: USB disconnect, device number 4 [ 38.228579][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.235737][ T708] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.239044][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.243069][ T708] bridge_slave_0: entered allmulticast mode [ 38.254230][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.260637][ T708] bridge_slave_0: entered promiscuous mode [ 38.276900][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.278767][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 38.287707][ T708] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.292028][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 38.297874][ T708] bridge_slave_1: entered allmulticast mode [ 38.306962][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.313466][ T708] bridge_slave_1: entered promiscuous mode [ 38.326462][ T9] usb 4-1: config 0 descriptor?? [ 38.382122][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.389208][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.396510][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.403578][ T708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.425704][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.433325][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.443536][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.450629][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.460525][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.467572][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.496308][ T708] veth0_vlan: entered promiscuous mode [ 38.508175][ T708] veth1_macvtap: entered promiscuous mode [ 38.647367][ T731] fuse: Bad value for 'fd' [ 39.151911][ T692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.160779][ T692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.321523][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 39.327532][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 39.337137][ T9] usb 4-1: USB disconnect, device number 4 [ 39.409790][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.401170][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 56.401189][ T36] audit: type=1400 audit(1757060441.700:248): avc: denied { write } for pid=739 comm="syz.0.121" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.442997][ T741] input: syz0 as /devices/virtual/input/input4 [ 56.450629][ T36] audit: type=1400 audit(1757060441.700:249): avc: denied { ioctl } for pid=739 comm="syz.0.121" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.484329][ T758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 56.484364][ T758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:59 [ 56.501448][ T36] audit: type=1400 audit(1757060441.770:250): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=477 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.533371][ T36] audit: type=1400 audit(1757060441.770:251): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=477 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.557137][ T769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 56.569529][ T36] audit: type=1400 audit(1757060441.770:252): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=477 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.599640][ T36] audit: type=1400 audit(1757060441.790:253): avc: denied { name_bind } for pid=754 comm="syz.5.129" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.630393][ T36] audit: type=1400 audit(1757060441.930:254): avc: denied { getattr } for pid=776 comm="syz.1.134" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.690934][ T779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.690971][ T779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 56.720423][ T769] netlink: 'syz.0.131': attribute type 4 has an invalid length. [ 56.750053][ T36] audit: type=1400 audit(1757060442.050:255): avc: denied { append } for pid=790 comm="syz.1.139" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.756393][ T769] netlink: 'syz.0.131': attribute type 4 has an invalid length. [ 56.790105][ T36] audit: type=1400 audit(1757060442.090:256): avc: denied { listen } for pid=790 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.841524][ T45] rust_binder: 0: removing orphan mapping 0:96 [ 56.857413][ T45] rust_binder: 0: removing orphan mapping 96:24 [ 56.916830][ T795] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 56.916856][ T795] rust_binder: Read failure Err(EFAULT) in pid:30 [ 56.967909][ T804] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 57.496548][ T815] Zero length message leads to an empty skb [ 57.581743][ T36] audit: type=1400 audit(1757060442.880:257): avc: denied { unlink } for pid=823 comm="syz.5.150" name="#1" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.608399][ T827] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 57.722990][ T833] block device autoloading is deprecated and will be removed. [ 57.732331][ T833] exFAT-fs (rnullb0): invalid boot record signature [ 57.738976][ T833] exFAT-fs (rnullb0): failed to read boot sector [ 57.745674][ T833] exFAT-fs (rnullb0): failed to recognize exfat type [ 57.752906][ T834] exFAT-fs (rnullb0): invalid boot record signature [ 57.759848][ T834] exFAT-fs (rnullb0): failed to read boot sector [ 57.766204][ T834] exFAT-fs (rnullb0): failed to recognize exfat type [ 57.837614][ T843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 57.837651][ T843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:93 [ 57.920437][ T846] rust_binder: Error while translating object. [ 57.929537][ T846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 57.947835][ T846] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 57.958224][ T846] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:95 [ 57.982789][ T484] rust_binder: 845: removing orphan mapping 0:24 [ 58.131083][ T857] capability: warning: `syz.1.161' uses deprecated v2 capabilities in a way that may be insecure [ 58.168395][ T860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 58.383965][ T866] netlink: 'syz.5.164': attribute type 2 has an invalid length. [ 58.401572][ T867] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 58.408819][ T867] rust_binder: 97: no such ref 4294967294 [ 58.432859][ T867] rust_binder: inc_ref_done called when no active inc_refs [ 58.432887][ T867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 58.661124][ T884] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 58.678492][ T884] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 58.687180][ T884] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 58.696384][ T884] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 58.949610][ T909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.067341][ T915] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1735060478 (27760967648 ns) > initial count (27267544304 ns). Using initial count to start timer. [ 59.119774][ T484] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 59.270894][ T484] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 59.280105][ T484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.288751][ T484] usb 4-1: config 0 descriptor?? [ 59.329753][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 59.479732][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 59.486005][ T31] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023 [ 59.496167][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 59.504509][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.513735][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.522214][ T31] usb 2-1: Product:   [ 59.526401][ T31] usb 2-1: Manufacturer: 㗾㻍ꛩ卑鏈Ჵ逢盏嶭⧴遯꾾눉毩阍튳瞃쐞ầ귈෧튣鮹伏딉⌝⬄찶卉塬쉻鴐⼱鬀婔砤嚣뀌ᾃ힍솑ﹺ᪰芏ᣘ᤹旅먣೘⑄ｌ촇活ꋍ䔏㍖⎹䄮晢滷䝙뵃죱ന槽憌晶ྰۖﾬߦᖴ鍓爐촜陶꣒駌⦠뿨ܾ峅ᱷ凂ᘼᖚ锣Ҟ㡋㠻㠬躮뛊榫墵졦ﵙ韋 [ 59.560161][ T31] usb 2-1: SerialNumber: ﷗勪㲙᪌ꠠ틊ὑ҅鏒竻묁㧷⸷⎖뀉簘緔䅴䤉곅⨀惺냮ꭒ㿋鋘弑겖陳⠘﹞斌" [ 59.575498][ T915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 59.705372][ T484] usb 4-1: Cannot set autoneg [ 59.712892][ T484] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 59.727196][ T484] usb 4-1: USB disconnect, device number 5 [ 59.783736][ T915] binder: Unknown parameter '' [ 59.794995][ T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 59.806801][ T31] usb 2-1: USB disconnect, device number 8 [ 59.815513][ T31] usblp0: removed [ 59.859756][ T64] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.009766][ T64] usb 6-1: Using ep0 maxpacket: 8 [ 60.016230][ T64] usb 6-1: unable to get BOS descriptor or descriptor too short [ 60.023960][ T484] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 60.032215][ T64] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 60.040354][ T64] usb 6-1: config 0 has no interface number 0 [ 60.046444][ T64] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 60.057594][ T64] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 60.067525][ T64] usb 6-1: config 0 interface 88 has no altsetting 0 [ 60.076335][ T64] usb 6-1: string descriptor 0 read error: -22 [ 60.082580][ T64] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 60.091657][ T64] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 60.100502][ T64] usb 6-1: config 0 descriptor?? [ 60.106860][ T64] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input5 [ 60.130513][ T813] udevd[813]: Error opening device "/dev/input/event3": Input/output error [ 60.139246][ T813] udevd[813]: Unable to EVIOCGABS device "/dev/input/event3" [ 60.146710][ T813] udevd[813]: Unable to EVIOCGABS device "/dev/input/event3" [ 60.180904][ T484] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 60.190121][ T484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.198719][ T484] usb 4-1: config 0 descriptor?? [ 60.310970][ T31] usb 6-1: USB disconnect, device number 2 [ 60.579757][ T330] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 60.729738][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 60.736328][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.747935][ T330] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 60.757106][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.765164][ T330] usb 2-1: Product: syz [ 60.769359][ T330] usb 2-1: Manufacturer: syz [ 60.773987][ T330] usb 2-1: SerialNumber: syz [ 60.779274][ T330] usb 2-1: config 0 descriptor?? [ 60.785124][ T330] asix 2-1:0.0: probe with driver asix failed with error -22 [ 60.988945][ T933] rtc_cmos 00:00: Alarms can be up to one day in the future [ 60.997038][ T9] usb 2-1: USB disconnect, device number 9 [ 61.007267][ T930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.016203][ T930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.089759][ T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.239714][ T64] usb 6-1: Using ep0 maxpacket: 32 [ 61.246047][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.257125][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.266992][ T64] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 61.276095][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.284840][ T64] usb 6-1: config 0 descriptor?? [ 61.290828][ T64] hub 6-1:0.0: USB hub found [ 61.490749][ T484] usb 4-1: Cannot set autoneg [ 61.495505][ T484] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 61.506958][ T64] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 61.519894][ T484] usb 4-1: USB disconnect, device number 6 [ 61.528652][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 61.528668][ T36] audit: type=1400 audit(1757060446.820:283): avc: denied { connect } for pid=938 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.562820][ T36] audit: type=1326 audit(1757060446.860:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=940 comm="syz.1.189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb43c98ebe9 code=0x0 [ 61.576196][ T330] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.593607][ T330] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.601324][ T330] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.608967][ T330] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.616316][ T330] rtc rtc0: __rtc_set_alarm: err=-22 [ 61.665600][ T36] audit: type=1400 audit(1757060446.960:285): avc: denied { map } for pid=940 comm="syz.1.189" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 61.892967][ T36] audit: type=1400 audit(1757060447.190:286): avc: denied { ioctl } for pid=936 comm="syz.5.187" path="socket:[7576]" dev="sockfs" ino=7576 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.984111][ T64] usbhid 6-1:0.0: can't add hid device: -71 [ 61.990249][ T64] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 62.010729][ T64] usb 6-1: USB disconnect, device number 3 [ 62.013140][ T945] cgroup: noprefix used incorrectly [ 62.022674][ T36] audit: type=1400 audit(1757060447.320:287): avc: denied { remount } for pid=944 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.111109][ T949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.111504][ T949] rust_binder: Error while translating object. [ 62.118131][ T949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 62.124366][ T949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:158 [ 62.161791][ T955] pim6reg1: entered promiscuous mode [ 62.176331][ T955] pim6reg1: entered allmulticast mode [ 62.205305][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.209717][ T36] audit: type=1400 audit(1757060447.500:288): avc: denied { mounton } for pid=950 comm="syz.3.194" path="/syzcgroup/unified/syz3/pids.max" dev="cgroup2" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 62.211376][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.242134][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.248364][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.257691][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.263873][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.269878][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.275889][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.284607][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.290589][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.296497][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.307419][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.313427][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.319371][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.325319][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.331272][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.337138][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.343035][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.348924][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.354853][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.360794][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.366663][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.372832][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.378718][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.384617][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.390547][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.396457][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.402383][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.413594][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.413605][ T967] fuse: Bad value for 'fd' [ 62.424015][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.429930][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.435816][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.441780][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.447660][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.453822][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.460022][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.465952][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.472065][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.478167][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.484147][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.490083][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.495984][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.501948][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.513460][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.519444][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.525541][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.536977][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.542708][ T36] audit: type=1400 audit(1757060447.840:289): avc: denied { setattr } for pid=973 comm="syz.5.200" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 62.544360][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.572370][ T64] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 62.580558][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.586540][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.599462][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.605813][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.612529][ T976] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 62.618285][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.622191][ T976] SELinux: failed to load policy [ 62.634201][ T976] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 62.634224][ T976] rust_binder: Error while translating object. [ 62.646501][ T976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.646563][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.652964][ T976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 62.670950][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.694203][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.698328][ T979] rust_binder: Error while translating object. [ 62.700184][ T36] audit: type=1400 audit(1757060447.990:290): avc: denied { append } for pid=977 comm="syz.1.203" name="file0" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.715831][ T979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.728849][ T979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 62.729825][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.754359][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.760410][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.762767][ T64] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 62.766328][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.782126][ T64] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.797729][ T64] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 62.801152][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.808878][ T64] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 62.814724][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.828593][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.833778][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.842805][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.856420][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.856671][ T64] usb 1-1: SerialNumber: syz [ 62.862533][ T953] tmpfs: Unknown parameter 'dont_appraise' [ 62.872872][ T965] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.913972][ T36] audit: type=1326 audit(1757060448.210:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=986 comm="syz.1.205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb43c98ebe9 code=0x0 [ 62.960324][ T330] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.029441][ T993] rust_binder: Write failure EFAULT in pid:117 [ 63.082089][ T36] audit: type=1400 audit(1757060448.380:292): avc: denied { write } for pid=964 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.082437][ T965] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 63.117451][ T64] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 63.119717][ T330] usb 6-1: Using ep0 maxpacket: 16 [ 63.125577][ T64] usb 1-1: USB disconnect, device number 5 [ 63.134248][ T330] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 63.134275][ T330] usb 6-1: config 0 has no interface number 0 [ 63.134296][ T330] usb 6-1: config 0 interface 41 has no altsetting 0 [ 63.157939][ T330] usb 6-1: New USB device found, idVendor=0fe6, idProduct=af00, bcdDevice=d1.9a [ 63.167188][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.175480][ T330] usb 6-1: Product: syz [ 63.179798][ T330] usb 6-1: Manufacturer: syz [ 63.184410][ T330] usb 6-1: SerialNumber: syz [ 63.196472][ T330] usb 6-1: config 0 descriptor?? [ 63.405874][ T64] usb 6-1: USB disconnect, device number 4 [ 63.429768][ T484] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 63.579758][ T484] usb 4-1: Using ep0 maxpacket: 16 [ 63.586060][ T484] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.596203][ T484] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.606529][ T484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.615609][ T484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.623622][ T484] usb 4-1: Product: syz [ 63.627776][ T484] usb 4-1: Manufacturer: syz [ 63.632388][ T484] usb 4-1: SerialNumber: syz [ 63.662375][ T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 63.713162][ T999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.905158][ T995] rust_binder: 120: no such ref 0 [ 63.924586][ T995] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 63.927538][ T1008] rust_binder: Write failure EINVAL in pid:84 [ 63.931973][ T995] rust_binder: 120: no such ref 0 [ 64.018142][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.061115][ T484] usb 4-1: 0:2 : does not exist [ 64.066121][ T484] usb 4-1: unit 6 not found! [ 64.073110][ T484] usb 4-1: USB disconnect, device number 7 [ 64.085056][ T813] udevd[813]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.512266][ T1020] binder: Bad value for 'stats' [ 64.519114][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 64.671886][ T1034] rust_binder: Error while translating object. [ 64.671915][ T1034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.678291][ T1034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 64.748491][ T1042] netlink: 'syz.0.224': attribute type 28 has an invalid length. [ 65.168462][ T1061] rust_binder: 138: no such ref 1 [ 65.174690][ T1061] rust_binder: Write failure EFAULT in pid:138 [ 65.176446][ T1062] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 65.203247][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.203276][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.209971][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.216483][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.223060][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.229518][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.236152][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.242628][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.249052][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.255549][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.262635][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.262649][ T1067] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 65.269078][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.269096][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.289903][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.296389][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.302861][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.309301][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.315768][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.329756][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.336328][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.343111][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.349619][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.356750][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.363613][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.366033][ T1072] raw_sendmsg: syz.0.233 forgot to set AF_INET. Fix it! [ 65.370479][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.383674][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.390315][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.396879][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.403571][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.410415][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.416911][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.423692][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.430356][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.436878][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.443579][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.450246][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.456823][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.463365][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.470536][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.477254][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.487456][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.512411][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.525376][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.532114][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.538752][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.549791][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.556914][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.563996][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.570926][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.577449][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.584082][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.590648][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.597098][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.603813][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.610383][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.616829][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.623326][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.629841][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.636393][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.642883][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.649332][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.655854][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.662335][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.668769][ T1066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.823579][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 65.968118][ T31] usb 1-1: device descriptor read/64, error -71 [ 66.060995][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.061007][ T699] Bluetooth: hci0: command 0x1003 tx timeout [ 66.215868][ T31] usb 1-1: device descriptor read/64, error -71 [ 66.315279][ T1095] binder: Bad value for 'stats' [ 66.374405][ T1106] binder: Bad value for 'stats' [ 66.385819][ T1106] veth1: entered allmulticast mode [ 66.392642][ T1106] veth1: left allmulticast mode [ 66.494584][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 66.516999][ T1122] tipc: Can't bind to reserved service type 1 [ 66.558436][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 66.558454][ T36] audit: type=1400 audit(1757060451.833:305): avc: denied { map } for pid=1123 comm="syz.5.251" path="socket:[9736]" dev="sockfs" ino=9736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 66.618687][ T1134] FAULT_INJECTION: forcing a failure. [ 66.618687][ T1134] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.631911][ T1134] CPU: 0 UID: 0 PID: 1134 Comm: syz.5.254 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3 [ 66.631944][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.631970][ T1134] Call Trace: [ 66.631976][ T1134] [ 66.631984][ T1134] __dump_stack+0x21/0x30 [ 66.632025][ T1134] dump_stack_lvl+0x10c/0x190 [ 66.632054][ T1134] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.632082][ T1134] ? dump_stack+0xd/0x20 [ 66.632108][ T1134] dump_stack+0x19/0x20 [ 66.632133][ T1134] should_fail_ex+0x3d9/0x530 [ 66.632155][ T1134] should_fail+0xf/0x20 [ 66.632173][ T1134] should_fail_usercopy+0x1e/0x30 [ 66.632195][ T1134] _copy_from_user+0x22/0xb0 [ 66.632220][ T1134] ___sys_recvmsg+0x12f/0x510 [ 66.632246][ T1134] ? __sys_recvmsg+0x280/0x280 [ 66.632270][ T1134] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 66.632291][ T1134] ? selinux_file_permission+0x309/0xb30 [ 66.632319][ T1134] ? __fget_files+0x2c5/0x340 [ 66.632345][ T1134] do_recvmmsg+0x326/0x770 [ 66.632370][ T1134] ? __sys_recvmmsg+0x290/0x290 [ 66.632393][ T1134] ? __cfi_vfs_write+0x10/0x10 [ 66.632415][ T1134] ? fput+0x1a5/0x240 [ 66.632441][ T1134] __x64_sys_recvmmsg+0x191/0x240 [ 66.632466][ T1134] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 66.632490][ T1134] ? __kasan_check_read+0x15/0x20 [ 66.632521][ T1134] x64_sys_call+0x292c/0x2ee0 [ 66.632552][ T1134] do_syscall_64+0x58/0xf0 [ 66.632570][ T1134] ? clear_bhb_loop+0x50/0xa0 [ 66.632596][ T1134] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.632623][ T1134] RIP: 0033:0x7fef8c38ebe9 [ 66.632652][ T1134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.632677][ T1134] RSP: 002b:00007fef8d11f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 66.632704][ T1134] RAX: ffffffffffffffda RBX: 00007fef8c5c5fa0 RCX: 00007fef8c38ebe9 [ 66.632720][ T1134] RDX: 040000000000011e RSI: 0000200000000440 RDI: 0000000000000003 [ 66.632736][ T1134] RBP: 00007fef8d11f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.632750][ T1134] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001 [ 66.632763][ T1134] R13: 00007fef8c5c6038 R14: 00007fef8c5c5fa0 R15: 00007ffeea5d7aa8 [ 66.632781][ T1134] [ 66.701186][ T31] usb 1-1: device descriptor read/64, error -71 [ 66.738402][ T1142] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 66.782295][ T36] audit: type=1400 audit(1757060452.046:306): avc: denied { execute } for pid=1143 comm="syz.5.259" name="file1" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.788334][ T1144] process 'syz.5.259' launched './file1' with NULL argv: empty string added [ 66.909464][ T36] audit: type=1400 audit(1757060452.173:307): avc: denied { execute_no_trans } for pid=1143 comm="syz.5.259" path="/42/file1" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.001160][ T1161] FAULT_INJECTION: forcing a failure. [ 67.001160][ T1161] name failslab, interval 1, probability 0, space 0, times 1 [ 67.014059][ T1161] CPU: 1 UID: 0 PID: 1161 Comm: syz.3.265 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3 [ 67.014089][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.014103][ T1161] Call Trace: [ 67.014110][ T1161] [ 67.014118][ T1161] __dump_stack+0x21/0x30 [ 67.014151][ T1161] dump_stack_lvl+0x10c/0x190 [ 67.014178][ T1161] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.014207][ T1161] ? ___sys_recvmsg+0x1b6/0x510 [ 67.014232][ T1161] dump_stack+0x19/0x20 [ 67.014256][ T1161] should_fail_ex+0x3d9/0x530 [ 67.014276][ T1161] should_failslab+0xac/0x100 [ 67.014298][ T1161] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 67.014329][ T1161] ? __alloc_skb+0x10c/0x370 [ 67.014357][ T1161] ? mutex_lock+0x92/0x1c0 [ 67.014380][ T1161] __alloc_skb+0x10c/0x370 [ 67.014411][ T1161] netlink_dump+0x1c8/0xe40 [ 67.014433][ T1161] ? refcount_inc+0x90/0x90 [ 67.014455][ T1161] ? __kfree_skb+0x18f/0x210 [ 67.014473][ T1161] ? skb_free_datagram+0x19/0x30 [ 67.014492][ T1161] ? consume_skb+0x65/0x1a0 [ 67.014522][ T1161] netlink_recvmsg+0x677/0xdf0 [ 67.014543][ T1161] ? __cfi_netlink_recvmsg+0x10/0x10 [ 67.014566][ T1161] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 67.014590][ T1161] ? security_socket_recvmsg+0x3a/0xf0 [ 67.014610][ T1161] ? __cfi_netlink_recvmsg+0x10/0x10 [ 67.014630][ T1161] sock_recvmsg+0x219/0x270 [ 67.014658][ T1161] ____sys_recvmsg+0x1ca/0x460 [ 67.014681][ T1161] ? __sys_recvmsg_sock+0x60/0x60 [ 67.014707][ T1161] ? import_iovec+0x81/0xb0 [ 67.014733][ T1161] ___sys_recvmsg+0x1b6/0x510 [ 67.014757][ T1161] ? __sys_recvmsg+0x280/0x280 [ 67.014780][ T1161] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 67.014800][ T1161] ? selinux_file_permission+0x309/0xb30 [ 67.014827][ T1161] ? __fget_files+0x2c5/0x340 [ 67.014861][ T1161] do_recvmmsg+0x326/0x770 [ 67.014886][ T1161] ? __sys_recvmmsg+0x290/0x290 [ 67.014909][ T1161] ? __cfi_vfs_write+0x10/0x10 [ 67.014930][ T1161] ? fput+0x1a5/0x240 [ 67.014956][ T1161] __x64_sys_recvmmsg+0x191/0x240 [ 67.014981][ T1161] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 67.015005][ T1161] ? __kasan_check_read+0x15/0x20 [ 67.015034][ T1161] x64_sys_call+0x292c/0x2ee0 [ 67.015064][ T1161] do_syscall_64+0x58/0xf0 [ 67.015081][ T1161] ? clear_bhb_loop+0x50/0xa0 [ 67.015112][ T1161] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.015137][ T1161] RIP: 0033:0x7f7bb5f8ebe9 [ 67.015153][ T1161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.015171][ T1161] RSP: 002b:00007f7bb6e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 67.015193][ T1161] RAX: ffffffffffffffda RBX: 00007f7bb61c5fa0 RCX: 00007f7bb5f8ebe9 [ 67.015210][ T1161] RDX: 040000000000011e RSI: 0000200000000440 RDI: 0000000000000003 [ 67.015231][ T1161] RBP: 00007f7bb6e27090 R08: 0000000000000000 R09: 0000000000000000 [ 67.015245][ T1161] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001 [ 67.015256][ T1161] R13: 00007f7bb61c6038 R14: 00007f7bb61c5fa0 R15: 00007fff51d3a228 [ 67.015273][ T1161] [ 67.277985][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.284890][ T31] usb 1-1: device descriptor read/64, error -71 [ 67.328418][ T36] audit: type=1400 audit(1757060452.571:308): avc: denied { mount } for pid=1166 comm="syz.3.268" name="/" dev="configfs" ino=1700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.362206][ T36] audit: type=1400 audit(1757060452.590:309): avc: denied { search } for pid=1166 comm="syz.3.268" name="/" dev="configfs" ino=1700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.384295][ T36] audit: type=1400 audit(1757060452.590:310): avc: denied { read } for pid=1166 comm="syz.3.268" name="/" dev="configfs" ino=1700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.408487][ T36] audit: type=1400 audit(1757060452.590:311): avc: denied { open } for pid=1166 comm="syz.3.268" path="/" dev="configfs" ino=1700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.442842][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 67.442891][ T31] usb usb1-port1: attempt power cycle [ 67.449219][ T10] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 67.461889][ T10] usb 6-1: config 0 has no interface number 0 [ 67.470112][ T10] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 67.488168][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.510557][ T10] usb 6-1: Product: syz [ 67.519485][ T10] usb 6-1: Manufacturer: syz [ 67.524117][ T10] usb 6-1: SerialNumber: syz [ 67.535763][ T10] usb 6-1: config 0 descriptor?? [ 67.748055][ T36] audit: type=1400 audit(1757060452.988:312): avc: denied { create } for pid=1184 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 67.803310][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 67.824973][ T31] usb 1-1: device descriptor read/8, error -71 [ 67.840010][ T1189] rust_binder: Write failure EINVAL in pid:171 [ 67.958683][ T31] usb 1-1: device descriptor read/8, error -71 [ 68.214631][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 68.236289][ T31] usb 1-1: device descriptor read/8, error -71 [ 68.369981][ T31] usb 1-1: device descriptor read/8, error -71 [ 68.482679][ T31] usb usb1-port1: unable to enumerate USB device [ 68.640815][ T36] audit: type=1326 audit(1757060453.853:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1186 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43c98ebe9 code=0x7fc00000 [ 68.731554][ T1199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.749271][ T64] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 68.937622][ T1204] overlayfs: failed to resolve './file1': -2 [ 68.944804][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 68.954147][ T64] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.972845][ T64] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.982812][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 68.989603][ T64] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 68.998855][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.002613][ T1210] syzkaller0: entered promiscuous mode [ 69.008240][ T64] usb 4-1: config 0 descriptor?? [ 69.016213][ T1210] syzkaller0: entered allmulticast mode [ 69.180894][ T1213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.204492][ T1215] FAULT_INJECTION: forcing a failure. [ 69.204492][ T1215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.224161][ T1215] CPU: 1 UID: 0 PID: 1215 Comm: syz.1.286 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3 [ 69.224194][ T1215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.224207][ T1215] Call Trace: [ 69.224214][ T1215] [ 69.224222][ T1215] __dump_stack+0x21/0x30 [ 69.224255][ T1215] dump_stack_lvl+0x10c/0x190 [ 69.224284][ T1215] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.224313][ T1215] ? __sys_recvmsg_sock+0x60/0x60 [ 69.224338][ T1215] dump_stack+0x19/0x20 [ 69.224364][ T1215] should_fail_ex+0x3d9/0x530 [ 69.224385][ T1215] should_fail+0xf/0x20 [ 69.224404][ T1215] should_fail_usercopy+0x1e/0x30 [ 69.224426][ T1215] _copy_from_user+0x22/0xb0 [ 69.224461][ T1215] ___sys_recvmsg+0x12f/0x510 [ 69.224486][ T1215] ? __sys_recvmsg+0x280/0x280 [ 69.224510][ T1215] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 69.224532][ T1215] ? selinux_file_permission+0x309/0xb30 [ 69.224561][ T1215] ? __fget_files+0x2c5/0x340 [ 69.224586][ T1215] do_recvmmsg+0x326/0x770 [ 69.224611][ T1215] ? __sys_recvmmsg+0x290/0x290 [ 69.224635][ T1215] ? __cfi_vfs_write+0x10/0x10 [ 69.224657][ T1215] ? fput+0x1a5/0x240 [ 69.224684][ T1215] __x64_sys_recvmmsg+0x191/0x240 [ 69.224709][ T1215] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 69.224733][ T1215] ? __kasan_check_read+0x15/0x20 [ 69.224766][ T1215] x64_sys_call+0x292c/0x2ee0 [ 69.224796][ T1215] do_syscall_64+0x58/0xf0 [ 69.224815][ T1215] ? clear_bhb_loop+0x50/0xa0 [ 69.224843][ T1215] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.224869][ T1215] RIP: 0033:0x7fb43c98ebe9 [ 69.224886][ T1215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.224905][ T1215] RSP: 002b:00007fb43d7ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 69.224928][ T1215] RAX: ffffffffffffffda RBX: 00007fb43cbc5fa0 RCX: 00007fb43c98ebe9 [ 69.224945][ T1215] RDX: 040000000000011e RSI: 0000200000000440 RDI: 0000000000000003 [ 69.224960][ T1215] RBP: 00007fb43d7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 69.224973][ T1215] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001 [ 69.224985][ T1215] R13: 00007fb43cbc6038 R14: 00007fb43cbc5fa0 R15: 00007ffc3159e5d8 [ 69.225003][ T1215] [ 69.227248][ T64] usbhid 4-1:0.0: can't add hid device: -71 [ 69.255474][ T1218] netlink: 'syz.0.285': attribute type 28 has an invalid length. [ 69.271658][ T64] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 69.280371][ T1218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:216 [ 69.288079][ T64] usb 4-1: USB disconnect, device number 8 [ 69.578131][ T36] audit: type=1400 audit(1757060454.769:314): avc: denied { read } for pid=1222 comm="syz.1.288" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 69.724588][ T1229] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 69.731930][ T1229] rust_binder: Write failure EINVAL in pid:194 [ 69.779821][ T1236] netlink: 'syz.3.291': attribute type 32 has an invalid length. [ 69.873057][ T1243] FAULT_INJECTION: forcing a failure. [ 69.873057][ T1243] name failslab, interval 1, probability 0, space 0, times 0 [ 69.885773][ T1243] CPU: 1 UID: 0 PID: 1243 Comm: syz.3.295 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3 [ 69.885809][ T1243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.885823][ T1243] Call Trace: [ 69.885831][ T1243] [ 69.885850][ T1243] __dump_stack+0x21/0x30 [ 69.885884][ T1243] dump_stack_lvl+0x10c/0x190 [ 69.885910][ T1243] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.885937][ T1243] ? ___sys_recvmsg+0x1b6/0x510 [ 69.885957][ T1243] dump_stack+0x19/0x20 [ 69.885976][ T1243] should_fail_ex+0x3d9/0x530 [ 69.885991][ T1243] should_failslab+0xac/0x100 [ 69.886014][ T1243] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 69.886045][ T1243] ? __alloc_skb+0x10c/0x370 [ 69.886072][ T1243] ? mutex_lock+0x92/0x1c0 [ 69.886095][ T1243] __alloc_skb+0x10c/0x370 [ 69.886117][ T1243] netlink_dump+0x1c8/0xe40 [ 69.886133][ T1243] ? refcount_inc+0x90/0x90 [ 69.886150][ T1243] ? __kfree_skb+0x18f/0x210 [ 69.886171][ T1243] ? skb_free_datagram+0x19/0x30 [ 69.886190][ T1243] ? consume_skb+0x65/0x1a0 [ 69.886219][ T1243] netlink_recvmsg+0x677/0xdf0 [ 69.886241][ T1243] ? __cfi_netlink_recvmsg+0x10/0x10 [ 69.886259][ T1243] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 69.886276][ T1243] ? security_socket_recvmsg+0x3a/0xf0 [ 69.886291][ T1243] ? __cfi_netlink_recvmsg+0x10/0x10 [ 69.886314][ T1243] ? __cfi_netlink_recvmsg+0x10/0x10 [ 69.886336][ T1243] sock_recvmsg_nosec+0x1df/0x230 [ 69.886363][ T1243] ____sys_recvmsg+0x3a9/0x460 [ 69.886424][ T1243] ? __sys_recvmsg_sock+0x60/0x60 [ 69.886444][ T1243] ? import_iovec+0x81/0xb0 [ 69.886475][ T1243] ___sys_recvmsg+0x1b6/0x510 [ 69.886502][ T1243] ? __sys_recvmsg+0x280/0x280 [ 69.886525][ T1243] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 69.886542][ T1243] ? selinux_file_permission+0x309/0xb30 [ 69.886562][ T1243] ? __fget_files+0x2c5/0x340 [ 69.886579][ T1243] do_recvmmsg+0x326/0x770 [ 69.886603][ T1243] ? __sys_recvmmsg+0x290/0x290 [ 69.886628][ T1243] ? __cfi_vfs_write+0x10/0x10 [ 69.886648][ T1243] ? fput+0x1a5/0x240 [ 69.886674][ T1243] __x64_sys_recvmmsg+0x191/0x240 [ 69.886693][ T1243] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 69.886710][ T1243] ? __kasan_check_read+0x15/0x20 [ 69.886733][ T1243] x64_sys_call+0x292c/0x2ee0 [ 69.886764][ T1243] do_syscall_64+0x58/0xf0 [ 69.886781][ T1243] ? clear_bhb_loop+0x50/0xa0 [ 69.886810][ T1243] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.886832][ T1243] RIP: 0033:0x7f7bb5f8ebe9 [ 69.886845][ T1243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.886857][ T1243] RSP: 002b:00007f7bb6e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 69.886874][ T1243] RAX: ffffffffffffffda RBX: 00007f7bb61c5fa0 RCX: 00007f7bb5f8ebe9 [ 69.886890][ T1243] RDX: 040000000000011e RSI: 0000200000000440 RDI: 0000000000000003 [ 69.886905][ T1243] RBP: 00007f7bb6e27090 R08: 0000000000000000 R09: 0000000000000000 [ 69.886919][ T1243] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001 [ 69.886932][ T1243] R13: 00007f7bb61c6038 R14: 00007f7bb61c5fa0 R15: 00007fff51d3a228 [ 69.886950][ T1243] [ 70.206737][ T10] usb 6-1: USB disconnect, device number 5 [ 70.229150][ T1247] overlay: Unknown parameter 'subj_type' [ 70.328824][ T1263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 70.585934][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 70.646877][ T64] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 70.658855][ T1275] can0: slcan on ttyS3. [ 70.690634][ T1274] can0 (unregistered): slcan off ttyS3. [ 70.739082][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 70.748746][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.759696][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 70.768340][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 70.777723][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.787551][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.799726][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.812996][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 70.823271][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.831635][ T64] usb 4-1: config index 0 descriptor too short (expected 162, got 34) [ 70.841015][ T9] usb 1-1: config 0 descriptor?? [ 70.846167][ T64] usb 4-1: config 127 has an invalid interface number: 54 but max is 0 [ 70.855563][ T64] usb 4-1: config 127 has no interface number 0 [ 70.861889][ T64] usb 4-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 70.871236][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.061316][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 71.073946][ T9] usb 1-1: USB disconnect, device number 10 [ 71.082263][ T9] usblp0: removed [ 71.098322][ T64] usb 4-1: string descriptor 0 read error: -71 [ 71.107969][ T64] usb 4-1: USB disconnect, device number 9 [ 71.506637][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 71.660145][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 71.669298][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.677891][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.680750][ T1321] FAULT_INJECTION: forcing a failure. [ 71.680750][ T1321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.686765][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.700639][ T1321] CPU: 1 UID: 0 PID: 1321 Comm: syz.3.316 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3 [ 71.700676][ T1321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.700693][ T1321] Call Trace: [ 71.700701][ T1321] [ 71.700711][ T1321] __dump_stack+0x21/0x30 [ 71.700749][ T1321] dump_stack_lvl+0x10c/0x190 [ 71.700780][ T1321] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.700814][ T1321] ? __sys_recvmsg_sock+0x60/0x60 [ 71.700845][ T1321] dump_stack+0x19/0x20 [ 71.700875][ T1321] should_fail_ex+0x3d9/0x530 [ 71.700904][ T1321] should_fail+0xf/0x20 [ 71.700926][ T1321] should_fail_usercopy+0x1e/0x30 [ 71.700951][ T1321] _copy_from_user+0x22/0xb0 [ 71.700980][ T1321] ___sys_recvmsg+0x12f/0x510 [ 71.701008][ T1321] ? __sys_recvmsg+0x280/0x280 [ 71.701037][ T1321] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 71.701060][ T1321] ? selinux_file_permission+0x309/0xb30 [ 71.701092][ T1321] ? __fget_files+0x2c5/0x340 [ 71.701122][ T1321] do_recvmmsg+0x326/0x770 [ 71.701166][ T1321] ? __sys_recvmmsg+0x290/0x290 [ 71.701192][ T1321] ? __cfi_vfs_write+0x10/0x10 [ 71.701227][ T1321] ? fput+0x1a5/0x240 [ 71.701256][ T1321] __x64_sys_recvmmsg+0x191/0x240 [ 71.701283][ T1321] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 71.701310][ T1321] ? __kasan_check_read+0x15/0x20 [ 71.701345][ T1321] x64_sys_call+0x292c/0x2ee0 [ 71.701379][ T1321] do_syscall_64+0x58/0xf0 [ 71.701399][ T1321] ? clear_bhb_loop+0x50/0xa0 [ 71.701431][ T1321] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.701459][ T1321] RIP: 0033:0x7f7bb5f8ebe9 [ 71.701478][ T1321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.701497][ T1321] RSP: 002b:00007f7bb6e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 71.701523][ T1321] RAX: ffffffffffffffda RBX: 00007f7bb61c5fa0 RCX: 00007f7bb5f8ebe9 [ 71.701541][ T1321] RDX: 040000000000011e RSI: 0000200000000440 RDI: 0000000000000003 [ 71.701558][ T1321] RBP: 00007f7bb6e27090 R08: 0000000000000000 R09: 0000000000000000 [ 71.701573][ T1321] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001 [ 71.701587][ T1321] R13: 00007f7bb61c6038 R14: 00007f7bb61c5fa0 R15: 00007fff51d3a228 [ 71.701609][ T1321] [ 71.750952][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 71.750972][ T36] audit: type=1400 audit(1757060456.888:343): avc: denied { setopt } for pid=1327 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.756233][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.764307][ T36] audit: type=1400 audit(1757060456.897:344): avc: denied { ioctl } for pid=1327 comm="syz.3.318" path="socket:[11037]" dev="sockfs" ino=11037 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.773869][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.002326][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.015337][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.024403][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.033044][ T9] usb 1-1: config 0 descriptor?? [ 72.244358][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.251671][ T36] audit: type=1400 audit(1757060457.377:345): avc: denied { read write } for pid=1264 comm="syz.0.305" name="lp0" dev="devtmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 72.263568][ T9] usb 1-1: USB disconnect, device number 11 [ 72.279121][ T36] audit: type=1400 audit(1757060457.377:346): avc: denied { open } for pid=1264 comm="syz.0.305" path="/dev/usb/lp0" dev="devtmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 72.289377][ T9] usblp0: removed [ 72.778065][ T1344] 9pnet_fd: Insufficient options for proto=fd [ 72.784617][ T36] audit: type=1400 audit(1757060457.905:347): avc: denied { shutdown } for pid=1343 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.875669][ T1352] FAULT_INJECTION: forcing a failure. [ 72.875669][ T1352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.888807][ T1352] CPU: 1 UID: 0 PID: 1352 Comm: syz.3.325 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3 [ 72.888839][ T1352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.888853][ T1352] Call Trace: [ 72.888859][ T1352] [ 72.888868][ T1352] __dump_stack+0x21/0x30 [ 72.888899][ T1352] dump_stack_lvl+0x10c/0x190 [ 72.888920][ T1352] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.888942][ T1352] dump_stack+0x19/0x20 [ 72.888961][ T1352] should_fail_ex+0x3d9/0x530 [ 72.888976][ T1352] should_fail+0xf/0x20 [ 72.888989][ T1352] should_fail_usercopy+0x1e/0x30 [ 72.889004][ T1352] _copy_to_iter+0x3bb/0x14b0 [ 72.889023][ T1352] ? __cfi__copy_to_iter+0x10/0x10 [ 72.889039][ T1352] ? __check_object_size+0x50a/0x810 [ 72.889054][ T1352] ? __cfi___check_object_size+0x10/0x10 [ 72.889068][ T1352] ? __skb_try_recv_datagram+0x3df/0x4e0 [ 72.889084][ T1352] __skb_datagram_iter+0x103/0x930 [ 72.889099][ T1352] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 72.889115][ T1352] skb_copy_datagram_iter+0x44/0x160 [ 72.889132][ T1352] netlink_recvmsg+0x2c5/0xdf0 [ 72.889149][ T1352] ? __cfi_netlink_recvmsg+0x10/0x10 [ 72.889167][ T1352] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 72.889186][ T1352] ? security_socket_recvmsg+0x3a/0xf0 [ 72.889201][ T1352] ? __cfi_netlink_recvmsg+0x10/0x10 [ 72.889216][ T1352] ? __cfi_netlink_recvmsg+0x10/0x10 [ 72.889232][ T1352] sock_recvmsg_nosec+0x1df/0x230 [ 72.889254][ T1352] ____sys_recvmsg+0x3a9/0x460 [ 72.889271][ T1352] ? __sys_recvmsg_sock+0x60/0x60 [ 72.889290][ T1352] ? import_iovec+0x81/0xb0 [ 72.889309][ T1352] ___sys_recvmsg+0x1b6/0x510 [ 72.889326][ T1352] ? __sys_recvmsg+0x280/0x280 [ 72.889343][ T1352] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 72.889358][ T1352] ? selinux_file_permission+0x309/0xb30 [ 72.889384][ T1352] ? __fget_files+0x2c5/0x340 [ 72.889401][ T1352] do_recvmmsg+0x326/0x770 [ 72.889419][ T1352] ? __sys_recvmmsg+0x290/0x290 [ 72.889436][ T1352] ? __cfi_vfs_write+0x10/0x10 [ 72.889451][ T1352] ? fput+0x1a5/0x240 [ 72.889469][ T1352] __x64_sys_recvmmsg+0x191/0x240 [ 72.889486][ T1352] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 72.889504][ T1352] ? __kasan_check_read+0x15/0x20 [ 72.889527][ T1352] x64_sys_call+0x292c/0x2ee0 [ 72.889549][ T1352] do_syscall_64+0x58/0xf0 [ 72.889561][ T1352] ? clear_bhb_loop+0x50/0xa0 [ 72.889582][ T1352] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.889600][ T1352] RIP: 0033:0x7f7bb5f8ebe9 [ 72.889613][ T1352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.889626][ T1352] RSP: 002b:00007f7bb6e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 72.889643][ T1352] RAX: ffffffffffffffda RBX: 00007f7bb61c5fa0 RCX: 00007f7bb5f8ebe9 [ 72.889654][ T1352] RDX: 040000000000011e RSI: 0000200000000440 RDI: 0000000000000003 [ 72.889665][ T1352] RBP: 00007f7bb6e27090 R08: 0000000000000000 R09: 0000000000000000 [ 72.889675][ T1352] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001 [ 72.889684][ T1352] R13: 00007f7bb61c6038 R14: 00007f7bb61c5fa0 R15: 00007fff51d3a228 [ 72.889698][ T1352] [ 73.204862][ T1366] veth0_to_team: entered promiscuous mode [ 73.223124][ T1366] veth0_to_team: entered allmulticast mode [ 73.233802][ T1367] 2N: renamed from vcan0 (while UP) [ 73.280964][ T1374] netlink: 152 bytes leftover after parsing attributes in process `syz.3.331'. [ 73.392405][ T330] hid-generic 007F:6E8D:0005.0003: item fetching failed at offset 1/5 [ 73.400962][ T330] hid-generic 007F:6E8D:0005.0003: probe with driver hid-generic failed with error -22 [ 73.403396][ T36] audit: type=1400 audit(1757060458.493:348): avc: denied { create } for pid=1380 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.432914][ T36] audit: type=1400 audit(1757060458.542:349): avc: denied { mounton } for pid=1380 comm="syz.3.334" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.512129][ T1388] 9pnet_fd: Insufficient options for proto=fd [ 73.819688][ T1399] 9pnet_fd: Insufficient options for proto=fd [ 73.937268][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 74.069740][ T10] usb 4-1: device descriptor read/64, error -71 [ 74.237421][ T1419] netlink: 'syz.5.348': attribute type 4 has an invalid length. [ 74.245798][ T1419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1419 comm=syz.5.348 [ 74.282891][ T1424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.350'. [ 74.292500][ T36] audit: type=1400 audit(1757060459.376:350): avc: denied { load_policy } for pid=1423 comm="syz.5.350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 74.292657][ T1424] ------------[ cut here ]------------ [ 74.318098][ T1424] WARNING: CPU: 0 PID: 1424 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 74.327570][ T1424] Modules linked in: [ 74.331496][ T1424] CPU: 0 UID: 0 PID: 1424 Comm: syz.5.350 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3 [ 74.343015][ T1424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.344601][ T1425] binder: Unknown parameter '00000000000000000000003' [ 74.353145][ T1424] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 74.360237][ T36] audit: type=1400 audit(1757060459.435:351): avc: granted { setsecparam } for pid=1423 comm="syz.5.350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 74.365978][ T1424] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a9 4c ee 05 00 0f 85 be 00 00 00 c6 05 9c 4c ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 74.384888][ T530] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 74.404533][ T1424] RSP: 0018:ffffc9000d7ff560 EFLAGS: 00010246 [ 74.418200][ T1424] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 74.426234][ T1424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d7ff618 [ 74.434249][ T1424] RBP: ffffc9000d7ff6a0 R08: ffffc9000d7ff617 R09: 0000000000000000 [ 74.442265][ T1424] R10: ffffc9000d7ff600 R11: fffff52001affec3 R12: ffffc9000d7ff5a0 [ 74.450284][ T1424] R13: dffffc0000000000 R14: 1ffff92001affeb0 R15: 0000000000000000 [ 74.458325][ T1424] FS: 00007fef8d11f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 74.467289][ T1424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.473901][ T1424] CR2: 00007fef8d11ef98 CR3: 000000011f364000 CR4: 00000000003526b0 [ 74.481916][ T1424] Call Trace: [ 74.485212][ T1424] [ 74.488202][ T1424] ? vfs_write+0x3c0/0xe80 [ 74.492651][ T1424] ? ksys_write+0x141/0x250 [ 74.497155][ T1424] ? x64_sys_call+0x271c/0x2ee0 [ 74.502070][ T1424] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 74.507823][ T1424] ? hashtab_init+0xdb/0x1f0 [ 74.512494][ T1424] ___kmalloc_large_node+0xb5/0x250 [ 74.517703][ T1424] ? hashtab_init+0xdb/0x1f0 [ 74.522327][ T1424] __kmalloc_large_node_noprof+0x1e/0xe0 [ 74.527990][ T1424] ? hashtab_init+0xdb/0x1f0 [ 74.532611][ T1424] __kmalloc_noprof+0x26d/0x450 [ 74.537531][ T1424] hashtab_init+0xdb/0x1f0 [ 74.541979][ T1424] ? class_read+0x162/0x8a0 [ 74.546528][ T1424] symtab_init+0x44/0x70 [ 74.548692][ T530] usb 2-1: device descriptor read/64, error -71 [ 74.550813][ T1424] class_read+0x1df/0x8a0 [ 74.561417][ T1424] ? __cfi_class_read+0x10/0x10 [ 74.566285][ T1424] ? hashtab_init+0x105/0x1f0 [ 74.570988][ T1424] policydb_read+0xaab/0x28c0 [ 74.575783][ T1424] ? kasan_save_alloc_info+0x40/0x50 [ 74.581206][ T1424] ? __cfi_policydb_read+0x10/0x10 [ 74.586379][ T1424] ? security_load_policy+0x128/0x12f0 [ 74.591871][ T1424] security_load_policy+0x162/0x12f0 [ 74.597180][ T1424] ? _raw_spin_unlock+0x45/0x60 [ 74.602070][ T1424] ? __check_object_size+0x50a/0x810 [ 74.607373][ T1424] ? __cfi_security_load_policy+0x10/0x10 [ 74.613124][ T1424] ? __kasan_check_write+0x18/0x20 [ 74.618270][ T1424] sel_write_load+0x298/0x5e0 [ 74.623029][ T1424] ? futex_wait+0x29a/0x7a0 [ 74.627566][ T1424] ? __cfi_sel_write_load+0x10/0x10 [ 74.632821][ T1424] ? __cfi_futex_wait+0x10/0x10 [ 74.637722][ T1424] ? bpf_lsm_file_permission+0xd/0x20 [ 74.643143][ T1424] ? __cfi_sel_write_load+0x10/0x10 [ 74.648362][ T1424] vfs_write+0x3c0/0xe80 [ 74.652670][ T1424] ? __cfi_vfs_write+0x10/0x10 [ 74.657447][ T1424] ? __kasan_check_write+0x18/0x20 [ 74.662599][ T1424] ? mutex_lock+0x92/0x1c0 [ 74.667031][ T1424] ? __cfi_mutex_lock+0x10/0x10 [ 74.671929][ T1424] ? __fget_files+0x2c5/0x340 [ 74.676631][ T1424] ksys_write+0x141/0x250 [ 74.680978][ T1424] ? __cfi_ksys_write+0x10/0x10 [ 74.685960][ T1424] ? __kasan_check_write+0x18/0x20 [ 74.691099][ T1424] ? fpregs_restore_userregs+0x11d/0x260 [ 74.696783][ T1424] __x64_sys_write+0x7f/0x90 [ 74.701396][ T1424] x64_sys_call+0x271c/0x2ee0 [ 74.706169][ T1424] do_syscall_64+0x58/0xf0 [ 74.710598][ T1424] ? clear_bhb_loop+0x50/0xa0 [ 74.715333][ T1424] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.721273][ T1424] RIP: 0033:0x7fef8c38ebe9 [ 74.725723][ T1424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.745537][ T1424] RSP: 002b:00007fef8d11f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.754071][ T1424] RAX: ffffffffffffffda RBX: 00007fef8c5c5fa0 RCX: 00007fef8c38ebe9 [ 74.762066][ T1424] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000004 [ 74.770076][ T1424] RBP: 00007fef8c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 74.778090][ T1424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.786099][ T1424] R13: 00007fef8c5c6038 R14: 00007fef8c5c5fa0 R15: 00007ffeea5d7aa8 [ 74.794179][ T1424] [ 74.797221][ T1424] ---[ end trace 0000000000000000 ]--- [ 74.802799][ T10] usb 4-1: device descriptor read/64, error -71 [ 74.802811][ T1424] SELinux: failed to load policy [ 74.813613][ T530] usb 2-1: device descriptor read/64, error -71 [ 75.058042][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 75.058049][ T530] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 75.190334][ T10] usb 4-1: device descriptor read/64, error -71 [ 75.200546][ T530] usb 2-1: device descriptor read/64, error -71 [ 75.434608][ T10] usb 4-1: device descriptor read/64, error -71 [ 75.444834][ T530] usb 2-1: device descriptor read/64, error -71 [ 75.546664][ T10] usb usb4-port1: attempt power cycle [ 75.556928][ T530] usb usb2-port1: attempt power cycle [ 75.892627][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 75.912968][ T530] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 75.914186][ T10] usb 4-1: device descriptor read/8, error -71 [ 75.934470][ T530] usb 2-1: device descriptor read/8, error -71 [ 76.056409][ T10] usb 4-1: device descriptor read/8, error -71 [ 76.066532][ T530] usb 2-1: device descriptor read/8, error -71 [ 76.299374][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 76.309521][ T530] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 76.320764][ T10] usb 4-1: device descriptor read/8, error -71 [ 76.330886][ T530] usb 2-1: device descriptor read/8, error -71 [ 76.452851][ T10] usb 4-1: device descriptor read/8, error -71 [ 76.463023][ T530] usb 2-1: device descriptor read/8, error -71 [ 76.563756][ T10] usb usb4-port1: unable to enumerate USB device [ 76.573898][ T530] usb usb2-port1: unable to enumerate USB device