last executing test programs: 7m19.848448409s ago: executing program 0 (id=328): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)) mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x280) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) 7m19.086673561s ago: executing program 0 (id=328): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)) mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x280) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) 7m18.986239229s ago: executing program 0 (id=340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000600)={0x80000004}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRESHEX=r1, @ANYBLOB="080029004101"], 0x28}], 0x1}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) keyctl$revoke(0x3, 0x0) r5 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r6, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) syz_clone3(&(0x7f0000001280)={0x240000000, 0x0, 0x0, 0x0, {0x8000}, &(0x7f0000002340)=""/4105, 0x1009, 0x0, 0x0, 0x10}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0xc0105500, &(0x7f0000001080)=ANY=[@ANYRESHEX=r7]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket(0x10, 0xa, 0x7) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000001040)={0x4, 0x11a000}) socket$nl_generic(0x10, 0x3, 0x10) 7m18.169048555s ago: executing program 0 (id=357): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000019000/0x4000)=nil, 0x4000, 0x8, 0x100010, r1, 0xa3a11000) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 7m18.154831126s ago: executing program 0 (id=358): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/33, 0x21}, 0x8}], 0x1, 0x832b, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000580)={0x0, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e23, @broadcast}}]}, 0x190) 7m18.090140591s ago: executing program 0 (id=359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [{0x20, '\xcb\f\xa9\xd6\xae_\xaa\x93\x15\xfb\xc4-\xe2'}]}, 0x12) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) (async) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [{0x20, '\xcb\f\xa9\xd6\xae_\xaa\x93\x15\xfb\xc4-\xe2'}]}, 0x12) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, 0x0, 0x0) (async) creat(&(0x7f0000000340)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r1) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) (async) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) (async) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async) preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) (async) 7m2.997271343s ago: executing program 32 (id=359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [{0x20, '\xcb\f\xa9\xd6\xae_\xaa\x93\x15\xfb\xc4-\xe2'}]}, 0x12) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) (async) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [{0x20, '\xcb\f\xa9\xd6\xae_\xaa\x93\x15\xfb\xc4-\xe2'}]}, 0x12) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, 0x0, 0x0) (async) creat(&(0x7f0000000340)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r1) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) (async) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) (async) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async) preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) (async) 6m38.683348327s ago: executing program 4 (id=894): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f0000001740)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000240)=r6) setsockopt$sock_int(r5, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x26008890) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000100)={{{@in=@rand_addr=0x64010101, @in6=@private0, 0x4e23, 0x8, 0x4e21, 0x0, 0x2, 0x80, 0xe0, 0x5c, 0x0, r4}, {0x0, 0x66, 0x2, 0x1, 0x4, 0xd, 0xff, 0xf}, {0x3a0c, 0x5, 0x8001, 0xc}, 0x5, 0x0, 0x2, 0x1, 0x2, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x1df37835ac37f5fe, 0xa, 0x9, 0xffff, 0x24e}}, 0xe8) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m38.542138618s ago: executing program 4 (id=896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) close_range(r1, r2, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x5) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) eventfd2(0x58, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)={0x14, 0x10, 0x800, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 6m38.485323222s ago: executing program 4 (id=898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x4) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10) 6m38.402068639s ago: executing program 4 (id=900): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1}, 0xc) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="401402"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000ac0)={0x14, &(0x7f00000009c0)={0x0, 0xe, 0xa9, {0xa9, 0x7, "402669407dc5f8a066f6e1c2333f8f3f26a8282137ca8fb1a0a05c39d9cecdf5c08950e03c6679e2d5bb799631f76d457ec00b5f32fb3bbfe0dbe6431c4ae5a5435a7814eb6f9d74339b5a58dd8292c489a4f29da97244f239d601c5ea2d99d660a8359f3e957cf80f31a0df763fc9d6a0c5f800dacaf66a8a048bd047fed6b03b270313570257ec2c629f9c9985c74fa02fc7452fc7d061a555dcb3ad3a3d5bc0ec43df2e7843"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x0, 0x17, 0x84, "5216ce9a08bf51e8fb79638945c25340a2d8953e1933522ba498a8705c522d1fc84f1b3e2b51395c86d3fde81a9cf31c7159d82ab9f6c8b1ddcbbebaf33c981010d8ebf1ab68a8947d046ea498ffaae5e5e18214c577b1eca51e9a288f7f778a2584cfb165f73c06b958db0138303ee1dd1fbfc0032f14b8aeef2183b0ad1957c928b2b5"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000c00)={0x0, 0x8, 0x1}, &(0x7f0000000c40)={0xc0, 0x5, 0x6, "e570942ff6ef"}, &(0x7f0000000c80)={0x40, 0x5, 0x5, "6862d4e95d"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x20, 0x8, 0xea, {0xea, 0x9, "fb4115166e323b1c9706a00a9b60be3ada4b69580a646fa947d6893a1eeb59fc887ddce311d508ca87b1438ae44af336697631603b8a1504ca7aff5672f9f069deb7ae477091ba5a8607da0ea998ebac7b5913ac1b2760f781329676d0ae70ba16b151a2f2fab2932bc5ee2fb2fe76442464c48df9b81013ed5bcb11c3057b3057600eca3b9a07470c2c49275af7eeac150862106655f22ae1096e7a14d70a908d45e4a03f848ce360411562cb85ef925696e40aa1c25e597604c50fe23cbac74977559f82b82df42ea87f32f0ddc60ef6222c81f9337d53ebc2bf4bc2269f91479f699e94ab3b0c"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003bf000000bf0365c351482e10025b8fe6c756f7573136fe4de46788a66120cb2913430e169c2464ea5d663712334ba3cb795a0ab872b2ca664e219b634920b3c47c8921fa315c04f350b6d85607ed21b5b6484077e4bf0084a09a0d610dba2bd51d4c1ecda9c4250d3bf6c3962b6dc028d09ee33b962c7d581e4246cb27f309fda8273e979aec7f979961ad8c809f1e34129795f617b04bd30c6629f418e19a8755cb1803532b7de0dd144e121f051d2f0182feaf10bafb6b7500c183109620d5b3c8ac"], &(0x7f0000000300)={0x0, 0x22, 0x14, {[@local=@item_012={0x1, 0x2, 0x8, 'c'}, @main=@item_012={0x2, 0x0, 0xf, "badd"}, @main=@item_4={0x3, 0x0, 0xa, "bcf507c3"}, @main=@item_4={0x3, 0x0, 0xa, "183a3cea"}, @local=@item_4={0x3, 0x2, 0x4, "06a65706"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x986}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000006c0)={0x29ee9a0c730d44cf, 0x17, 0x38, "75ac7eb459aaca87d7242fa30c7d2667fde0112fb9c96ea08d403cc386e735611ff8249e40464a3336820eaf1b83fdcafe64e8c09b4de9b4"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000008c0)={0x20, 0x1, 0xe4, "cc087c0bda055da8ddc0d63fedd6f6eab7326aab9fd68c63b3457fb078b685467b1f163e919e56a8e9bbc4db20db62a3823d8397892fa2f79e51d0cb6e754d1ce6bffb981ce4c9cd0a8f095c0d58a8a6a7e6ceaf6d9f37f71756e55e23b1094615913c5501a6c4ed4334ff52d9b8b7c4e1d5e2975a8c7bbe8cea549900e4bf59aeb053178d7fbd44acc92151ea59703e1079ba4b2acc6e2c66cc6237663cfae87b3771ea46968bcecb30b1cf92b1a298fbcd75fba470fe81959a240875c249e58c7cd51015c6e7a3a0ad5dd8ddbb649e3225c539fe1f9b7a34fcf2791430c62cd28362ef"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, 0x0) 6m36.087538005s ago: executing program 1 (id=930): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000180)) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x400c810) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 6m36.086071215s ago: executing program 1 (id=931): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2000, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC=r2, @ANYBLOB="010725bd7000fddbdf250b000000080001007063690011000200303030303a"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000000), 0x4) 6m35.551211528s ago: executing program 3 (id=935): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x2, 0x4}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="020707000000072200f4000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0x0, 0x8, 0x0, 0x100, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) fchdir(r1) keyctl$set_reqkey_keyring(0xe, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='Y-{#\x00', 0xfffffffffffffffd) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fadvise64(r7, 0x1, 0xb36, 0x3) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={{0x0, 0xea60}, {r5, r6/1000+60000}}) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 6m35.407484789s ago: executing program 4 (id=936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = inotify_init1(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/463], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0x325, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) r5 = syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x401, 0x9, r5}) kcmp(0xffffffffffffffff, r5, 0x2, r4, r2) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1) read(r1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x80, 0x104) r7 = fcntl$dupfd(r1, 0xad99d332024f4e9b, r6) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000240)={0x6, 0x6}) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x1000800, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r8, 0x40085503, &(0x7f0000000080)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f0000000280)=[{0x8, 0x4e, 0x7, 0xa19}, {0x108, 0x2, 0x1, 0x2}, {0x6, 0x44, 0x4, 0x1}, {0xc, 0x7, 0x3, 0x4c39a}, {0x7, 0x8, 0x4, 0xe3e}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f00000000c0)={r10, 0x4, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 6m35.224783404s ago: executing program 1 (id=938): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000440)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191c, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x0, 0x2ab, 0x4, 0x4, 0x4, 0x3c5b, 0x1, 0x1ff, 0x7, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0xffffffff, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0xa, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x17, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x6, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x100, 0x42, 0x4400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x1ff, 0x2, 0x2, 0x800, 0x1000008, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x800, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x10, 0xbb32, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1001, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xfffffffe, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x10, 0x0, 0x4, 0x5, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xa14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe2, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x1, 0x5e, {0x9, 0x21, 0x1, 0x37, 0x1, {0x22, 0x3b9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x1, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0x9d, 0x81}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x2, 0x1, 0xe8, 0xff, 0xa}, 0xd7, &(0x7f0000000180)={0x5, 0xf, 0xd7, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xb2, 0x10, 0xb, "4d31d2adacb7f27a15eef8698a8b4d5f990516b2698a6115da2030e11bfe5d1e71d560a81fe4bd17f77f19f0f778fca0a84b73e6d8045550ee249f207b6deb159ae2fcaf1e0736c2b7cf88e8d6e3dfc5ac3fe0e2bcfb258fe4bc2c54c99c86aeec5773d3e55c4f0f4f4f573ace62578b07c1b0b4e19dd9041ffb18267ee4a20d8f9ed2956f30716d1bfe637e27632336b3d158a41a3aac412c2a3137e5c106e5c11bf76a61a6ab195e7f3dcc22434f"}, @ptm_cap={0x3}, @generic={0x17, 0x10, 0x1, "a29d1bd20bb65c62c45c33540ceaee0af12f9092"}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$hid(r4, &(0x7f00000008c0)={0x24, &(0x7f0000000300)={0x0, 0x10, 0x23, {0x23, 0x6, "7a03ad210791b204427fc3b0d6fb6a60f528bd8637827f862315cf8a0c881e6c04"}}, &(0x7f0000000340)={0x0, 0x3, 0x64, @string={0x64, 0x3, "8590db5577c8375ffea881c713bcb006db07a76672a4fae1c03153b1fcaeb0f39af7ede31a5955699f235643243dc11d1a41d6a422b514e5c425c1cfd9004de9801a00db7afb9bfd47718e932b49a9f867bf0e1d7c110b53266b56ccc0e1fb9d60be"}}, &(0x7f00000003c0)={0x0, 0x22, 0x1a, {[@local=@item_012={0x2, 0x2, 0x2, 'g2'}, @local=@item_4={0x3, 0x2, 0x8, "0b281f00"}, @local=@item_012={0x1, 0x2, 0x9, "a7"}, @global=@item_012={0x0, 0x1, 0x6}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0x0, "ffe1"}, @main=@item_4={0x3, 0x0, 0xb, "adcc03fa"}, @global=@item_4={0x3, 0x1, 0x1, "5247c802"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x16, 0x0, 0x1, {0x22, 0x2a5}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000900)={0x40, 0x13, 0x62, "24d1972f98477d8213cd7a9152cdeb9dfe1d5a4a46ee55d774bf754ca952db1b92d6eb770349e1e06091ce97fc4d1cb6831b6259ddd4d428abc4092bcbe4d52835a9ed0e2c68c942fd6e542bdad806f3bac3a2690712d21d3b02fa1f0e3780589b80"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xe7}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x4e}, &(0x7f0000000a00)={0x20, 0x1, 0xeb, "6dabf328810e4137a261f14b5b7d161621058ff6b7e29b022c7f7cbdab7fbe86c1604381613825e64c8324bcf26f90970393e32d7451f736d28738757e3be98a1e0bdfd044083a09384563cf46983825d04fe98a29e62642f10c3404bd840ab3eecde53ea77fe96398048ef40d39d4c5abbd32c9802a8874bd91d12c6a106ebca3a842994ecb3f47504b38f1558325a778913dc1ad0dff2e7a4a280e2bb6584a8fb2de28bfe7d91190990de04d96697c21ec2549c41117e9c525e6d1ef39b0d4369eedca4e9cbfc68de00002c2f49cb57da7e34d31855406f00af9bbbc818353ffa74445ab905bbd8cdc49"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x2}}) 6m34.999482422s ago: executing program 2 (id=943): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x0, 0x11, 0x8, "b36eabd52ed07dc0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x64262000) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x40, 0x6, 0x303, 0xfffd, 0xffffffffffffff54, 0x0, 0x0}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m34.998933442s ago: executing program 3 (id=944): openat$sysfs(0xffffffffffffff9c, 0x0, 0x42002, 0x1e1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}, {@dfltuid}, {@dfltgid}]}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9453900000000000000000028", 0xd}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000)) sendfile(r4, r3, 0x0, 0x80000000) 6m34.946500116s ago: executing program 3 (id=945): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x20, 0x10, 0xc, {0xc, 0x4, "009fa099425280bd4d5e"}}, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f00000004c0)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}}, 0x0, 0x0}, 0x0) capset(0x0, 0x0) socket(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x1a04200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, 0x0) capset(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m34.492938163s ago: executing program 1 (id=946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0f01cb66b826010f00d80f01d1660f3880130f01c9b8bc0000000f23c80f21f835040080000f23f80f22440f01c50f01cfb87f4394950f23d00f21f835300000020f23f8", 0x44}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 6m33.095315195s ago: executing program 4 (id=947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1c9) ppoll(&(0x7f0000000080)=[{r0, 0x2403}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020400) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000400)={0x0, 0xfcd5, &(0x7f0000001400)={&(0x7f0000001700)=ANY=[@ANYBLOB="0000001d9d7d5442f86bfcc6c664c9c749adbb861a7c9a39b39fca2f65df8728ee082d9bdb436e59c8e3b49d647350e31e0a65c54191ac316b8e756d471a3e647419bc14cff583cbf41243435a343c4a57e19d1aca4c278edfd82a7d968ed403d0a4", @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf25110000000c0009800800020001000000880001802c0004001400010002004e217f00000100000000000000001400020002004e2400000000000000000000000038000400200001000a004e240000000700000000000000000000ffff7f000001c0ffffff1400020002004e23e000000200000000000000000d0001007564703a73797a31000000000e00010069623a776c616e3100000000"], 0xa8}, 0x1, 0x0, 0x0, 0xc0}, 0x8800) r8 = fsmount(r5, 0x0, 0x4) r9 = openat$cgroup_ro(r8, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r9, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) recvmmsg(r4, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/4107, 0x100b}], 0x2}, 0xfffffffc}], 0x1, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000044010500ac14143b000000000000000000000000000004d32b00"], 0x1fc}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89ff, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x20, 0x10, 0xfffffff3, 0x0, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @empty}}}}) getsockname(r1, &(0x7f00000001c0)=@phonet, &(0x7f0000000240)=0x80) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000040)=0x16) ioctl$PPPIOCSACTIVE(r10, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r10, &(0x7f0000000340), 0x0) pread64(r10, 0x0, 0x0, 0x7) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001440)=0x2) 6m32.575370417s ago: executing program 2 (id=948): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'lo\x00', {0x1}, 0x4}) (async) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0x13, 0x0, &(0x7f0000002400)) mlock(&(0x7f0000710000/0x3000)=nil, 0x3000) 6m22.744293117s ago: executing program 2 (id=949): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x2403}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0xd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r4, 0x0, 0x0, 0xfffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(0xffffffffffffffff, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0xac, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_CON={0x6a, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x8000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xa6) syz_usb_connect(0x0, 0x300, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xef, 0xc9, 0x0, 0x20, 0x2c4e, 0x103, 0x2af0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ee, 0x1, 0x8, 0x6, 0x0, 0x4, [{{0x9, 0x4, 0xa8, 0x7, 0xd, 0x3f, 0x59, 0x5f, 0x2b, [], [{{0x9, 0x5, 0xb, 0x1, 0x40, 0x1, 0x9, 0xfe}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x2, 0x9, 0x7, [@generic={0x13, 0x23, "fbec18c49858da4f88bf503c8c65f45994"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xe7, 0x6, 0x5}}, {{0x9, 0x5, 0x8, 0xe, 0x10, 0x4, 0x3a, 0x1, [@generic={0xfa, 0x4, "9825e39901d3d68ccf94db899aceca037075d187b233fa0204b11a74e49feb7e774428929c00c47050157925f3f514c2f38c074c5262015078d1c80dd4690e70bd94c26c7d5cff217ff8790911ec778bcee45d7ee8a5999bbe7fac59c2374ad850f0a80275827441843a09a54ffb4ed3c1e0ab97f2e257d15321cb554cb97a8a955b59f0650446a4e3850a02201ab2e58a0ce5a114d53088a1c505ccb7db02efa4a1e503b4748300813b80c7332970ac4c9d8d33597d4b5dae964533de17c5132622dc23f95b072e41a864861ea4e59ed936fd6d811ac300c86f8ae9c3491119fb850b05d9725c6370d9b03ba39ccb440684ddf2220612ac"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x6, 0x94, 0x4}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x2, 0x0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x6}]}}, {{0x9, 0x5, 0x82ad60cca2ecd9e2, 0x0, 0x10, 0x4, 0x3, 0xb, [@generic={0x2b, 0x6, "93f69ec85e49b7cebac60c9f176ea3f31c528395fe4a1aa79ff242d42a704b064ec6b925543f2400ef"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x6, 0x40, 0x2}}, {{0x9, 0x5, 0x7, 0x8, 0x7ff, 0x81, 0x4, 0xd4, [@generic={0x48, 0xb, "9df460be0e8423633d7ca68a07f1f237f4bb4a2939fbf3d858a9fade71a7538a8c847eaccb8a56f40939a418025053756cda78119db16aee7f2e53cf14e3ff0311ead3a6756c"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x3d, 0x93, 0x9a, [@generic={0x8f, 0x21, "4b024f5fb2400634eaeed288be0c57e781454f17397f02d03219180e0c8136840d8cd1bc3ee65e69a976d81e30645e0d271ed04031920c8266e7a85ad0e7604c6a2070ba50a8937fbcc4e28925a3b03e467fe7864ed39325cfa24cf192d672c8fdea88d2ba03afc2797027d7c0feb55068d5dbf8995acc7c81cc0e0bdfac6e18ead3869b8b6826e90d38407a7f"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x440, 0x0, 0x80, 0x54}}, {{0x9, 0x5, 0xe, 0x11, 0x400, 0x5, 0x7, 0xd}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x11, 0x0, 0x9, [@generic={0x4a, 0xd, "e5449a65137336218f88a85389b3692feefe67c66764964e3097367afd0dc57723dae5c32e50cde60e03990e433b772b08941222b18f71347fbb593b1517b3566692836c29d31c91"}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x36, 0xc, 0x5, 0x8, 0x6}, 0x11f, &(0x7f0000000800)={0x5, 0xf, 0x11f, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x7fffffa, 0xf00, 0x3, [0xc0, 0x3f00, 0xff7ec0]}, @generic={0xeb, 0x10, 0xb, "7db3a911a6d0a53c34db58d41ef3e2978596e9b278241662012340f97aee3200145bc8fb648daf8b2226754c6ed5d113067ed4bbb1d7c3a28cf56e091ff9af6eafcc448c6e3d338062d4bd15fe164d8ed939031977b198b09dd41a1aa6bc8202cd6cb8134102bd60cfd8e9413e0345c4205ab68ba8263c0d13ceaaf5ea90c82be2a9fc70bd6c977807d7fa419691a9d87fec537fe7b1bf3b3d72cd7d5a4fc8e154e847210a21819028336744cc5446bc547b8b922e4768ee80625ef26df8796a8c9ef7bf9c092f2e63dc439eaf9ece56a76fca42b6e7c7fdf9ce99160fd98e8be777bbea891b3982"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xec, "09be40c668948566cc16e2ac3b0c400a"}]}, 0x5, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}, {0x54, &(0x7f0000000440)=@string={0x54, 0x3, "3f38200e86338aaa42b5f23246ecea73ba9aa5c6aba9ec316bd5105f6543f42b3f83418d23bb4b9882d51e58842c41cc4e9500f1f1547a4a05a08d9724f298f1e3ed19de9d5dc35881323f51dd3241dda7eb"}}, {0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="240360958b06d9e8d41824745c6eb9908006630306e3b7256e5d58cbb1af46a3dd660ad6"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 6m22.113967257s ago: executing program 1 (id=950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r1, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) ioctl$TIOCEXCL(r2, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x58, 0x0, &(0x7f0000000d80)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x4, 0x1, 0x12}, @fda={0x66646185, 0x7, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup3(r1, r1, 0x80000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) (async) ioctl$TIOCEXCL(r2, 0x540c) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x58, 0x0, &(0x7f0000000d80)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee9"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x4, 0x1, 0x12}, @fda={0x66646185, 0x7, 0x2, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (async) 6m21.637198806s ago: executing program 3 (id=951): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) ppoll(0x0, 0x0, &(0x7f0000001a00), 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r5, 0x401) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$KVM_CAP_SYNC_REGS(0xffffffffffffffff, 0x4068aea3, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r7) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) writev(r6, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)="9cf4dfbf897eade41c8433da61fffeff000000000000000000000000000000000a", 0x21}], 0x2) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m17.034976545s ago: executing program 33 (id=947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1c9) ppoll(&(0x7f0000000080)=[{r0, 0x2403}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020400) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000400)={0x0, 0xfcd5, &(0x7f0000001400)={&(0x7f0000001700)=ANY=[@ANYBLOB="0000001d9d7d5442f86bfcc6c664c9c749adbb861a7c9a39b39fca2f65df8728ee082d9bdb436e59c8e3b49d647350e31e0a65c54191ac316b8e756d471a3e647419bc14cff583cbf41243435a343c4a57e19d1aca4c278edfd82a7d968ed403d0a4", @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf25110000000c0009800800020001000000880001802c0004001400010002004e217f00000100000000000000001400020002004e2400000000000000000000000038000400200001000a004e240000000700000000000000000000ffff7f000001c0ffffff1400020002004e23e000000200000000000000000d0001007564703a73797a31000000000e00010069623a776c616e3100000000"], 0xa8}, 0x1, 0x0, 0x0, 0xc0}, 0x8800) r8 = fsmount(r5, 0x0, 0x4) r9 = openat$cgroup_ro(r8, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r9, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) recvmmsg(r4, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/4107, 0x100b}], 0x2}, 0xfffffffc}], 0x1, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000044010500ac14143b000000000000000000000000000004d32b00"], 0x1fc}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89ff, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x20, 0x10, 0xfffffff3, 0x0, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @empty}}}}) getsockname(r1, &(0x7f00000001c0)=@phonet, &(0x7f0000000240)=0x80) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000040)=0x16) ioctl$PPPIOCSACTIVE(r10, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r10, &(0x7f0000000340), 0x0) pread64(r10, 0x0, 0x0, 0x7) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001440)=0x2) 6m12.800523375s ago: executing program 1 (id=953): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189882, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f01c3660f383a1e12340f01c2ddd06426660fc7b400a064814100c83bf2aa679e3accd59f0f013166b9be02000066b8f27f000066ba000000000f30", 0x3c}], 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x8) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r8, 0x107, 0xa, 0x0, &(0x7f00000000c0)) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x20000000001}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0010d6fd67022d45b212a3b71b13010000000023"], 0x0, 0x0, 0x0, 0x0}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x1}, 0x18) openat(r10, &(0x7f0000000280)='./file0\x00', 0x60001, 0x14) 6m12.143537948s ago: executing program 2 (id=954): socket$inet6_icmp(0xa, 0x2, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 6m10.944083765s ago: executing program 3 (id=955): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x4dd, 0x4, 0x40000000, 0xa7e, 0xb, "e0995c922ce21a012394b4520447bb24098abb"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) getpeername(r4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fde000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000440)="0f20c035000000400f22c066b84f000f00d0b8400000000f23d80f21f835400000900f23f866bad00466b8684666ef650f01c5f20f066567640f78bf84de660fc730c4e3990e30030f20e035000020000f22e0", 0x53}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) 6m10.062187965s ago: executing program 2 (id=956): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07062bbd7000fedbdf252700f6ff0a0001"], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 6m3.950741536s ago: executing program 2 (id=957): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1}, 0xc) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="401402"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000ac0)={0x14, &(0x7f00000009c0)={0x0, 0xe, 0xa9, {0xa9, 0x7, "402669407dc5f8a066f6e1c2333f8f3f26a8282137ca8fb1a0a05c39d9cecdf5c08950e03c6679e2d5bb799631f76d457ec00b5f32fb3bbfe0dbe6431c4ae5a5435a7814eb6f9d74339b5a58dd8292c489a4f29da97244f239d601c5ea2d99d660a8359f3e957cf80f31a0df763fc9d6a0c5f800dacaf66a8a048bd047fed6b03b270313570257ec2c629f9c9985c74fa02fc7452fc7d061a555dcb3ad3a3d5bc0ec43df2e7843"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x0, 0x17, 0x84, "5216ce9a08bf51e8fb79638945c25340a2d8953e1933522ba498a8705c522d1fc84f1b3e2b51395c86d3fde81a9cf31c7159d82ab9f6c8b1ddcbbebaf33c981010d8ebf1ab68a8947d046ea498ffaae5e5e18214c577b1eca51e9a288f7f778a2584cfb165f73c06b958db0138303ee1dd1fbfc0032f14b8aeef2183b0ad1957c928b2b5"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000c00)={0x0, 0x8, 0x1}, &(0x7f0000000c40)={0xc0, 0x5, 0x6, "e570942ff6ef"}, &(0x7f0000000c80)={0x40, 0x5, 0x5, "6862d4e95d"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x20, 0x8, 0xea, {0xea, 0x9, "fb4115166e323b1c9706a00a9b60be3ada4b69580a646fa947d6893a1eeb59fc887ddce311d508ca87b1438ae44af336697631603b8a1504ca7aff5672f9f069deb7ae477091ba5a8607da0ea998ebac7b5913ac1b2760f781329676d0ae70ba16b151a2f2fab2932bc5ee2fb2fe76442464c48df9b81013ed5bcb11c3057b3057600eca3b9a07470c2c49275af7eeac150862106655f22ae1096e7a14d70a908d45e4a03f848ce360411562cb85ef925696e40aa1c25e597604c50fe23cbac74977559f82b82df42ea87f32f0ddc60ef6222c81f9337d53ebc2bf4bc2269f91479f699e94ab3b0c"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003bf000000bf0365c351482e10025b8fe6c756f7573136fe4de46788a66120cb2913430e169c2464ea5d663712334ba3cb795a0ab872b2ca664e219b634920b3c47c8921fa315c04f350b6d85607ed21b5b6484077e4bf0084a09a0d610dba2bd51d4c1ecda9c4250d3bf6c3962b6dc028d09ee33b962c7d581e4246cb27f309fda8273e979aec7f979961ad8c809f1e34129795f617b04bd30c6629f418e19a8755cb1803532b7de0dd144e121f051d2f0182feaf10bafb6b7500c183109620d5b3c8ac"], &(0x7f0000000300)={0x0, 0x22, 0x14, {[@local=@item_012={0x1, 0x2, 0x8, 'c'}, @main=@item_012={0x2, 0x0, 0xf, "badd"}, @main=@item_4={0x3, 0x0, 0xa, "bcf507c3"}, @main=@item_4={0x3, 0x0, 0xa, "183a3cea"}, @local=@item_4={0x3, 0x2, 0x4, "06a65706"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x986}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000006c0)={0x29ee9a0c730d44cf, 0x17, 0x38, "75ac7eb459aaca87d7242fa30c7d2667fde0112fb9c96ea08d403cc386e735611ff8249e40464a3336820eaf1b83fdcafe64e8c09b4de9b4"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000008c0)={0x20, 0x1, 0xe4, "cc087c0bda055da8ddc0d63fedd6f6eab7326aab9fd68c63b3457fb078b685467b1f163e919e56a8e9bbc4db20db62a3823d8397892fa2f79e51d0cb6e754d1ce6bffb981ce4c9cd0a8f095c0d58a8a6a7e6ceaf6d9f37f71756e55e23b1094615913c5501a6c4ed4334ff52d9b8b7c4e1d5e2975a8c7bbe8cea549900e4bf59aeb053178d7fbd44acc92151ea59703e1079ba4b2acc6e2c66cc6237663cfae87b3771ea46968bcecb30b1cf92b1a298fbcd75fba470fe81959a240875c249e58c7cd51015c6e7a3a0ad5dd8ddbb649e3225c539fe1f9b7a34fcf2791430c62cd28362ef"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, 0x0) 6m1.950196147s ago: executing program 3 (id=958): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x7, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x10}) dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000000000000017420fd7d1ae"], 0x2a) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) socket$unix(0x1, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') close_range(r1, 0xffffffffffffffff, 0x0) 5m57.110456736s ago: executing program 34 (id=953): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189882, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f01c3660f383a1e12340f01c2ddd06426660fc7b400a064814100c83bf2aa679e3accd59f0f013166b9be02000066b8f27f000066ba000000000f30", 0x3c}], 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x8) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r8, 0x107, 0xa, 0x0, &(0x7f00000000c0)) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x20000000001}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0010d6fd67022d45b212a3b71b13010000000023"], 0x0, 0x0, 0x0, 0x0}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x1}, 0x18) openat(r10, &(0x7f0000000280)='./file0\x00', 0x60001, 0x14) 5m48.826380171s ago: executing program 35 (id=957): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1}, 0xc) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="401402"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000ac0)={0x14, &(0x7f00000009c0)={0x0, 0xe, 0xa9, {0xa9, 0x7, "402669407dc5f8a066f6e1c2333f8f3f26a8282137ca8fb1a0a05c39d9cecdf5c08950e03c6679e2d5bb799631f76d457ec00b5f32fb3bbfe0dbe6431c4ae5a5435a7814eb6f9d74339b5a58dd8292c489a4f29da97244f239d601c5ea2d99d660a8359f3e957cf80f31a0df763fc9d6a0c5f800dacaf66a8a048bd047fed6b03b270313570257ec2c629f9c9985c74fa02fc7452fc7d061a555dcb3ad3a3d5bc0ec43df2e7843"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x0, 0x17, 0x84, "5216ce9a08bf51e8fb79638945c25340a2d8953e1933522ba498a8705c522d1fc84f1b3e2b51395c86d3fde81a9cf31c7159d82ab9f6c8b1ddcbbebaf33c981010d8ebf1ab68a8947d046ea498ffaae5e5e18214c577b1eca51e9a288f7f778a2584cfb165f73c06b958db0138303ee1dd1fbfc0032f14b8aeef2183b0ad1957c928b2b5"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000c00)={0x0, 0x8, 0x1}, &(0x7f0000000c40)={0xc0, 0x5, 0x6, "e570942ff6ef"}, &(0x7f0000000c80)={0x40, 0x5, 0x5, "6862d4e95d"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x20, 0x8, 0xea, {0xea, 0x9, "fb4115166e323b1c9706a00a9b60be3ada4b69580a646fa947d6893a1eeb59fc887ddce311d508ca87b1438ae44af336697631603b8a1504ca7aff5672f9f069deb7ae477091ba5a8607da0ea998ebac7b5913ac1b2760f781329676d0ae70ba16b151a2f2fab2932bc5ee2fb2fe76442464c48df9b81013ed5bcb11c3057b3057600eca3b9a07470c2c49275af7eeac150862106655f22ae1096e7a14d70a908d45e4a03f848ce360411562cb85ef925696e40aa1c25e597604c50fe23cbac74977559f82b82df42ea87f32f0ddc60ef6222c81f9337d53ebc2bf4bc2269f91479f699e94ab3b0c"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003bf000000bf0365c351482e10025b8fe6c756f7573136fe4de46788a66120cb2913430e169c2464ea5d663712334ba3cb795a0ab872b2ca664e219b634920b3c47c8921fa315c04f350b6d85607ed21b5b6484077e4bf0084a09a0d610dba2bd51d4c1ecda9c4250d3bf6c3962b6dc028d09ee33b962c7d581e4246cb27f309fda8273e979aec7f979961ad8c809f1e34129795f617b04bd30c6629f418e19a8755cb1803532b7de0dd144e121f051d2f0182feaf10bafb6b7500c183109620d5b3c8ac"], &(0x7f0000000300)={0x0, 0x22, 0x14, {[@local=@item_012={0x1, 0x2, 0x8, 'c'}, @main=@item_012={0x2, 0x0, 0xf, "badd"}, @main=@item_4={0x3, 0x0, 0xa, "bcf507c3"}, @main=@item_4={0x3, 0x0, 0xa, "183a3cea"}, @local=@item_4={0x3, 0x2, 0x4, "06a65706"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x986}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000006c0)={0x29ee9a0c730d44cf, 0x17, 0x38, "75ac7eb459aaca87d7242fa30c7d2667fde0112fb9c96ea08d403cc386e735611ff8249e40464a3336820eaf1b83fdcafe64e8c09b4de9b4"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000008c0)={0x20, 0x1, 0xe4, "cc087c0bda055da8ddc0d63fedd6f6eab7326aab9fd68c63b3457fb078b685467b1f163e919e56a8e9bbc4db20db62a3823d8397892fa2f79e51d0cb6e754d1ce6bffb981ce4c9cd0a8f095c0d58a8a6a7e6ceaf6d9f37f71756e55e23b1094615913c5501a6c4ed4334ff52d9b8b7c4e1d5e2975a8c7bbe8cea549900e4bf59aeb053178d7fbd44acc92151ea59703e1079ba4b2acc6e2c66cc6237663cfae87b3771ea46968bcecb30b1cf92b1a298fbcd75fba470fe81959a240875c249e58c7cd51015c6e7a3a0ad5dd8ddbb649e3225c539fe1f9b7a34fcf2791430c62cd28362ef"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, 0x0) 5m46.168304734s ago: executing program 36 (id=958): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x7, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x10}) dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000000000000017420fd7d1ae"], 0x2a) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) socket$unix(0x1, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') close_range(r1, 0xffffffffffffffff, 0x0) 1m45.626233697s ago: executing program 8 (id=3093): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setparam(0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m44.637361036s ago: executing program 8 (id=3098): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r2 = dup(r0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x4, 0x0, 0x8, 0x80000000}, {0xaf9, 0x1, 0xe7, 0xd}, {0x6, 0x2, 0x8, 0x1}, {0xffff, 0xa, 0x8, 0x7}]}, 0x10) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3, 0x0, r2}, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 1m44.572065441s ago: executing program 8 (id=3099): getresuid(&(0x7f0000000040)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fsmagic=0x0000000080000000,appraise_type=imasig,fscontext=system_u,smackfsroot=binder\x00,obj_type=@[,dont_measure,obj_role=./binderfs\x00,euid>', @ANYRESDEC=r0, @ANYBLOB=',measure,defcontext_sysTem_u,\x00']) 1m44.571745651s ago: executing program 8 (id=3100): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10001, 0x40000, 0x4, 0xf, 0x639, 0x4, 0x4, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0xb0f, 0x4, 0x6, 0x2, 0x4, 0x4cb6, 0x0, 0x1, 0xa, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x8, 0x1, 0x0, 0x5743393a, 0x1, 0x2e, 0xff, 0x2, 0x2, 0x8, 0xf, 0x10000, 0xfffffffe, 0x3, 0x101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x5, 0x6, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0xc37, 0x7, 0x4, 0x5, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1, 0x8, 0x2, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0xfc, 0xe3, 0x11, 0xa39a, 0x8, 0x73, 0x1, 0x8, 0x3, 0xa, 0x40, 0x4, 0x4, 0x8, 0x0, 0x6, 0x8001, 0x7, 0x6, 0x3, 0x200007, 0x3, 0x7d1b, 0x5, 0x5, 0x6, 0x6, 0x2, 0x2, 0x8, 0x69e, 0x6, 0x8246, 0x9, 0xacf, 0x200edb, 0xe771, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0x5, 0x6, 0x9, 0x6, 0x6, 0x0, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x7f, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x80000000, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0xffffffff, 0x8, 0x3ff, 0x6, 0x0, 0x8001, 0x33, 0x5, 0x4, 0x6, 0x4, 0x1, 0x3ff, 0x80000001, 0x0, 0x2, 0x6, 0x20000000, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x7, 0x7fffffff, 0xe, 0x1, 0xffffffff, 0xb, 0x46, 0x9, 0xfff, 0x2, 0x7, 0xf, 0x1, 0x3db1], [0x0, 0x3, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x4, 0x12, 0x2, 0x4, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x7, 0x7ff, 0x5, 0x4, 0x4, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0x3141, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x8, 0x24, 0x5, 0x9, 0xffffffff, 0x80000000, 0x5c6, 0x5, 0x1, 0x9, 0xf1, 0x81, 0x9, 0x4, 0x3, 0x4, 0x1f8c, 0xffffffff, 0x5, 0x8]}, 0x45c) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0), 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x2b, 0xe, 0x10000000, 0x1, 0x1, 0x7, 0x5, 0x0, 0x0, 0x4, 0x9}}, 0x50) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 1m44.511553237s ago: executing program 8 (id=3101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) sendto$packet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x78, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m44.457379371s ago: executing program 8 (id=3102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0x1b, "3adc94d4e5ffc0c2771043abcaf8f96c0a581ec4b44a6389307a05"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 1m44.373551517s ago: executing program 37 (id=3102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0x1b, "3adc94d4e5ffc0c2771043abcaf8f96c0a581ec4b44a6389307a05"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 22.584652017s ago: executing program 7 (id=4268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0xc}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x20084000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r6, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r4, 0x4068aea3, &(0x7f0000000500)={0xd4, 0x0, 0x5}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000380)) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') 22.553433299s ago: executing program 7 (id=4269): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, r0, 0x57788000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffd}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d00)=ANY=[], 0x28}}, 0x0) clock_gettime(0x0, &(0x7f0000002c80)) recvmmsg(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/121, 0x79}], 0x1}, 0xa}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/69, 0x45}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b80)=""/244, 0xf4}], 0x1}, 0x5}], 0x3, 0x40002000, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:semanage_read_lock_t:s0\x00', 0x2a, 0x1) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 22.478294125s ago: executing program 7 (id=4270): r0 = syz_usb_connect$hid(0x5, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) (rerun: 32) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) (async) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000180), 0x20000, &(0x7f00000001c0)=ANY=[@ANYBLOB="73746174737a363a502ab5edcb73746174733d676c6f62616c2c66742c00"]) 21.977703895s ago: executing program 7 (id=4277): prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x88}, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) close_range(0xffffffffffffffff, r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0xfffffffffffffffe, r1, {{0x5, 0x8, 0x0, r4}}}, 0x28) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r6) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r6) sendmsg$IEEE802154_DISASSOCIATE_REQ(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010129bd70fb979b76e424"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4810) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000814) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 21.898235082s ago: executing program 7 (id=4278): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x4, 0x7fff) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r4, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) ioctl$BLKDISCARD(r5, 0x1277, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) r6 = userfaultfd(0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r7, &(0x7f0000000a40)=[{&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000000580)=""/254, 0xfe}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/239, 0xef}, {&(0x7f0000000800)=""/124, 0x7c}, {&(0x7f0000000880)=""/196, 0xc4}, {&(0x7f0000000980)=""/184, 0xb8}], 0xa, 0x200, 0x2) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000a31000/0x3000)=nil, 0x3000}}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x100000000000015a) 21.897522462s ago: executing program 7 (id=4279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x183180, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000003180), 0x200, 0x0) ioctl$PTP_PIN_SETFUNC(r1, 0x40043d0d, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x80000000, 0x0) ptrace(0x10, r4) r5 = syz_pidfd_open(r4, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0xa000000c, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0x4, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000640)={{0x7000, 0xdddd1000, 0x0, 0xa, 0x88, 0x8, 0x0, 0x2, 0x0, 0x7, 0x9, 0x10}, {0x8080000, 0x4, 0x10, 0x8, 0x91, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0xff}, {0x3000, 0x4000, 0x4, 0x0, 0x7, 0x4, 0x0, 0x1, 0x3, 0x0, 0x0, 0xa}, {0x10000, 0xd000, 0xd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2, 0x4}, {0x8590b1c2dac4ea16, 0x3002, 0x8, 0x2, 0xff, 0x4, 0x0, 0x3, 0x0, 0x3d}, {0x0, 0x6000, 0x4, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x80}, {0x6000, 0x5000, 0xa, 0x6, 0x3, 0x0, 0x68, 0x0, 0x1, 0xf9}, {0x0, 0xdddd0000, 0x4, 0x2, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10}, {0xdddd1000}, {0xeeef0000, 0x3}, 0xfdfcffdb, 0x0, 0x0, 0x0, 0xb, 0xf801, 0x0, [0x80000000, 0x0, 0x401]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000040)={0x224, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) lsm_get_self_attr(0x65, &(0x7f0000000340)={0x0, 0x0, 0xc6, 0xa6, ""/166}, &(0x7f0000000240)=0xc6, 0x0) fcntl$getflags(r0, 0x1) 9.191625508s ago: executing program 5 (id=4329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x10}}], 0x10, 0x4000080}, 0x10004040) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 9.146249362s ago: executing program 9 (id=4331): syz_usb_connect(0x0, 0xf9, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0xc8, 0xb, 0xf3, 0x8, 0x15ba, 0x2a, 0x2eef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x2, 0x3, 0x61, 0x40, 0x7, [{{0x9, 0x4, 0x1, 0xa, 0x0, 0xff, 0x4d, 0x66, 0x24, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xf79c, 0x10, 0x7, 0x7f}, {0x6, 0x24, 0x1a, 0x50b2, 0x38}, [@acm={0x4, 0x24, 0x2, 0x3}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x5, [0x3d59]}]}, @generic={0xf, 0x3, "b21d6af5e4a015ed3eaf91da4c"}]}}, {{0x9, 0x4, 0xeb, 0x8, 0x4, 0xe2, 0x9e, 0x93, 0x8, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "892bfe5bfa"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x901, 0x1, 0xc0}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x6, 0x78, 0x3, 0x0, 0xf}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @obex={0x5, 0x24, 0x15, 0x101}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "17"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7a, 0x4, 0x80}, [@country_functional={0x6, 0x24, 0x7, 0xe, 0x1}, @obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0x9, 0x2, 0x10, 0x9, 0xb4, 0x98, [@generic={0x2, 0xb}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x2, 0x1, 0x7, [@generic={0x9, 0x4, "1390fb61b70a61"}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x9, 0xc, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x8, 0x2, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x5}]}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x19, &(0x7f0000000c00)=ANY=[], 0x2, [{0xe1, 0x0}, {0x0, 0x0}]}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bond_slave_1\x00', @random="f7ff3a711070"}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x33, "6dcdea43de51e3b3fcf8ef800edfa74d935a4b26ebe785c15c9d1035b52b206636463ed0223414b054fddec34abd5a61d5e23e"}, 0x0}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1000009ee8, 0x12) write(r4, &(0x7f0000000000)="f1e9019ed8154a9f2a64af037c1c4aaa13df", 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 7.567852109s ago: executing program 5 (id=4332): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.56449371s ago: executing program 6 (id=4333): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904"], 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x21) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d0f, &(0x7f0000000000)={0x1, 0xc}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) r5 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000002a80)={0x2020}, 0xb79) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000004ac0)={0x2020}, 0x2020) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x2, 0xb007}, 0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r9) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000180)={0x4, &(0x7f0000000080)=[{0x6b0, 0x7, 0x3, 0x7ff}, {0x2, 0x7, 0x6, 0x9}, {0x7, 0x6, 0x5, 0xda}, {0x623d, 0xc8, 0x8, 0x6}]}, 0x10) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 7.5639218s ago: executing program 9 (id=4334): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 32) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 32) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffd8ef, @my=0x1}, 0x10, 0x80800) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x9, 0x10000) poll(&(0x7f0000000080)=[{r0, 0x48}, {r1, 0x8000}], 0x2, 0x5) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 64) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 64) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) (async, rerun: 32) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 32) io_setup(0x8000, &(0x7f0000000100)=0x0) io_getevents(r3, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 5.786247714s ago: executing program 5 (id=4335): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000200), 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = getpid() syz_pidfd_open(r3, 0x0) sched_setparam(r3, &(0x7f0000000180)=0x9) socketpair(0x29, 0x80000, 0x3, &(0x7f00000001c0)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@exit_looper], 0x0, 0x0, 0x0}) 5.785980503s ago: executing program 6 (id=4336): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) (async, rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x49, 0x39cc191b, 0x5f, 0x9, 0x209, 0xffff2d3b, 0xffffff01, 0x6, 0x3, 0x20000, 0x5, 0x4, 0xe4a1, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x0, 0x200, 0x1, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x6, 0x7, 0x1, 0x7, 0x9, 0x3e, 0x8f, 0x3, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x1, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x7, 0x8000, 0x10, 0x1, 0x129432e6, 0xcb, 0xf9, 0x18000, 0x2bf, 0x15a, 0x9, 0xfffffffd, 0x8000003, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8c2, 0xea4, 0x0, 0x4, 0x2, 0x8004, 0x2009, 0x3fc, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x3, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0xc6d5, 0x9, 0x8000001, 0x7, 0x3, 0x9, 0x48c93690, 0x81, 0x223], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x4005, 0x2, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x3, 0x9, 0x87, 0x3, 0x9, 0x2, 0x9, 0x5, 0x8, 0x2, 0x1, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x9, 0xac8, 0xbf, 0xd, 0x3, 0x80000000, 0x0, 0x0, 0x9, 0xffff, 0xb0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x0, 0x6, 0x7fff, 0xffff, 0xa628, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x10, 0x7a, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x5, 0x80010080, 0x5, 0x8, 0x1000, 0xa22, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x6, 0x5, 0xb1e, 0x0, 0x200, 0xffff343e, 0xfff]}, 0x45c) (rerun: 64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.784429994s ago: executing program 9 (id=4337): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="bb223796fb9164178ee80ba6ba7684b0c04d8a2633826680a128103a53783d12963fafc957a7666e6ca2f76bd6f23ca8") close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000040)="d9b604") mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 4.010730247s ago: executing program 5 (id=4338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000010451308300000000000010902821c554c41bdccc2040010010300000009210000ff012205000905810300040000ff09050203700407fbe3"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220500c64d2efa410af698f019110d000037aef545619986cef87d0466a022d9897921a28214cea3a00bae667a71b5e91508129ef2f5794dc436a44445ab4292124efb9b1c73ac13eaf60febcbbb2e685f6f944759c02718b27b02c85b8642e6c83780a2d6bb796202dacb34b62380296be7c91fb11a2bc6cf83e7d106e065d1c5522b7926092482c308004725019686b3fe2205fdf91f588304000000"], 0x0}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 4.009711497s ago: executing program 6 (id=4339): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) (async) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x7, 0x0, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000400)=""/71, 0x47}, {&(0x7f00000011c0)=""/4101, 0x1005}], 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0xfffe, 0x0, @private1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "c2e79c70754259f2", "064a50e0a4d910203e9c07bc9eb44a15", "b7f050e7", "4abcc2e1cd7d68c9"}, 0x28) (async) write$binfmt_aout(r4, 0x0, 0xffffffffffffff4a) (async) close_range(r0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)="f998f1b70830b0ac2033a2bca458c4d7e9d964b895178eee6471882dacc2e8eac62f945f8bf458b38e227547c79a7cdf1e5846cbd19b36a4a498827fe50b5b1d58229f5585ee1d86f6de2bfc202d60b2f5cfe01cb14c7a27872baf13e350e436820a0a45f6c3fadece85a5ff3a89e9", 0x6f) 4.003438367s ago: executing program 9 (id=4340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0xa, 0x7, {0x7, 0x4, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.092921472s ago: executing program 5 (id=4341): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r3, 0x0, 0x20000) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) (async) getdents64(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.054084435s ago: executing program 6 (id=4342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r3, 0x1000006, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.052786615s ago: executing program 9 (id=4343): add_key(&(0x7f0000000180)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0011023}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x1ff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000180)=""/80, 0x50}, {0x0}], 0x2) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="000100001d00000227bd7000fddbdf250c000f00ff00000000000000e4000600e0000001000000000000000000000000ac1e01010000000000000000000000004e20ffff4e2304010e00a02000000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="fe800000000000000000ff00000000aa000004d32b000000640101000000000000000000000000000100000000000000080000000000000008000000000000000008000000000000feffffffffffffff01000000000000000600000000000000b40400000000000005000000000000005b01000000000000d6fffffffffffffffbffffffffffffff0900000001000000030000002dbd700007350000020002090500000000000000"], 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x26048014) prctl$PR_SET_DUMPABLE(0x4, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace_dev_match', 0x42200, 0x43) finit_module(r10, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/241, 0xf1, 0x400000000002, 0x4}, @fda={0x66646185, 0x3, 0x1, 0x2}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 2.052542095s ago: executing program 6 (id=4344): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = getpid() ioprio_set$pid(0x3, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2000000000000167}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) getpid() (async) ioprio_set$pid(0x3, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2000000000000167}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 2.25616ms ago: executing program 5 (id=4345): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x18, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb785, 0x6, 0x2, 0x500, 0x80, 0x82000010, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 374.201µs ago: executing program 6 (id=4346): syz_usb_disconnect(0xffffffffffffffff) (async) r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYRES32=0xffffffffffffffff], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r2 = syz_usb_connect(0x4, 0x2f5, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x6, 0x2, 0x80, 0x20, 0x9}, 0x2b, &(0x7f0000000240)={0x5, 0xf, 0x2b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x1, 0x11, 0x2}, @generic={0xf, 0x10, 0x4, "fc29a684f35226cfc11f7e8b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x6, 0x6}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x2c, &(0x7f0000001140)=ANY=[@ANYBLOB="2c036278cc4cae924d08c60f3af151b7ec73cb8344db55713038d45a2b072317770adeeaf3c4b67020fbe6c2be7a9dae395564bb946506d4b95005137259f0c69f012555a3a34aa332f7b2e2b61d5d100423ca33dd6d7a9ce009b38a0184b7a91e4e7683183788412c2083641060c0d8e11b28a589a53105e246470b4e7dc3e6c4ae731808a0552d0c9c0ddb80e1cdf4b8b75e9359eca12686d306784f7a50d87f127cda3ce15e18207082fe03bdf8466e6f878bc001c0752d01f96bfa90367b0ef332eb37c604226dea95f39b64"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x100c}}, {0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB="3b0359ca422165228cf61657acd76c1612dadbb46e9ab5ac32699f82331c907eacde4152fe9c7ebf007228315c342c97aff5406e325c3fe336819291526293646f77b3c927d319"]}, {0x71, &(0x7f0000000400)=ANY=[@ANYBLOB="7103ee30384c4195400220f53c8de63c4347c6bd863a283e97c4c64262bdc703dce3b4546f5fbe3f9037d204188095cabeb83829b1da323fed3bf6b5604d2860767584c2e66130ae73d9822c5f1578b9ea3424eb5864c282ff11b193713a5a24cd155d49f0412e535daad503345fdaaa8c", @ANYRES16=r1, @ANYRES32=r0]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c0b}}, {0x5a, &(0x7f0000000340)=@string={0x5a, 0x3, "35a225538276c27b724c5f77fa465604a6b782dfcd10d73e8f64ee076f029e6a8b466eded53a95cc45efa45ebdd6c0c0771ffdf02c2d50711cb0b4716416f8561c08c36c6fc5ae6d23d8e7f9fc34f762ef4f7d27f855de42"}}]}) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io(r2, &(0x7f0000000b80)={0x2c, &(0x7f0000001240)=ANY=[@ANYBLOB="4003ad000000ad08a921f0163de56c52724408d2ab03b691874c9a3732f7349bdc74cd0b468a6f6745f6b7670ff69be98cb4c9dc706d81a555fe620584e73040bc2709e38752ee682f142a34312ba9b85be2d203896d000000000000001cd9fd7c9028319f539cfb53626abdef5e3cccb925b998a7f55750ac40c9bd6aa34702000000a4fdd37d9eebac0ae22f79fd8cf82c33f105a9218f76496733794e540c6f8f71071ee510f4fdc64b048577d7354d7028"], &(0x7f0000001300)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}, &(0x7f0000000900)=ANY=[@ANYBLOB="000fc6490000050f2b0003"], &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0x2, 0xe0, "a87d57da", 'oq\t*'}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1c, 0x6, 0x5, 0x4, 0x3, 0xfffe}}}, &(0x7f0000001080)={0x84, &(0x7f0000000bc0)=ANY=[@ANYBLOB="4006cb0000003ac78c8c026a260ce9479ee67414db40ad8cf922a2d7a98e258695aee33a6af71f8c304a97b1a790b663e4e4958d7df167c4bbba3356e4e29ec4ddf83bb4940b46f04f0d185cf4f25c6bf9ca52c852ca98c5eacc2f3bff5b794e669f7935e5bccff7c73a48aee5ceb1990e1cb377a9814600f6e9f8642244e4e93f919292a5e187bee2fcdc22682b79d7e6fbdbbda08a5001f3fd823347e4f2efa278730effe98b03009c8abb425a5b6100ab2bda419dfc6752e35ef8b235ab414f0b4d2bf94d36f397237414"], &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xb1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000d80)=ANY=[@ANYBLOB="20000400000100003a04"], &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "6cb0"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "e7c8"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x8d}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x3}}) (async) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, &(0x7f0000000200)) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="0fae0e670f844b6500003e0fc72a0f01c366b80f010f00d0670fc7b920cfb9800000c00f3235008000000f30f20f0094d8f77f00000f35660faeb90f000000", 0x3b}], 0xaaaadf0, 0x8, 0x0, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(r6, r10, &(0x7f0000114000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r11 = fsopen(&(0x7f00000003c0)='xfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) (async) r12 = fsmount(r11, 0x0, 0x0) openat$cgroup_int(r12, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r13, 0x5452, 0x0) (async) r14 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000007c0), 0x4201, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r14, &(0x7f00000002c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x3f7, 0x0, 0x70bd29, 0x255fdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x800) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}]}) (async) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000100)=""/101) 0s ago: executing program 9 (id=4347): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0xa, 0x7, {0x7, 0x4, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_open_dev$hiddev(&(0x7f0000000a00), 0x6a1, 0xc0400) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async, rerun: 64) write(r2, &(0x7f0000000040)="240000001a005f0014f9f507000909000aff8000000000000000000008001e0000000000", 0x24) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x80, 0xbb, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x10, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xfb, 0xd, 0x8, 0x40, 0x9}, 0x15, &(0x7f0000000100)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x13, 0x0, 0x1}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x89, &(0x7f0000000180)=@string={0x89, 0x3, "5b2343db295f618a5b92fb22ac7d3a4890e3ef9e3608a50f4286d4aea145993fab4bb4c683ca63ec10397f1bcbf99022bac529f088115bfcc3bc6c813aab05c6e8b7968c124b694563177ab2baf5de9d01b4a77cec9c2e2aa215b290ae25573675152bfad320c2ab9616590b0bac589f00ae29553dedc2490ab3b4581f1450df5ad40712b29229"}}, {0x50, &(0x7f0000000380)=@string={0x94, 0x3, "1cacf728de9ae54a23594083f396f5b32e9904030d4a49972deab1035b34a2a686687a2907399bfce0720f0c34b4d5e14025af4d15e6237db4e970d6da69c5a2ee33e7ab9472bc14f6a8eca961cb7cf1391ccc3d86505926a068d8c51ebcb16a59ad1083d62d1d093c1a133b070309ea3ae0e44f82790cdc0ebc84c243bf557494ddcd64a2c1de108913c26e07dddf62ea60"}}, {0x54, &(0x7f0000000b40)=ANY=[@ANYBLOB="8a03701330b13982db4e063e94ce958f89a086bab831796a28dbf32a17eb6e03795e99ae8c39c277a5dc1185c94d2082aeeb71988eb05e3bb2bb340d54839ec6d80f6b38a82299b9f7b61e223e571320c7ed5563921c4f214e0eac299ec03f995240b29f2d89532ce5c93619785c448358b699c0be34a164feb02299c624739658a0f8827212bb88c80f586aaadd6b6661168f0027f26f7392cc70c8f0c8b474a5886990dff1fa5152571b27dd18b593a47e71d300"/201]}]}) syz_usb_control_io$printer(r7, &(0x7f00000004c0)={0x14, &(0x7f0000000580)={0x0, 0xc, 0xbc, {0xbc, 0x24, "621882583327e552fbd97cb6c3684038dd6a21dc4fd7a5d170c6fc3cef9fd0e653187c58240e6ccbd54c0976cd7c69e29b8e094b8d265caca8a1203ccab8ad5cc928439979a1115bb0b3c899563da0ce0de48891812d4d8556a0980fa184f95347257a0d1c746c8026f9a1d66506cdd08f33a0e6c875cb098f383049d4cef53a306a5bc6dc6d9cae98ae4d76661be8dfe678891f95d4ad05ac0eb7b10448625ab742f6c7f5765cd4d201bf83b848da32b29140de626e40c81203"}}, &(0x7f0000000680)=ANY=[@ANYBLOB="0003e5000000e503c8d7916e56e439d69ac9d09fe6f8fcef2357198b68e7abeabcbba611363dceb393e64bcc7f98df8f82d18eaba4b8eb568b54fab41f635e00814bfbdf59094a210c4a76ec76aa8f44b656412b1f841088fba25fdc51c4b4619058c1c1334c4f7b8ca222cd385601919bb00dc7b0e36b8c6c147eba910bb5bd92220cc21ea1c84f89a446241fa49931080448a2ce6620f69b1e1233f64ed1c125ac8f0d9ca169f033f747ce4b1a9ed945ad353a7d5ac5de3ad63a6e92f07ed4ea68438d4fdd45339671cc45b4410446641e30a71c934bfbae9570f31a0558b5c100"/235]}, &(0x7f0000000900)={0x34, &(0x7f0000000780)={0x0, 0xb, 0x7a, "4e04180e72b92e932911595218aa58b1b2f8d14ef149bc1b504be9315e7553542e03de9477411e1abbea4c4aabc307b974e69ad8e1dc7b88b7215d67f046c7e27601ee29abe183401e08699d1bb8e99c8f0d2f49bb5ef72c9510d59b6613c17c9b777352e0a1c17ab3b9d0a0c4ce114a4b72483beddb67b8f046"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000840)={0x20, 0x0, 0x10, {0xe, "71d614d1661a78dead0c6af04668"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0x80}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x4}}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80080, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', &(0x7f0000000980), 0x6000) (async) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): new high-speed USB device number 41 using dummy_hcd [ 275.819864][ T31] usb 6-1: device descriptor read/8, error -71 [ 275.949791][ T31] usb 6-1: device descriptor read/8, error -71 [ 276.188552][ T31] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 276.209653][ T31] usb 6-1: device descriptor read/8, error -71 [ 276.266322][ T5680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.339856][ T31] usb 6-1: device descriptor read/8, error -71 [ 276.352470][ T5684] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 276.411279][ T36] audit: type=1400 audit(1756342056.162:56248): avc: denied { mounton } for pid=5686 comm="syz.8.1785" path="/proc/461/task" dev="proc" ino=31558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 276.421632][ T5687] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967295 [ 276.442139][ T5687] rust_binder: Write failure EINVAL in pid:461 [ 276.458716][ T31] usb usb6-port1: unable to enumerate USB device [ 276.508536][ T3325] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 276.621950][ T5694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1788'. [ 276.658581][ T3325] usb 8-1: Using ep0 maxpacket: 8 [ 276.665194][ T5700] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1790'. [ 276.665230][ T3325] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 276.683800][ T3325] usb 8-1: config 0 has no interface number 0 [ 276.692479][ T3325] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 276.701858][ T3325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.709975][ T3325] usb 8-1: Product: syz [ 276.714415][ T3325] usb 8-1: Manufacturer: syz [ 276.719210][ T3325] usb 8-1: SerialNumber: syz [ 276.726044][ T3325] usb 8-1: config 0 descriptor?? [ 276.932410][ T5680] rust_binder: Error in use_page_slow: ESRCH [ 276.932439][ T5680] rust_binder: use_range failure ESRCH [ 276.938603][ T5680] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 276.944123][ T5680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 276.952087][ T5680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:193 [ 276.966169][ T3325] usb 8-1: USB disconnect, device number 23 [ 277.078808][ T5702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 277.086690][ T31] rust_binder: 5701: removing orphan mapping 0:24 [ 277.102204][ T5707] netlink: 'syz.5.1793': attribute type 4 has an invalid length. [ 277.102827][ T31] rust_binder: 0: removing orphan mapping 24:1112 [ 277.118169][ T5707] netlink: 'syz.5.1793': attribute type 4 has an invalid length. [ 277.252740][ T5722] overlayfs: missing 'workdir' [ 277.279705][ T5727] netlink: 'syz.6.1801': attribute type 29 has an invalid length. [ 277.287637][ T5727] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1801'. [ 277.308709][ T36] audit: type=1326 audit(1756342057.062:56249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.6.1802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2688d8ebe9 code=0x0 [ 277.358535][ T3252] usb 9-1: new low-speed USB device number 31 using dummy_hcd [ 277.508539][ T3325] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 277.521658][ T3252] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 277.531150][ T3252] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.540245][ T3252] usb 9-1: config 0 descriptor?? [ 277.551464][ T5739] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 277.659704][ T3325] usb 6-1: No LPM exit latency info found, disabling LPM. [ 278.447246][ T5751] rust_binder: 208: no such ref 3 [ 278.452766][ T5751] rust_binder: Write failure EINVAL in pid:208 [ 279.144250][ T5766] 9pnet_fd: Insufficient options for proto=fd [ 279.488540][ T426] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 279.638496][ T426] usb 8-1: Using ep0 maxpacket: 16 [ 279.644971][ T426] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.656081][ T426] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.669166][ T426] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 279.678294][ T426] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.687799][ T426] usb 8-1: config 0 descriptor?? [ 279.758019][ T3252] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 279.769261][ T3252] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 279.780358][ T3252] asix 9-1:0.0: probe with driver asix failed with error -71 [ 279.790775][ T3252] usb 9-1: USB disconnect, device number 31 [ 280.264478][ T3325] usb 6-1: New USB device found, idVendor=0eef, idProduct=7207, bcdDevice= 0.40 [ 280.274004][ T3325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.287865][ T5783] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1822'. [ 280.298777][ T5782] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1822'. [ 280.299940][ T36] audit: type=1326 audit(1756342060.042:56250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.7.1818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x0 [ 280.332071][ T3325] usb 6-1: can't set config #1, error -71 [ 280.339114][ T3325] usb 6-1: USB disconnect, device number 43 [ 280.399015][ T5794] netlink: 712 bytes leftover after parsing attributes in process `syz.7.1818'. [ 280.412780][ T5794] __vm_enough_memory: pid: 5794, comm: syz.7.1818, bytes: 18014402804453376 not enough memory for the allocation [ 280.530473][ T5803] fuse: Unknown parameter 'use' [ 280.604501][ T36] audit: type=1400 audit(1756342060.352:56251): avc: denied { getopt } for pid=5802 comm="syz.6.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 280.748511][ T3325] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 280.878469][ T3325] usb 6-1: device descriptor read/64, error -71 [ 281.118471][ T3325] usb 6-1: device descriptor read/64, error -71 [ 281.364713][ T3325] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 281.382374][ T5807] cgroup: fork rejected by pids controller in /syz8 [ 281.498475][ T3325] usb 6-1: device descriptor read/64, error -71 [ 281.748512][ T3325] usb 6-1: device descriptor read/64, error -71 [ 281.858653][ T3325] usb usb6-port1: attempt power cycle [ 281.971273][ T5855] 9pnet_fd: Insufficient options for proto=fd [ 281.971478][ T5856] 9pnet_fd: Insufficient options for proto=fd [ 282.198499][ T3325] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 282.219448][ T3325] usb 6-1: device descriptor read/8, error -71 [ 282.253436][ T426] usbhid 8-1:0.0: can't add hid device: -71 [ 282.263391][ T426] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 282.273031][ T426] usb 8-1: USB disconnect, device number 24 [ 282.301407][ T5870] bpf: Bad value for 'uid' [ 282.349633][ T3325] usb 6-1: device descriptor read/8, error -71 [ 282.525667][ T5876] overlayfs: failed to clone upperpath [ 282.550896][ T5879] virtiofs: Unknown parameter 'always' [ 282.588626][ T3325] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 282.614914][ T3325] usb 6-1: device descriptor read/8, error -71 [ 282.621305][ T426] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 282.759804][ T3325] usb 6-1: device descriptor read/8, error -71 [ 282.779796][ T426] usb 8-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 282.788938][ T426] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.797816][ T426] usb 8-1: config 0 descriptor?? [ 282.868646][ T3325] usb usb6-port1: unable to enumerate USB device [ 283.172511][ T5891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5891 comm=syz.6.1850 [ 283.406600][ T426] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 283.417312][ T426] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 283.496391][ T5899] fuse: Unknown parameter 'fl' [ 283.581565][ T426] asix 8-1:0.0 eth1: register 'asix' at usb-dummy_hcd.7-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 283.594210][ T426] usb 8-1: USB disconnect, device number 25 [ 283.600540][ T426] asix 8-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.7-1, ASIX AX88178 USB 2.0 Ethernet [ 283.611803][ T36] audit: type=1400 audit(1756342063.362:56252): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.644172][ T36] audit: type=1400 audit(1756342063.362:56253): avc: denied { read } for pid=148 comm="dhcpcd" name="n16" dev="tmpfs" ino=3319 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.683799][ T36] audit: type=1400 audit(1756342063.362:56254): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=3319 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.708066][ T36] audit: type=1400 audit(1756342063.362:56255): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=3319 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.745924][ T36] audit: type=1400 audit(1756342063.392:56256): avc: denied { read } for pid=5903 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.792852][ T36] audit: type=1400 audit(1756342063.392:56257): avc: denied { open } for pid=5903 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.854552][ T36] audit: type=1400 audit(1756342063.392:56258): avc: denied { getattr } for pid=5903 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.908763][ T36] audit: type=1326 audit(1756342063.432:56259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.5.1855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69b858ebe9 code=0x0 [ 283.958216][ T36] audit: type=1400 audit(1756342063.492:56260): avc: denied { execmem } for pid=5909 comm="syz.6.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 283.978058][ T36] audit: type=1400 audit(1756342063.492:56261): avc: denied { write } for pid=5901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.087947][ T5943] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 284.087977][ T5943] rust_binder: Read failure Err(EFAULT) in pid:225 [ 284.138476][ T31] usb 9-1: new low-speed USB device number 32 using dummy_hcd [ 284.188948][ T5951] fuse: Unknown parameter 'fl' [ 284.300167][ T31] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 284.309633][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.318848][ T31] usb 9-1: config 0 descriptor?? [ 284.326875][ T5957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 284.338558][ T5958] rust_binder: Error in use_page_slow: ESRCH [ 284.338577][ T5958] rust_binder: use_range failure ESRCH [ 284.344589][ T5958] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 284.358521][ T5958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 284.358558][ T5958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:235 [ 284.473642][ T5965] binder: Bad value for 'max' [ 284.577178][ T5974] fuse: Unknown parameter 'fl' [ 284.645194][ T3252] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 284.653282][ T3252] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.700850][ T5981] fuse: Bad value for 'group_id' [ 284.706605][ T5981] fuse: Bad value for 'group_id' [ 284.753661][ T5991] fuse: Bad value for 'group_id' [ 284.758755][ T5991] fuse: Bad value for 'group_id' [ 284.778479][ T64] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 284.806190][ T5995] rust_binder: Write failure EFAULT in pid:259 [ 284.939854][ T64] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.960567][ T64] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 284.969703][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 284.977840][ T64] usb 6-1: Product: syz [ 284.982046][ T64] usb 6-1: Manufacturer: syz [ 284.986765][ T64] usb 6-1: SerialNumber: syz [ 285.193467][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.202106][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.210469][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.219319][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.227545][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.236311][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.244615][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.253422][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.261727][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.270698][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.283476][ T64] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 285.290815][ T5999] fuse: Unknown parameter 'fl' [ 285.467671][ T6023] fuse: Unknown parameter 'fl' [ 286.329540][ T31] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 286.339890][ T31] asix 9-1:0.0: probe with driver asix failed with error -71 [ 286.348281][ T31] usb 9-1: USB disconnect, device number 32 [ 286.488538][ T426] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 286.638480][ T426] usb 8-1: Using ep0 maxpacket: 8 [ 286.645325][ T426] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 286.654346][ T426] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 286.663314][ T426] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 286.672863][ T426] usb 8-1: config 250 has no interface number 0 [ 286.679814][ T426] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 286.691652][ T426] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 286.702606][ T426] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.712985][ T426] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 286.723369][ T426] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 286.737122][ T426] usb 8-1: config 250 interface 228 has no altsetting 0 [ 286.745341][ T426] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 286.755039][ T426] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 286.763375][ T426] usb 8-1: Product: syz [ 286.767936][ T426] usb 8-1: SerialNumber: syz [ 286.776143][ T426] hub 8-1:250.228: bad descriptor, ignoring hub [ 286.782937][ T426] hub 8-1:250.228: probe with driver hub failed with error -5 [ 286.859145][ T6039] __vm_enough_memory: pid: 6039, comm: syz.8.1897, bytes: 18014402804453376 not enough memory for the allocation [ 286.984658][ T426] usblp 8-1:250.228: usblp1: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 287.019191][ T426] usb 8-1: USB disconnect, device number 26 [ 287.027653][ T6046] fuse: Unknown parameter 'fl' [ 287.033713][ T426] usblp1: removed [ 287.896681][ T6063] cgroup: Unknown subsys name 'smackfsroot' [ 288.178496][ T3252] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 288.258491][ T31] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 288.355247][ T6077] fuse: Unknown parameter 'fl' [ 288.388464][ T31] usb 8-1: device descriptor read/64, error -71 [ 288.404380][ T6086] overlayfs: missing 'lowerdir' [ 288.451304][ T6092] overlayfs: failed to clone upperpath [ 288.648461][ T31] usb 8-1: device descriptor read/64, error -71 [ 288.684825][ T6104] fuse: Unknown parameter 'fl' [ 288.790441][ T6110] 9pnet_fd: Insufficient options for proto=fd [ 288.888482][ T31] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 289.018489][ T31] usb 8-1: device descriptor read/64, error -71 [ 289.218459][ T3252] usb 9-1: device descriptor read/64, error -71 [ 289.258471][ T31] usb 8-1: device descriptor read/64, error -71 [ 289.368694][ T31] usb usb8-port1: attempt power cycle [ 289.478457][ T3252] usb 9-1: Using ep0 maxpacket: 16 [ 289.484782][ T3252] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.495173][ T3252] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.506035][ T3252] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.515580][ T3252] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.523952][ T3252] usb 9-1: Product: syz [ 289.528268][ T3252] usb 9-1: Manufacturer: syz [ 289.533354][ T3252] usb 9-1: SerialNumber: syz [ 289.718590][ T31] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 289.739463][ T31] usb 8-1: device descriptor read/8, error -71 [ 289.869638][ T31] usb 8-1: device descriptor read/8, error -71 [ 290.108570][ T31] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 290.129690][ T31] usb 8-1: device descriptor read/8, error -71 [ 290.235740][ T6157] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1942'. [ 290.235753][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 290.235771][ T36] audit: type=1400 audit(1756342069.982:56281): avc: denied { nlmsg_read } for pid=6155 comm="syz.6.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.245678][ T6156] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1942'. [ 290.283116][ T31] usb 8-1: device descriptor read/8, error -71 [ 290.398660][ T31] usb usb8-port1: unable to enumerate USB device [ 290.739261][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.747971][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.892910][ T6181] netlink: 'syz.8.1952': attribute type 16 has an invalid length. [ 290.900894][ T6181] netlink: 'syz.8.1952': attribute type 25 has an invalid length. [ 290.909044][ T6181] netlink: 64094 bytes leftover after parsing attributes in process `syz.8.1952'. [ 290.920030][ T36] audit: type=1326 audit(1756342070.672:56282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.8.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 290.944679][ T36] audit: type=1326 audit(1756342070.672:56283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.8.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 290.968647][ T36] audit: type=1326 audit(1756342070.672:56284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.8.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 290.992505][ T36] audit: type=1326 audit(1756342070.672:56285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.8.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 291.016602][ T36] audit: type=1326 audit(1756342070.672:56286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.8.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 291.054493][ T36] audit: type=1326 audit(1756342070.672:56287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.8.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 291.080671][ T36] audit: type=1326 audit(1756342070.672:56288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.8.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 291.105482][ T36] audit: type=1326 audit(1756342070.672:56289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.8.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 291.129870][ T36] audit: type=1326 audit(1756342070.672:56290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.8.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 291.198106][ T6197] fuse: Unknown parameter 'fl' [ 291.296550][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1957'. [ 291.419041][ T6212] netlink: 'syz.6.1959': attribute type 1 has an invalid length. [ 291.427021][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1959'. [ 291.575239][ T6220] netlink: 'syz.6.1962': attribute type 4 has an invalid length. [ 291.737364][ T6232] fuse: Unknown parameter 'fl' [ 291.850882][ T6240] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 291.850910][ T6240] rust_binder: Error while translating object. [ 291.865815][ T6239] @: renamed from vlan0 (while UP) [ 291.868590][ T6240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 291.877285][ T6240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 292.058963][ T31] usb 6-1: USB disconnect, device number 48 [ 292.090929][ T31] usblp0: removed [ 292.340204][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1973'. [ 292.352497][ T6259] /dev/loop0: Can't lookup blockdev [ 292.363392][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1973'. [ 292.424864][ T6265] fuse: Unknown parameter 'fl' [ 292.603906][ T6272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.603940][ T6272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.618485][ T6272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.625096][ T6272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.638461][ T6272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.645091][ T6272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.659752][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1978'. [ 292.760593][ T6279] 9pnet_fd: Insufficient options for proto=fd [ 292.956951][ T6287] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 292.965269][ T31] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 293.031355][ T6293] fuse: Unknown parameter 'fl' [ 293.047652][ T6297] rust_binder: Fixups oob 164 166 363 196 [ 293.047682][ T6297] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 293.058700][ T6297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 293.067534][ T6297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:616 [ 293.100412][ T6312] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 293.120900][ T6312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 293.120938][ T6312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:618 [ 293.139580][ T31] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 293.164607][ T31] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 293.174455][ T31] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 293.185734][ T31] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.197107][ T6315] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 293.199120][ T31] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.215041][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.223329][ T31] usb 8-1: Product: syz [ 293.227958][ T31] usb 8-1: Manufacturer: syz [ 293.232812][ T31] usb 8-1: SerialNumber: syz [ 293.249254][ T6316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:620 [ 293.314580][ T6328] x_tables: duplicate underflow at hook 1 [ 293.421593][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.439555][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.026078][ T6384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 294.038521][ T6384] rust_binder: Error in use_page_slow: ESRCH [ 294.045156][ T6384] rust_binder: use_range failure ESRCH [ 294.051749][ T6384] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 294.057368][ T6384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 294.065477][ T6384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:643 [ 294.267421][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.285706][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.610445][ T3252] usb 9-1: 0:2 : does not exist [ 294.618867][ T3252] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 294.632166][ T31] usb 8-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 294.640785][ T31] usb 8-1: found format II with max.bitrate = 12, frame size=2610 [ 294.649274][ T31] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 294.663660][ T31] usb 8-1: USB disconnect, device number 31 [ 294.863525][ T6417] rust_binder: Write failure EFAULT in pid:652 [ 294.928486][ T470] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 294.961053][ T6421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.019507][ T6430] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2030'. [ 295.048918][ T6430] binder: Unknown parameter 'contextÀ' [ 295.091934][ T470] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.108503][ T470] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.118507][ T470] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 295.127693][ T470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 295.138437][ T470] usb 6-1: SerialNumber: syz [ 295.189383][ T6442] netlink: 'syz.7.2034': attribute type 3 has an invalid length. [ 295.249891][ T6449] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 295.249928][ T6449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 295.258216][ T6449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:349 [ 295.283762][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2037'. [ 295.336998][ T6458] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 295.351505][ T470] usb 6-1: 0:2 : does not exist [ 295.365160][ T470] usb 6-1: USB disconnect, device number 49 [ 295.387506][ T3206] udevd[3206]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 295.648492][ T31] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 295.782657][ T6475] batadv_slave_1: entered promiscuous mode [ 295.788723][ T31] usb 8-1: device descriptor read/64, error -71 [ 295.842278][ T6476] overlayfs: failed to clone upperpath [ 295.849850][ T6474] batadv_slave_1: left promiscuous mode [ 296.028505][ T31] usb 8-1: device descriptor read/64, error -71 [ 296.168493][ T458] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 296.268480][ T31] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 296.319630][ T458] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 296.330608][ T458] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 296.339786][ T458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.348604][ T458] usb 6-1: config 0 descriptor?? [ 296.353998][ T6478] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 296.395557][ T6483] tipc: Enabling of bearer rejected, already enabled [ 296.398510][ T31] usb 8-1: device descriptor read/64, error -71 [ 296.404099][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2048'. [ 296.418920][ T6483] tipc: Disabling bearer [ 296.439689][ T6487] overlayfs: failed to clone upperpath [ 296.462233][ T6490] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 296.483578][ T6493] tmpfs: Unknown parameter '0x0000000000000000' [ 296.504734][ T6495] netlink: 'syz.6.2052': attribute type 4 has an invalid length. [ 296.512836][ T6495] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2052'. [ 296.648543][ T31] usb 8-1: device descriptor read/64, error -71 [ 296.758559][ T31] usb usb8-port1: attempt power cycle [ 296.764625][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.773421][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.986527][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 296.986548][ T36] audit: type=1400 audit(1756342076.732:56358): avc: denied { setattr } for pid=6477 comm="syz.5.2046" name="task" dev="proc" ino=36561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 296.993838][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.023337][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.098517][ T31] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 297.119768][ T31] usb 8-1: device descriptor read/8, error -71 [ 297.234459][ T458] usbhid 6-1:0.0: can't add hid device: -71 [ 297.240529][ T458] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 297.249299][ T458] usb 6-1: USB disconnect, device number 50 [ 297.260142][ T31] usb 8-1: device descriptor read/8, error -71 [ 297.450076][ T6510] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 297.498549][ T31] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 297.519679][ T31] usb 8-1: device descriptor read/8, error -71 [ 297.649618][ T31] usb 8-1: device descriptor read/8, error -71 [ 297.768560][ T31] usb usb8-port1: unable to enumerate USB device [ 297.769779][ T36] audit: type=1401 audit(1756342077.522:56359): op=fscreate invalid_context=CFA7AE [ 297.793562][ T6521] /dev/rnullb0: Can't lookup blockdev [ 298.128524][ T470] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 298.278465][ T470] usb 6-1: Using ep0 maxpacket: 8 [ 298.285018][ T470] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 298.293849][ T470] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.304104][ T470] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 298.313121][ T470] usb 6-1: config 1 has no interface number 1 [ 298.319369][ T470] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 298.332365][ T470] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.347309][ T470] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.356895][ T470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.365046][ T470] usb 6-1: Product: syz [ 298.369627][ T470] usb 6-1: Manufacturer: syz [ 298.374484][ T470] usb 6-1: SerialNumber: syz [ 298.402303][ T6546] tipc: Enabling of bearer rejected, failed to enable media [ 298.431577][ T6548] overlayfs: conflicting lowerdir path [ 298.453187][ T6552] /dev/rnullb0: Can't lookup blockdev [ 298.464611][ T6554] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2074'. [ 298.474604][ T6554] rust_binder: Error while translating object. [ 298.474653][ T6554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 298.481015][ T6554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 298.506919][ T6556] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.516940][ T6556] rust_binder: Error in use_page_slow: ESRCH [ 298.523673][ T6556] rust_binder: use_range failure ESRCH [ 298.529742][ T6556] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 298.535344][ T6556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 298.543471][ T6556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:366 [ 298.582059][ T36] audit: type=1326 audit(1756342078.332:56360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.5.2068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69b858ebe9 code=0x0 [ 298.808479][ T3252] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 298.958504][ T3252] usb 8-1: Using ep0 maxpacket: 16 [ 298.965282][ T3252] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.976494][ T3252] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.985128][ T6562] netlink: 'syz.6.2077': attribute type 1 has an invalid length. [ 298.986789][ T3252] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 299.003625][ T3252] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.012868][ T3252] usb 8-1: config 0 descriptor?? [ 299.014977][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2078'. [ 299.423297][ T3252] playstation 0003:054C:05C4.0015: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.7-1/input0 [ 299.821785][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.830558][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.044077][ T3252] playstation 0003:054C:05C4.0015: Failed to retrieve feature with reportID 2: -71 [ 300.053508][ T3252] playstation 0003:054C:05C4.0015: Retrying DualShock 4 get calibration report (0x02) request [ 300.064127][ T3252] playstation 0003:054C:05C4.0015: Failed to retrieve feature with reportID 2: -71 [ 300.073613][ T3252] playstation 0003:054C:05C4.0015: Retrying DualShock 4 get calibration report (0x02) request [ 300.084209][ T3252] playstation 0003:054C:05C4.0015: Failed to retrieve feature with reportID 2: -71 [ 300.093604][ T3252] playstation 0003:054C:05C4.0015: Failed to retrieve DualShock4 calibration info: -71 [ 300.103321][ T3252] playstation 0003:054C:05C4.0015: Invalid gyro calibration data for axis (3), disabling calibration. [ 300.114409][ T3252] playstation 0003:054C:05C4.0015: Invalid gyro calibration data for axis (4), disabling calibration. [ 300.125426][ T3252] playstation 0003:054C:05C4.0015: Invalid gyro calibration data for axis (5), disabling calibration. [ 300.136432][ T3252] playstation 0003:054C:05C4.0015: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 300.148289][ T3252] playstation 0003:054C:05C4.0015: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 300.160167][ T3252] playstation 0003:054C:05C4.0015: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 300.172069][ T3252] playstation 0003:054C:05C4.0015: Failed to get calibration data from DualShock4 [ 300.181335][ T3252] playstation 0003:054C:05C4.0015: Gyroscope and accelerometer will be inaccurate. [ 300.191547][ T3252] input: HID 054c:05c4 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:054C:05C4.0015/input/input18 [ 300.205389][ T3252] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:054C:05C4.0015/input/input19 [ 300.227025][ T3252] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:054C:05C4.0015/input/input20 [ 300.252952][ T3252] playstation 0003:054C:05C4.0015: Registered DualShock4 controller hw_version=0x0000dc18 fw_version=0x00001c48 [ 300.267227][ T3252] usb 8-1: USB disconnect, device number 36 [ 300.609003][ T6574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.611626][ T6575] rust_binder: Error in use_page_slow: ESRCH [ 300.618280][ T6575] rust_binder: use_range failure ESRCH [ 300.624379][ T6575] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 300.629937][ T6575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 300.637914][ T6575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:668 [ 300.647656][ T6575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:668 [ 300.671443][ T6578] fuse: Unknown parameter 'fl' [ 300.798553][ T10] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 300.916713][ T470] usb 6-1: USB disconnect, device number 51 [ 300.931831][ T3206] udevd[3206]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 300.949533][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.972783][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 300.984052][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 300.992717][ T10] usb 8-1: Product: syz [ 300.996930][ T10] usb 8-1: Manufacturer: syz [ 301.001786][ T10] usb 8-1: SerialNumber: syz [ 301.089081][ T6592] 9p: Unknown access argument 00000000000000000000: -22 [ 301.216099][ T10] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 301.236566][ T6601] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 301.245576][ T6601] __vm_enough_memory: pid: 6601, comm: syz.8.2088, bytes: 18014402804453376 not enough memory for the allocation [ 301.417409][ T6568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.428144][ T6568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.476778][ T36] audit: type=1400 audit(1756342081.222:56361): avc: denied { sys_module } for pid=6612 comm="syz.8.2092" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 301.499213][ C1] usblp0: nonzero write bulk status received: -71 [ 301.505957][ T31] usb 8-1: USB disconnect, device number 37 [ 301.515146][ T31] usblp0: removed [ 301.515493][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.529567][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.636178][ T36] audit: type=1400 audit(1756342081.382:56362): avc: denied { mounton } for pid=6621 comm="syz.5.2094" path="/175/file0" dev="tmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 301.636512][ T458] kernel write not supported for file /syz1 (pid: 458 comm: kworker/1:4) [ 302.080496][ T6641] rust_binder: Error while translating object. [ 302.080551][ T6641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 302.089208][ T6641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:712 [ 302.153447][ T6644] netlink: 'syz.6.2102': attribute type 4 has an invalid length. [ 302.205902][ T6654] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2105'. [ 302.215300][ T6655] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2105'. [ 302.429353][ T6666] rust_binder: 388: no such ref 0 [ 302.574608][ T6677] tipc: Started in network mode [ 302.579664][ T6677] tipc: Node identity 3604a39fa45c, cluster identity 4711 [ 302.587008][ T6677] tipc: Enabled bearer , priority 0 [ 302.631063][ T6677] syzkaller0: entered promiscuous mode [ 302.646803][ T6677] syzkaller0: entered allmulticast mode [ 302.653031][ T6677] tipc: Resetting bearer [ 302.688953][ T6678] tipc: Resetting bearer [ 302.730374][ T6678] tipc: Disabling bearer [ 302.763477][ T36] audit: type=1400 audit(1756342082.512:56363): avc: denied { write } for pid=6681 comm="syz.7.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 302.798677][ T6684] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2115'. [ 302.825019][ T36] audit: type=1400 audit(1756342082.572:56364): avc: denied { create } for pid=6645 comm="syz.8.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 302.936322][ T36] audit: type=1400 audit(1756342082.682:56365): avc: denied { lock } for pid=6699 comm="syz.6.2122" path="socket:[37091]" dev="sockfs" ino=37091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 303.025566][ T6706] overlay: Unknown parameter 'mask' [ 303.028479][ T31] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 303.078624][ T6714] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 303.212147][ T36] audit: type=1400 audit(1756342082.962:56366): avc: denied { checkpoint_restore } for pid=6720 comm="syz.8.2130" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.248592][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 303.258747][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.269964][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.279766][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.292751][ T31] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.302102][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.312369][ T31] usb 8-1: config 0 descriptor?? [ 303.499019][ T6745] binder: Bad value for 'stats' [ 303.543840][ T6749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.544350][ T6749] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 303.551039][ T6749] rust_binder: Read failure Err(EFAULT) in pid:746 [ 303.559637][ T6749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:746 [ 303.593615][ T6753] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.604193][ T6753] rust_binder: Error in use_page_slow: ESRCH [ 303.610736][ T6753] rust_binder: use_range failure ESRCH [ 303.617090][ T6753] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 303.622787][ T6753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 303.630964][ T6753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:750 [ 303.641932][ T6754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.722578][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.738525][ T31] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 303.750333][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.757741][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.765259][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.772801][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.781104][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.788698][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.796020][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.803536][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.811072][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.818543][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.825886][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.833288][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.840580][ T31] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 303.881117][ T6770] sit0: entered promiscuous mode [ 303.888303][ T6770] netlink: 'syz.6.2145': attribute type 1 has an invalid length. [ 303.896521][ T6770] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2145'. [ 303.918495][ T3252] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 303.929682][ T36] audit: type=1400 audit(1756342083.672:56367): avc: denied { listen } for pid=6681 comm="syz.7.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 303.959332][ T31] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 303.976139][ T31] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 303.998051][ T31] microsoft 0003:045E:07DA.0016: no inputs found [ 304.013895][ T31] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 304.024623][ T6791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.030487][ T31] usb 8-1: USB disconnect, device number 38 [ 304.050018][ T6795] tmpfs: Unknown parameter 'smackfstransmute' [ 304.108454][ T3252] usb 6-1: Using ep0 maxpacket: 16 [ 304.114771][ T3252] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.125265][ T3252] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.143931][ T3252] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.157941][ T3252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.166446][ T3252] usb 6-1: Product: syz [ 304.171049][ T3252] usb 6-1: Manufacturer: syz [ 304.175776][ T3252] usb 6-1: SerialNumber: syz [ 304.309737][ T6814] tipc: Enabling of bearer rejected, failed to enable media [ 304.389621][ T3252] usb 6-1: 0:2 : does not exist [ 304.407430][ T3252] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 304.430691][ T3252] usb 6-1: USB disconnect, device number 52 [ 304.446495][ T3206] udevd[3206]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 304.534117][ T36] audit: type=1400 audit(1756342084.282:56368): avc: denied { bind } for pid=6824 comm="syz.7.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 304.569596][ T36] audit: type=1326 audit(1756342084.312:56369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2688d8ebe9 code=0x7fc00000 [ 304.593844][ T36] audit: type=1400 audit(1756342084.342:56370): avc: denied { ioctl } for pid=6827 comm="syz.7.2165" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 304.638726][ T6834] /dev/rnullb0: Can't lookup blockdev [ 304.680805][ T6841] fuse: Unknown parameter 'fl' [ 304.722214][ T6843] veth1: entered allmulticast mode [ 304.735542][ T6843] veth1: left allmulticast mode [ 305.004774][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.015751][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.026414][ T6871] rust_binder: Write failure EFAULT in pid:781 [ 305.258501][ T470] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 305.418479][ T470] usb 6-1: Using ep0 maxpacket: 16 [ 305.427996][ T470] usb 6-1: config 0 has an invalid interface number: 180 but max is 0 [ 305.438573][ T470] usb 6-1: config 0 has no interface number 0 [ 305.446943][ T470] usb 6-1: New USB device found, idVendor=0421, idProduct=0009, bcdDevice= 0.00 [ 305.461097][ T470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.469293][ T470] usb 6-1: Product: syz [ 305.473497][ T470] usb 6-1: Manufacturer: syz [ 305.478236][ T470] usb 6-1: SerialNumber: syz [ 305.478483][ T6882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.483796][ T470] usb 6-1: config 0 descriptor?? [ 305.496828][ T470] usb 6-1: bad CDC descriptors [ 305.544589][ T6886] input: syz0 as /devices/virtual/input/input21 [ 305.624128][ T6890] rust_binder: Write failure EFAULT in pid:423 [ 305.636710][ T6892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.655508][ T6897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.665982][ T6898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:430 [ 305.665982][ T6897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:430 [ 305.698100][ T470] usb 6-1: USB disconnect, device number 53 [ 305.744343][ T6903] netlink: 'syz.6.2188': attribute type 29 has an invalid length. [ 305.752328][ T6903] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.2188'. [ 305.988531][ T3325] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 306.074464][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.083024][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.083163][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.093452][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.099571][ T6906] 9pnet_fd: Insufficient options for proto=fd [ 306.110046][ T6905] 9pnet_fd: Insufficient options for proto=fd [ 306.119583][ T36] audit: type=1400 audit(1756342085.872:56371): avc: denied { getattr } for pid=6904 comm="syz.8.2189" path="cgroup:[4026532543]" dev="nsfs" ino=4026532543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 306.139779][ T3325] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 306.154705][ T3325] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 306.164830][ T3325] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 306.173930][ T3325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.312491][ T6914] /dev/loop0: Can't lookup blockdev [ 306.319006][ T6914] cgroup: name respecified [ 306.384276][ T3325] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 306.392360][ T3325] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input22 [ 306.406764][ T3325] usb 8-1: USB disconnect, device number 39 [ 306.468531][ T458] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 306.609039][ T458] usb 6-1: device descriptor read/64, error -71 [ 306.656858][ T6916] kvm: kvm [6915]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 306.848454][ T458] usb 6-1: device descriptor read/64, error -71 [ 306.921525][ T36] audit: type=1400 audit(1756342086.672:56372): avc: denied { map } for pid=6930 comm="syz.7.2199" path="/145/file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 306.968742][ T6933] rust_binder: Write failure EFAULT in pid:799 [ 306.968810][ T6933] rust_binder: Write failure EFAULT in pid:799 [ 306.997718][ T6941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.004583][ T6941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 307.011401][ T6941] rust_binder: Read failure Err(EFAULT) in pid:807 [ 307.021582][ T6941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:807 [ 307.045101][ T6943] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2203'. [ 307.088452][ T458] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 307.194476][ T6953] rust_binder: Write failure EFAULT in pid:817 [ 307.208182][ T6955] fuse: Unknown parameter 'fl' [ 307.219448][ T458] usb 6-1: device descriptor read/64, error -71 [ 307.235789][ T6957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.236795][ T6957] rust_binder: 821: no such ref 0 [ 307.296009][ T6964] exFAT-fs (rnullb0): invalid boot record signature [ 307.302769][ T6964] exFAT-fs (rnullb0): failed to read boot sector [ 307.309233][ T6964] exFAT-fs (rnullb0): failed to recognize exfat type [ 307.319319][ T470] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 307.356647][ T6968] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6968 comm=syz.8.2213 [ 307.413163][ T6974] fuse: Unknown parameter 'fl' [ 307.458466][ T470] usb 8-1: device descriptor read/64, error -71 [ 307.458533][ T458] usb 6-1: device descriptor read/64, error -71 [ 307.529258][ T6979] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 307.558760][ T6979] overlayfs: overlapping lowerdir path [ 307.574137][ T6979] rust_binder: Write failure EFAULT in pid:834 [ 307.588602][ T458] usb usb6-port1: attempt power cycle [ 307.662101][ T6997] fuse: Unknown parameter 'fl' [ 307.698466][ T470] usb 8-1: device descriptor read/64, error -71 [ 307.705582][ T6990] overlay: Unknown parameter 'smackfsdef' [ 307.948477][ T470] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 307.948485][ T458] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 307.969480][ T458] usb 6-1: device descriptor read/8, error -71 [ 308.022692][ T7023] fuse: Unknown parameter 'fl' [ 308.037970][ T7021] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 308.038207][ T7021] netlink: 'syz.8.2235': attribute type 6 has an invalid length. [ 308.058494][ T7021] IPv6: NLM_F_CREATE should be specified when creating new route [ 308.098495][ T470] usb 8-1: device descriptor read/64, error -71 [ 308.099498][ T458] usb 6-1: device descriptor read/8, error -71 [ 308.144557][ T7028] rust_binder: Write failure EFAULT in pid:846 [ 308.256111][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 308.256142][ T36] audit: type=1400 audit(1756342088.002:56376): avc: denied { read } for pid=7034 comm="syz.8.2239" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 308.281692][ T7037] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.296203][ T36] audit: type=1400 audit(1756342088.002:56377): avc: denied { open } for pid=7034 comm="syz.8.2239" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 308.330983][ T36] audit: type=1400 audit(1756342088.002:56378): avc: denied { ioctl } for pid=7034 comm="syz.8.2239" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 308.346679][ T470] usb 8-1: device descriptor read/64, error -71 [ 308.388476][ T458] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 308.409581][ T458] usb 6-1: device descriptor read/8, error -71 [ 308.478661][ T470] usb usb8-port1: attempt power cycle [ 308.539700][ T458] usb 6-1: device descriptor read/8, error -71 [ 308.648597][ T458] usb usb6-port1: unable to enumerate USB device [ 308.818512][ T470] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 308.839493][ T470] usb 8-1: device descriptor read/8, error -71 [ 308.961631][ T7050] fuse: Unknown parameter 'fl' [ 308.969467][ T470] usb 8-1: device descriptor read/8, error -71 [ 309.208565][ T470] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 309.230764][ T470] usb 8-1: device descriptor read/8, error -71 [ 309.290711][ T7065] binder: Unknown parameter 'defcontext01777777777777777777777' [ 309.310577][ T7068] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 309.322245][ T36] audit: type=1400 audit(1756342089.072:56379): avc: denied { mounton } for pid=7066 comm="syz.8.2251" path="/271/file0" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 309.354587][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.363244][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.369573][ T470] usb 8-1: device descriptor read/8, error -71 [ 309.478589][ T470] usb usb8-port1: unable to enumerate USB device [ 309.899921][ T7075] fuse: Unknown parameter 'fl' [ 310.036833][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.045671][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.056137][ T7089] rust_binder: Write failure EFAULT in pid:901 [ 310.075115][ T7091] fuse: Bad value for 'group_id' [ 310.086794][ T7091] fuse: Bad value for 'group_id' [ 310.206297][ T36] audit: type=1400 audit(1756342089.952:56380): avc: denied { map } for pid=7097 comm="syz.5.2260" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 310.231949][ T36] audit: type=1400 audit(1756342089.952:56381): avc: denied { execute } for pid=7097 comm="syz.5.2260" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 310.273009][ T7102] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 310.287486][ T7102] overlayfs: missing 'lowerdir' [ 310.585286][ T7109] fuse: Unknown parameter 'fl' [ 310.729779][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.738891][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.946554][ T7134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7134 comm=syz.5.2271 [ 310.960022][ T7134] 9pnet_fd: Insufficient options for proto=fd [ 311.011985][ T3325] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 311.021544][ T3325] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 311.087131][ T7143] hid-generic 0000:0000:0000.0017: pid 7143 passed too short report [ 311.178506][ T470] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 311.329621][ T470] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.339840][ T470] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.349979][ T470] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.364562][ T470] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 311.374080][ T470] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 311.382451][ T470] usb 8-1: Product: syz [ 311.386659][ T470] usb 8-1: Manufacturer: syz [ 311.391496][ T470] usb 8-1: SerialNumber: syz [ 311.431483][ T7149] __vm_enough_memory: pid: 7149, comm: syz.8.2276, bytes: 18014402804453376 not enough memory for the allocation [ 311.455678][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.465566][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.465821][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.483174][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.599427][ T470] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 311.798816][ T7161] netlink: 'syz.6.2279': attribute type 16 has an invalid length. [ 311.805368][ T7132] netlink: 'syz.7.2270': attribute type 2 has an invalid length. [ 311.822200][ T3252] usb 8-1: USB disconnect, device number 44 [ 311.829316][ T3252] usblp0: removed [ 311.921707][ T7173] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.924280][ T7173] rust_binder: Write failure EFAULT in pid:451 [ 311.947974][ T7175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.005571][ T7177] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.063129][ T7179] rust_binder: Error in use_page_slow: ESRCH [ 312.069667][ T7179] rust_binder: use_range failure ESRCH [ 312.075980][ T7179] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 312.081820][ T7179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 312.089959][ T7179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:917 [ 312.138507][ T458] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 312.238504][ T3252] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 312.298497][ T458] usb 6-1: Using ep0 maxpacket: 16 [ 312.304981][ T458] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.316031][ T458] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.326123][ T458] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 312.335540][ T458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.344165][ T458] usb 6-1: config 0 descriptor?? [ 312.399598][ T3252] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.410649][ T3252] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.419995][ T3252] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.428809][ T3252] usb 8-1: config 0 descriptor?? [ 312.635394][ T7178] fuse: Unknown parameter 'f [ 312.635394][ T7178] ' [ 312.645407][ T3252] usbhid 8-1:0.0: can't add hid device: -71 [ 312.651929][ T3252] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 312.661010][ T3252] usb 8-1: USB disconnect, device number 45 [ 312.754081][ T458] hid-multitouch 0003:1FD2:6007.0018: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 312.958800][ T7171] netlink: 'syz.5.2283': attribute type 8 has an invalid length. [ 313.088634][ T3325] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 313.131624][ T470] usb 6-1: USB disconnect, device number 58 [ 313.239878][ T3325] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.251172][ T3325] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.264243][ T3325] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.273471][ T3325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.282354][ T3325] usb 8-1: config 0 descriptor?? [ 313.492177][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.503099][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.518435][ T36] audit: type=1400 audit(1756342093.262:56382): avc: denied { map } for pid=7212 comm="syz.6.2297" path="socket:[39528]" dev="sockfs" ino=39528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.557456][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.563124][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.568878][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.574726][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.580394][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.585975][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.591588][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.597528][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.603660][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.609557][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.615062][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.620869][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.626382][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.632075][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.637592][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.643277][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.648891][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.654501][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.660084][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.665746][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.671509][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.677108][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.682620][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.688241][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.694075][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.699732][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.705261][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.710881][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.716532][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.723364][ T3325] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 313.724880][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.736898][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.743127][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.748966][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.750675][ T3325] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 313.758601][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.788567][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.794202][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.808835][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.814618][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.820511][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.826165][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.835563][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.841376][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.847142][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.853017][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.859762][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.865490][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.871694][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.877417][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.883602][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.898638][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.908844][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.922470][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.938629][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.945984][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.957980][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.970443][ T7220] /dev/rnullb0: Can't lookup blockdev [ 313.982845][ T7220] /dev/rnullb0: Can't lookup blockdev [ 314.009993][ T7220] /dev/rnullb0: Can't lookup blockdev [ 314.021367][ T7220] /dev/rnullb0: Can't lookup blockdev [ 314.035981][ T7220] /dev/rnullb0: Can't lookup blockdev [ 314.049490][ T7220] /dev/rnullb0: Can't lookup blockdev [ 314.061961][ T7220] /dev/rnullb0: Can't lookup blockdev [ 314.074521][ T7220] /dev/rnullb0: Can't lookup blockdev [ 314.085971][ T7220] /dev/rnullb0: Can't lookup blockdev [ 314.098653][ T7220] /dev/rnullb0: Can't lookup blockdev [ 314.563276][ T7178] rust_binder: Write failure EFAULT in pid:453 [ 314.655746][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2305'. [ 314.679516][ T7247] 9pnet_fd: Insufficient options for proto=fd [ 314.715910][ T7253] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2307'. [ 314.948489][ T3325] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 314.973714][ T36] audit: type=1400 audit(1756342094.722:56383): avc: denied { accept } for pid=7290 comm="syz.8.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 315.098477][ T3325] usb 6-1: Using ep0 maxpacket: 32 [ 315.105349][ T3325] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.114994][ T3325] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 315.128526][ T3325] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.139086][ T3325] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.150409][ T3325] usb 6-1: string descriptor 0 read error: -22 [ 315.156667][ T3325] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.166035][ T3325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.179445][ T3325] usb 6-1: 0:2 : does not exist [ 315.279631][ T7320] 9pnet_fd: Insufficient options for proto=fd [ 315.309406][ T36] audit: type=1400 audit(1756342095.062:56384): avc: denied { execute } for pid=7321 comm="syz.6.2329" name="file1" dev="ramfs" ino=39697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 315.316886][ T7322] 9pnet_fd: Insufficient options for proto=fd [ 315.332046][ T36] audit: type=1400 audit(1756342095.062:56385): avc: denied { execute_no_trans } for pid=7321 comm="syz.6.2329" path="/file1" dev="ramfs" ino=39697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 315.361145][ T36] audit: type=1400 audit(1756342095.062:56386): avc: denied { mounton } for pid=7321 comm="syz.6.2329" path="/" dev="ramfs" ino=39696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 315.441861][ T458] usb 6-1: USB disconnect, device number 59 [ 315.577153][ T3252] usb 8-1: USB disconnect, device number 46 [ 315.617673][ T7337] rust_binder: 462: no such ref 2 [ 315.623162][ T7337] rust_binder: Read failure Err(EAGAIN) in pid:462 [ 315.723923][ T7343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.816165][ T7362] netlink: 'syz.8.2340': attribute type 4 has an invalid length. [ 315.837180][ T7361] netlink: 'syz.8.2340': attribute type 4 has an invalid length. [ 315.901262][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2345'. [ 315.925562][ T7378] tipc: Enabling of bearer rejected, failed to enable media [ 316.108504][ T3325] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 316.138648][ T7397] /dev/rnullb0: Can't lookup blockdev [ 316.258614][ T3325] usb 8-1: Using ep0 maxpacket: 16 [ 316.265232][ T3325] usb 8-1: config 8 has an invalid interface number: 138 but max is 0 [ 316.273700][ T3325] usb 8-1: config 8 has no interface number 0 [ 316.279931][ T3325] usb 8-1: config 8 interface 138 has no altsetting 0 [ 316.288154][ T3325] usb 8-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=40.9e [ 316.297392][ T3325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.305485][ T3325] usb 8-1: Product: syz [ 316.309690][ T3325] usb 8-1: Manufacturer: syz [ 316.314306][ T3325] usb 8-1: SerialNumber: syz [ 316.448489][ T470] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 316.521764][ T7370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:481 [ 316.523699][ T3325] snd-usb-audio 8-1:8.138: probe with driver snd-usb-audio failed with error -71 [ 316.546537][ T3325] usb 8-1: USB disconnect, device number 47 [ 316.599906][ T470] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.610172][ T470] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.619857][ T470] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 316.628992][ T470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 316.637013][ T470] usb 6-1: SerialNumber: syz [ 316.782576][ T7429] overlay: ./cgroup is not a directory [ 316.846097][ T470] usb 6-1: 0:2 : does not exist [ 316.855088][ T470] usb 6-1: USB disconnect, device number 60 [ 317.017014][ T292] bridge_slave_1: left allmulticast mode [ 317.022919][ T292] bridge_slave_1: left promiscuous mode [ 317.028718][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.036588][ T292] bridge_slave_0: left allmulticast mode [ 317.046376][ T292] bridge_slave_0: left promiscuous mode [ 317.052129][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.208918][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.216343][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.233569][ T7433] bridge_slave_0: entered allmulticast mode [ 317.243887][ T7433] bridge_slave_0: entered promiscuous mode [ 317.255108][ T292] tipc: Disabling bearer [ 317.261980][ T292] tipc: Left network mode [ 317.266847][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.274438][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.281963][ T7433] bridge_slave_1: entered allmulticast mode [ 317.288640][ T7433] bridge_slave_1: entered promiscuous mode [ 317.301619][ T292] veth1_macvtap: left promiscuous mode [ 317.307300][ T292] veth0_vlan: left promiscuous mode [ 317.376720][ T7460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32845 sclass=netlink_route_socket pid=7460 comm=syz.5.2375 [ 317.414427][ T36] audit: type=1400 audit(1756342097.162:56387): avc: denied { audit_write } for pid=7462 comm="syz.8.2376" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 317.436504][ T7463] overlayfs: failed to clone upperpath [ 317.447668][ T7460] /dev/rnullb0: Can't open blockdev [ 317.455546][ T36] audit: type=1326 audit(1756342097.202:56388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.8.2376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2718b8ebe9 code=0x0 [ 317.476076][ T7467] devpts: called with bogus options [ 317.580579][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.587714][ T7433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.595103][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.602298][ T7433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.636382][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.644693][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.668647][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.675766][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.685296][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.692439][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.724548][ T7433] veth0_vlan: entered promiscuous mode [ 317.742849][ T7433] veth1_macvtap: entered promiscuous mode [ 317.814247][ T36] audit: type=1400 audit(1756342097.562:56389): avc: denied { write } for pid=7480 comm="syz.6.2365" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 317.956946][ T36] audit: type=1400 audit(1756342097.702:56390): avc: denied { listen } for pid=7490 comm="syz.5.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 318.061538][ T7495] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 318.878768][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 319.118496][ T3325] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 320.138522][ T470] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 320.289638][ T470] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 320.299465][ T470] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 320.309233][ T470] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.323676][ T470] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 320.332970][ T470] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 320.341243][ T470] usb 8-1: Product: syz [ 320.345511][ T470] usb 8-1: Manufacturer: syz [ 320.350323][ T470] usb 8-1: SerialNumber: syz [ 320.453877][ T7597] tmpfs: Bad value for 'nr_inodes' [ 320.558015][ T470] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 320.631434][ T7611] tipc: Enabling of bearer rejected, failed to enable media [ 320.653479][ T7615] overlayfs: failed to clone upperpath [ 320.758694][ T36] audit: type=1326 audit(1773119545.507:56391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x50000 [ 320.782442][ T36] audit: type=1326 audit(1773119545.507:56392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x50000 [ 320.806395][ T36] audit: type=1326 audit(1773119545.507:56393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x50000 [ 320.829695][ T36] audit: type=1326 audit(1773119545.507:56394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x50000 [ 320.853339][ T36] audit: type=1326 audit(1773119545.507:56395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x50000 [ 320.877254][ T36] audit: type=1326 audit(1773119545.507:56396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x50000 [ 320.900686][ T36] audit: type=1326 audit(1773119545.507:56397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x50000 [ 320.902510][ T3252] usb 8-1: USB disconnect, device number 48 [ 320.925582][ T36] audit: type=1326 audit(1773119545.507:56398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x50000 [ 320.932403][ T3554] Bluetooth: hci0: command 0x1003 tx timeout [ 320.953901][ T36] audit: type=1326 audit(1773119545.507:56399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x50000 [ 320.961028][ T3252] usblp0: removed [ 320.983305][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 320.993831][ T36] audit: type=1326 audit(1773119545.507:56400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x50000 [ 321.887598][ T3325] usb 6-1: unable to get BOS descriptor or descriptor too short [ 321.907514][ T3325] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 321.915476][ T3325] usb 6-1: can't read configurations, error -71 [ 322.058251][ T7638] SELinux: security_context_str_to_sid (syste_uŬgı É:˙ß) failed with errno=-22 [ 322.338456][ T3252] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 322.489580][ T3252] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 322.499026][ T3252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.509232][ T3252] usb 7-1: config 0 descriptor?? [ 322.720042][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.729671][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.738070][ T3252] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 322.749495][ T3252] asix 7-1:0.0: probe with driver asix failed with error -32 [ 323.047441][ T7676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7676 comm=syz.5.2447 [ 323.202670][ T7702] overlayfs: failed to clone upperpath [ 323.209192][ T7702] /dev/loop0: Can't lookup blockdev [ 323.358501][ T3325] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 323.454481][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.474207][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.508918][ T3325] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 323.518288][ T3325] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 323.526207][ T3325] usb 6-1: can't read configurations, error -61 [ 323.658485][ T3325] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 323.718493][ T31] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 323.809055][ T3325] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 323.818309][ T3325] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 323.826015][ T3325] usb 6-1: can't read configurations, error -61 [ 323.832503][ T3325] usb usb6-port1: attempt power cycle [ 323.869839][ T31] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.884400][ T31] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 323.893584][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 323.901746][ T31] usb 8-1: Product: syz [ 323.905935][ T31] usb 8-1: Manufacturer: syz [ 323.910578][ T31] usb 8-1: SerialNumber: syz [ 324.117431][ T31] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 324.188528][ T3325] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 324.197101][ T7723] netlink: 'syz.8.2465': attribute type 4 has an invalid length. [ 324.209340][ T3325] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 324.218847][ T3325] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 324.226750][ T3325] usb 6-1: can't read configurations, error -61 [ 324.285312][ T7734] tipc: Enabling of bearer rejected, media not registered [ 324.318208][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.327031][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.336295][ T31] usb 8-1: USB disconnect, device number 49 [ 324.342878][ T31] usblp0: removed [ 324.358484][ T3325] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 324.379162][ T3325] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 324.388056][ T3325] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 324.395744][ T3325] usb 6-1: can't read configurations, error -61 [ 324.402183][ T3325] usb usb6-port1: unable to enumerate USB device [ 324.847166][ T7744] 9pnet_fd: Insufficient options for proto=fd [ 324.888295][ T7756] rust_binder: Failed copying remainder into alloc: EFAULT [ 324.888323][ T7756] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 324.895776][ T7756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 324.904344][ T7756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:547 [ 324.912250][ T7763] overlayfs: failed to clone lowerpath [ 324.974056][ T7768] rust_binder: 550: no such ref 4194306 [ 324.979718][ T7768] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 325.018770][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2485'. [ 325.118118][ T3325] usb 7-1: USB disconnect, device number 13 [ 325.374984][ T7814] binder: Unknown parameter '18446744073709551615œI*0xffffffffffffffff' [ 325.548475][ T3325] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 325.658444][ T3252] usb 8-1: new low-speed USB device number 50 using dummy_hcd [ 325.709514][ T3325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.728445][ T3325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 325.748458][ T3325] usb 7-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 325.757727][ T3325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.779262][ T3325] usb 7-1: config 0 descriptor?? [ 325.784861][ T7805] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 325.829498][ T3252] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 325.838833][ T3252] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.847683][ T3252] usb 8-1: config 0 descriptor?? [ 326.198503][ T3325] hid-rmi 0003:0461:4E72.001A: global environment stack underflow [ 326.206431][ T3325] hid-rmi 0003:0461:4E72.001A: item 0 0 1 11 parsing failed [ 326.214027][ T3325] hid-rmi 0003:0461:4E72.001A: parse failed [ 326.220127][ T3325] hid-rmi 0003:0461:4E72.001A: probe with driver hid-rmi failed with error -22 [ 326.248609][ T7834] FAULT_INJECTION: forcing a failure. [ 326.248609][ T7834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.262182][ T7834] CPU: 0 UID: 0 PID: 7834 Comm: syz.5.2505 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 326.262219][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.262238][ T7834] Call Trace: [ 326.262246][ T7834] [ 326.262258][ T7834] __dump_stack+0x21/0x30 [ 326.262293][ T7834] dump_stack_lvl+0x10c/0x190 [ 326.262325][ T7834] ? __cfi_dump_stack_lvl+0x10/0x10 [ 326.262355][ T7834] dump_stack+0x19/0x20 [ 326.262431][ T7834] should_fail_ex+0x3d9/0x530 [ 326.262464][ T7834] should_fail+0xf/0x20 [ 326.262494][ T7834] should_fail_usercopy+0x1e/0x30 [ 326.262516][ T7834] _copy_to_user+0x24/0xa0 [ 326.262541][ T7834] simple_read_from_buffer+0xed/0x160 [ 326.262571][ T7834] proc_fail_nth_read+0x19e/0x210 [ 326.262601][ T7834] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 326.262631][ T7834] ? bpf_lsm_file_permission+0xd/0x20 [ 326.262656][ T7834] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 326.262687][ T7834] vfs_read+0x27b/0xb60 [ 326.262722][ T7834] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 326.262756][ T7834] ? __cfi_vfs_read+0x10/0x10 [ 326.262784][ T7834] ? __kasan_check_write+0x18/0x20 [ 326.262807][ T7834] ? mutex_lock+0x92/0x1c0 [ 326.262826][ T7834] ? __cfi_mutex_lock+0x10/0x10 [ 326.262847][ T7834] ? __fget_files+0x2c5/0x340 [ 326.262873][ T7834] ksys_read+0x141/0x250 [ 326.262893][ T7834] ? __cfi_ksys_read+0x10/0x10 [ 326.262915][ T7834] ? __kasan_check_read+0x15/0x20 [ 326.262938][ T7834] __x64_sys_read+0x7f/0x90 [ 326.262953][ T7834] x64_sys_call+0x2638/0x2ee0 [ 326.262983][ T7834] do_syscall_64+0x58/0xf0 [ 326.263013][ T7834] ? clear_bhb_loop+0x50/0xa0 [ 326.263036][ T7834] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 326.263070][ T7834] RIP: 0033:0x7f69b858d5fc [ 326.263085][ T7834] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 326.263099][ T7834] RSP: 002b:00007f69b9336030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.263119][ T7834] RAX: ffffffffffffffda RBX: 00007f69b87b5fa0 RCX: 00007f69b858d5fc [ 326.263139][ T7834] RDX: 000000000000000f RSI: 00007f69b93360a0 RDI: 0000000000000006 [ 326.263155][ T7834] RBP: 00007f69b9336090 R08: 0000000000000000 R09: 0000000000000000 [ 326.263170][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.263185][ T7834] R13: 00007f69b87b6038 R14: 00007f69b87b5fa0 R15: 00007ffc28436d08 [ 326.263206][ T7834] [ 326.511189][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 326.511228][ T36] audit: type=1400 audit(1773119551.257:56468): avc: denied { ioctl } for pid=7804 comm="syz.6.2494" path="/8/file0" dev="overlay" ino=2 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 326.525653][ T3325] usb 7-1: USB disconnect, device number 14 [ 326.633662][ T36] audit: type=1400 audit(1773119551.377:56469): avc: denied { read write } for pid=7840 comm="syz.5.2507" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 326.657026][ T36] audit: type=1400 audit(1773119551.377:56470): avc: denied { open } for pid=7840 comm="syz.5.2507" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 326.895079][ T7847] overlayfs: failed to clone upperpath [ 326.904429][ T7847] fuse: Unknown parameter 'ŒëŸİ‹èÚ§¸ˆrootmode' [ 327.040966][ T36] audit: type=1400 audit(1773119551.787:56471): avc: denied { unmount } for pid=7433 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 327.510878][ T36] audit: type=1400 audit(1773119552.257:56472): avc: denied { append } for pid=7880 comm="syz.5.2520" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.536008][ T36] audit: type=1400 audit(1773119552.257:56473): avc: denied { map } for pid=7880 comm="syz.5.2520" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.559569][ T36] audit: type=1400 audit(1773119552.257:56474): avc: denied { execute } for pid=7880 comm="syz.5.2520" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.596037][ T36] audit: type=1400 audit(1773119552.307:56475): avc: denied { ioctl } for pid=7880 comm="syz.5.2520" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.898447][ T470] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 328.061610][ T470] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 328.079629][ T470] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 328.100165][ T470] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.126316][ T470] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 328.138699][ T470] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.140679][ T3252] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 328.147016][ T470] usb 7-1: Product: syz [ 328.166061][ T3252] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 328.167846][ T470] usb 7-1: Manufacturer: syz [ 328.188279][ T3252] asix 8-1:0.0: probe with driver asix failed with error -71 [ 328.189080][ T470] usb 7-1: SerialNumber: syz [ 328.207140][ T3252] usb 8-1: USB disconnect, device number 50 [ 328.208877][ T470] usb 7-1: config 0 descriptor?? [ 328.434306][ T7889] netlink: 'syz.6.2523': attribute type 4 has an invalid length. [ 328.442142][ T7889] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2523'. [ 328.491271][ T10] usb 7-1: USB disconnect, device number 15 [ 328.538514][ T470] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 328.698560][ T470] usb 6-1: Using ep0 maxpacket: 16 [ 328.705158][ T470] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.716722][ T470] usb 6-1: config 0 interface 0 has no altsetting 0 [ 328.723451][ T470] usb 6-1: New USB device found, idVendor=0466, idProduct=c219, bcdDevice= 0.00 [ 328.732587][ T470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.742042][ T470] usb 6-1: config 0 descriptor?? [ 328.770571][ T7930] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.926992][ T36] audit: type=1400 audit(1773119553.667:56476): avc: denied { execute_no_trans } for pid=7934 comm="syz.7.2538" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 328.994616][ T36] audit: type=1326 audit(1773119553.737:56477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.8.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 329.165888][ T470] hid-generic 0003:0466:C219.001B: unknown main item tag 0x0 [ 329.173564][ T470] hid-generic 0003:0466:C219.001B: unknown main item tag 0x0 [ 329.181195][ T470] hid-generic 0003:0466:C219.001B: unknown main item tag 0x0 [ 329.188751][ T470] hid-generic 0003:0466:C219.001B: unknown main item tag 0x0 [ 329.196379][ T470] hid-generic 0003:0466:C219.001B: unknown main item tag 0x0 [ 329.204637][ T470] hid-generic 0003:0466:C219.001B: hidraw0: USB HID v0.05 Device [HID 0466:c219] on usb-dummy_hcd.5-1/input0 [ 329.420883][ T7951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=7951 comm=syz.5.2533 [ 329.434140][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2533'. [ 329.444817][ T7951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.453492][ T7951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.589831][ T7957] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2544'. [ 329.599044][ T7958] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2544'. [ 329.883034][ T7962] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 329.883168][ T7962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59 [ 330.175343][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2553'. [ 330.319341][ T7990] syzkaller0: entered promiscuous mode [ 330.325136][ T7990] syzkaller0: entered allmulticast mode [ 330.331517][ T7989] tipc: Started in network mode [ 330.336522][ T7989] tipc: Node identity 367c08258c1a, cluster identity 4711 [ 330.343801][ T7989] tipc: Enabled bearer , priority 0 [ 330.355193][ T7989] tipc: Resetting bearer [ 330.358483][ T3252] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 330.375547][ T7989] tipc: Disabling bearer [ 330.469394][ T7999] binder: Bad value for 'max' [ 330.519558][ T3252] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 330.528817][ T3252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.538772][ T3252] usb 7-1: config 0 descriptor?? [ 330.747223][ T3252] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 330.757411][ T3252] asix 7-1:0.0: probe with driver asix failed with error -71 [ 330.766018][ T3252] usb 7-1: USB disconnect, device number 16 [ 330.798456][ T3325] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 330.827523][ T8004] tipc: Enabling of bearer rejected, failed to enable media [ 330.968448][ T3325] usb 8-1: Using ep0 maxpacket: 32 [ 330.975097][ T3325] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 330.986650][ T3325] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 330.998855][ T3325] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 331.008296][ T3325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.018056][ T3325] usb 8-1: config 0 descriptor?? [ 331.023712][ T8002] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 331.032159][ T3325] hub 8-1:0.0: USB hub found [ 331.068507][ T3252] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 331.198460][ T3252] usb 7-1: device descriptor read/64, error -71 [ 331.232567][ T3325] hub 8-1:0.0: 1 port detected [ 331.317475][ T470] usb 6-1: USB disconnect, device number 67 [ 331.438492][ T3252] usb 7-1: device descriptor read/64, error -71 [ 331.470027][ T8028] overlayfs: failed to clone upperpath [ 331.658471][ T470] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 331.678461][ T3252] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 331.788447][ T470] usb 6-1: device descriptor read/64, error -71 [ 331.818452][ T3252] usb 7-1: device descriptor read/64, error -71 [ 332.028483][ T470] usb 6-1: device descriptor read/64, error -71 [ 332.041535][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 332.041554][ T36] audit: type=1400 audit(1773119556.787:56479): avc: denied { getattr } for pid=8000 comm="syz.7.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 332.067588][ T3252] usb 7-1: device descriptor read/64, error -71 [ 332.068836][ T10] usb 8-1: USB disconnect, device number 51 [ 332.080378][ T3325] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 332.188461][ T3252] usb usb7-port1: attempt power cycle [ 332.278544][ T470] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 332.418477][ T470] usb 6-1: device descriptor read/64, error -71 [ 332.529000][ T3252] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 332.549813][ T3252] usb 7-1: device descriptor read/8, error -71 [ 332.658486][ T470] usb 6-1: device descriptor read/64, error -71 [ 332.679680][ T3252] usb 7-1: device descriptor read/8, error -71 [ 332.750768][ T8053] netlink: 'syz.8.2577': attribute type 6 has an invalid length. [ 332.771866][ T470] usb usb6-port1: attempt power cycle [ 332.918530][ T3252] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 332.939768][ T3252] usb 7-1: device descriptor read/8, error -71 [ 333.069601][ T3252] usb 7-1: device descriptor read/8, error -71 [ 333.109182][ T470] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 333.133664][ T470] usb 6-1: device descriptor read/8, error -71 [ 333.178571][ T3252] usb usb7-port1: unable to enumerate USB device [ 333.266726][ T8078] rust_binder: Read failure Err(EAGAIN) in pid:85 [ 333.269495][ T470] usb 6-1: device descriptor read/8, error -71 [ 333.321268][ T8085] overlayfs: failed to clone upperpath [ 333.327513][ T8084] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 333.337750][ T36] audit: type=1400 audit(1773119558.077:56480): avc: denied { relabelto } for pid=8082 comm="syz.8.2587" name="file1" dev="tmpfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:audisp_exec_t:s0" [ 333.371929][ T36] audit: type=1400 audit(1773119558.107:56481): avc: denied { associate } for pid=8082 comm="syz.8.2587" name="file1" dev="tmpfs" ino=2417 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:audisp_exec_t:s0" [ 333.447826][ T8093] 9pnet_fd: Insufficient options for proto=fd [ 333.462851][ T8095] rust_binder: Write failure EFAULT in pid:612 [ 333.528464][ T470] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 333.562426][ T8108] 9pnet_fd: Insufficient options for proto=fd [ 333.569465][ T470] usb 6-1: device descriptor read/8, error -71 [ 333.702037][ T470] usb 6-1: device descriptor read/8, error -71 [ 333.747135][ T8119] tipc: Started in network mode [ 333.752246][ T8119] tipc: Node identity aed74a7a3f63, cluster identity 4711 [ 333.759714][ T8119] tipc: Enabled bearer , priority 0 [ 333.781377][ T8119] syzkaller0: entered promiscuous mode [ 333.786888][ T8119] syzkaller0: entered allmulticast mode [ 333.792887][ T8119] tipc: Resetting bearer [ 333.799591][ T13] tipc: Resetting bearer [ 333.805732][ T8119] tipc: Resetting bearer [ 333.818137][ T8119] tipc: Disabling bearer [ 333.823456][ T470] usb usb6-port1: unable to enumerate USB device [ 333.865001][ T8121] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 333.886247][ T8124] binder: Unknown parameter '' [ 334.128474][ T470] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 334.218480][ T458] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 334.278451][ T470] usb 7-1: Using ep0 maxpacket: 8 [ 334.285017][ T470] usb 7-1: unable to get BOS descriptor or descriptor too short [ 334.293777][ T470] usb 7-1: config 143 has an invalid descriptor of length 0, skipping remainder of the config [ 334.304233][ T470] usb 7-1: config 143 has 0 interfaces, different from the descriptor's value: 2 [ 334.315244][ T470] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 334.324968][ T470] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.333345][ T470] usb 7-1: Product: syz [ 334.338580][ T470] usb 7-1: Manufacturer: syz [ 334.348437][ T470] usb 7-1: SerialNumber: syz [ 334.379836][ T458] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 334.390481][ T458] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 334.399651][ T458] usb 8-1: config 220 interface 0 has no altsetting 0 [ 334.408247][ T458] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 334.417563][ T458] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.425647][ T458] usb 8-1: Product: syz [ 334.430169][ T458] usb 8-1: Manufacturer: syz [ 334.434893][ T458] usb 8-1: SerialNumber: syz [ 334.560492][ T470] usb 7-1: USB disconnect, device number 21 [ 334.649135][ T458] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 334.655828][ T458] usb 8-1: No valid video chain found. [ 334.662704][ T458] usb 8-1: USB disconnect, device number 52 [ 334.748493][ T3325] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 334.900073][ T3325] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 334.907674][ T3325] usb 6-1: can't read configurations, error -61 [ 335.038538][ T3325] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 335.162909][ T8151] rust_binder: Write failure EFAULT in pid:616 [ 335.190510][ T3325] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 335.204563][ T3325] usb 6-1: can't read configurations, error -61 [ 335.211414][ T3325] usb usb6-port1: attempt power cycle [ 335.318478][ T470] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 335.448484][ T470] usb 7-1: device descriptor read/64, error -71 [ 335.535108][ T8169] fuse: Bad value for 'fd' [ 335.539624][ T36] audit: type=1400 audit(1773119560.277:56482): avc: denied { associate } for pid=8168 comm="syz.8.2621" name="file5" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 335.568693][ T3325] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 335.590309][ T3325] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 335.598122][ T3325] usb 6-1: can't read configurations, error -61 [ 335.708491][ T470] usb 7-1: device descriptor read/64, error -71 [ 335.728460][ T3325] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 335.760206][ T3325] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 335.778102][ T3325] usb 6-1: can't read configurations, error -61 [ 335.784696][ T3325] usb usb6-port1: unable to enumerate USB device [ 335.928469][ T3252] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 335.958499][ T470] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 336.080087][ T3252] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 336.087729][ T3252] usb 6-1: can't read configurations, error -61 [ 336.088478][ T470] usb 7-1: device descriptor read/64, error -71 [ 336.218483][ T3252] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 336.338460][ T470] usb 7-1: device descriptor read/64, error -71 [ 336.380139][ T3252] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 336.387797][ T3252] usb 6-1: can't read configurations, error -61 [ 336.395002][ T3252] usb usb6-port1: attempt power cycle [ 336.448683][ T470] usb usb7-port1: attempt power cycle [ 336.738514][ T3252] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 336.760388][ T3252] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 336.768110][ T3252] usb 6-1: can't read configurations, error -61 [ 336.788481][ T470] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 336.809465][ T470] usb 7-1: device descriptor read/8, error -71 [ 336.898570][ T3252] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 336.920343][ T3252] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 336.927959][ T3252] usb 6-1: can't read configurations, error -61 [ 336.934776][ T3252] usb usb6-port1: unable to enumerate USB device [ 336.949568][ T470] usb 7-1: device descriptor read/8, error -71 [ 337.188591][ T470] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 337.209546][ T470] usb 7-1: device descriptor read/8, error -71 [ 337.340278][ T470] usb 7-1: device descriptor read/8, error -71 [ 337.448654][ T470] usb usb7-port1: unable to enumerate USB device [ 344.469455][ T8223] net_ratelimit: 33658 callbacks suppressed [ 344.469481][ T8223] sock: sock_set_timeout: `syz.8.2637' (pid 8223) tries to set negative timeout [ 344.487328][ T36] audit: type=1400 audit(1773119569.227:56483): avc: denied { setattr } for pid=8231 comm="syz.7.2640" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 344.658447][ T470] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 344.756514][ T8248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8248 comm=syz.8.2644 [ 344.819586][ T470] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.831324][ T470] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 344.843649][ T470] usb 7-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 344.853366][ T470] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.861744][ T470] usb 7-1: Product: syz [ 344.866118][ T470] usb 7-1: Manufacturer: syz [ 344.871078][ T470] usb 7-1: SerialNumber: syz [ 344.886980][ T470] usb 7-1: config 0 descriptor?? [ 344.923199][ T8257] /dev/rnullb0: Can't open blockdev [ 344.955866][ T8264] netlink: 5308 bytes leftover after parsing attributes in process `syz.8.2649'. [ 344.966195][ T8264] overlayfs: failed to clone upperpath [ 345.003864][ T8268] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 345.032708][ T36] audit: type=1326 audit(1773119569.777:56484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.8.2652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2718b8ebe9 code=0x0 [ 345.149969][ T8283] 9pnet_fd: Insufficient options for proto=fd [ 345.390687][ T36] audit: type=1400 audit(1773119570.137:56485): avc: denied { create } for pid=4827 comm="syz-executor" name="#33" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 345.438768][ T36] audit: type=1400 audit(1773119570.157:56486): avc: denied { link } for pid=4827 comm="syz-executor" name="#33" dev="tmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 345.475942][ T36] audit: type=1400 audit(1773119570.157:56487): avc: denied { rename } for pid=4827 comm="syz-executor" name="#34" dev="tmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 345.501104][ T8305] 9pnet_fd: Insufficient options for proto=fd [ 345.602699][ T8312] usb usb8: usbfs: process 8312 (syz.5.2666) did not claim interface 0 before use [ 345.710957][ T8318] overlayfs: failed to resolve './file1': -2 [ 345.723851][ T8318] netlink: 'syz.8.2667': attribute type 4 has an invalid length. [ 346.048434][ T3252] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 346.199647][ T3252] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.210825][ T3252] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.220705][ T3252] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.233684][ T3252] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.242957][ T3252] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.251834][ T3252] usb 8-1: config 0 descriptor?? [ 346.257708][ T3252] hub 8-1:0.0: USB hub found [ 346.460999][ T3252] hub 8-1:0.0: 14 ports detected [ 346.465465][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2673'. [ 346.466730][ T3252] hub 8-1:0.0: insufficient power available to use all downstream ports [ 346.710376][ T8334] rust_binder: 8322 RLIMIT_NICE not set [ 347.170911][ T458] usb 7-1: USB disconnect, device number 26 [ 347.261280][ T329] bridge_slave_1: left allmulticast mode [ 347.267087][ T329] bridge_slave_1: left promiscuous mode [ 347.273091][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.281351][ T329] bridge_slave_0: left allmulticast mode [ 347.287133][ T329] bridge_slave_0: left promiscuous mode [ 347.293023][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.451417][ T329] veth1_macvtap: left promiscuous mode [ 347.457232][ T329] veth0_vlan: left promiscuous mode [ 347.499317][ T3252] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 347.518847][ T3252] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 347.640384][ T8351] fuseblk: Unknown parameter 'g' [ 347.698497][ T8359] 9pnet_fd: Insufficient options for proto=fd [ 347.698950][ T8360] netlink: 'syz.6.2683': attribute type 2 has an invalid length. [ 347.736585][ T8363] tipc: Enabled bearer , priority 0 [ 347.755908][ T8363] syzkaller0: entered promiscuous mode [ 347.761706][ T8363] syzkaller0: entered allmulticast mode [ 347.767794][ T8363] tipc: Resetting bearer [ 347.775234][ T8363] tipc: Resetting bearer [ 347.787646][ T8363] tipc: Disabling bearer [ 347.904212][ T8366] incfs: Can't find or create .index dir in ./file0 [ 347.910976][ T8366] incfs: mount failed -17 [ 347.916051][ T8365] netlink: 'syz.6.2685': attribute type 1 has an invalid length. [ 347.923834][ T8365] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2685'. [ 347.933654][ T8365] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 347.956049][ T8368] fuse: Bad value for 'fd' [ 348.012984][ T8370] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 348.388583][ T426] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 348.435338][ T36] audit: type=1400 audit(1773119573.177:56488): avc: denied { create } for pid=8389 comm="syz.5.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 348.474696][ T8397] 9pnet_fd: Insufficient options for proto=fd [ 348.528580][ T426] usb 7-1: device descriptor read/64, error -71 [ 348.636035][ T8413] binder: Bad value for 'stats' [ 348.665490][ T8420] /dev/rnullb0: Can't open blockdev [ 348.671527][ T8420] /dev/rnullb0: Can't open blockdev [ 348.747269][ T8429] netlink: 'syz.5.2706': attribute type 2 has an invalid length. [ 348.751819][ T8431] raw_sendmsg: syz.8.2707 forgot to set AF_INET. Fix it! [ 348.755295][ T8428] netlink: 'syz.5.2706': attribute type 2 has an invalid length. [ 348.769977][ T426] usb 7-1: device descriptor read/64, error -71 [ 348.846638][ T8443] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2712'. [ 348.888553][ T417] usb 8-1: USB disconnect, device number 53 [ 348.922144][ T8449] netlink: 1300 bytes leftover after parsing attributes in process `syz.8.2713'. [ 349.018458][ T426] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 349.038456][ T470] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 349.148493][ T426] usb 7-1: device descriptor read/64, error -71 [ 349.188498][ T470] usb 6-1: Using ep0 maxpacket: 16 [ 349.195280][ T470] usb 6-1: unable to get BOS descriptor or descriptor too short [ 349.204014][ T470] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 349.214521][ T470] usb 6-1: config 1 interface 0 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.227782][ T470] usb 6-1: config 1 interface 0 has no altsetting 0 [ 349.235997][ T470] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.245371][ T470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.253587][ T470] usb 6-1: Product: syz [ 349.257766][ T470] usb 6-1: Manufacturer: syz [ 349.262519][ T470] usb 6-1: SerialNumber: syz [ 349.388509][ T426] usb 7-1: device descriptor read/64, error -71 [ 349.498555][ T426] usb usb7-port1: attempt power cycle [ 349.581541][ T470] usb 6-1: bad CDC descriptors [ 349.587742][ T470] usb 6-1: USB disconnect, device number 80 [ 349.713664][ T8452] 9pnet_fd: Insufficient options for proto=fd [ 349.783830][ T36] audit: type=1400 audit(1773119574.527:56489): avc: denied { bind } for pid=8460 comm="syz.8.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 349.812915][ T8465] TCP: TCP_TX_DELAY enabled [ 349.848478][ T426] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 349.879175][ T426] usb 7-1: device descriptor read/8, error -71 [ 349.998459][ T3252] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 350.009525][ T426] usb 7-1: device descriptor read/8, error -71 [ 350.036705][ T8477] 9pnet_fd: Insufficient options for proto=fd [ 350.123177][ T8491] syzkaller0: entered promiscuous mode [ 350.128842][ T8491] syzkaller0: entered allmulticast mode [ 350.137820][ T36] audit: type=1400 audit(1773119574.877:56490): avc: denied { mounton } for pid=8489 comm="syz.5.2730" path="/file0" dev="ramfs" ino=45865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 350.137839][ T8491] ./file0: Can't lookup blockdev [ 350.178465][ T3252] usb 8-1: Using ep0 maxpacket: 32 [ 350.184766][ T3252] usb 8-1: config 1 has an invalid interface number: 137 but max is 0 [ 350.193215][ T3252] usb 8-1: config 1 has no interface number 0 [ 350.199494][ T3252] usb 8-1: config 1 interface 137 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 545 [ 350.209923][ T3252] usb 8-1: config 1 interface 137 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.219970][ T3252] usb 8-1: config 1 interface 137 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 350.230246][ T3252] usb 8-1: config 1 interface 137 has no altsetting 0 [ 350.238651][ T3252] usb 8-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 350.249329][ T3252] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.257642][ T3252] usb 8-1: Product: syz [ 350.261883][ T3252] usb 8-1: Manufacturer: syz [ 350.266872][ T3252] usb 8-1: SerialNumber: syz [ 350.268533][ T426] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 350.280490][ T8456] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 350.300011][ T426] usb 7-1: device descriptor read/8, error -71 [ 350.332303][ T8495] 9pnet_fd: Insufficient options for proto=fd [ 350.429527][ T426] usb 7-1: device descriptor read/8, error -71 [ 350.538614][ T426] usb usb7-port1: unable to enumerate USB device [ 350.548496][ T3252] pl2303 8-1:1.137: required interrupt-in endpoint missing [ 350.561196][ T3252] usb 8-1: USB disconnect, device number 54 [ 350.618456][ T458] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 350.789566][ T458] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.800630][ T458] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 350.810359][ T458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.819481][ T458] usb 6-1: config 0 descriptor?? [ 351.209665][ T8512] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 351.229213][ T458] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 351.247978][ T458] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001C/input/input26 [ 351.321363][ T458] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 351.422261][ T8525] 9pnet_fd: Insufficient options for proto=fd [ 351.633104][ T36] audit: type=1326 audit(1773119576.377:56491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.5.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b858ebe9 code=0x50000 [ 351.662931][ T36] audit: type=1326 audit(1773119576.377:56492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.5.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b858ebe9 code=0x50000 [ 351.686754][ T36] audit: type=1326 audit(1773119576.377:56493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.5.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b858ebe9 code=0x50000 [ 351.710508][ T36] audit: type=1326 audit(1773119576.377:56494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.5.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b858ebe9 code=0x50000 [ 351.735264][ T36] audit: type=1326 audit(1773119576.377:56495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.5.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b858ebe9 code=0x50000 [ 351.761110][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.768679][ T36] audit: type=1326 audit(1773119576.397:56496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.5.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b858ebe9 code=0x50000 [ 351.771505][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.800741][ T36] audit: type=1326 audit(1773119576.397:56497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.5.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b858ebe9 code=0x50000 [ 351.827867][ T36] audit: type=1326 audit(1773119576.397:56498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.5.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b858ebe9 code=0x50000 [ 351.979989][ T8540] /dev/rnullb0: Can't open blockdev [ 352.808443][ T425] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 352.978470][ T425] usb 8-1: Using ep0 maxpacket: 16 [ 352.985782][ T425] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 352.994905][ T425] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.005144][ T425] usb 8-1: config 0 has no interface number 0 [ 353.012730][ T425] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 353.021972][ T425] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.030014][ T425] usb 8-1: Product: syz [ 353.034213][ T425] usb 8-1: Manufacturer: syz [ 353.038876][ T425] usb 8-1: SerialNumber: syz [ 353.048729][ T425] usb 8-1: config 0 descriptor?? [ 353.056677][ T425] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 353.063294][ T425] usb 8-1: No valid video chain found. [ 353.218457][ T470] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 353.259422][ T417] usb 8-1: USB disconnect, device number 55 [ 353.368434][ T470] usb 7-1: Using ep0 maxpacket: 16 [ 353.377068][ T470] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.385897][ T425] usb 6-1: USB disconnect, device number 81 [ 353.388867][ T470] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.413878][ T470] usb 7-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 353.424473][ T470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.433538][ T470] usb 7-1: config 0 descriptor?? [ 354.018480][ T425] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 354.148497][ T425] usb 8-1: device descriptor read/64, error -71 [ 354.241645][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.250298][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.264897][ T470] usbhid 7-1:0.0: can't add hid device: -71 [ 354.272046][ T470] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 354.287223][ T470] usb 7-1: USB disconnect, device number 31 [ 354.314007][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2771'. [ 354.323519][ T8617] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 354.389055][ T8628] netlink: 'syz.8.2774': attribute type 6 has an invalid length. [ 354.404187][ T425] usb 8-1: device descriptor read/64, error -71 [ 354.423095][ T8631] fuseblk: Unknown parameter 't' [ 354.471069][ T8639] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 354.648529][ T425] usb 8-1: new full-speed USB device number 57 using dummy_hcd [ 354.778571][ T425] usb 8-1: device descriptor read/64, error -71 [ 354.998584][ T470] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 355.018849][ T425] usb 8-1: device descriptor read/64, error -71 [ 355.095648][ T8666] tipc: Enabling of bearer rejected, failed to enable media [ 355.128568][ T425] usb usb8-port1: attempt power cycle [ 355.158430][ T470] usb 7-1: Using ep0 maxpacket: 16 [ 355.166476][ T470] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 355.175601][ T470] usb 7-1: config 1 has an invalid descriptor of length 232, skipping remainder of the config [ 355.186757][ T470] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.197495][ T470] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.206670][ T470] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.214814][ T470] usb 7-1: Product: syz [ 355.219473][ T470] usb 7-1: Manufacturer: syz [ 355.224370][ T470] usb 7-1: SerialNumber: syz [ 355.478472][ T425] usb 8-1: new full-speed USB device number 58 using dummy_hcd [ 355.499564][ T425] usb 8-1: device descriptor read/8, error -71 [ 355.630095][ T425] usb 8-1: device descriptor read/8, error -71 [ 355.636590][ T470] usb 7-1: 0:2 : does not exist [ 355.643323][ T470] usb 7-1: USB disconnect, device number 32 [ 355.652771][ T8205] udevd[8205]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 355.868467][ T425] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 355.889578][ T425] usb 8-1: device descriptor read/8, error -71 [ 356.019612][ T425] usb 8-1: device descriptor read/8, error -71 [ 356.128597][ T425] usb usb8-port1: unable to enumerate USB device [ 356.187045][ T8695] fuse: Bad value for 'group_id' [ 356.192151][ T8695] fuse: Bad value for 'group_id' [ 356.525444][ T8736] tmpfs: Unknown parameter 'Ŭ‰¤‹ZĤ2ı'™È0ƒœ‘¸q-Öî÷›²òJš ˙Ġ$B„ê“àS‘g²G' [ 357.138484][ T425] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 357.198449][ T458] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 357.263237][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.270651][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.277969][ T425] usb 6-1: device descriptor read/64, error -71 [ 357.278194][ T8798] bridge0: entered promiscuous mode [ 357.289625][ T8798] bridge0: entered allmulticast mode [ 357.358496][ T458] usb 7-1: Using ep0 maxpacket: 16 [ 357.364740][ T458] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.376085][ T458] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.386339][ T458] usb 7-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 357.395580][ T458] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.404854][ T458] usb 7-1: config 0 descriptor?? [ 357.414460][ T8802] batadv_slave_0: entered promiscuous mode [ 357.463365][ T8807] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 357.548483][ T425] usb 6-1: device descriptor read/64, error -71 [ 357.579381][ T8810] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2836'. [ 357.592689][ T8811] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 357.788459][ T425] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 357.818620][ T458] input: HID 0458:5012 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5012.001D/input/input28 [ 357.831502][ T458] input: HID 0458:5012 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5012.001D/input/input29 [ 357.851577][ T458] kye 0003:0458:5012.001D: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.6-1/input0 [ 357.864080][ T3252] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 357.928437][ T425] usb 6-1: device descriptor read/64, error -71 [ 358.022074][ T3252] usb 8-1: unable to get BOS descriptor or descriptor too short [ 358.030926][ T3252] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 358.038687][ T3252] usb 8-1: can't read configurations, error -71 [ 358.140765][ T8799] batadv_slave_0: left promiscuous mode [ 358.146960][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 358.146980][ T36] audit: type=1326 audit(1773119582.887:56564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.8.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 358.171776][ T425] usb 6-1: device descriptor read/64, error -71 [ 358.289211][ T425] usb usb6-port1: attempt power cycle [ 358.537573][ T8837] overlayfs: overlapping lowerdir path [ 358.537699][ T8836] rust_binder: Error while translating object. [ 358.543271][ T8836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 358.549621][ T8836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:711 [ 358.628453][ T425] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 358.662475][ T425] usb 6-1: device descriptor read/8, error -71 [ 358.726862][ T8850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:725 [ 358.809231][ T425] usb 6-1: device descriptor read/8, error -71 [ 359.038616][ T458] usb 7-1: reset high-speed USB device number 33 using dummy_hcd [ 359.058589][ T425] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 359.079780][ T425] usb 6-1: device descriptor read/8, error -71 [ 359.087432][ T36] audit: type=1400 audit(1773119583.827:56565): avc: denied { create } for pid=8892 comm="syz.8.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 359.109423][ T36] audit: type=1400 audit(1773119583.857:56566): avc: denied { mount } for pid=8892 comm="syz.8.2863" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 359.146704][ T8896] overlayfs: failed to resolve './file0': -2 [ 359.168443][ T458] usb 7-1: device descriptor read/64, error -32 [ 359.188543][ T3252] usb 8-1: new full-speed USB device number 62 using dummy_hcd [ 359.209613][ T425] usb 6-1: device descriptor read/8, error -71 [ 359.318496][ T3252] usb 8-1: device descriptor read/64, error -71 [ 359.324977][ T425] usb usb6-port1: unable to enumerate USB device [ 359.337372][ T8906] tipc: Enabling of bearer rejected, failed to enable media [ 359.408542][ T458] usb 7-1: device descriptor read/64, error -32 [ 359.568519][ T3252] usb 8-1: device descriptor read/64, error -71 [ 359.648439][ T458] usb 7-1: reset high-speed USB device number 33 using dummy_hcd [ 359.778469][ T458] usb 7-1: device descriptor read/64, error -32 [ 359.809065][ T3252] usb 8-1: new full-speed USB device number 63 using dummy_hcd [ 359.858656][ T8911] incfs: Can't find or create .incomplete dir in ./file0 [ 359.865966][ T8911] incfs: mount failed -17 [ 359.878541][ T8913] loop7: detected capacity change from 0 to 7 [ 359.885639][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.894958][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 359.902999][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.911397][ T36] audit: type=1326 audit(1773119584.657:56567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.8.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x7fc00000 [ 359.912393][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 359.943933][ T8913] loop7: unable to read partition table [ 359.951135][ T8913] loop_reread_partitions: partition scan of loop7 (úùƒċĦ™‰üCêj̖˘P=½?}X‹ş œëÜ%ġĞ`Éĉրù…ˆ{íİ֐˜Èµ4FLQkŬŠ) failed (rc=-5) [ 359.964981][ T3252] usb 8-1: device descriptor read/64, error -71 [ 359.989548][ T8916] loop7: detected capacity change from 7 to 8 [ 360.131993][ T8444] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 360.145476][ T8444] hid-generic 0000:0000:0000.001E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 360.178041][ T8935] fido_id[8935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.228474][ T3252] usb 8-1: device descriptor read/64, error -71 [ 360.234855][ T45] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 360.348593][ T3252] usb usb8-port1: attempt power cycle [ 360.373421][ T8941] overlayfs: unescaped trailing colons in lowerdir mount option. [ 360.399577][ T45] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.414183][ T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 360.424692][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 360.432899][ T45] usb 6-1: Product: syz [ 360.437337][ T45] usb 6-1: Manufacturer: syz [ 360.442089][ T45] usb 6-1: SerialNumber: syz [ 360.465143][ T8945] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 360.465164][ T8945] rust_binder: Error while translating object. [ 360.477543][ T8945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 360.483887][ T8945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 360.494537][ T8946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 360.535865][ T36] audit: type=1400 audit(1773119585.277:56568): avc: denied { map } for pid=8951 comm="syz.6.2882" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 360.575473][ T36] audit: type=1400 audit(1773119585.307:56569): avc: denied { map } for pid=8951 comm="syz.6.2882" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 360.664264][ T45] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 360.685527][ T31] usb 7-1: USB disconnect, device number 33 [ 360.691876][ T3252] usb 8-1: new full-speed USB device number 64 using dummy_hcd [ 360.733326][ T3252] usb 8-1: device descriptor read/8, error -71 [ 360.826547][ T36] audit: type=1326 audit(1773119585.567:56570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.8.2884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2718b8ebe9 code=0x0 [ 360.881586][ T3252] usb 8-1: device descriptor read/8, error -71 [ 360.932328][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.949599][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.043092][ T31] usb 6-1: USB disconnect, device number 86 [ 361.056648][ T31] usblp0: removed [ 361.128435][ T3252] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 361.159434][ T3252] usb 8-1: device descriptor read/8, error -71 [ 361.289533][ T3252] usb 8-1: device descriptor read/8, error -71 [ 361.398545][ T3252] usb usb8-port1: unable to enumerate USB device [ 361.442092][ T8965] binder: Bad value for 'stats' [ 361.449725][ T8965] rust_binder: Write failure EFAULT in pid:266 [ 361.477719][ T36] audit: type=1400 audit(1773119586.217:56571): avc: denied { setattr } for pid=8968 comm="syz.6.2887" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.506506][ T36] audit: type=1400 audit(1773119586.227:56572): avc: denied { write } for pid=8968 comm="syz.6.2887" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.578230][ T8971] veth1: entered allmulticast mode [ 361.863302][ T9015] netlink: 'syz.8.2900': attribute type 1 has an invalid length. [ 361.872260][ T9015] 9pnet_fd: Insufficient options for proto=fd [ 361.878446][ T8444] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 361.936129][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.966987][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.008434][ T3252] usb 9-1: USB disconnect, device number 33 [ 362.016833][ T9030] rust_binder: Write failure EFAULT in pid:754 [ 362.028417][ T8444] usb 6-1: Using ep0 maxpacket: 16 [ 362.055553][ T8444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.067532][ T8444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.097698][ T8444] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 362.128043][ T8444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.150872][ T8444] usb 6-1: config 0 descriptor?? [ 362.181461][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.188627][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.196168][ T9033] bridge_slave_0: entered allmulticast mode [ 362.202814][ T9033] bridge_slave_0: entered promiscuous mode [ 362.212613][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.219775][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.226911][ T9033] bridge_slave_1: entered allmulticast mode [ 362.233514][ T9033] bridge_slave_1: entered promiscuous mode [ 362.293587][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.300714][ T9033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.308275][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.315373][ T9033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.325564][ T292] bridge_slave_1: left allmulticast mode [ 362.333401][ T292] bridge_slave_1: left promiscuous mode [ 362.339213][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.346700][ T292] bridge_slave_0: left allmulticast mode [ 362.352727][ T292] bridge_slave_0: left promiscuous mode [ 362.358467][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.485649][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.493574][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.503775][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.510936][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.521051][ T292] tipc: Left network mode [ 362.521508][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.532581][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.541720][ T292] veth1_macvtap: left promiscuous mode [ 362.547316][ T292] veth0_vlan: left promiscuous mode [ 362.579128][ T8444] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.001F/input/input30 [ 362.600505][ T8444] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.001F/input/input31 [ 362.636210][ T8444] kye 0003:0458:5012.001F: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.5-1/input0 [ 362.690832][ T9033] veth0_vlan: entered promiscuous mode [ 362.706803][ T9033] veth1_macvtap: entered promiscuous mode [ 362.757327][ T9054] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2908'. [ 362.832955][ T9067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 362.832990][ T9067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:12 [ 363.649431][ T9108] rust_binder: Error while translating object. [ 363.674413][ T9108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 363.680770][ T9108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 363.770167][ T9112] rust_binder: Write failure EFAULT in pid:285 [ 363.833019][ T31] usb 6-1: reset high-speed USB device number 87 using dummy_hcd [ 363.858944][ T9115] netlink: 'syz.6.2930': attribute type 4 has an invalid length. [ 363.867228][ T9115] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2930'. [ 363.984192][ T31] usb 6-1: device descriptor read/64, error -32 [ 364.060429][ T36] audit: type=1400 audit(1773119588.801:56573): avc: denied { map } for pid=9121 comm="syz.6.2933" path="socket:[50906]" dev="sockfs" ino=50906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.084534][ T36] audit: type=1400 audit(1773119588.801:56574): avc: denied { accept } for pid=9121 comm="syz.6.2933" path="socket:[50906]" dev="sockfs" ino=50906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.130876][ T36] audit: type=1400 audit(1773119588.870:56575): avc: denied { ioctl } for pid=9123 comm="syz.6.2934" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 364.256329][ T31] usb 6-1: device descriptor read/64, error -32 [ 364.367091][ T3252] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 364.508254][ T31] usb 6-1: reset high-speed USB device number 87 using dummy_hcd [ 364.531679][ T3252] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 364.541368][ T3252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.550115][ T3252] usb 7-1: Product: syz [ 364.555354][ T3252] usb 7-1: Manufacturer: syz [ 364.560567][ T3252] usb 7-1: SerialNumber: syz [ 364.639183][ T31] usb 6-1: device descriptor read/64, error -32 [ 364.700924][ T8970] veth1: left allmulticast mode [ 364.732039][ T470] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 364.867074][ T9135] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2938'. [ 364.902520][ T470] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 364.913804][ T470] usb 9-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.00 [ 364.923730][ T470] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.933530][ T470] usb 9-1: config 0 descriptor?? [ 364.938983][ T9128] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 365.356962][ T470] apple 0003:05AC:0252.0020: hidraw1: USB HID v1.01 Device [HID 05ac:0252] on usb-dummy_hcd.8-1/input0 [ 365.536802][ T45] usb 6-1: USB disconnect, device number 87 [ 365.556189][ T9128] rust_binder: 40: no such ref 3 [ 365.657446][ T9128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:40 [ 365.658642][ T470] usb 9-1: USB disconnect, device number 34 [ 365.685073][ T36] audit: type=1400 audit(1773119590.408:56576): avc: denied { setattr } for pid=9138 comm="syz.5.2939" name="binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.872632][ T9156] rust_binder: 9153 RLIMIT_NICE not set [ 365.881772][ T31] rust_binder: 9152: removing orphan mapping 0:24 [ 366.140610][ T31] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 366.205308][ T9159] mmap: syz.8.2947 (9159): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 366.301846][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 366.314129][ T31] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 366.332083][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.340335][ T31] usb 6-1: Product: syz [ 366.361744][ T31] usb 6-1: Manufacturer: syz [ 366.366522][ T31] usb 6-1: SerialNumber: syz [ 366.377895][ T31] usb 6-1: config 0 descriptor?? [ 366.388924][ T31] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 366.397486][ T31] usb 6-1: Detected FT232H [ 366.442724][ T9171] bridge0: port 3(syz_tun) entered blocking state [ 366.449289][ T9171] bridge0: port 3(syz_tun) entered disabled state [ 366.456472][ T9171] syz_tun: entered allmulticast mode [ 366.462240][ T9171] syz_tun: entered promiscuous mode [ 366.467690][ T9171] bridge0: port 3(syz_tun) entered blocking state [ 366.474454][ T9171] bridge0: port 3(syz_tun) entered forwarding state [ 366.564783][ T9173] fuse: Unknown parameter 'ro00000000020000' [ 366.589529][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 366.807953][ T31] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 366.815327][ T31] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 366.825475][ T31] usb 6-1: USB disconnect, device number 88 [ 366.833330][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 366.843449][ T31] ftdi_sio 6-1:0.0: device disconnected [ 366.866070][ T8827] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 366.956759][ T470] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 367.017213][ T8827] usb 8-1: Using ep0 maxpacket: 32 [ 367.023620][ T8827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.034863][ T8827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.045123][ T8827] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 367.054355][ T8827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.063413][ T8827] usb 8-1: config 0 descriptor?? [ 367.069486][ T8827] hub 8-1:0.0: USB hub found [ 367.107947][ T470] usb 9-1: Using ep0 maxpacket: 16 [ 367.114666][ T470] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.126308][ T470] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.136518][ T470] usb 9-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 367.145890][ T470] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.156889][ T470] usb 9-1: config 0 descriptor?? [ 367.163739][ T31] usb 7-1: USB disconnect, device number 34 [ 367.275575][ T8827] hub 8-1:0.0: 1 port detected [ 367.500773][ T31] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 367.530555][ T9194] binder: Unknown parameter 'z"'Ìeİ' [ 367.591805][ T417] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 367.653109][ T31] usb 7-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 367.663586][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.677900][ T31] usb 7-1: New USB device found, idVendor=6219, idProduct=0610, bcdDevice= 0.00 [ 367.688377][ T31] usb 7-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 367.696489][ T31] usb 7-1: Product: syz [ 367.702098][ T31] usb 7-1: config 0 descriptor?? [ 367.708320][ T470] usbhid 9-1:0.0: can't add hid device: -71 [ 367.714190][ T31] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 367.715046][ T470] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 367.735743][ T470] usb 9-1: USB disconnect, device number 35 [ 367.752606][ T417] usb 6-1: Using ep0 maxpacket: 16 [ 367.759477][ T417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.769668][ T9199] overlay: Unknown parameter 'fsname' [ 367.771667][ T417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.785944][ T417] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 367.792379][ T36] audit: type=1400 audit(1773119592.502:56577): avc: denied { connect } for pid=9198 comm="syz.8.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 367.795833][ T417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.826943][ T417] usb 6-1: config 0 descriptor?? [ 368.125363][ T470] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 368.256431][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.266828][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.276445][ T470] usb 9-1: Using ep0 maxpacket: 32 [ 368.284961][ T470] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.296187][ T470] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.309741][ T470] usb 9-1: config 0 interface 0 has no altsetting 0 [ 368.316424][ T470] usb 9-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 368.325592][ T470] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.335419][ T470] usb 9-1: config 0 descriptor?? [ 368.356280][ T417] usbhid 6-1:0.0: can't add hid device: -71 [ 368.362874][ T417] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 368.376514][ T417] usb 6-1: USB disconnect, device number 89 [ 368.488528][ T8827] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 368.495127][ T8827] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 368.504512][ T8827] usbhid 8-1:0.0: can't add hid device: -32 [ 368.511448][ T8827] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 368.745808][ T470] cherry 0003:046A:0023.0021: item fetching failed at offset 0/3 [ 368.757069][ T470] cherry 0003:046A:0023.0021: probe with driver cherry failed with error -22 [ 368.860689][ T417] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 368.958907][ T9199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 368.958980][ T9199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 368.969242][ T31] usb 9-1: USB disconnect, device number 36 [ 369.012987][ T417] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.027639][ T417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 369.036845][ T417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 369.045019][ T417] usb 6-1: Product: syz [ 369.049232][ T417] usb 6-1: Manufacturer: syz [ 369.053951][ T417] usb 6-1: SerialNumber: syz [ 369.262372][ T417] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 369.276723][ T417] usb 6-1: USB disconnect, device number 90 [ 369.283543][ T417] usblp0: removed [ 369.491424][ T9208] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 369.500363][ T9208] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 369.509503][ T9208] rust_binder: Error while translating object. [ 369.509535][ T9208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 369.516367][ T9208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:73 [ 369.559761][ T9210] tmpfs: Unknown parameter 'jᖠĥÀ#~ıÀïa‰cQ.fĵÍfċ3(' [ 369.587384][ T9210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=9210 comm=syz.8.2964 [ 369.664367][ T9212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.664411][ T9212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:781 [ 369.717102][ T36] audit: type=1400 audit(1773119594.419:56578): avc: denied { read } for pid=9213 comm="syz.7.2966" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 369.751240][ T417] usb 8-1: USB disconnect, device number 66 [ 369.752352][ T36] audit: type=1400 audit(1773119594.419:56579): avc: denied { open } for pid=9213 comm="syz.7.2966" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 369.864851][ T36] audit: type=1400 audit(1773119594.558:56580): avc: denied { compute_member } for pid=9224 comm="syz.7.2969" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 369.897268][ T9227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 369.897301][ T9227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:794 [ 369.948511][ T470] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 369.996683][ T9230] binder: Unknown parameter 'dÊfcontext' [ 370.110791][ T470] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.121039][ T470] usb 9-1: config 0 has no interfaces? [ 370.128076][ T470] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 370.137533][ T470] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 370.145714][ T470] usb 9-1: Product: syz [ 370.150008][ T470] usb 9-1: Manufacturer: syz [ 370.154651][ T470] usb 9-1: SerialNumber: syz [ 370.160022][ T470] usb 9-1: config 0 descriptor?? [ 370.222769][ T31] usb 7-1: USB disconnect, device number 35 [ 370.420635][ T9216] rust_binder: Error while translating object. [ 370.420665][ T9216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 370.427010][ T9216] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 370.436957][ T9216] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:77 [ 370.449631][ T31] usb 9-1: USB disconnect, device number 37 [ 370.844399][ T9263] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2983'. [ 370.877460][ T36] audit: type=1400 audit(1773119595.570:56581): avc: denied { connect } for pid=9265 comm="syz.6.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.902042][ T9275] rust_binder: Error while translating object. [ 370.902082][ T9275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 370.909115][ T9275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:899 [ 370.959730][ T458] rust_binder: 9215: removing orphan mapping 0:24 [ 370.986335][ T31] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 371.099934][ T9305] rust_binder: Write failure EFAULT in pid:95 [ 371.100147][ T9306] rust_binder: Write failure EFAULT in pid:95 [ 371.146959][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 371.159456][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.170580][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.180505][ T31] usb 8-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 371.189618][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.198305][ T31] usb 8-1: config 0 descriptor?? [ 371.621793][ T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5012.0022/input/input33 [ 371.651123][ T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5012.0022/input/input34 [ 371.669593][ T31] kye 0003:0458:5012.0022: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.7-1/input0 [ 371.687840][ T458] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 371.719927][ T9342] overlayfs: failed to clone upperpath [ 371.863173][ T470] usb 8-1: USB disconnect, device number 67 [ 371.871947][ T458] usb 6-1: device descriptor read/64, error -71 [ 372.123621][ T458] usb 6-1: device descriptor read/64, error -71 [ 372.204206][ T3252] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 372.357084][ T3252] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 372.369837][ T3252] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 372.382268][ T458] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 372.397400][ T3252] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.407155][ T3252] usb 9-1: config 0 descriptor?? [ 372.412775][ T9348] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 372.490016][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3016'. [ 372.536579][ T458] usb 6-1: device descriptor read/64, error -71 [ 372.650004][ T36] audit: type=1400 audit(1773119597.328:56582): avc: denied { create } for pid=9371 comm="syz.6.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 372.667348][ T470] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 372.778096][ T458] usb 6-1: device descriptor read/64, error -71 [ 372.829581][ T470] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.839567][ T470] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 372.846072][ T3252] hid-generic 0003:04F3:0755.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 372.849808][ T470] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.875978][ T470] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 372.885539][ T470] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 372.893850][ T470] usb 8-1: Product: syz [ 372.898167][ T470] usb 8-1: Manufacturer: syz [ 372.899761][ T458] usb usb6-port1: attempt power cycle [ 372.902875][ T470] usb 8-1: SerialNumber: syz [ 373.116557][ T470] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 373.129778][ T470] usb 8-1: USB disconnect, device number 68 [ 373.146130][ T470] usblp0: removed [ 373.261355][ T458] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 373.282508][ T458] usb 6-1: device descriptor read/8, error -71 [ 373.413570][ T458] usb 6-1: device descriptor read/8, error -71 [ 373.655465][ T458] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 373.675299][ T458] usb 6-1: device descriptor read/8, error -71 [ 373.806149][ T458] usb 6-1: device descriptor read/8, error -71 [ 373.915818][ T458] usb usb6-port1: unable to enumerate USB device [ 374.415745][ T36] audit: type=1400 audit(1773119599.076:56583): avc: denied { write } for pid=9393 comm="syz.5.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 374.506780][ T36] audit: type=1326 audit(1773119599.166:56584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x7fc00000 [ 374.541211][ T36] audit: type=1326 audit(1773119599.166:56585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f467278ebe9 code=0x7fc00000 [ 374.570109][ T36] audit: type=1326 audit(1773119599.166:56586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x7fc00000 [ 374.594332][ T36] audit: type=1326 audit(1773119599.166:56587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467278ebe9 code=0x7fc00000 [ 375.033100][ T458] usb 9-1: reset full-speed USB device number 38 using dummy_hcd [ 375.185149][ T9408] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 375.304799][ T9415] FAULT_INJECTION: forcing a failure. [ 375.304799][ T9415] name failslab, interval 1, probability 0, space 0, times 1 [ 375.318395][ T9415] CPU: 1 UID: 0 PID: 9415 Comm: syz.5.3033 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 375.318445][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.318464][ T9415] Call Trace: [ 375.318477][ T9415] [ 375.318491][ T9415] __dump_stack+0x21/0x30 [ 375.318537][ T9415] dump_stack_lvl+0x10c/0x190 [ 375.318577][ T9415] ? __cfi_dump_stack_lvl+0x10/0x10 [ 375.318619][ T9415] ? __cfi_keyring_search_iterator+0x10/0x10 [ 375.318660][ T9415] dump_stack+0x19/0x20 [ 375.318699][ T9415] should_fail_ex+0x3d9/0x530 [ 375.318744][ T9415] should_failslab+0xac/0x100 [ 375.318778][ T9415] kmem_cache_alloc_noprof+0x42/0x3a0 [ 375.318821][ T9415] ? prepare_creds+0x48/0x6b0 [ 375.318854][ T9415] prepare_creds+0x48/0x6b0 [ 375.318886][ T9415] lookup_user_key+0x36c/0x1180 [ 375.318930][ T9415] ? __x64_sys_openat+0x13a/0x170 [ 375.318969][ T9415] ? x64_sys_call+0xe69/0x2ee0 [ 375.319013][ T9415] ? __cfi_lookup_user_key+0x10/0x10 [ 375.319057][ T9415] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 375.319102][ T9415] ? proc_fail_nth_write+0x17e/0x210 [ 375.319142][ T9415] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 375.319182][ T9415] keyctl_session_to_parent+0x2b/0x7f0 [ 375.319227][ T9415] ? vfs_write+0x8ba/0xe80 [ 375.319255][ T9415] __se_sys_keyctl+0x511/0xda0 [ 375.319307][ T9415] ? __x64_sys_keyctl+0xf0/0xf0 [ 375.319349][ T9415] ? __kasan_check_write+0x18/0x20 [ 375.319396][ T9415] ? mutex_unlock+0x8b/0x240 [ 375.319425][ T9415] ? __cfi_mutex_unlock+0x10/0x10 [ 375.319452][ T9415] ? __fget_files+0x2c5/0x340 [ 375.319486][ T9415] ? __kasan_check_write+0x18/0x20 [ 375.319527][ T9415] ? fput+0x1a5/0x240 [ 375.319563][ T9415] ? ksys_write+0x1ef/0x250 [ 375.319591][ T9415] ? __cfi_ksys_write+0x10/0x10 [ 375.319622][ T9415] __x64_sys_keyctl+0xc3/0xf0 [ 375.319664][ T9415] x64_sys_call+0x996/0x2ee0 [ 375.319706][ T9415] do_syscall_64+0x58/0xf0 [ 375.319744][ T9415] ? clear_bhb_loop+0x50/0xa0 [ 375.319775][ T9415] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 375.319821][ T9415] RIP: 0033:0x7f69b858ebe9 [ 375.319847][ T9415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.319872][ T9415] RSP: 002b:00007f69b9336038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 375.319907][ T9415] RAX: ffffffffffffffda RBX: 00007f69b87b5fa0 RCX: 00007f69b858ebe9 [ 375.319933][ T9415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 375.319953][ T9415] RBP: 00007f69b9336090 R08: 0000000000000000 R09: 0000000000000000 [ 375.319976][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.319998][ T9415] R13: 00007f69b87b6038 R14: 00007f69b87b5fa0 R15: 00007ffc28436d08 [ 375.320024][ T9415] [ 375.751246][ T9421] 9pnet_fd: Insufficient options for proto=fd [ 375.787917][ T9425] fuse: Unknown parameter '!VW‚èê)û}?sž˙ŞÔÊ' [ 375.808691][ T31] usb 9-1: USB disconnect, device number 38 [ 375.949947][ T9443] overlayfs: failed to clone upperpath [ 376.334110][ T9453] /dev/rnullb0: Can't open blockdev [ 376.442291][ T417] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 376.508534][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3053'. [ 376.562338][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 376.562359][ T36] audit: type=1400 audit(1773119601.212:56620): avc: denied { map } for pid=9469 comm="syz.5.3057" path="/dev/usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 376.593870][ T31] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 376.624178][ T417] usb 8-1: Using ep0 maxpacket: 16 [ 376.630836][ T417] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.640594][ T417] usb 8-1: config 0 has no interface number 0 [ 376.646799][ T417] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.658518][ T417] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.668465][ T417] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 376.677743][ T417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.688635][ T417] usb 8-1: config 0 descriptor?? [ 376.745248][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.757127][ T31] usb 9-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 376.766690][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.777959][ T31] usb 9-1: config 0 descriptor?? [ 377.192616][ T31] ortek 0003:05A4:2000.0024: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.8-1/input0 [ 377.337973][ T470] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 377.489964][ T470] usb 6-1: descriptor type invalid, skip [ 377.495835][ T470] usb 6-1: descriptor type invalid, skip [ 377.501916][ T470] usb 6-1: not running at top speed; connect to a high speed hub [ 377.510634][ T470] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 377.519920][ T470] usb 6-1: config 1 has no interface number 1 [ 377.526068][ T470] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 377.546921][ T470] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.556430][ T417] uclogic 0003:28BD:0071.0025: failed retrieving string descriptor #100: -71 [ 377.565545][ T470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.573748][ T417] uclogic 0003:28BD:0071.0025: failed retrieving pen parameters: -71 [ 377.582029][ T470] usb 6-1: Product: చ [ 377.584353][ T31] usb 9-1: USB disconnect, device number 39 [ 377.586306][ T470] usb 6-1: Manufacturer: €‰ [ 377.597480][ T417] uclogic 0003:28BD:0071.0025: pen probing failed: -71 [ 377.604945][ T470] usb 6-1: SerialNumber: syz [ 377.609837][ T417] uclogic 0003:28BD:0071.0025: failed probing parameters: -71 [ 377.618772][ T417] uclogic 0003:28BD:0071.0025: probe with driver uclogic failed with error -71 [ 377.634483][ T417] usb 8-1: USB disconnect, device number 69 [ 377.885382][ T9531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:947 [ 378.172643][ T9541] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 378.196495][ T9541] overlayfs: missing 'lowerdir' [ 378.198047][ T9544] overlayfs: failed to clone upperpath [ 378.310009][ T9555] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3084'. [ 378.378307][ T9538] rust_binder: Read failure Err(EFAULT) in pid:119 [ 378.559110][ T9561] kvm: pic: non byte write [ 378.717209][ T8444] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 378.878594][ T8444] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 378.889696][ T8444] usb 9-1: config 0 interface 0 has no altsetting 0 [ 378.896446][ T8444] usb 9-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 378.905588][ T8444] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.914879][ T8444] usb 9-1: config 0 descriptor?? [ 378.920258][ T9559] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 379.130191][ T9570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 379.136889][ T8444] usbhid 9-1:0.0: can't add hid device: -71 [ 379.149988][ T8444] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 379.160447][ T8444] usb 9-1: USB disconnect, device number 40 [ 379.721661][ T36] audit: type=1326 audit(1773119604.353:56621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.6.3092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec0378ebe9 code=0x0 [ 379.923937][ T8444] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 380.084917][ T8444] usb 9-1: Using ep0 maxpacket: 16 [ 380.091494][ T8444] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.102644][ T8444] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.112556][ T8444] usb 9-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 380.126175][ T8444] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.141617][ T470] usb 6-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 380.155528][ T8444] usb 9-1: config 0 descriptor?? [ 380.166900][ T470] usb 6-1: found format II with max.bitrate = 14, frame size=0 [ 380.175037][ T470] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 380.190460][ T470] usb 6-1: USB disconnect, device number 96 [ 380.213133][ T8205] udevd[8205]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 380.595239][ T8444] usbhid 9-1:0.0: can't add hid device: -71 [ 380.603170][ T8444] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 380.614928][ T8444] usb 9-1: USB disconnect, device number 41 [ 380.658395][ T470] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 380.664812][ T9606] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 380.686311][ T36] audit: type=1400 audit(1773119605.307:56622): avc: denied { mount } for pid=9607 comm="syz.8.3100" name="/" dev="pstore" ino=1543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 380.687117][ T9608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.711328][ T9608] rust_binder: Error while translating object. [ 380.717897][ T9608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 380.724216][ T9608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 380.739986][ T36] audit: type=1400 audit(1773119605.366:56623): avc: denied { unmount } for pid=9033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 380.771012][ T9033] bridge0: port 3(syz_tun) entered disabled state [ 380.778239][ T9033] syz_tun (unregistering): left allmulticast mode [ 380.784750][ T9033] syz_tun (unregistering): left promiscuous mode [ 380.791151][ T9033] bridge0: port 3(syz_tun) entered disabled state [ 380.824851][ T470] usb 6-1: unable to get BOS descriptor or descriptor too short [ 380.833338][ T292] bridge_slave_1: left allmulticast mode [ 380.839163][ T292] bridge_slave_1: left promiscuous mode [ 380.845161][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.845761][ T470] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 380.860078][ T470] usb 6-1: can't read configurations, error -71 [ 380.867096][ T292] bridge_slave_0: left allmulticast mode [ 380.873268][ T292] bridge_slave_0: left promiscuous mode [ 380.878934][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.037892][ T9613] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.045151][ T9613] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.052326][ T9613] bridge_slave_0: entered allmulticast mode [ 381.058814][ T9613] bridge_slave_0: entered promiscuous mode [ 381.065863][ T292] veth1_macvtap: left promiscuous mode [ 381.071461][ T292] veth0_vlan: left promiscuous mode [ 381.114479][ T9613] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.122091][ T9613] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.129242][ T9613] bridge_slave_1: entered allmulticast mode [ 381.135914][ T9613] bridge_slave_1: entered promiscuous mode [ 381.191426][ T9613] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.198628][ T9613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.206066][ T9613] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.213148][ T9613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.234372][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.242140][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.251606][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.258997][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.268986][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.276088][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.302767][ T9613] veth0_vlan: entered promiscuous mode [ 381.314627][ T9613] veth1_macvtap: entered promiscuous mode [ 381.594062][ T31] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 381.714708][ T470] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 381.746178][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.756586][ T31] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.766319][ T31] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 381.775725][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.784107][ T31] usb 10-1: SerialNumber: syz [ 381.875622][ T470] usb 6-1: Using ep0 maxpacket: 16 [ 381.882361][ T470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.893391][ T470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.903609][ T470] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 381.912926][ T470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.921789][ T470] usb 6-1: config 0 descriptor?? [ 382.335791][ T470] usbhid 6-1:0.0: can't add hid device: -71 [ 382.349033][ T470] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 382.360888][ T470] usb 6-1: USB disconnect, device number 98 [ 382.608672][ T9644] /dev/rnullb0: Can't open blockdev [ 382.609722][ T36] audit: type=1400 audit(1773119607.216:56624): avc: denied { connect } for pid=9642 comm="syz.7.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.228624][ T9657] fuse: Bad value for 'fd' [ 383.257625][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3119'. [ 383.605538][ T9681] 9pnet_fd: Insufficient options for proto=fd [ 383.741852][ T9684] fuse: Bad value for 'fd' [ 383.834105][ T9697] batadv_slave_1: entered promiscuous mode [ 383.840932][ T9696] batadv_slave_1: left promiscuous mode [ 383.916551][ T9710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 383.916589][ T9710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:890 [ 384.261256][ T9724] netlink: 'syz.5.3141': attribute type 4 has an invalid length. [ 384.278272][ T9724] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3141'. [ 384.385031][ T31] usb 10-1: 0:2 : does not exist [ 384.404214][ T31] usb 10-1: USB disconnect, device number 2 [ 384.425589][ T8205] udevd[8205]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 384.554158][ T9751] can0: slcan on ptm0. [ 384.621618][ T9765] netlink: 'syz.6.3153': attribute type 19 has an invalid length. [ 384.812486][ T3252] usb 6-1: new low-speed USB device number 99 using dummy_hcd [ 384.964739][ T3252] usb 6-1: config 0 has no interfaces? [ 384.970358][ T3252] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 384.979581][ T3252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.988687][ T3252] usb 6-1: config 0 descriptor?? [ 385.106303][ T36] audit: type=1400 audit(1773119609.711:56625): avc: denied { map } for pid=9777 comm="syz.7.3155" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.130583][ T36] audit: type=1400 audit(1773119609.711:56626): avc: denied { execute } for pid=9777 comm="syz.7.3155" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.197483][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.206077][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.217529][ T3252] usb 6-1: USB disconnect, device number 99 [ 385.246192][ T9751] can0 (unregistered): slcan off ptm0. [ 385.354799][ T9801] rust_binder: Error while translating object. [ 385.354848][ T9801] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 385.361429][ T9801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 385.717611][ T3252] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 385.878427][ T3252] usb 10-1: Using ep0 maxpacket: 16 [ 385.884913][ T3252] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.896061][ T3252] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.906159][ T3252] usb 10-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 385.915382][ T3252] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.924470][ T3252] usb 10-1: config 0 descriptor?? [ 386.029250][ T31] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 386.126858][ T9829] rust_binder: Read failure Err(EAGAIN) in pid:906 [ 386.181157][ T31] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 386.196336][ T31] usb 6-1: config 0 has no interface number 1 [ 386.200415][ T9835] __vm_enough_memory: pid: 9835, comm: syz.7.3166, bytes: 18014402804453376 not enough memory for the allocation [ 386.203069][ T31] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 386.224781][ T31] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.240820][ T31] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 386.258300][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.276912][ T31] usb 6-1: SerialNumber: syz [ 386.289154][ T31] usb 6-1: config 0 descriptor?? [ 386.341223][ T9845] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.436391][ T3252] input: HID 0458:5012 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5012.0026/input/input37 [ 386.452422][ T3252] input: HID 0458:5012 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5012.0026/input/input38 [ 386.469774][ T3252] kye 0003:0458:5012.0026: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.9-1/input0 [ 386.498707][ T9826] binder: Unknown parameter 'contextÀ' [ 386.603191][ T31] usb 6-1: Found UVC 0.00 device (0002:0000) [ 386.610801][ T31] usb 6-1: No valid video chain found. [ 386.619218][ T31] usb 6-1: USB disconnect, device number 100 [ 386.638705][ T470] usb 10-1: USB disconnect, device number 3 [ 387.178996][ T9871] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 387.396732][ T31] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 387.864222][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3185'. [ 387.918605][ T9897] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 387.948746][ T9897] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 387.967400][ T9897] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 387.998507][ T9897] overlayfs: missing 'lowerdir' [ 388.559643][ T9933] fuse: Bad value for 'group_id' [ 388.564777][ T9933] fuse: Bad value for 'group_id' [ 388.661318][ T9942] overlayfs: failed to clone upperpath [ 388.695932][ T9951] rust_binder: Error while translating object. [ 388.695975][ T9951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.702262][ T9951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 388.740585][ T470] rust_binder: 0: removing orphan mapping 0:24 [ 388.746504][ T9959] /dev/rnullb0: Can't open blockdev [ 388.764668][ T9961] syz.9.3207 (9961): /proc/9960/oom_adj is deprecated, please use /proc/9960/oom_score_adj instead. [ 388.902878][ T9961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 388.931073][ T31] rust_binder: 9960: removing orphan mapping 0:24 [ 388.946750][ T31] rust_binder: 0: removing orphan mapping 24:1112 [ 388.992888][ T9988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.047787][ T9988] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 389.061506][ T9989] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 389.098836][ T9987] rust_binder: Write failure EINVAL in pid:42 [ 389.136008][ T470] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 389.210215][ T9991] /dev/rnullb0: Can't open blockdev [ 389.296812][ T470] usb 8-1: Using ep0 maxpacket: 16 [ 389.306935][ T470] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.317900][ T470] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 389.327019][ T470] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.337344][ T470] usb 8-1: config 0 descriptor?? [ 389.556356][ T470] usbhid 8-1:0.0: can't add hid device: -71 [ 389.570146][ T470] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 389.587629][ T470] usb 8-1: USB disconnect, device number 70 [ 389.889909][ T470] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 389.950552][T10026] rust_binder: Got transaction with invalid offset. [ 389.950614][T10026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 389.957366][T10026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 390.053477][ T470] usb 8-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 390.071664][ T470] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.079867][ T470] usb 8-1: Product: syz [ 390.084079][ T470] usb 8-1: Manufacturer: syz [ 390.088705][ T470] usb 8-1: SerialNumber: syz [ 390.214376][T10043] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3237'. [ 390.224541][T10043] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3237'. [ 390.233705][ T31] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 390.237120][T10043] fuse: Bad value for 'user_id' [ 390.246383][T10043] fuse: Bad value for 'user_id' [ 390.298907][ T470] usb 8-1: Found UVC 0.00 device syz (093a:2476) [ 390.305536][ T470] usb 8-1: No valid video chain found. [ 390.312174][ T470] usb 8-1: USB disconnect, device number 71 [ 390.328684][ T36] audit: type=1400 audit(1773119614.903:56627): avc: denied { watch watch_reads } for pid=10046 comm="syz.6.3239" path="/214/file0" dev="tmpfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 390.392519][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 390.398854][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.409996][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.420029][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 390.429355][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.438121][ T31] usb 6-1: config 0 descriptor?? [ 390.586000][T10051] rust_binder: Error while translating object. [ 390.586042][T10051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 390.592323][T10051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:57 [ 390.851898][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 390.867837][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 390.876716][ T31] usb 6-1: USB disconnect, device number 101 [ 391.066009][ T3252] usb 8-1: new full-speed USB device number 72 using dummy_hcd [ 391.136839][ T36] audit: type=1400 audit(1773119615.709:56628): avc: denied { accept } for pid=10060 comm="syz.6.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.182325][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3246'. [ 391.221730][ T3252] usb 8-1: unable to get BOS descriptor or descriptor too short [ 391.230965][ T3252] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 391.238908][ T3252] usb 8-1: can't read configurations, error -71 [ 391.599234][T10094] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 391.901551][ T36] audit: type=1400 audit(1773119616.475:56629): avc: denied { accept } for pid=10116 comm="syz.5.3264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 392.066540][T10129] incfs: Backing dir is not set, filesystem can't be mounted. [ 392.074377][T10129] incfs: mount failed -2 [ 392.262028][ T470] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 392.284534][ T8827] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 392.412890][ T470] usb 6-1: Using ep0 maxpacket: 32 [ 392.419106][ T470] usb 6-1: config 0 interface 0 altsetting 140 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.430215][ T470] usb 6-1: config 0 interface 0 altsetting 140 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.440262][ T470] usb 6-1: config 0 interface 0 has no altsetting 0 [ 392.446940][ T470] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 392.456398][ T470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.463014][ T8827] usb 10-1: Using ep0 maxpacket: 16 [ 392.465353][ T470] usb 6-1: config 0 descriptor?? [ 392.471635][ T8827] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.486154][ T8827] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.496060][ T8827] usb 10-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 392.505285][ T8827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.514352][ T8827] usb 10-1: config 0 descriptor?? [ 392.723260][ T470] usbhid 6-1:0.0: can't add hid device: -71 [ 392.729337][ T470] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 392.738393][ T470] usb 6-1: USB disconnect, device number 102 [ 392.928788][ T8827] input: HID 0458:5012 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5012.0027/input/input39 [ 392.941932][ T8827] input: HID 0458:5012 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5012.0027/input/input40 [ 392.959956][ T8827] kye 0003:0458:5012.0027: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.9-1/input0 [ 393.130640][ T8827] usb 10-1: USB disconnect, device number 5 [ 393.144270][ T36] audit: type=1400 audit(1773119617.699:56630): avc: denied { write } for pid=10156 comm="syz.7.3277" path="socket:[56476]" dev="sockfs" ino=56476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 393.168278][ T36] audit: type=1404 audit(1773119617.719:56631): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 393.225765][ T36] audit: type=1400 audit(1773119617.779:56632): avc: denied { watch watch_reads } for pid=10156 comm="syz.7.3277" path="/327/file0" dev="tmpfs" ino=1835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=0 [ 393.250127][ T36] audit: type=1400 audit(1773119617.789:56633): avc: denied { bind } for pid=10156 comm="syz.7.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 393.270184][ T36] audit: type=1400 audit(1773119617.789:56634): avc: denied { ioctl } for pid=10156 comm="syz.7.3277" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 393.297162][ T36] audit: type=1400 audit(1773119617.789:56635): avc: denied { map } for pid=10156 comm="syz.7.3277" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 393.300006][T10163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=10163 comm=syz.5.3279 [ 393.320475][ T36] audit: type=1400 audit(1773119617.789:56636): avc: denied { ioctl } for pid=10156 comm="syz.7.3277" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 393.927865][T10202] veth0_vlan: left promiscuous mode [ 394.709912][T10267] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 396.167499][ T36] kauditd_printk_skb: 211 callbacks suppressed [ 396.167519][ T36] audit: type=1400 audit(1773119620.714:56848): avc: denied { read write } for pid=4827 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 404.066007][ T36] audit: type=1400 audit(1773119628.569:56849): avc: denied { create } for pid=10295 comm="syz.9.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 404.089746][T10297] cannot load conntrack support for proto=3 [ 404.097258][ T36] audit: type=1400 audit(1773119628.579:56850): avc: denied { create } for pid=10293 comm="syz.7.3331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 404.118510][ T36] audit: type=1400 audit(1773119628.579:56851): avc: denied { read append } for pid=10295 comm="syz.9.3332" name="binder0" dev="binder" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 404.144550][ T36] audit: type=1400 audit(1773119628.579:56852): avc: denied { write } for pid=10293 comm="syz.7.3331" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=0 [ 404.168705][ T36] audit: type=1400 audit(1773119628.579:56853): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 404.193998][ T36] audit: type=1400 audit(1773119628.599:56854): avc: denied { create } for pid=10296 comm="syz.6.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 404.214540][ T36] audit: type=1400 audit(1773119628.609:56855): avc: denied { create } for pid=10293 comm="syz.7.3331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 404.235963][ T36] audit: type=1400 audit(1773119628.609:56856): avc: denied { read write } for pid=4827 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 404.260668][ T36] audit: type=1400 audit(1773119628.609:56857): avc: denied { read } for pid=10303 comm="syz.7.3334" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 404.306927][ T36] audit: type=1400 audit(1773119628.609:56858): avc: denied { execmem } for pid=10303 comm="syz.7.3334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 409.133286][ T36] kauditd_printk_skb: 976 callbacks suppressed [ 409.133305][ T36] audit: type=1400 audit(1773119633.619:57835): avc: denied { read write } for pid=4827 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.155033][T10664] audit: audit_backlog=65 > audit_backlog_limit=64 [ 409.164732][ T36] audit: type=1400 audit(1773119633.629:57836): avc: denied { create } for pid=10661 comm="syz.7.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 409.177537][T10664] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 409.192135][ T36] audit: type=1400 audit(1773119633.629:57837): avc: denied { create } for pid=10661 comm="syz.7.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 409.202857][T10664] audit: backlog limit exceeded [ 409.224219][T10666] audit: audit_backlog=65 > audit_backlog_limit=64 [ 409.225480][T10664] audit: audit_backlog=65 > audit_backlog_limit=64 [ 409.231503][T10666] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 409.238482][T10664] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 409.424633][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3459'. [ 410.055777][T10741] sit0: entered promiscuous mode [ 410.062561][T10741] netlink: 'syz.7.3477': attribute type 1 has an invalid length. [ 410.070758][T10741] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3477'. [ 412.384012][T10892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=262 sclass=netlink_tcpdiag_socket pid=10892 comm=syz.9.3530 [ 412.450917][T10895] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10895 comm=syz.9.3530 [ 412.579397][T10636] Bluetooth: hci0: Frame reassembly failed (-84) [ 412.856661][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3541'. [ 414.383555][ T36] kauditd_printk_skb: 581 callbacks suppressed [ 414.383575][ T36] audit: type=1400 audit(1773119638.850:58417): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.415040][ T36] audit: type=1400 audit(1773119638.860:58418): avc: denied { read write } for pid=10987 comm="syz.5.3560" name="binder1" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 414.439114][ T36] audit: type=1400 audit(1773119638.860:58419): avc: denied { read } for pid=10987 comm="syz.5.3560" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 414.462111][ T36] audit: type=1400 audit(1773119638.870:58420): avc: denied { read append } for pid=10987 comm="syz.5.3560" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 414.485723][ T36] audit: type=1400 audit(1773119638.870:58421): avc: denied { create } for pid=10987 comm="syz.5.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 414.506699][ T36] audit: type=1400 audit(1773119638.870:58422): avc: denied { create } for pid=10987 comm="syz.5.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 414.527855][ T36] audit: type=1400 audit(1773119638.880:58423): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.552204][ T36] audit: type=1400 audit(1773119638.910:58424): avc: denied { read } for pid=10990 comm="syz.5.3561" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 414.575380][ T36] audit: type=1400 audit(1773119638.910:58425): avc: denied { name_bind } for pid=10990 comm="syz.5.3561" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 414.597346][ T36] audit: type=1400 audit(1773119638.999:58426): avc: denied { read write } for pid=10990 comm="syz.5.3561" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 414.646511][ T3554] Bluetooth: hci0: command 0x1003 tx timeout [ 414.646511][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 415.351452][T11017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=11017 comm=syz.9.3570 [ 415.364841][T11020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=11020 comm=syz.9.3570 [ 415.378859][T11017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=11017 comm=syz.9.3570 [ 415.392549][T11020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11020 comm=syz.9.3570 [ 415.392557][T11023] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11023 comm=syz.9.3570 [ 415.469578][T11044] netlink: 'syz.5.3578': attribute type 28 has an invalid length. [ 416.096746][T11099] tap0: tun_chr_ioctl cmd 1074025675 [ 416.102642][T11099] tap0: persist enabled [ 416.107584][T11099] tap0: tun_chr_ioctl cmd 1074025675 [ 416.113128][T11099] tap0: persist enabled [ 416.700438][T11148] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3611'. [ 419.408077][ T36] kauditd_printk_skb: 613 callbacks suppressed [ 419.408099][ T36] audit: type=1400 audit(1773119643.863:59040): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 419.460024][ T36] audit: type=1400 audit(1773119643.893:59041): avc: denied { read } for pid=11283 comm="syz.9.3657" name="binder0" dev="binder" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 419.497083][ T36] audit: type=1400 audit(1773119643.952:59042): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 419.537537][ T36] audit: type=1400 audit(1773119643.952:59043): avc: denied { read write } for pid=4827 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 419.562600][ T36] audit: type=1400 audit(1773119643.992:59044): avc: denied { read } for pid=11290 comm="syz.7.3658" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 419.596035][ T36] audit: type=1400 audit(1773119643.992:59045): avc: denied { read write } for pid=11290 comm="syz.7.3658" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 419.658937][ T36] audit: type=1400 audit(1773119643.992:59046): avc: denied { mounton } for pid=11290 comm="syz.7.3658" path="/443/file0" dev="tmpfs" ino=2449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 419.683758][ T36] audit: type=1400 audit(1773119643.992:59047): avc: denied { mounton } for pid=11290 comm="syz.7.3658" path="/443/bus" dev="tmpfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 419.731558][ T36] audit: type=1400 audit(1773119643.992:59048): avc: denied { create } for pid=11290 comm="syz.7.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 419.753794][ T36] audit: type=1400 audit(1773119643.992:59049): avc: denied { mounton } for pid=11290 comm="syz.7.3658" path="/443/file0" dev="tmpfs" ino=2449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 420.236340][T11345] ptm ptm12: ldisc open failed (-12), clearing slot 12 [ 420.282186][T11352] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3680'. [ 420.297212][T11352] netlink: 776 bytes leftover after parsing attributes in process `syz.9.3680'. [ 420.307256][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3680'. [ 420.317761][T11353] netlink: 776 bytes leftover after parsing attributes in process `syz.9.3680'. [ 420.327855][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3680'. [ 420.802015][T11400] netlink: 'syz.7.3698': attribute type 27 has an invalid length. [ 422.597489][T11510] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.3737'. [ 422.901760][T11530] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.3745'. [ 422.913263][T11530] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.3745'. [ 422.924840][T11530] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.3745'. [ 422.936025][T11530] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.3745'. [ 422.946925][T11530] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.3745'. [ 422.957924][T11530] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.3745'. [ 422.968983][T11530] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.3745'. [ 422.979894][T11530] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.3745'. [ 422.990850][T11530] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.3745'. [ 423.080850][T11536] netlink: 'syz.5.3747': attribute type 1 has an invalid length. [ 423.088955][T11536] netlink: 'syz.5.3747': attribute type 2 has an invalid length. [ 424.439250][ T36] kauditd_printk_skb: 472 callbacks suppressed [ 424.439272][ T36] audit: type=1400 audit(1773119648.877:59522): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 424.474738][ T36] audit: type=1400 audit(1773119648.897:59523): avc: denied { read } for pid=11617 comm="syz.5.3777" name="binder1" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 424.501626][ T36] audit: type=1400 audit(1773119648.897:59524): avc: denied { read } for pid=11617 comm="syz.5.3777" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 424.519410][T11620] tc_dump_action: action bad kind [ 424.531455][ T36] audit: type=1400 audit(1773119648.907:59525): avc: denied { read } for pid=11617 comm="syz.5.3777" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 424.594264][ T36] audit: type=1400 audit(1773119648.907:59526): avc: denied { read write } for pid=11617 comm="syz.5.3777" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 424.619258][ T36] audit: type=1400 audit(1773119648.917:59527): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 424.644555][ T36] audit: type=1400 audit(1773119648.947:59528): avc: denied { read write } for pid=11616 comm="syz.7.3776" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 424.668496][ T36] audit: type=1400 audit(1773119648.967:59529): avc: denied { create } for pid=11616 comm="syz.7.3776" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 424.692321][ T36] audit: type=1400 audit(1773119648.977:59530): avc: denied { read } for pid=11619 comm="syz.5.3778" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 424.715725][ T36] audit: type=1400 audit(1773119648.987:59531): avc: denied { read append } for pid=11619 comm="syz.5.3778" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 424.834041][T11639] netlink: 'syz.6.3786': attribute type 28 has an invalid length. [ 427.992227][T11806] sit0: entered promiscuous mode [ 428.007266][T11806] netlink: 'syz.9.3847': attribute type 1 has an invalid length. [ 428.025220][T11806] __nla_validate_parse: 25 callbacks suppressed [ 428.025247][T11806] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3847'. [ 428.674562][T11828] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3855'. [ 429.464353][ T36] kauditd_printk_skb: 449 callbacks suppressed [ 429.464374][ T36] audit: type=1400 audit(1773119653.892:59981): avc: denied { read } for pid=11850 comm="syz.9.3865" dev="nsfs" ino=4026532337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 429.492315][ T36] audit: type=1400 audit(1773119653.892:59982): avc: denied { read } for pid=11850 comm="syz.9.3865" name="binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 429.494064][T11851] veth1_macvtap: left promiscuous mode [ 429.516910][ T36] audit: type=1400 audit(1773119653.892:59983): avc: denied { read } for pid=11850 comm="syz.9.3865" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 429.522896][T11851] macsec0: entered promiscuous mode [ 429.551206][T11851] macsec0: entered allmulticast mode [ 429.572550][ T36] audit: type=1400 audit(1773119653.992:59984): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 429.613957][ T36] audit: type=1400 audit(1773119653.992:59985): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 429.639616][ T36] audit: type=1400 audit(1773119654.032:59986): avc: denied { read write } for pid=11853 comm="syz.9.3867" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 429.665357][ T36] audit: type=1400 audit(1773119654.092:59987): avc: denied { read } for pid=11855 comm="syz.5.3866" name="binder1" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 429.730808][ T36] audit: type=1400 audit(1773119654.152:59988): avc: denied { read write } for pid=4827 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 429.790272][ T36] audit: type=1400 audit(1773119654.152:59989): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 429.854044][ T36] audit: type=1400 audit(1773119654.201:59990): avc: denied { execmem } for pid=11859 comm="syz.6.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 431.730378][T11938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11938 comm=syz.5.3898 [ 440.335967][ T36] kauditd_printk_skb: 109 callbacks suppressed [ 440.335990][ T36] audit: type=1400 audit(1773119664.734:60100): avc: denied { read append } for pid=11953 comm="syz.7.3906" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 440.422417][ T36] audit: type=1400 audit(1773119664.734:60101): avc: denied { read write } for pid=11951 comm="syz.5.3904" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 440.480595][ T36] audit: type=1400 audit(1773119664.734:60102): avc: denied { mount } for pid=11953 comm="syz.7.3906" name="/" dev="ramfs" ino=61239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 440.514129][ T36] audit: type=1400 audit(1773119664.734:60103): avc: denied { read } for pid=11951 comm="syz.5.3904" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 440.538555][ T36] audit: type=1400 audit(1773119664.734:60104): avc: denied { mounton } for pid=11953 comm="syz.7.3906" path="/499/file0" dev="tmpfs" ino=2757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 440.570996][ T36] audit: type=1400 audit(1773119664.744:60105): avc: denied { create } for pid=11953 comm="syz.7.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 440.595398][ T36] audit: type=1400 audit(1773119664.764:60106): avc: denied { create } for pid=11952 comm="syz.6.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 440.616839][ T36] audit: type=1400 audit(1773119664.784:60107): avc: denied { write } for pid=11954 comm="syz.9.3907" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 440.650423][ T36] audit: type=1400 audit(1773119664.804:60108): avc: denied { read } for pid=11951 comm="syz.5.3904" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 440.681031][ T36] audit: type=1400 audit(1773119664.814:60109): avc: denied { create } for pid=11951 comm="syz.5.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 442.578121][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3947'. [ 443.244284][T12085] netlink: 'syz.5.3954': attribute type 30 has an invalid length. [ 444.440042][T12150] netlink: 2885 bytes leftover after parsing attributes in process `syz.7.3980'. [ 444.980016][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3989'. [ 445.360224][ T36] kauditd_printk_skb: 567 callbacks suppressed [ 445.360247][ T36] audit: type=1400 audit(1773119669.743:60677): avc: denied { mounton } for pid=12206 comm="syz.9.4003" path="/242/bus" dev="tmpfs" ino=1331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 445.391024][ T36] audit: type=1400 audit(1773119669.773:60678): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 445.415412][ T36] audit: type=1400 audit(1773119669.793:60679): avc: denied { create } for pid=12208 comm="syz.9.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 445.435530][ T36] audit: type=1400 audit(1773119669.803:60680): avc: denied { read } for pid=12208 comm="syz.9.4004" name="binder0" dev="binder" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 445.459773][ T36] audit: type=1400 audit(1773119669.823:60681): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 445.495168][ T36] audit: type=1400 audit(1773119669.883:60682): avc: denied { read } for pid=12210 comm="syz.9.4005" name="binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 445.519446][ T36] audit: type=1400 audit(1773119669.883:60683): avc: denied { mounton } for pid=12210 comm="syz.9.4005" path="/244/file0" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 445.543050][ T36] audit: type=1400 audit(1773119669.883:60684): avc: denied { watch } for pid=12210 comm="syz.9.4005" path="/244/file0" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 445.574589][ T36] audit: type=1400 audit(1773119669.883:60685): avc: denied { read } for pid=12210 comm="syz.9.4005" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 445.597818][ T36] audit: type=1400 audit(1773119669.903:60686): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 446.188613][T12252] futex_wake_op: syz.5.4021 tries to shift op by -1; fix this program [ 449.691363][T12383] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.502941][ T36] kauditd_printk_skb: 224 callbacks suppressed [ 450.502966][ T36] audit: type=1400 audit(1773119674.862:60911): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 450.547068][ T36] audit: type=1400 audit(1773119674.922:60912): avc: denied { create } for pid=12415 comm="syz.6.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 450.567870][ T36] audit: type=1400 audit(1773119674.922:60913): avc: denied { read write } for pid=12417 comm="syz.9.4082" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 450.759868][ T36] audit: type=1400 audit(1773119675.132:60914): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 450.787866][T12423] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4085'. [ 450.800731][ T36] audit: type=1400 audit(1773119675.172:60915): avc: denied { mounton } for pid=12422 comm="syz.5.4085" path="/556/file0" dev="tmpfs" ino=3016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 450.838543][ T36] audit: type=1400 audit(1773119675.212:60916): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 450.871630][ T36] audit: type=1400 audit(1773119675.212:60917): avc: denied { read write } for pid=4827 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 450.896495][ T36] audit: type=1400 audit(1773119675.242:60918): avc: denied { read } for pid=12424 comm="syz.7.4087" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 450.920746][ T36] audit: type=1400 audit(1773119675.242:60919): avc: denied { read } for pid=12424 comm="syz.7.4087" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 450.943632][ T36] audit: type=1400 audit(1773119675.242:60920): avc: denied { read write } for pid=12424 comm="syz.7.4087" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 451.719463][T12454] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4096'. [ 452.373074][T12473] netlink: 'syz.5.4104': attribute type 13 has an invalid length. [ 452.381562][T12473] erspan0: refused to change device tx_queue_len [ 452.388263][T12475] sit0: entered promiscuous mode [ 452.395173][T12475] netlink: 'syz.6.4105': attribute type 1 has an invalid length. [ 452.403041][T12475] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4105'. [ 452.635822][T12499] netlink: 'syz.7.4114': attribute type 5 has an invalid length. [ 454.217441][T12560] netlink: 'syz.6.4138': attribute type 7 has an invalid length. [ 455.206084][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4149'. [ 455.660546][ T36] kauditd_printk_skb: 244 callbacks suppressed [ 455.660565][ T36] audit: type=1400 audit(1773119680.022:61165): avc: denied { name_bind } for pid=12601 comm="syz.6.4154" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 455.763913][ T36] audit: type=1400 audit(1773119680.132:61166): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 455.788539][ T36] audit: type=1400 audit(1773119680.152:61167): avc: denied { read append } for pid=12607 comm="syz.9.4156" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 455.814066][ T36] audit: type=1400 audit(1773119680.152:61168): avc: denied { read write } for pid=12607 comm="syz.9.4156" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 455.839009][ T36] audit: type=1400 audit(1773119680.152:61169): avc: denied { mounton } for pid=12607 comm="syz.9.4156" path="/271/file0" dev="tmpfs" ino=1491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 455.863254][ T36] audit: type=1400 audit(1773119680.152:61170): avc: denied { read write } for pid=12607 comm="syz.9.4156" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 455.911003][ T36] audit: type=1400 audit(1773119680.262:61171): avc: denied { read write } for pid=4827 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 455.962080][T12612] netlink: 'syz.7.4157': attribute type 27 has an invalid length. [ 455.972528][T12612] sit0: left promiscuous mode [ 456.028078][ T36] audit: type=1400 audit(1773119680.392:61172): avc: denied { read write } for pid=12611 comm="syz.7.4157" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 456.052524][ T36] audit: type=1400 audit(1773119680.392:61173): avc: denied { mounton } for pid=12611 comm="syz.7.4157" path="/561/file0" dev="tmpfs" ino=3089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 456.101828][ T36] audit: type=1400 audit(1773119680.462:61174): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 456.336072][T12621] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 456.341965][T12621] pim6reg0: owner set to 0 [ 460.715814][ T36] kauditd_printk_skb: 313 callbacks suppressed [ 460.715835][ T36] audit: type=1400 audit(1773119685.073:61488): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 460.748242][ T36] audit: type=1400 audit(1773119685.103:61489): avc: denied { read } for pid=12802 comm="syz.5.4231" dev="nsfs" ino=4026533268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 460.771947][ T36] audit: type=1400 audit(1773119685.103:61490): avc: denied { create } for pid=12802 comm="syz.5.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 460.822017][ T36] audit: type=1400 audit(1773119685.103:61491): avc: denied { mounton } for pid=12802 comm="syz.5.4231" path="/589/file0" dev="tmpfs" ino=3191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 460.847208][ T36] audit: type=1400 audit(1773119685.103:61492): avc: denied { mounton } for pid=12802 comm="syz.5.4231" path="/589/bus" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 460.872006][ T36] audit: type=1400 audit(1773119685.103:61493): avc: denied { mounton } for pid=12802 comm="syz.5.4231" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 460.897689][ T36] audit: type=1400 audit(1773119685.133:61494): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 460.928138][ T36] audit: type=1400 audit(1773119685.153:61495): avc: denied { create } for pid=12806 comm="syz.5.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 460.951396][ T36] audit: type=1400 audit(1773119685.163:61496): avc: denied { create } for pid=12806 comm="syz.5.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 460.974323][ T36] audit: type=1400 audit(1773119685.173:61497): avc: denied { sys_module } for pid=12806 comm="syz.5.4232" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 461.517102][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4252'. [ 461.526128][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4252'. [ 461.861667][T12865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12865 comm=syz.6.4255 [ 461.861667][T12866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12866 comm=syz.6.4255 [ 462.062674][T12882] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4261'. [ 464.820867][T12986] netlink: 'syz.9.4298': attribute type 27 has an invalid length. [ 464.822070][T12987] netlink: 'syz.9.4298': attribute type 27 has an invalid length. [ 465.959647][ T36] kauditd_printk_skb: 300 callbacks suppressed [ 465.959668][ T36] audit: type=1400 audit(1773119690.305:61798): avc: denied { execmem } for pid=12995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 465.997064][ T36] audit: type=1400 audit(1773119690.315:61799): avc: denied { create } for pid=12997 comm="syz.6.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 466.018461][ T36] audit: type=1400 audit(1773119690.315:61800): avc: denied { create } for pid=12997 comm="syz.6.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 466.070618][ T36] audit: type=1400 audit(1773119690.315:61801): avc: denied { create } for pid=12997 comm="syz.6.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 466.090699][ T36] audit: type=1400 audit(1773119690.315:61802): avc: denied { create } for pid=12997 comm="syz.6.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 466.110576][ T36] audit: type=1400 audit(1773119690.315:61803): avc: denied { create } for pid=12997 comm="syz.6.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 466.130216][ T36] audit: type=1400 audit(1773119690.345:61804): avc: denied { read write } for pid=12996 comm="syz.5.4302" name="binder1" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 466.153870][ T36] audit: type=1400 audit(1773119690.345:61805): avc: denied { read write } for pid=12998 comm="syz.9.4304" name="binder0" dev="binder" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 466.177910][ T36] audit: type=1400 audit(1773119690.365:61806): avc: denied { create } for pid=13005 comm="syz.6.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 466.197552][ T36] audit: type=1400 audit(1773119690.365:61807): avc: denied { create } for pid=13005 comm="syz.6.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 466.732425][T13015] netlink: 'syz.9.4308': attribute type 27 has an invalid length. [ 470.617089][T10629] Bluetooth: hci0: Frame reassembly failed (-84) [ 471.122418][ T36] kauditd_printk_skb: 168 callbacks suppressed [ 471.122439][ T36] audit: type=1400 audit(1773119695.457:61976): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 471.802758][ T36] audit: type=1400 audit(1773119696.136:61977): avc: denied { execmem } for pid=13063 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 471.824542][ T36] audit: type=1400 audit(1773119696.136:61978): avc: denied { mounton } for pid=13064 comm="syz.5.4321" path="/608/file0" dev="tmpfs" ino=3293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 471.845599][T13065] netlink: 'syz.5.4321': attribute type 16 has an invalid length. [ 471.848590][ T36] audit: type=1400 audit(1773119696.136:61979): avc: denied { read write } for pid=13064 comm="syz.5.4321" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 471.867319][T13065] netlink: 'syz.5.4321': attribute type 2 has an invalid length. [ 471.879512][ T36] audit: type=1400 audit(1773119696.136:61980): avc: denied { read } for pid=13064 comm="syz.5.4321" dev="nsfs" ino=4026533268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 471.898606][T13065] netlink: 'syz.5.4321': attribute type 2 has an invalid length. [ 471.910322][ T36] audit: type=1400 audit(1773119696.136:61981): avc: denied { create } for pid=13064 comm="syz.5.4321" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 471.938407][ T36] audit: type=1400 audit(1773119696.136:61982): avc: denied { create } for pid=13064 comm="syz.5.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 471.949443][T13065] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.4321'. [ 471.970071][ T36] audit: type=1400 audit(1773119696.246:61983): avc: denied { read } for pid=13064 comm="syz.5.4321" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 472.009573][ T36] audit: type=1400 audit(1773119696.336:61984): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 472.620478][ T3554] Bluetooth: hci0: command 0x1003 tx timeout [ 472.620440][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 472.653329][ T36] audit: type=1400 audit(1773119696.995:61985): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 476.145605][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 476.145632][ T36] audit: type=1400 audit(1773119700.480:62016): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 476.631176][ T36] audit: type=1400 audit(1773119700.959:62017): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 477.712377][ T36] audit: type=1400 audit(1773119702.038:62018): avc: denied { execmem } for pid=13097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 477.742232][ T36] audit: type=1400 audit(1773119702.068:62019): avc: denied { create } for pid=13098 comm="syz.6.4333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 477.762353][ T36] audit: type=1400 audit(1773119702.068:62020): avc: denied { create } for pid=13098 comm="syz.6.4333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 477.797424][ T36] audit: type=1400 audit(1773119702.068:62021): avc: denied { read write } for pid=13100 comm="syz.5.4332" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 477.833180][ T36] audit: type=1400 audit(1773119702.118:62022): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 477.898427][ T36] audit: type=1400 audit(1773119702.228:62023): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 479.458262][ T36] audit: type=1400 audit(1773119703.776:62024): avc: denied { execmem } for pid=13107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 479.495225][ T36] audit: type=1400 audit(1773119703.796:62025): avc: denied { create } for pid=13109 comm="syz.6.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 481.270575][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 481.270599][ T36] audit: type=1400 audit(1773119705.593:62040): avc: denied { execmem } for pid=13118 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 481.304335][ T36] audit: type=1400 audit(1773119705.603:62041): avc: denied { read } for pid=13120 comm="syz.5.4338" name="binder1" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 481.327896][ T36] audit: type=1400 audit(1773119705.603:62042): avc: denied { read write } for pid=13120 comm="syz.5.4338" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 481.351728][ T36] audit: type=1400 audit(1773119705.633:62043): avc: denied { read write } for pid=13119 comm="syz.9.4340" name="binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 481.375423][ T36] audit: type=1400 audit(1773119705.633:62044): avc: denied { read write } for pid=13119 comm="syz.9.4340" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 481.400274][ T36] audit: type=1400 audit(1773119705.633:62045): avc: denied { create } for pid=13119 comm="syz.9.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 481.822525][ T36] audit: type=1400 audit(1773119706.143:62046): avc: denied { read write } for pid=3164 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 481.847212][ T36] audit: type=1400 audit(1773119706.143:62047): avc: denied { read write } for pid=9613 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 483.189068][ T36] audit: type=1400 audit(1773119707.511:62048): avc: denied { execmem } for pid=13127 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 483.220899][ T36] audit: type=1400 audit(1773119707.541:62049): avc: denied { read write } for pid=13128 comm="syz.5.4341" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 485.622274][T10629] bridge_slave_1: left allmulticast mode [ 485.628008][T10629] bridge_slave_1: left promiscuous mode [ 485.633759][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.642056][T10629] bridge_slave_0: left allmulticast mode [ 485.647821][T10629] bridge_slave_0: left promiscuous mode [ 485.653459][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.830364][T10629] veth0_vlan: left promiscuous mode [ 486.129004][T10629] bridge_slave_1: left allmulticast mode [ 486.134772][T10629] bridge_slave_1: left promiscuous mode [ 486.140485][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.148228][T10629] bridge_slave_0: left allmulticast mode [ 486.153931][T10629] bridge_slave_0: left promiscuous mode [ 486.159743][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.249883][T10629] tipc: Left network mode [ 486.255017][T10629] veth1_macvtap: left promiscuous mode