last executing test programs: 3.170710715s ago: executing program 1 (id=2206): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x5, 0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f0000001040), 0x282d) 3.170493635s ago: executing program 1 (id=2207): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 3.166304906s ago: executing program 1 (id=2209): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x79) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000f3ffffff0c0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x20, 0x0, &(0x7f0000000000)=[@free_buffer, @clear_death={0x400c630f, 0x3}, @register_looper], 0x0, 0x1000000, 0x0}) 2.682135504s ago: executing program 1 (id=2211): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000797000/0x3000)=nil, 0x3000, 0x65) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="06002a005da6c816", @ANYRES8=r1], 0x24}}, 0x0) (async) r2 = userfaultfd(0x801) (async) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd\x00') getdents64(r3, &(0x7f0000000480)=""/27, 0x1b) (async) getdents64(r3, 0xfffffffffffffffe, 0x64) r4 = socket$vsock_stream(0x28, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16, @ANYRES16], 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) setuid(0xee00) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) (async) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=xen,accesb=client,loose,debug=0x0000000000000072(version=9p2000.L,posixacl,mGsk=^MAY_WRITE,fsmagic=0x0000000000000cc6,\x00']) 2.626716149s ago: executing program 1 (id=2212): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (async) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./bus\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x4) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x20000000) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) (async) getsockopt(r7, 0x111, 0x2, 0x0, &(0x7f0000000080)) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000080)={'veth1_to_batadv\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000100)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 2.624845339s ago: executing program 1 (id=2213): pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d55"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40305839, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x30}], 0x1}, 0x6090) close_range(r1, 0xffffffffffffffff, 0x0) 1.062583845s ago: executing program 3 (id=2224): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x8000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f00004e9000/0x4000)=nil, 0x4000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 'veth1_virt_wifi\x00'}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r1) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x40480d0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000efffee940000409c92eb55b7"]) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0xfff, 0x6, 0x5, 0x4, 0x8, "e4f343112f3485ff"}) mprotect(&(0x7f0000440000/0x4000)=nil, 0x4000, 0x1000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 868.25009ms ago: executing program 3 (id=2229): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d4bfa4d7d04674a1eaedd175a18a1daf311bb4b9a3ca557f2a3cd5bcbe47096fa3165070263c4b163da8eaa49cb86280cf8576c30485c78e61d240c5bf85ff40271621fc854053f638dac7e33d0fb808211cc", @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,k']) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r5, &(0x7f0000001940)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r5, &(0x7f0000000540)={0x8, {"1a17924ab218eacb15a3fccf929e2dd2497903c1f853d95b995c65e99449ff953fa11c7723b2149ecdaa7f833f60e13b19a66e963f7e8da4297ebbfdda5b36fb4d01bd02e6c652dc4d99e2cb82c2a1d4a45e4c89ba9994e82f854bbc34a40b3a58aa256c9b4512fbf91b9846446c4909e4ec53982e7d7fd11ee0bdeab0bb4c469c9665dde8cb58f0ca148223b6cc4e2f306cfbeccedec8db5212f2fc4e14f836c68bdace4db1afbde9d463e5ac24567925b5fdf0e3af1a52dbd7669fe9227302c8f635bc2ddbf5bd7dccd7b92a9bd5c7363375a57851c2bc72509f2005f138f5a59cf85e9ddb1c972c89d50806e8941b7059cd3eca77527a7f20af70841b4d6f026614bdbb276a6814cc74d91856b968c5fdb52674d892a90d01ab91841b6811def78bdac9bc6f9df2598569fbdfef75079832b2750801dc83fd1987713c61136ac9e5f2f7e67f302109bb9a7fea75290b506a89a19d7e0e472937a8c9ecfe16ef6eb88c7a88a060756196d55d6a3d3f7cdf9915d22b6b3af69ec55017b821ec0621e8a59414efc2b46977a85846b53ae75a350947afcafbdef7233cc371bc2a6f29c0315b352ac2741c81df534303ddb30a4408db5679d05d245259c245c9d7f861711cc287cfd0462b948512623b921060386c587fd166df29e71ecfc8ed90031e95b2af1406b5ae73f6084e39e88194e3d37dc801982656b5b66342d74100f9f5b8c94c1e91b626bbf426a07b4be91dbdb76a6e40d0b788f89359e462e69bc4499fd4f9aa1e7f0c3f73a996b6ecef606c7651286e1f18a6823eed7191cd542057eaaf09aa32e8ce370c09050278b85fd359b8ca23e66e9d294ec57b3ddd90409d9b1ca28c6993b244f8ca46f6bf478ff22fb1df53e33abdda4b2b1e5cff7de19957bdc8e7ca39e4762204b1f9f33b9375b7282422b91841706751038e42023ba45c1cd0998c1794c1c2a5ff65466189bbb27bcbf01e5a48bfd8b6845f7d5c87d977df4ded5273ebf56b96c50b4eadc44bfaa0994259eeb1031644415fa9d729753d2138b06f9b7b624d9eeb1ef71dfdff0b639078f058c7a070451c4670af0c6eb1202f77be82faba9b6287995066b5f7e59b7967706d8d8c5bde48137e13df537ae54664fe4e8460b1bdf5b92a1dcf39ee1726bc6690d0ac5f799bcfab918c59cb132c45054ba17b8a44d505ad3eaeee95b4275b25b2087da8902552727a1e739014df348cfa3a1102661c35a6a38df6c410f5343577955dd57de5af089e3f1bcdf96d4ef1d5944243470b0ed10616144cccc5cac44e36fefd9441120c5d047867af0ea353da21fc0ae73b78b84d53a62efeb94ea8d441cc698c92fd7b36cf41472d036c5093bbdf943620c29ffa3b21ef4a0bb9274912b046834ee6f855ceadf18fb488040d5829ab6e8bf69a90315f7f84d002ac4e929e9f1010a8486746bd316799ba3a65744980c388202324ba50768c77a8481ba74d135da7507048c82714a8234837b69922126e4084a68f7418bfd26417cade786c7f8185e2492e3b64eb9d2c2c721504c7b4aeb383503f745fd69315c56b5b0158decd1b1606a63366b7e2d2b9124b6efca4480c703c8f37d6ddff55b0ec15f2ce6be6c902d06aec2ccabeba13b442b608076c33d19e690ab66cf6678d679758d22fb5d8d963f25d00c45576f8b2938543080297b9cb6c305e3131d2f412f00370c285251909f8ebefc3d18a23e25a183997b08251450b29fff32781e6a70e6e070ab3921f3f809392deb732d6f30cc034b5f77d41218bca86d515b16da0457dbf7aaefdcef9d5358e7b4f1e5d1a410f55449e765609d122f938fd57b71482244dff0523067cabfd322fc47aca1c331112e3d969f5fe3594c3c7adea7c36e9b9af6754cdea5ccf05b139f783d4b24540c50a6a9f7dff472d47c87c151d8439b5740cd1f423335dae2680050bd44766159cba66666b7dbc9e190130494327a0d8c9dbed5c8b831ce2b2bb236353ff7175a48b61a0f3209fa3db44f07a21a485ef1682a33cdf632ac2d6ca993b6cd90913e31704bb851711e1f2b5ebb19baaba102dd42d550933e9dfc17311665fef4d0206d7debbcbbd97efafffb905bf9a77b8eeb67d5f8bef8526f6f8607672bb3c50b14e16c264265594e05fa481f724290abdc9f60a899f26033236e3b90548c24288a7b627b51c4d7c638c359ec6325b0d79e1d69cf18cd9136a263b6aa84ad062b9831fc7c201b7ccec7d3b7ea2132ee4579632bf614bcde285527c36ef8a8e12651ef34a677a8d2f84360afa2f2245e4e0d61a12e8e446045fae61375082f983363795f11848edad24b3f7ae53f0eeb329fa62b6d7b446e3b2c1257981f9c0c3ea371c71021af834a285203b2e3177ddf5251044ea215c048f78701dec36a94ca3c435278d1fd889996adf5ea7c8db62f2b1331bc22c4b7798d587a5c4e619b7b576e19d92996bc0bdc0c8c15374e11b6eeda0e18b35aac4b96db9cdba025080bf5bea4ffdf4fa3c93ec5feede0a140f7f6727ef255783565935d59d348aaa6d12c060afd5f6d084346309d8cbf54b33050ecccf30ae083c4034165880214a94a5296427e2fcb6d90692a82212b6b8d86c6d163f0643944aaba4af1171aed463994f1374e1ec1654b89b04e9d635074e8d131bc2443daf1caad455671470329a287f4c711cb907403d5c05184cd3a647823b5b9c6dc4451fdde92dc1cb87010197026458b40d4809ab60aca1af6bb3702a3e0506cdd21faa6d9909f4ed74723de75fc48d44314fa3cc0c8e8ea226ec1d5875b9595aeacdff0a9f75b4a60dde781c58179f997ecb6479c91ecacc65bfe293a2d26c21ae7c1d7be1241cc1c4ea86a6cf8d93012bd98508aae8db723ff167026298cab227b7d0062c27ccc8e81df7268423ad063638760b44e77147ee9bd84140166ae2bfd592f845ca68c719f7520ae3c9988cc89db73bf93ad6f2f7d9394b2288f0176723acd167081ade4e066a26832f7b655cd874aa5026a7369bb9912c90599d1407f0488a9c540a31997890f5433bd1df91ba13a9e0721c9a707eac7cff1c3efef6cd716779c7ad631c3560caa2031d9d2591329c1867d0d5f96b5897cac2c6a381f0ce5c27969c2b3e7d188e1e896d815b01a3e177933817325953140272ad718a36ae522d43de109ba92255ee66d2a14897f2b2014dc9a495c108727e0eef54df617e269e43a0c48d28a91aaf14d58719e21ea39c1c534e39a1dfabb61377b55d2f69fe79c7d5111b8b952c388925ea8ab1503ae68bce95a34a10a85aa0e5da52add14b93eaac5861a6504e23dda8034e809253c1071ddda934663faac454cd378c5725f5c6f4d943779994357185e512a4b6993156e624f25d86d24e7254d3e9b231aa80ed5a32e108cb528d402f93e58c25ac937420ff7dcd7d9ec2126c7fe7cefa47c038f23de40523d5e026fe3bb4cfd3040f9bd9631cf5a2cde1e20a6032703cd64c2ad97ea95d05a7aa3ea3b3b9d5a86961116dd1338c0a2caae0ceab3178ac7736dfa8a949cd81d261748e6678cb730b57468fb2b7e22c5eb08ad496e76775dce0c31950a596580ad7d6c3fd9ce90dded340f20b77fe53e81fb6e2a7a6c450b8ac9009c7c077893f704457a90401fb758c0769fbfd38e40ae692e410b889bbf0b09a32dc731b6768c0fa3963a5b6279b6a5db611174339f3218fff567f6cfb7377ddc8e2c730da35cc3ec680a6bc95010dd03834caab7afb2c0023ad9ce3aae3c0fd1ece42ea840bf5fc798a0b5fbe7692f13549cdba4a0b68f722ef6877856a76fc3c39f7cfd760675a9f341d9f09f381972be9171e50455ed13e665e61a03b0c2a79276a871c25fc5c486639a71a8dfdf36174373b8995014752aba3026045be6b43074ac3824d687bbf5f6544228cea52791828f54980ee9f728534ea32edd205aaace717adcf61ce28f92719048d44b09812bcfd2d22cc9d7a45ed6b4634756f6b3189908c71728c373ea94aa5c74ce4a73c20138b8cb21db6e2dfb35329b86b1805a5208dd370b8342ca8aa3cbd3e7a3ec79d7b8ee677b04e19c524ddc6de0b22443ac15de908f61719399d0f9890ca2b0283a7db914944f424af10ba0ec9e3e253c060d7b28552eaae5eed1e906f8f93c2195293deabdad6cb38ddab51603e4a96ef1e086de911fb716ffbca467294d9e66e5d0f8225bc28d6c074c4ffba76706f61b0b386b7e4b6500a15fad291f34f6c84f1596a97512f31196a529a7a5725437c038e17d531da3838c8aef3bade6bc1d4c7624560d4fba72e5f8be2c5dc905e1e4bcb2aa7eddb275408ef4288ac69c7a18ae58fb26c2f5a6964f051b81d2e426fc2a5d8617050341b96d5a746e3419fbe94bd3752403868b655c2dba6f48ef109a2e6ec0041842fae52bfab70481ecfe8d27f3d5e444f1b941d871c8057cbe35df68665bc3aadea02d203b106d1179a428daa7d9fea9dbddd8955bb289a92ec790de74cd6a1edf925ab85471633dedf8ba46abe456963a2381addce2aa16c06dd80bb54d8e53d7c82607916af175061da29122afde8687add6b6f42233b76a1164893dcc1ec3dcf935576d2d0f3ab3b1adbace086da915234b4f9bad0afc2915608fc4f6611dc3b91d7e0e48cb0a0f3fdc70ef70ef82043afbd3325f0f6186390ab28ca9f0009184637530d79f0c5a77c6e912afbe6533988f543fc6c02d3d44fbdb0e2ebfad2680184f1ed451991667df958a71fb41cf4367bdb931389ea8b6340e225b312a09dadd8e2ac2d200db6e75323d48c73c6b819e13f92b01bf405e796a2e10b863e773598abcbcc196987e18b19530337809b56480778207103a12acfff1c0ad62846088251a1a0d0d6b300059a99698c84ccac78d53eb32e3984001978db7679960b4d75d71b49696909826c66320526fe02a060265821d15b8b2337121a201402a118ec03ff0d4f3dfa48f2dadd20b510ecdf4e6440b5b2466b9bf28e32327189f0405245694a6371dbe4eae7a8293cdc15193c284123d64690120634f808096a8f3f7a04a5bac9dd86c09f2e4e87c7d7c98d0b370e84ea5f265730f5480eb1375d4f82c7d4efbb6e58c5a92848331b2becd2531f6c456b5d0e690b102dd8faec55bde56f95727f4abf52c58543faaeb9cefd39bba788bd7e2b02b27ecbc1679a1ac00823c83e1ae29690cd25544d3ae0a8db25e963e9fb5bd94987637ac3546b9b312bf04d5c6211c135e806525d423fde9ccb5ef7962ec1e056e6f29adaeebb331f6c234586d1fe21577f56d620c6942a29d4915772144cc60008d1236db21100d5a3112c29396b9e18cdb5b104bed2df2b6ea72c9aa03bb6082f3eb07f0eae359864967a749492d21005b0d39c9613c20b1e21700ab66a4f5ca03ec08d67b95f759252d758743820ba243032e1708447fbaebc27e1316af4cf547cef3ac4966a1f04dd07012f257a0204107c23a0046b12493d9784b24dc561c1f88e591056bcc3b338ab1de65e5ad578021f26f93e9b12f00b5f8c8ae2db6b7b8f254303c7ff06514735974e65fb9a93dc79b115a12310040490ca11ef315340af104e20a2e22dcd132f7d7a61d9d3a12e832ee048a2170dbe03d747ed7402180eb964fde0ecb77e778b18a4e5a83479bb7e0ea0a7d5145ffed4607bd7e6b8f961625d5e3dcac2d4a05e71dc9c2e52195bd55aed4e6749dc1c329e2cda966d18e9bf882c05db627c1047fc71533bbba2c8a83d04db5bad6da349a9ad1992eb88e0274d32a16137e2396ad973c0ecbbc2d243e68b6959bf9b", 0x1000}}, 0x1006) (async) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5444000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) clock_gettime(0x4, &(0x7f00000004c0)) 846.881542ms ago: executing program 3 (id=2230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) (async) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT]) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 769.230778ms ago: executing program 3 (id=2231): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, 0x0, &(0x7f0000000100)) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) sched_setscheduler(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x100002000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 603.135052ms ago: executing program 3 (id=2232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000000)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf2501000000000000000c41000000140014625e6f6164636173742d6c00006dabd5e5"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0) 602.808462ms ago: executing program 3 (id=2233): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000300)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303038303430300a445930302c757365725f135618ad3887e5e89445bdcff087eb65c406c191ac333985dd925f3d2eceddc21f425ea717cb9973605a7c910d46863b5af5b55bb58e5fb702bc5e00000000000000000000c6232054e5468ef903d3e6636b2d57abaa4f9561780a2e39829c4ea6e7d56ec1993e7443b7db8a576d614e970119a8ba3de7f4c4b4d595af90634d00f64682950326905eeae0d6e5a9787b2cd0b4c03f29edf94472a3", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="50010000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0000000000fc0000000000000000000000000000000000000000000000080000000200000067726f75705f69640300000000000000ffffffffffffffff000000000000000000000000000000004607000000000000a4000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000feffffff00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000080000000400000067726f75705f6964"], 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r7, 0x400454ce, r10) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) execveat(r11, &(0x7f0000000240)='./file1\x00', &(0x7f00000016c0)={[&(0x7f0000000340)='cache=mmap', &(0x7f0000000440)='%/\x00', &(0x7f0000000480)='wfdno', &(0x7f00000004c0)='\x00']}, &(0x7f0000001840)={[&(0x7f0000001700)='!]#\x00', &(0x7f0000001740)='rfdno', &(0x7f0000001780)='trans=fd,', &(0x7f00000017c0)='wfdno', &(0x7f0000001800)='/\x00']}, 0x800) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdnoO', @ANYRESHEX=r5, @ANYBLOB=',cache=mmap,k']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r7) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001a00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8200030}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x50, r12, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48005}, 0x8000) chmod(&(0x7f0000000180)='./file1\x00', 0x60) 494.8538ms ago: executing program 0 (id=2234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x22, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@cred={{0x1c}}], 0x30, 0x8000}, 0x40000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) r6 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 439.994355ms ago: executing program 0 (id=2235): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000009880), 0x380, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) poll(0x0, 0x0, 0x8) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) 358.121331ms ago: executing program 0 (id=2236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040041}, 0x1) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r1, 0x1ec2477b5ce8cf50, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', r2, 0x1, 0x80, 0x1, 0x6, {{0x33, 0x4, 0x0, 0x17, 0xcc, 0x64, 0x0, 0x3, 0x166af7c5ab7df405, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, {[@cipso={0x86, 0x56, 0xffffffffffffffff, [{0x7, 0xf, "42b3c0a82b52321a0f037c906f"}, {0x2, 0x11, "fc8d9d183ec45010013ac9eb3381f3"}, {0x6, 0x9, "37a8b62c54e25e"}, {0x0, 0x6, "0581b07b"}, {0x6, 0xa, "bf2600b498005be0"}, {0x232a218d591133e0, 0xd, "9a0289be22f0ed4652ede0"}, {0x5, 0xa, "a4ac5025cd06ac8d"}]}, @generic={0x44, 0x2}, @lsrr={0x83, 0x1b, 0xd4, [@multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @broadcast, @multicast2]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x0, 0xb, "52581d1d815f9e73d5"}, {0x1, 0x2}, {0x1, 0xc, "13a5057788ec8d8898af"}, {0x6, 0xf, "2a793f08b4706e41321d29ca3c"}]}, @cipso={0x86, 0x14, 0x0, [{0x2, 0xe, "1b2d2c6eb952ae235a3790fa"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xfc, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x10000000) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xfc, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x10000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000006c0)={0x4, 0x0, [{0x371, 0x0, 0x9}, {0x30f, 0x0, 0x8}, {0x9a3, 0x0, 0xfffffffffffffff2}, {0x19c, 0x0, 0x6}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000006c0)={0x4, 0x0, [{0x371, 0x0, 0x9}, {0x30f, 0x0, 0x8}, {0x9a3, 0x0, 0xfffffffffffffff2}, {0x19c, 0x0, 0x6}]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast1, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast1, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r6, 0x541c, &(0x7f0000000880)={0x5, 0x8001, 0x1000, 0x8000000000000000, 0x9ab}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) openat$vsock(0xffffffffffffff9c, &(0x7f00000009c0), 0x103082, 0x0) (async) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000009c0), 0x103082, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x8, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x8, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8000) getdents(r7, &(0x7f0000000b40)=""/74, 0x4a) openat$fuse(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x4800, 0x0) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={0x1d0, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "11e08b768af18dcfa5582de611499866103763fecce018a89b0aefa3b077742098e9f800"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "9c822abc56af698190fbc17f4a243e6bc7e35f3137a05933112d1e3c19a8ce"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x78e479fa}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "62e36c3851e6fa7856c6f4dfc52766cc9ab504643546ace09c758e8d3b6b88ed2c5f735fb8b63f9ab5110dd71bed617f7b9df699d7218542b0a9fb34c1c16556cdd315dfe47d5a34f57febb87416c4762bdbeff7f62959a93049b60113a112b844060c0433fdbb130475cc7183ec4f2a7767b8a3fc9bcb03a13be64231226f678ce710d4f1bced702cd9c1252e85169bd92226e2c2dbc45635597bce30728a6ae510d80d17855f8add1af6dd4fe4aacd95a28938415f17585eb007f46dd036"}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="fc05ff3cd8442931ea7d8ea2f35d97f79ed0fb0ad81676f5795059c81b42f7d04f370ac049a4b113ad5d22f24f1fee11ba3f67425bb6e79a40343f190386a46c668ff8900413840bc13e6212499e35d4a8220d24bd16673c72d1d32b0bc25f1849fd5ed02248d99b124036ad8914ea1d284997a6b9df8cab4bd7e11d13aadab5768e0bfbb88551bb1434fa61eeb25a9a778cec5aca", 0x95}], 0x1, &(0x7f0000001000)=[{0xc0, 0x103, 0x2, "11bc08f5fe80d4d7a3701da46de0008062f2cd67141a75d8c06b481ed9faef910a542b39f58fd9ddabb628cbf6aca2bbb1af9293d3daaf2c08df0d887d830a02071f620b9517d8adfb77b5dc878f298357871e6212254df82a2b2b18328474d03e5aaffd54b7d707881b45282fe3958bdcefe0ac5ba6d43d0b74ed92b81e1b204944dd5955ab88fa224e5425ee8b50b38ecbe86bf8141ad067466f700d9f1157a7aa76497eac6c90fffefffb335b6ebd"}, {0xa8, 0x0, 0x4, "58f67ed14a36af488f4504939be6318be14a5d142957d47abd83c7553909da0ece0e579ac7237d59671e35597f61b6c59a6edfd034614680117dfb7c96042bf08a475b8ae32e8dfffbdc0e71f929868d389e16bf6ea9adff9c61e77f5db623d1736e73bedf542231a3d2595a4e24ef6794aedb75f89a1f1d1720f0045b1b719bb86f0d5d24717ad32e3b1978a4ace7c7b26769eba374615a"}], 0x168}, 0x400c0) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f00000011c0)={0x4, 0x0, [{0xa0b, 0x0, 0x5}, {0x8db, 0x0, 0x5}, {0x939, 0x0, 0x5}, {0x25f, 0x0, 0x7fffffffffffffff}]}) rmdir(&(0x7f0000001240)='./file0\x00') (async) rmdir(&(0x7f0000001240)='./file0\x00') sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x64, 0x0, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffff00}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x11) (async) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x64, 0x0, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffff00}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x11) linkat(r7, &(0x7f00000013c0)='./file0\x00', r7, &(0x7f0000001400)='./file0\x00', 0x1400) socketpair(0x21, 0x2, 0x5, &(0x7f0000001440)) (async) socketpair(0x21, 0x2, 0x5, &(0x7f0000001440)={0xffffffffffffffff}) setsockopt$inet6_int(r8, 0x29, 0x43, &(0x7f0000001480)=0x3, 0x4) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000005) ioctl$HIDIOCGRDESC(r7, 0x90044802, &(0x7f0000001600)={0x6e5, "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"}) (async) ioctl$HIDIOCGRDESC(r7, 0x90044802, &(0x7f0000001600)={0x6e5, "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"}) 357.390061ms ago: executing program 0 (id=2237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000855, &(0x7f0000b63fe4)={0xa, 0x2, 0x1, @loopback}, 0x1c) mount(&(0x7f0000000040)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='nfs4\x00', 0x2000, 0x0) 320.645984ms ago: executing program 0 (id=2239): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xdf}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000854}, 0x40000) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xdf}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000854}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x400, 0x10, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x69}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4}, 0x5) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x844}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004810}, 0x40004) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004810}, 0x40004) writev(r2, &(0x7f0000001b00)=[{&(0x7f0000000540)="965aab72fdcf95e9aaf9185c2b5b15f3624242a0bcc4b83658521c4d4662a0d89aaf22ba0b73e1bcc053094381c7684e690640fafd81de9191b0afaab5d5fe2b40d1ffd611db9695b58023fd5b38117e2121ec28dac45a2fa99b969fc72468cb071c16fd4bbcae40544af6011500620997d3fd65e0389d34a6b16ad04f7ecc4102360db06b0106296b292f1f76d36b0c7be2a8ac24503a0e912e95e0cadbd9b29ae176e82e330780b74f7caec15a087f2f7580d97d93fb94fc6a191d79e03d9fd918235e8bfd58941711079cc0b09df6fa1ef6ee86142bc8757e", 0xda}, {&(0x7f0000000640)="11c10a9a051f7f486eeb50fafe6adcd1f38f749fa9284b0835451bd2", 0x1c}, {&(0x7f0000000680)="19f1e064a5375616f3263f378f83bff6e53dfbfdcad6d3b3f666d25757bb6c3acd0dc1f49d97d01f76c77e866d84b1671ed720ced8628b2cfa6d37eb6fb085e6c1606e066e0877c025573d85fbb5115ea49a8378d493dcacd7d96606aa14269d1c14a4ce5884ab1c300f2605e902196b13d3a6173ceca2beb916a394642d5739f368f450b740b91de9f73015ee4e001fc830ddfe18e7c83a0010a043e5e09a440ba2a9b989d2be4505", 0xa9}, {&(0x7f0000000740)="88b3ef8cbd1ab92a0f39631e3cca2e359a83596af86b29dac545d5fa96eb7925478fea15ab651a21a1f4a40d684bb80dbe2c12184f01d93098e8132ebdd638b46dcce07a7c0850d3caeaa5664bfd352ce5c89181c57eb18575d2a8fa78344a6e7238bc234326c596f62076f3b3fb8e6aaa96d894b4534d5ef16225a7e0fc49112c139cf6c5f6c64671cfb38aa629ab7d646c19f56015b1a6d4ba6bfc0f6ca54f61ea880811c78a15b3a1cf36b4c98242c492cb2179ff751ad27f06da7c6dc210ffc27051f8310706119a2467e0e9467e5705505fceb3ab40c75fa7ae", 0xdc}, {&(0x7f0000000840)="63e76d70d9005bb75e56f73bb79ec789c1c59df9b5f5c65c1ed018beda1696a556c408def67c1d20cada76fa9809603876781e53b7b025e6c0472636afdaea0a837f90846f6b5a74c1aec2aab63333201fd7b15f399478a71d57afa4100f6f742337ed4b89ecbb0d55124195387ff8e4cae303acab5556bbebb541d2d39a537dec7b617653dccdfee1fbf6ab258e74c946d88b56360380c59eaf1a7e02f10c90a67cb23399445249477ce850abbc0bc4be8fee2cb8078601604c904efbf99179a67cce48eae9ef89514ffd067331548878ef", 0xd2}, {&(0x7f0000000940)="faf22c2f4c09b8c25df40012c58388b15e74fc3ff0a633fc414ec519cc6cfd3d5eba26a59ee2ba9b2f5f6fb303086c6e37ee8284a3528ca11c688642136c54323a6f622566cdb7600edc4c8477d7fc9d50783f30b1adc495b37c9c506aeaa6fa0a20eb794e86922ba830652278918a678a573d23adeae4efc57e7e6eb0d7c978d75faa2b0167e093ad63480e6ed7d1276a7277c00520eaa420b0b35904d131562b95", 0xa2}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="f11f1517a31e23934d43032b424a", 0xe}, {&(0x7f0000001a40)="9efe26aa6699abe3eba7226c229b0de8621d8db18b654eef954e60dfbbed9bd88c9576d8835b6f9fba91818bab16507115e80a763ad7b8f597f2b0c6b7384c2e8dcd648af78ea3ba83ac56519f25316ead7f470fab256984de15b8334211fedbdcf7e0a9d57c3654291576d6800631ae493f766d8ab1922eb03d2ef8ecd2fef4b1cfbfb5753768930661", 0x8a}], 0x9) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}]]}, 0x28}}, 0x4048880) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}]]}, 0x28}}, 0x4048880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001d00)={0x7, &(0x7f0000001cc0)=[{0x7, 0x7, 0x13, 0x6}, {0x9, 0x8, 0x4, 0x8}, {0x4, 0xfa, 0xd, 0x11}, {0x0, 0xa, 0x0, 0xb35}, {0x4, 0x8, 0x2e, 0x5}, {0x8, 0x40, 0x9, 0xd7}, {0x7ff, 0x2, 0x3, 0x6}]}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d80), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x20, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x44, r3, 0x230, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5000}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x44, r3, 0x230, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5000}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x50) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r2) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f00000022c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0xcc86dc61004537ea}, 0xc, &(0x7f0000002280)={&(0x7f00000020c0)={0x1a0, r7, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x12, 0x34, @random="cddfa6adabfbb48066c0421a590c"}, @NL80211_ATTR_IE={0x11, 0x2a, [@gcr_ga={0xbd, 0x6}, @supported_rates={0x1, 0x3, [{0xc}, {0xb, 0x1}, {0x12}]}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x10d, 0x2a, [@supported_rates={0x1, 0x8, [{0x4}, {0x5, 0x1}, {0x16}, {0x5, 0x1}, {0xb}, {0x36}, {0x5}, {0xc}]}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xc, 0x58}}, @random_vendor={0xdd, 0xf4, "4c7114fa517b0f1de8357ee9ec658a7a8a972579cf7cabfa711b1c115a5a7dde3899e2a2b9f91a54c3f397eff442c120cd5a516158ae54ae93151d3b1b5d2c9874c092f6949ebe29cd9960d7922003a664e633b64179e1ac973f8657743d704ef2fcc93109edcdf1c9c25125ea1a22b7aa2f088b58c68900d383d6f0b4b4650cdfe3cf165723aaf906655a57e769ee944719a1a797517d910646334213c1bf4c711a37161ab42460492340e505e58a282fa57f9268268a17b7461c4550f773d01e571b1486aa0f2e70356a60449044d80b9ab8946b95e5a57fd9358c1ffbae135b444fdc4b91437bb86d8638af4c56138b994c77"}]}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="ce6a57c595fea994ae9349d910300e30ebc3fabee0b45b46a8d1cb"}, @NL80211_ATTR_MAC={0xa}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc081}, 0x8000) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x71, r9, 0x23ba4000) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000002340)=0x9, &(0x7f0000002380)=0x4) (async) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000002340)=0x9, &(0x7f0000002380)=0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x38, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x86a, 0x48}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x400}]}, 0x38}}, 0x40) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x30, 0x3, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x80}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000000}, 0x24048041) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0xfb0a518eb488e3c3}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x48, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x8}, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x814}, 0x8004) readv(r6, &(0x7f0000002b80)=[{&(0x7f0000002740)=""/211, 0xd3}, {&(0x7f0000002840)=""/42, 0x2a}, {&(0x7f0000002880)=""/187, 0xbb}, {&(0x7f0000002940)=""/2, 0x2}, {&(0x7f0000002980)=""/197, 0xc5}, {&(0x7f0000002a80)=""/239, 0xef}], 0x6) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002c00), 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r11, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x38, r10, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf4b6, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x24004800) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r11, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x38, r10, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf4b6, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x24004800) bind$inet6(r6, &(0x7f0000002d40)={0xa, 0x4e23, 0x4b6, @private0, 0x8}, 0x1c) (async) bind$inet6(r6, &(0x7f0000002d40)={0xa, 0x4e23, 0x4b6, @private0, 0x8}, 0x1c) 269.943579ms ago: executing program 0 (id=2241): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000100)="2e0fb24f00c74424005a47fa95c74424024cbedbf5c7442406400000000f01142466b89a00b91d090000660fc733ba000000000f30260f060f009dd20000008fc99001dfb805000000b96fec00000f01d9c6f8cb3e670f01d10f183d72fe0000", 0x60}], 0x1, 0x48, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) rt_sigqueueinfo(0x0, 0xa, &(0x7f0000001340)={0x41, 0x1, 0xc02}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) madvise(&(0x7f0000301000/0x2000)=nil, 0x2000, 0x19) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f0000000040)=0x888b, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f000092d000/0x1000)=nil) setsockopt(r0, 0x40000ff, 0x5, &(0x7f0000000100)="0134eb00", 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b00)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20008090}, 0x8000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/195, 0xc3, 0x1, 0x0}, &(0x7f0000000a80)=0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x4d, 0x0, &(0x7f0000000000)) 125.00948ms ago: executing program 2 (id=2246): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x89a5f000) fadvise64(0xffffffffffffffff, 0x3, 0x0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/net\x00') ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x8, 0x60b, 0x9, 0x0, "132df5", 0xd}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r5) sendmmsg$unix(r1, &(0x7f00000007c0)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000840)="9fdabe29243cffc507320665aa3b5036301cd9866e159430a643767feb209d8b5b7d3f7d39cd1fa3a235a55d63eb5f695012211e6c5280a801f72a0f3187274b4d2a71b6fedef9176921898d5eb79d317802987a17899a573a8105b97eff93d71e837c2c16e6e4783e6492230420437708e247e0087ad37f8adab6d3ed84622bffb51cd4bacb147a9437884706e7111e0cf9cc868255d0cba0810b9d965d82ff45f34312bdef994ed6091828fcc5862999ecb9e0ca6307c592d963c84b55545fa87a0f4d2196494f0aacf207bd39", 0xce}, {&(0x7f0000000140)="a6812b044406387aba27196ed71fc2ea60729d4c660d74a6c4c1754e4200703982d8a9a2ab12995b43f5792baa2695ada0f3c110f726414fb03ca1b0ec49", 0x3e}, {&(0x7f0000000080)="4c39ec38be390cb3d9", 0x9}], 0x3, 0x0, 0x0, 0x20000004}}, {{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000002c0)="350e140e25d80dce63df1fc21ff4149b93fdc2d67f5820ec86594846b2cff930492af460b7fd158ea164", 0x2a}, {&(0x7f0000000300)="d194ceec0c766e09a0f948bdaa209015e8d627d0d2d4f38043c27b68bc5d4a01d40572e11544a84398eb4cdab93998b1583a8fd03f4235a8cd948a54fb19d45a11f722a531dfe321d9451be1d3c5657ce3e839d7a80142ca86656577d38274f084e2a907e6c21bac867558fb02703b1482ff8019ae2babd652235be48b16c20dc972b9cdfe27eee84b2490c16e0822928e5c11caf2745fa68646b12feb11094575064d2ba4fbbdde424b262264f718ce9b8fba35284c661c1486eba61975da3e790317940a4e0291c5705d922293b7b463ba07ecee69", 0xd6}, {&(0x7f0000000400)="dc97cd477ac7aa3be296", 0xa}, {&(0x7f0000000440)="cbead2f20aa0101504a443c73a5569d29b7d15c72ce63c31771bf6c4ad5d86b4c5f18ecba7cef944e17993101e3ad37cade5d2f722bc79dc302ed4abb152ce56311433de392d4cf4c2b59473df310a3980a7089f1e533f6374e9e888566857ae57cad973d800d4e63972e56c7461226bad03", 0x72}, {&(0x7f00000004c0)="c13f36b0eca42e3664485eff21c39dcf870161e12b8db65aaba061daa446ddafd900bcef3aa7591d0396db4192bbca62bf76af1be251407b9b15de3069bccbaf6b7742f6a7f4b95cc7e6c72f2bbb01dae982180e13b504aa6bfd465ab3303f8b05ae2f58476cf0eb5e7166f2e74718caf1de93300257e7db3756", 0x7a}, {&(0x7f0000000540)="2f12d76a07c9587929b2fd075d28ec549fad88aa66a2bebd23668cbc4f2012bface2e931e15fc64045f3b4833e30dbe7b702ffea2049e450634c4dd8bfaa42013bf58571546feb6f0620c0f68bc8145e5d182d275e8fb643affee1c066dc7c09210142184d0e14b7ca2f06ddf3e1b9d8c7f426779c", 0x75}, {&(0x7f00000005c0)="e218d2815db86554df67153c9215bd0a06b45981d891744dfc0d3925e1d04b99c3cbfe08383cde43e43f068be54c63b63000976ff048a4729093b86812986d4874372a", 0x43}, {&(0x7f0000000640)="840e27451f5dd84b092dd974e6ad7bf9ff0aaed7ad8230ddbed98f2e9104c82991b6902079ae6cf60992f55e0c902d18f2e129883a8d76e944db46ec0a9a891d3d450ba2fc5608a1a1f97510b5d95f45ddfa9abfd44572295be6d63b7cf07cbcce729a51dd73bc6fe833c3709230b80dff550ad3054e28fa2d61cfff29dcd0a54def6ea2a81860fb875d547be05726c23c08729887a8050c244e2a0d0daf6007be1f3bf5e575a22539f12645b8543232c74efb2ca2522e51b2587f048570af8f5fcea0f4db63a914a10d08", 0xcb}], 0x8, 0x0, 0x0, 0x91}}], 0x2, 0x0) 92.640803ms ago: executing program 2 (id=2247): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010329bd7000fcab49c626"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0xff, @none, 0x0, 0x2}, 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d3, &(0x7f0000000100)) 14.696179ms ago: executing program 2 (id=2248): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mprotect(&(0x7f0000265000/0x1000)=nil, 0x1000, 0x7) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 14.489249ms ago: executing program 2 (id=2249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r1, 0xa) setresuid(0x0, 0xee00, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.673909ms ago: executing program 2 (id=2250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) close_range(r4, r4, 0x2) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x80081270, 0x3) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x4e22, @local}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "ab840a3fffe3999e7b880470de"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) close_range(r0, r5, 0x0) 0s ago: executing program 2 (id=2251): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) (async) close(r1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000580)={[0x2, 0xec, 0x402, 0x3, 0x7, 0x4, 0x8000000000000000, 0x80100000, 0x1, 0x200, 0x6, 0x2, 0x20, 0x10000000003a, 0x1, 0x9], 0x0, 0x83003}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x3fad7e17a27f2d2d, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r10, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x2}}, 0x120) (async) write$UHID_CREATE(r10, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x2}}, 0x120) writev(r10, &(0x7f0000000300)=[{&(0x7f00000003c0)="0e000000", 0x3}, {&(0x7f0000000200)="3277bb9a1aafe7ed25c91dc883c7655b6e10c908d7ce93e8ccd37d4e48568679e7269063cc9b6ea8e1578cec9159e94907ff916019e006245907b35930e319c1f49e227a5408436c847e2b11d9", 0x1000000}, {&(0x7f0000000400)="7f874f21ec24094d82e1959f3230767bd5690347df82d73159bdaba6040390f906472717cbb7c87cff5465fe9539ac62c9316e721ace39138e005bd507da08141476563ea3d19135b4baab9a24e9d89ab42989f6a2e36dae91237bcc0e0df6387a6dc4bca4f0e264f290af0dd18f99e4432b106ac3cf85ee2cde40840b3680442e02345307c4d50b2d145ed3b52a35088cb1918631885a5ed8c00708fa24cd0efd23d1103fca9ddfa3d46962a6fca7a0700a0bd454375ff1f40dfdc0ad11cd5da50ccde9eec9ffce0046129a8110ef78032bf5bceeaafaa25f29ddf055"}], 0x2) (async) writev(r10, &(0x7f0000000300)=[{&(0x7f00000003c0)="0e000000", 0x3}, {&(0x7f0000000200)="3277bb9a1aafe7ed25c91dc883c7655b6e10c908d7ce93e8ccd37d4e48568679e7269063cc9b6ea8e1578cec9159e94907ff916019e006245907b35930e319c1f49e227a5408436c847e2b11d9", 0x1000000}, {&(0x7f0000000400)="7f874f21ec24094d82e1959f3230767bd5690347df82d73159bdaba6040390f906472717cbb7c87cff5465fe9539ac62c9316e721ace39138e005bd507da08141476563ea3d19135b4baab9a24e9d89ab42989f6a2e36dae91237bcc0e0df6387a6dc4bca4f0e264f290af0dd18f99e4432b106ac3cf85ee2cde40840b3680442e02345307c4d50b2d145ed3b52a35088cb1918631885a5ed8c00708fa24cd0efd23d1103fca9ddfa3d46962a6fca7a0700a0bd454375ff1f40dfdc0ad11cd5da50ccde9eec9ffce0046129a8110ef78032bf5bceeaafaa25f29ddf055"}], 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$int_out(r11, 0x5462, &(0x7f0000000080)) (async) ioctl$int_out(r11, 0x5462, &(0x7f0000000080)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) kernel console output (not intermixed with test programs): [ T384] usb usb1-port1: unable to enumerate USB device [ 90.250113][ T3310] binder: Bad value for 'max' [ 90.301707][ T3323] rust_binder: 504: no such ref 3 [ 90.306743][ T3323] rust_binder: 504: no such ref 4294967295 [ 90.313262][ T3323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 90.313364][ T3323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:504 [ 91.106200][ T3379] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1003'. [ 91.247302][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 91.247318][ T36] audit: type=1400 audit(1754826112.838:483): avc: denied { read } for pid=3386 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.538409][ T1341] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 91.688414][ T1341] usb 4-1: Using ep0 maxpacket: 16 [ 91.694718][ T1341] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 91.702943][ T1341] usb 4-1: config 0 has no interface number 0 [ 91.709044][ T1341] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 91.718863][ T1341] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 91.728772][ T1341] usb 4-1: config 0 interface 41 has no altsetting 0 [ 91.736749][ T1341] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 91.745817][ T1341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.753842][ T1341] usb 4-1: Product: syz [ 91.757976][ T1341] usb 4-1: Manufacturer: syz [ 91.762597][ T1341] usb 4-1: SerialNumber: syz [ 91.767975][ T1341] usb 4-1: config 0 descriptor?? [ 91.773201][ T3392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.780486][ T3392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.988243][ T3392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.998446][ T3392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.465114][ T36] audit: type=1400 audit(1754826114.058:484): avc: denied { accept } for pid=3465 comm="syz.2.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.607180][ T1341] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 93.023770][ T1341] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 93.034456][ T1341] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 93.043880][ T1341] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 93.053336][ T1341] usb 4-1: USB disconnect, device number 19 [ 93.067358][ T3493] overlayfs: failed to clone upperpath [ 93.113807][ T3506] rust_binder: Write failure EFAULT in pid:469 [ 93.142468][ T3513] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 93.259316][ T36] audit: type=1400 audit(1754826114.858:485): avc: denied { accept } for pid=3512 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.540810][ T3524] rust_binder: Error while translating object. [ 93.540854][ T3524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 93.547071][ T3524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:525 [ 94.149066][ T3564] netlink: 'syz.2.1061': attribute type 4 has an invalid length. [ 94.165968][ T3564] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1061'. [ 94.520451][ T3566] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 376, limit: 4248, size: 64765) [ 94.520469][ T3566] rust_binder: Error while translating object. [ 94.531399][ T3566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.537632][ T3566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:539 [ 94.603329][ T3573] /dev/sg0: Can't lookup blockdev [ 94.638325][ T3577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.638347][ T3577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:488 [ 94.808430][ T384] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 94.969559][ T384] usb 4-1: config index 0 descriptor too short (expected 4900, got 36) [ 94.977945][ T384] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.988983][ T384] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.998745][ T384] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.005382][ T384] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 95.014423][ T384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.022990][ T384] usb 4-1: config 0 descriptor?? [ 95.165449][ T3591] 9pnet_fd: Insufficient options for proto=fd [ 95.231935][ T3597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.239169][ T3597] IPv6: NLM_F_CREATE should be set when creating new route [ 95.246359][ T3597] IPv6: NLM_F_CREATE should be set when creating new route [ 95.431691][ T384] hid-steam 0003:28DE:1102.000D: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 95.498425][ T384] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' connected [ 95.507340][ T384] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.000D/input/input20 [ 95.529490][ T384] hid-steam 0003:28DE:1102.000E: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 95.542202][ T36] audit: type=1400 audit(1754826117.128:486): avc: denied { setopt } for pid=3608 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.569717][ T384] usb 4-1: USB disconnect, device number 20 [ 95.586767][ T3615] rust_binder: Error while translating object. [ 95.586810][ T3615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 95.593114][ T3615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:501 [ 95.593589][ T384] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' disconnected [ 95.908454][ T63] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 96.059479][ T63] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.070483][ T63] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 96.083070][ T63] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.092462][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.100533][ T63] usb 1-1: Product: syz [ 96.104845][ T63] usb 1-1: Manufacturer: syz [ 96.109479][ T63] usb 1-1: SerialNumber: syz [ 96.118262][ T3620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.383957][ T36] audit: type=1400 audit(1754826117.978:487): avc: denied { execute } for pid=3639 comm="syz.3.1088" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.416059][ T3651] netlink: 'syz.2.1090': attribute type 4 has an invalid length. [ 97.127409][ T63] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 97.134010][ T63] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 97.169592][ T36] audit: type=1400 audit(1754826118.768:488): avc: denied { write } for pid=3658 comm="syz.2.1093" path="socket:[19287]" dev="sockfs" ino=19287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.268127][ T3665] kvm_pr_unimpl_wrmsr: 34 callbacks suppressed [ 97.268140][ T3665] kvm: kvm [3664]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 97.530947][ T3620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.539479][ T3620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.740246][ T36] audit: type=1400 audit(1754826119.338:489): avc: denied { accept } for pid=3667 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 97.740727][ T3668] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1097'. [ 97.773402][ T3668] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1097'. [ 97.809136][ T3674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32 sclass=netlink_audit_socket pid=3674 comm=syz.2.1099 [ 97.918280][ T3684] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1103'. [ 97.927699][ T3684] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1103'. [ 98.049052][ T3697] tipc: Enabling of bearer rejected, failed to enable media [ 98.216881][ T36] audit: type=1400 audit(1754826119.808:490): avc: denied { create } for pid=3712 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 98.483934][ T36] audit: type=1326 audit(1754826120.087:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.3.1113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f646f78ebe9 code=0x0 [ 98.646236][ T63] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 98.668183][ T63] usb 1-1: USB disconnect, device number 33 [ 98.675176][ T63] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 98.688248][ T36] audit: type=1400 audit(1754826120.277:492): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 99.177396][ T3726] x_tables: unsorted underflow at hook 3 [ 99.185754][ T3726] tipc: Enabling of bearer rejected, failed to enable media [ 99.580765][ T3740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1124'. [ 99.670599][ T3747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.775033][ T3759] incfs: Can't find or create .index dir in ./cgroup [ 99.788199][ T3759] incfs: mount failed -22 [ 99.792770][ T3759] rust_binder: Write failure EFAULT in pid:520 [ 99.793408][ T3761] rust_binder: Write failure EFAULT in pid:520 [ 99.815314][ T36] audit: type=1400 audit(1754826121.407:493): avc: denied { ioctl } for pid=3763 comm="syz.0.1131" path="socket:[21672]" dev="sockfs" ino=21672 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.846656][ T36] audit: type=1400 audit(1754826121.407:494): avc: denied { create } for pid=3763 comm="syz.0.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 99.853790][ T3766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.867039][ T3766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.873625][ T3766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.880132][ T3766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.886548][ T3766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.893041][ T3766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.899501][ T3766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.534939][ T3783] input: syz0 as /devices/virtual/input/input21 [ 101.034830][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.042071][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.064071][ T3806] bridge0: entered allmulticast mode [ 101.160269][ T3823] cgroup: subsys name conflicts with all [ 101.211235][ T3827] 9pnet_fd: Insufficient options for proto=fd [ 101.229389][ T36] audit: type=1400 audit(1754826122.827:495): avc: denied { remount } for pid=3826 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 101.230089][ T3827] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 101.268556][ T3827] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 101.299649][ T3827] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 101.376116][ T3849] netlink: 'syz.3.1159': attribute type 4 has an invalid length. [ 101.419907][ T36] audit: type=1400 audit(1754826123.017:496): avc: denied { ioctl } for pid=3858 comm="syz.0.1164" path="pid:[4026532293]" dev="nsfs" ino=4026532293 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.449015][ T3861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558 [ 101.449028][ T3862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558 [ 101.449539][ T3863] rust_binder: 558: no such ref 1 [ 101.472746][ T3863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558 [ 101.472829][ T3862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:558 [ 101.482184][ T3863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:558 [ 101.561512][ T3873] __vm_enough_memory: pid: 3873, comm: syz.3.1168, bytes: 18014402804453376 not enough memory for the allocation [ 101.888407][ T384] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 101.986103][ T3893] 9pnet_fd: Insufficient options for proto=fd [ 102.023156][ T3898] ip6gretap0: mtu less than device minimum [ 102.038396][ T384] usb 4-1: Using ep0 maxpacket: 32 [ 102.069546][ T384] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 102.077124][ T384] usb 4-1: can't read configurations, error -61 [ 102.093737][ T3903] overlayfs: failed to clone upperpath [ 102.218424][ T384] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 102.381745][ T384] usb 4-1: Using ep0 maxpacket: 32 [ 102.390417][ T384] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 102.393942][ T3905] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 102.398068][ T384] usb 4-1: can't read configurations, error -61 [ 102.399432][ T3905] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 102.406313][ T384] usb usb4-port1: attempt power cycle [ 102.558806][ T36] audit: type=1400 audit(1754826124.157:497): avc: denied { append } for pid=3914 comm="syz.0.1182" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 102.604430][ T36] audit: type=1400 audit(1754826124.197:498): avc: denied { mounton } for pid=3924 comm="syz.0.1184" path="/proc/584/cgroup" dev="proc" ino=21089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 102.636957][ T36] audit: type=1400 audit(1754826124.227:499): avc: denied { write } for pid=3927 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 102.684614][ T36] audit: type=1326 audit(1754826124.277:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.1188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d0038ebe9 code=0x0 [ 102.768407][ T384] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 102.788731][ T384] usb 4-1: Using ep0 maxpacket: 32 [ 102.795105][ T384] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 102.802702][ T384] usb 4-1: can't read configurations, error -61 [ 102.938774][ T384] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 102.946788][ T3947] 9pnet_fd: Insufficient options for proto=fd [ 102.958967][ T384] usb 4-1: Using ep0 maxpacket: 32 [ 102.961244][ T36] audit: type=1400 audit(1754826124.557:501): avc: denied { read } for pid=3950 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.965588][ T384] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 102.991045][ T63] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 102.998686][ T384] usb 4-1: can't read configurations, error -61 [ 103.005592][ T384] usb usb4-port1: unable to enumerate USB device [ 103.126694][ T36] audit: type=1400 audit(1754826124.717:502): avc: denied { read } for pid=3962 comm="syz.1.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.145844][ T63] usb 1-1: device descriptor read/64, error -71 [ 103.388415][ T63] usb 1-1: device descriptor read/64, error -71 [ 103.628424][ T63] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 103.758409][ T63] usb 1-1: device descriptor read/64, error -71 [ 103.998432][ T63] usb 1-1: device descriptor read/64, error -71 [ 104.118496][ T63] usb usb1-port1: attempt power cycle [ 104.458420][ T63] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 104.479484][ T63] usb 1-1: device descriptor read/8, error -71 [ 104.582644][ T4000] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1208'. [ 104.609499][ T63] usb 1-1: device descriptor read/8, error -71 [ 104.671967][ T36] audit: type=1400 audit(1754826126.267:503): avc: denied { append } for pid=4009 comm="syz.3.1212" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.707671][ T4016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1214'. [ 104.737882][ T4023] overlayfs: failed to clone upperpath [ 104.798723][ T4030] fuse: Bad value for 'user_id' [ 104.813744][ T4030] fuse: Bad value for 'user_id' [ 104.843289][ T4037] netlink: 'syz.3.1220': attribute type 5 has an invalid length. [ 104.858404][ T63] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 104.861168][ T4037] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1220'. [ 104.879551][ T4037] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1220'. [ 104.879758][ T63] usb 1-1: device descriptor read/8, error -71 [ 104.900377][ T4037] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294934527 [ 104.911698][ T4037] rust_binder: 624: no such ref 4 [ 104.920080][ T4037] rust_binder: Write failure EINVAL in pid:624 [ 104.936892][ T36] audit: type=1400 audit(1754826126.527:504): avc: denied { write } for pid=4041 comm="syz.3.1221" path="socket:[21236]" dev="sockfs" ino=21236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.029390][ T63] usb 1-1: device descriptor read/8, error -71 [ 105.149720][ T63] usb usb1-port1: unable to enumerate USB device [ 105.508453][ T63] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 105.510224][ T4095] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 105.554760][ T4105] x_tables: duplicate underflow at hook 1 [ 105.638417][ T63] usb 4-1: device descriptor read/64, error -71 [ 105.657831][ T4112] netlink: 'syz.1.1244': attribute type 4 has an invalid length. [ 105.668880][ T4112] netlink: 'syz.1.1244': attribute type 4 has an invalid length. [ 105.865932][ T4115] rust_binder: Error while translating object. [ 105.865974][ T4115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 105.872258][ T4115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:603 [ 105.881780][ T63] usb 4-1: device descriptor read/64, error -71 [ 106.128403][ T63] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 106.237435][ T4122] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9 [ 106.237435][ T4122] 7cŻ¹k [ 106.258423][ T63] usb 4-1: device descriptor read/64, error -71 [ 106.277999][ T4124] 9pnet_fd: Insufficient options for proto=fd [ 106.308559][ T4134] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1252'. [ 106.499006][ T63] usb 4-1: device descriptor read/64, error -71 [ 106.529374][ T4159] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 106.602893][ T4165] overlayfs: failed to clone upperpath [ 106.608626][ T63] usb usb4-port1: attempt power cycle [ 106.686200][ T4169] incfs: Error accessing: ./file0. [ 106.691410][ T4169] incfs: mount failed -20 [ 106.765290][ T4176] rust_binder: Error while translating object. [ 106.765318][ T4176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.771628][ T4176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:605 [ 106.948415][ T63] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 106.979382][ T63] usb 4-1: device descriptor read/8, error -71 [ 107.109493][ T63] usb 4-1: device descriptor read/8, error -71 [ 107.269276][ T36] audit: type=1326 audit(1754826128.867:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.2.1273" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0251b8ebe9 code=0x0 [ 107.348522][ T63] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 107.369908][ T63] usb 4-1: device descriptor read/8, error -71 [ 107.440311][ T4203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'. [ 107.506882][ T63] usb 4-1: device descriptor read/8, error -71 [ 107.618507][ T63] usb usb4-port1: unable to enumerate USB device [ 107.674417][ T4251] 9pnet_fd: Insufficient options for proto=fd [ 107.798415][ T45] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 107.949480][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.959619][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.969144][ T45] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.978199][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.986246][ T45] usb 1-1: SerialNumber: syz [ 108.199241][ T4227] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 108.275682][ T4280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=4280 comm=syz.2.1304 [ 108.304141][ T4282] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 108.311506][ T4282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:640 [ 108.311732][ T4282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:640 [ 108.325168][ T4286] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1303'. [ 108.395376][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.395403][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.402034][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.405679][ T36] audit: type=1400 audit(1754826129.997:506): avc: denied { nlmsg_read } for pid=4303 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.416465][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.435309][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.441955][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.448442][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.455464][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.461962][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.723382][ T45] usb 1-1: 0:2 : does not exist [ 108.729855][ T4320] rust_binder: Write failure EINVAL in pid:612 [ 108.730125][ T4320] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 108.747991][ T45] usb 1-1: USB disconnect, device number 38 [ 108.763493][ T3607] udevd[3607]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.025968][ T36] audit: type=1400 audit(1754826130.617:507): avc: denied { read } for pid=4346 comm="syz.2.1325" path="socket:[23603]" dev="sockfs" ino=23603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.056328][ T4351] overlayfs: failed to clone upperpath [ 109.125669][ T4362] input: syz1 as /devices/virtual/input/input22 [ 109.133504][ T45] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 109.150494][ T4372] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1332'. [ 109.160118][ T4372] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 109.167400][ T4372] rust_binder: Write failure EINVAL in pid:657 [ 109.167479][ T4373] rust_binder: Write failure EFAULT in pid:657 [ 109.167670][ T4372] rust_binder: Write failure EFAULT in pid:657 [ 109.290063][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 109.437807][ T36] audit: type=1400 audit(1754826131.027:508): avc: denied { shutdown } for pid=4397 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.709116][ T4413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1343'. [ 109.769959][ T4432] 9pnet_fd: Insufficient options for proto=fd [ 109.849680][ T4465] netlink: 'syz.2.1359': attribute type 4 has an invalid length. [ 109.857696][ T4465] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1359'. [ 109.927152][ T4483] overlayfs: failed to clone upperpath [ 109.964823][ T36] audit: type=1326 audit(1754826131.557:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.2.1369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0251b8ebe9 code=0x0 [ 110.528422][ T63] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 110.633045][ T4508] overlayfs: failed to clone upperpath [ 110.679784][ T63] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.691640][ T63] usb 4-1: not running at top speed; connect to a high speed hub [ 110.701623][ T63] usb 4-1: config 114 has an invalid interface number: 122 but max is 0 [ 110.710201][ T63] usb 4-1: config 114 has no interface number 0 [ 110.716454][ T63] usb 4-1: config 114 interface 122 has no altsetting 0 [ 110.724885][ T63] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=7b.d8 [ 110.734257][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.742563][ T63] usb 4-1: Product: syz [ 110.746775][ T63] usb 4-1: Manufacturer: syz [ 110.751553][ T63] usb 4-1: SerialNumber: syz [ 110.837547][ T4526] netlink: 'syz.2.1381': attribute type 64 has an invalid length. [ 110.850752][ T36] audit: type=1400 audit(1754826388.447:510): avc: denied { wake_alarm } for pid=4525 comm="syz.2.1381" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.015294][ T63] snd-usb-audio 4-1:114.122: probe with driver snd-usb-audio failed with error -71 [ 111.026311][ T63] usb 4-1: USB disconnect, device number 30 [ 111.523647][ T4531] /dev/rnullb0: Can't open blockdev [ 111.647272][ T4533] netlink: 'syz.3.1383': attribute type 32 has an invalid length. [ 111.675211][ T4539] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1384'. [ 111.686053][ T4538] incfs: mount failed -22 [ 111.757163][ T4548] overlayfs: failed to clone upperpath [ 111.824128][ T45] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.40 [ 111.839639][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.855224][ T45] usb 1-1: can't set config #1, error -71 [ 111.876624][ T36] audit: type=1400 audit(1754826389.467:511): avc: denied { create } for pid=4566 comm="syz.3.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 111.878141][ T45] usb 1-1: USB disconnect, device number 39 [ 111.905310][ T4569] netlink: 'syz.0.1393': attribute type 58 has an invalid length. [ 112.009144][ T4594] overlayfs: failed to clone upperpath [ 112.028253][ T4596] rust_binder: Error in use_page_slow: ESRCH [ 112.028270][ T4596] rust_binder: use_range failure ESRCH [ 112.034277][ T4596] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 112.039820][ T4596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 112.047813][ T4596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:702 [ 112.070012][ T4599] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 112.209895][ T4611] syz.3.1409 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 112.221160][ T36] audit: type=1400 audit(1754826389.817:512): avc: denied { watch watch_reads } for pid=4608 comm="syz.0.1408" path="/203/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=lnk_file permissive=1 [ 112.295434][ T4614] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1410'. [ 112.308485][ T4614] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1410'. [ 112.320916][ T4614] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 112.336858][ T36] audit: type=1400 audit(1754826389.927:513): avc: denied { connect } for pid=4613 comm="syz.0.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.841962][ T36] audit: type=1326 audit(1754826390.437:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.2.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251b8ebe9 code=0x7fc00000 [ 113.019083][ T36] audit: type=1400 audit(1754826390.617:515): avc: denied { read write } for pid=4633 comm="syz.3.1418" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.042164][ T36] audit: type=1400 audit(1754826390.617:516): avc: denied { open } for pid=4633 comm="syz.3.1418" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.065303][ T36] audit: type=1400 audit(1754826390.637:517): avc: denied { ioctl } for pid=4633 comm="syz.3.1418" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.219037][ T4646] rust_binder: 4638 RLIMIT_NICE not set [ 113.225052][ T63] rust_binder: 4637: removing orphan mapping 0:1048 [ 113.404007][ T36] audit: type=1326 audit(1754826390.997:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.2.1426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0251b8ebe9 code=0x0 [ 113.458073][ T4659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=4659 comm=syz.2.1426 [ 113.471207][ T4659] netlink: 'syz.2.1426': attribute type 12 has an invalid length. [ 113.498410][ T1341] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 113.575681][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1430'. [ 113.658414][ T1341] usb 4-1: Using ep0 maxpacket: 32 [ 113.664715][ T1341] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 113.673526][ T1341] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.683907][ T1341] usb 4-1: config 0 has no interface number 0 [ 113.694156][ T1341] usb 4-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.709112][ T1341] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.718285][ T1341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.726452][ T1341] usb 4-1: Product: syz [ 113.730807][ T1341] usb 4-1: Manufacturer: syz [ 113.735461][ T1341] usb 4-1: SerialNumber: syz [ 113.742384][ T1341] usb 4-1: config 0 descriptor?? [ 113.748516][ T1341] smsc95xx v2.0.0 [ 113.752267][ T1341] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 113.762416][ T1341] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 113.768401][ T63] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 113.918403][ T63] usb 1-1: device descriptor read/64, error -71 [ 113.951518][ T384] usb 4-1: USB disconnect, device number 31 [ 114.158407][ T63] usb 1-1: device descriptor read/64, error -71 [ 114.219515][ T4699] rust_binder: Error while translating object. [ 114.219549][ T4699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 114.225764][ T4699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:735 [ 114.398404][ T63] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 114.538418][ T63] usb 1-1: device descriptor read/64, error -71 [ 114.591575][ T4713] 9pnet_fd: Insufficient options for proto=fd [ 114.604782][ T4715] overlayfs: failed to resolve './file1': -2 [ 114.604800][ T4716] overlayfs: failed to resolve './file1': -2 [ 114.721647][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 114.778455][ T63] usb 1-1: device descriptor read/64, error -71 [ 114.888532][ T63] usb usb1-port1: attempt power cycle [ 115.011772][ T4741] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 115.021115][ T4743] rust_binder: Failed copying remainder into alloc: EFAULT [ 115.029150][ T4743] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 115.036433][ T4743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 115.044859][ T4743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:740 [ 115.228529][ T63] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 115.259401][ T63] usb 1-1: device descriptor read/8, error -71 [ 115.296525][ T4754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.296545][ T4754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:751 [ 115.305970][ T4754] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 115.315101][ T4754] rust_binder: Read failure Err(EFAULT) in pid:751 [ 115.389470][ T63] usb 1-1: device descriptor read/8, error -71 [ 115.638418][ T63] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 115.659449][ T63] usb 1-1: device descriptor read/8, error -71 [ 115.789410][ T63] usb 1-1: device descriptor read/8, error -71 [ 115.898901][ T63] usb usb1-port1: unable to enumerate USB device [ 115.905438][ T4780] binder: Bad value for 'max' [ 116.051092][ T4790] overlayfs: failed to clone upperpath [ 116.057982][ T4792] overlayfs: failed to clone upperpath [ 116.577410][ T4832] rust_binder: Write failure EFAULT in pid:660 [ 116.577510][ T4833] rust_binder: Write failure EFAULT in pid:660 [ 116.706415][ T4837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1487'. [ 116.918401][ T1341] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 117.069484][ T1341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.080505][ T1341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.090278][ T1341] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.103254][ T1341] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.112421][ T1341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.121541][ T1341] usb 1-1: config 0 descriptor?? [ 117.297587][ T36] audit: type=1400 audit(1754826394.887:519): avc: denied { getattr } for pid=4857 comm="syz.1.1495" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.533091][ T1341] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 117.541401][ T1341] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 117.554719][ T1341] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 117.683247][ T36] audit: type=1400 audit(1754826395.277:520): avc: denied { mounton } for pid=4861 comm="syz.3.1496" path="/248/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 117.754369][ T4865] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 117.841131][ T4866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.868903][ T4866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.719270][ T4869] rust_binder: Write failure EFAULT in pid:777 [ 118.719362][ T4869] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 118.735235][ T4869] rust_binder: Read failure Err(EFAULT) in pid:777 [ 118.825014][ T4873] bpf: Bad value for 'uid' [ 118.978401][ T1341] usb 1-1: reset high-speed USB device number 44 using dummy_hcd [ 119.188394][ T441] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 119.358385][ T441] usb 4-1: Using ep0 maxpacket: 8 [ 119.375435][ T441] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 119.392742][ T441] usb 4-1: config 0 has no interface number 0 [ 119.406770][ T441] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 119.425958][ T441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.442565][ T441] usb 4-1: Product: syz [ 119.451069][ T441] usb 4-1: Manufacturer: syz [ 119.460001][ T441] usb 4-1: SerialNumber: syz [ 119.469188][ T441] usb 4-1: config 0 descriptor?? [ 119.660829][ T4879] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 119.682391][ T441] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 119.703448][ T441] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 119.727011][ T441] usb 4-1: USB disconnect, device number 32 [ 119.758674][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.328148][ T4908] tipc: Enabling of bearer rejected, failed to enable media [ 120.378753][ T45] usb 1-1: USB disconnect, device number 44 [ 120.422883][ T4923] rust_binder: Write failure EFAULT in pid:792 [ 120.924638][ T4942] netlink: 'syz.1.1522': attribute type 12 has an invalid length. [ 121.082845][ T4953] tipc: Cannot configure node identity twice [ 121.089395][ T13] tipc: Subscription rejected, illegal request [ 121.121118][ T36] audit: type=1400 audit(1754826398.717:521): avc: denied { accept } for pid=4961 comm="syz.2.1528" path="socket:[25868]" dev="sockfs" ino=25868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.170761][ T36] audit: type=1400 audit(1754826398.767:522): avc: denied { name_bind } for pid=4964 comm="syz.1.1529" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 121.323868][ T4986] /dev/rnullb0: Can't open blockdev [ 121.444348][ T36] audit: type=1400 audit(1754826399.037:523): avc: denied { accept } for pid=4993 comm="syz.3.1538" path=0000234E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 121.768430][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.774562][ T551] Bluetooth: hci0: command 0x1003 tx timeout [ 121.950863][ T36] audit: type=1326 audit(1754826399.547:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bd8ebe9 code=0x7fc00000 [ 121.986600][ T5014] tipc: Enabling of bearer rejected, failed to enable media [ 122.403624][ T5032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 122.403651][ T5032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:811 [ 122.548427][ T63] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 122.718402][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 122.725090][ T63] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.738125][ T63] usb 1-1: config 1 interface 0 has no altsetting 0 [ 122.745992][ T63] usb 1-1: New USB device found, idVendor=18d1, idProduct=5044, bcdDevice= 0.40 [ 122.755054][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.763034][ T63] usb 1-1: Product: 仺凧堲㥒㞰ﮐ撘픍꠱㫜੿九鈔첕డ◉비鰁睙輜ᄕࡤ [ 122.773213][ T63] usb 1-1: Manufacturer: 菠ꘊܵロᰆ꤫恇옑垡킒૦ࡳᘮ嵐फ冄ਊ럱奋什奍牭⊠⼅让谀肕蝕䔛釰⩫뵋ꞻꖨ訛긡ᠳລშᲒ⑙ᡥࡼ⟹ﴲ渦뉯䞓呥ะ֐壄䑻䮸軵哧鶝䑣宴ꯢ奣闎恸칶団➙玺햄⟐쌓옷揘ᦪ㱊쎙ﴁ걯暁➶⃢觩쬺ꈆዲ⭍ꯦ䨣䜳޸႕摻傄뗕뷿鉏䏬͗釸쵻䏁 [ 122.773544][ T5042] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 122.807096][ T63] usb 1-1: SerialNumber: syz [ 122.867441][ T5045] overlayfs: failed to clone upperpath [ 122.873544][ T5045] overlayfs: failed to clone upperpath [ 122.879686][ T5045] overlayfs: failed to clone upperpath [ 122.885590][ T5045] overlayfs: failed to clone upperpath [ 122.891684][ T5045] overlayfs: failed to clone upperpath [ 122.897510][ T5045] overlayfs: failed to clone upperpath [ 122.903565][ T5045] overlayfs: failed to clone upperpath [ 122.909612][ T5045] overlayfs: failed to clone upperpath [ 122.915372][ T5045] overlayfs: failed to clone upperpath [ 122.921131][ T5045] overlayfs: failed to clone upperpath [ 122.926801][ T5045] overlayfs: failed to clone upperpath [ 122.932577][ T5045] overlayfs: failed to clone upperpath [ 122.938227][ T5045] overlayfs: failed to clone upperpath [ 122.945137][ T5045] overlayfs: failed to clone upperpath [ 122.950905][ T5045] overlayfs: failed to clone upperpath [ 122.956589][ T5045] overlayfs: failed to clone upperpath [ 122.962344][ T5045] overlayfs: failed to clone upperpath [ 122.968005][ T5045] overlayfs: failed to clone upperpath [ 122.973785][ T5045] overlayfs: failed to clone upperpath [ 122.979482][ T5045] overlayfs: failed to clone upperpath [ 122.985133][ T5045] overlayfs: failed to clone upperpath [ 122.990890][ T5045] overlayfs: failed to clone upperpath [ 122.996577][ T5045] overlayfs: failed to clone upperpath [ 123.002353][ T5045] overlayfs: failed to clone upperpath [ 123.008005][ T5045] overlayfs: failed to clone upperpath [ 123.013777][ T5045] overlayfs: failed to clone upperpath [ 123.019523][ T5045] overlayfs: failed to clone upperpath [ 123.025332][ T5045] overlayfs: failed to clone upperpath [ 123.032411][ T5045] overlayfs: failed to clone upperpath [ 123.038317][ T5045] overlayfs: failed to clone upperpath [ 123.044144][ T63] usbhid 1-1:1.0: can't add hid device: -71 [ 123.048408][ T5045] overlayfs: failed to clone upperpath [ 123.051103][ T63] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 123.063495][ T5045] overlayfs: failed to clone upperpath [ 123.066611][ T63] usb 1-1: USB disconnect, device number 45 [ 123.075191][ T5045] overlayfs: failed to clone upperpath [ 123.081014][ T5045] overlayfs: failed to clone upperpath [ 123.086657][ T5045] overlayfs: failed to clone upperpath [ 123.092382][ T5045] overlayfs: failed to clone upperpath [ 123.098023][ T5045] overlayfs: failed to clone upperpath [ 123.103728][ T5045] overlayfs: failed to clone upperpath [ 123.109441][ T5045] overlayfs: failed to clone upperpath [ 123.115088][ T5045] overlayfs: failed to clone upperpath [ 123.120781][ T5045] overlayfs: failed to clone upperpath [ 123.126397][ T5045] overlayfs: failed to clone upperpath [ 123.132142][ T5045] overlayfs: failed to clone upperpath [ 123.137798][ T5045] overlayfs: failed to clone upperpath [ 123.143591][ T5045] overlayfs: failed to clone upperpath [ 123.149306][ T5045] overlayfs: failed to clone upperpath [ 123.154922][ T5045] overlayfs: failed to clone upperpath [ 123.160664][ T5045] overlayfs: failed to clone upperpath [ 123.166309][ T5045] overlayfs: failed to clone upperpath [ 123.171996][ T5045] overlayfs: failed to clone upperpath [ 123.177619][ T5045] overlayfs: failed to clone upperpath [ 123.183332][ T5045] overlayfs: failed to clone upperpath [ 123.189051][ T5045] overlayfs: failed to clone upperpath [ 123.194658][ T5045] overlayfs: failed to clone upperpath [ 123.200376][ T5045] overlayfs: failed to clone upperpath [ 123.205986][ T5045] overlayfs: failed to clone upperpath [ 123.211722][ T5045] overlayfs: failed to clone upperpath [ 123.217358][ T5045] overlayfs: failed to clone upperpath [ 123.223047][ T5045] overlayfs: failed to clone upperpath [ 123.228931][ T5045] overlayfs: failed to clone upperpath [ 123.234671][ T5045] overlayfs: failed to clone upperpath [ 123.240527][ T5045] overlayfs: failed to clone upperpath [ 123.246153][ T5045] overlayfs: failed to clone upperpath [ 123.251841][ T5045] overlayfs: failed to clone upperpath [ 123.257457][ T5045] overlayfs: failed to clone upperpath [ 123.423657][ T5064] 9pnet_fd: Insufficient options for proto=fd [ 123.620825][ T36] audit: type=1400 audit(1754826401.217:525): avc: denied { read write } for pid=5090 comm="syz.0.1567" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 123.645316][ T36] audit: type=1400 audit(1754826401.217:526): avc: denied { open } for pid=5090 comm="syz.0.1567" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 123.673281][ T5093] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 123.869786][ T3066] batadv_slave_0: left promiscuous mode [ 123.877734][ T36] audit: type=1400 audit(1754826401.467:527): avc: denied { mounton } for pid=5097 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 123.918416][ T45] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 123.949444][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.956629][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.964181][ T5097] bridge_slave_0: entered allmulticast mode [ 123.970487][ T5097] bridge_slave_0: entered promiscuous mode [ 123.980694][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.988394][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.995434][ T5097] bridge_slave_1: entered allmulticast mode [ 124.007335][ T5097] bridge_slave_1: entered promiscuous mode [ 124.061458][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.068528][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.075767][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.082793][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.090136][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 124.096543][ T45] usb 1-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 124.106893][ T45] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.122506][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 124.131064][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.40 [ 124.140323][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.148477][ T45] usb 1-1: Product: Џ [ 124.148566][ T329] bridge_slave_1: left allmulticast mode [ 124.152556][ T45] usb 1-1: Manufacturer: з [ 124.152572][ T45] usb 1-1: SerialNumber: ⠒ [ 124.167554][ T329] bridge_slave_1: left promiscuous mode [ 124.176264][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.183814][ T329] bridge_slave_0: left allmulticast mode [ 124.189559][ T329] bridge_slave_0: left promiscuous mode [ 124.195153][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.217125][ T329] bridge0 (unregistering): left allmulticast mode [ 124.311466][ T5097] veth0_vlan: entered promiscuous mode [ 124.322698][ T5097] veth1_macvtap: entered promiscuous mode [ 124.340664][ T36] audit: type=1400 audit(1754826401.937:528): avc: denied { mounton } for pid=5097 comm="syz-executor" path="/root/syzkaller.POlFRU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 124.400925][ T329] tipc: Left network mode [ 124.407503][ T329] veth1_macvtap: left promiscuous mode [ 124.413228][ T329] veth0_vlan: left promiscuous mode [ 124.630890][ T36] audit: type=1400 audit(1754826402.227:529): avc: denied { map } for pid=5129 comm="syz.1.1577" path="socket:[26290]" dev="sockfs" ino=26290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 125.446167][ T441] rust_binder: 5040: removing orphan mapping 0:24 [ 125.705251][ T5173] fuse: Bad value for 'user_id' [ 125.710208][ T5173] fuse: Bad value for 'user_id' [ 125.988431][ T441] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 126.059584][ T36] audit: type=1400 audit(1754826403.657:530): avc: denied { read } for pid=5182 comm="syz.3.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.118453][ T441] usb 3-1: device descriptor read/64, error -71 [ 126.358400][ T441] usb 3-1: device descriptor read/64, error -71 [ 126.573694][ T45] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 126.581828][ T45] usb 1-1: USB disconnect, device number 46 [ 126.595780][ T36] audit: type=1400 audit(1754826404.187:531): avc: denied { mounton } for pid=5198 comm="syz.0.1600" path="/216/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.618399][ T441] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 126.618769][ T36] audit: type=1400 audit(1754826404.187:532): avc: denied { read } for pid=5198 comm="syz.0.1600" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.664189][ T36] audit: type=1400 audit(1754826404.187:533): avc: denied { open } for pid=5198 comm="syz.0.1600" path="/216/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.688724][ T36] audit: type=1400 audit(1754826404.247:534): avc: denied { search } for pid=288 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.778406][ T441] usb 3-1: device descriptor read/64, error -71 [ 127.028403][ T441] usb 3-1: device descriptor read/64, error -71 [ 127.148478][ T441] usb usb3-port1: attempt power cycle [ 127.498409][ T441] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 127.519476][ T441] usb 3-1: device descriptor read/8, error -71 [ 127.649584][ T441] usb 3-1: device descriptor read/8, error -71 [ 127.888418][ T441] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 127.909523][ T441] usb 3-1: device descriptor read/8, error -71 [ 128.039415][ T441] usb 3-1: device descriptor read/8, error -71 [ 128.168537][ T441] usb usb3-port1: unable to enumerate USB device [ 129.437851][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 129.437867][ T36] audit: type=1400 audit(1754826407.027:538): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 129.514089][ T36] audit: type=1400 audit(1754826407.107:539): avc: denied { map } for pid=5275 comm="syz.0.1601" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.755705][ T5292] binder: Bad value for 'defcontext' [ 129.765801][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.778074][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.795222][ T36] audit: type=1400 audit(1754826407.387:540): avc: denied { watch } for pid=5296 comm="syz.3.1634" path="/279/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 129.945059][ T36] audit: type=1400 audit(1754826407.537:541): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 129.988880][ T5317] netlink: 'syz.1.1641': attribute type 11 has an invalid length. [ 129.988886][ T5318] netlink: 'syz.1.1641': attribute type 11 has an invalid length. [ 130.004530][ T45] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 130.159524][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 130.170564][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 130.183609][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.00 [ 130.192791][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.202120][ T45] usb 3-1: config 0 descriptor?? [ 130.209959][ T5292] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 130.218483][ T441] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 130.335886][ T342] rust_binder: 5275: removing orphan mapping 0:4120 [ 130.388451][ T441] usb 4-1: Using ep0 maxpacket: 32 [ 130.395291][ T441] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 130.409433][ T441] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.420431][ T441] usb 4-1: config 0 has no interface number 0 [ 130.428510][ T441] usb 4-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.442508][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 130.448744][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 130.458771][ T441] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 130.468203][ T45] usb 3-1: USB disconnect, device number 16 [ 130.474352][ T441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.483139][ T441] usb 4-1: Product: syz [ 130.487854][ T441] usb 4-1: Manufacturer: syz [ 130.503633][ T441] usb 4-1: SerialNumber: syz [ 130.509102][ T441] usb 4-1: config 0 descriptor?? [ 130.518522][ T441] smsc95xx v2.0.0 [ 130.522229][ T441] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 130.532674][ T441] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 130.938548][ T384] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 130.946466][ T5345] SELinux: security_context_str_to_sid () failed with errno=-22 [ 131.040615][ T36] audit: type=1400 audit(1754826408.637:542): avc: denied { map } for pid=5355 comm="syz.2.1654" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.073753][ T63] usb 4-1: USB disconnect, device number 33 [ 131.100233][ T384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 131.113268][ T384] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 131.122713][ T384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.133458][ T384] usb 1-1: config 0 descriptor?? [ 131.138951][ T5340] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.498412][ T63] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 131.550589][ T384] hid-generic 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 131.594574][ T5406] fuse: Bad value for 'user_id' [ 131.599464][ T5406] fuse: Bad value for 'user_id' [ 131.613483][ T36] audit: type=1326 audit(1754826409.207:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.1670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bd8ebe9 code=0x0 [ 131.648429][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 131.654546][ T63] usb 4-1: config 3 has an invalid interface number: 171 but max is 0 [ 131.662810][ T63] usb 4-1: config 3 has no interface number 0 [ 131.668969][ T63] usb 4-1: config 3 interface 171 altsetting 52 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 131.679972][ T63] usb 4-1: config 3 interface 171 altsetting 52 has a duplicate endpoint with address 0x7, skipping [ 131.690789][ T63] usb 4-1: config 3 interface 171 has no altsetting 0 [ 131.699532][ T63] usb 4-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=89.bd [ 131.708727][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.716882][ T63] usb 4-1: Product: syz [ 131.721185][ T63] usb 4-1: Manufacturer: syz [ 131.726125][ T63] usb 4-1: SerialNumber: syz [ 131.749311][ T441] usb 1-1: USB disconnect, device number 48 [ 131.798973][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 131.935894][ T5376] rust_binder: 893: no such ref 1 [ 131.943067][ T63] cdc_acm 4-1:3.171: invalid descriptor buffer length [ 131.953938][ T63] usb 4-1: USB disconnect, device number 34 [ 131.981741][ T36] audit: type=1400 audit(1754826409.577:544): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 132.076202][ T5440] 9pnet_fd: Insufficient options for proto=fd [ 132.528696][ T45] rust_binder: 5448: removing orphan mapping 0:4120 [ 132.809000][ T5459] rust_binder: Error while translating object. [ 132.809036][ T5459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.817827][ T5459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:901 [ 132.872075][ T5463] cgroup: subsys name conflicts with all [ 132.897387][ T5464] batadv_slave_0: mtu less than device minimum [ 132.905072][ T5464] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1687'. [ 132.955863][ T5469] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.958643][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 132.968103][ T5377] rust_binder: 5460: removing orphan mapping 0:24 [ 132.983296][ T5377] rust_binder: 0: removing orphan mapping 24:1120 [ 133.049473][ T5475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.120781][ T5485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1694'. [ 133.148413][ T36] audit: type=1400 audit(1754826666.742:545): avc: denied { execute_no_trans } for pid=5486 comm="syz.1.1695" path="/556/file0" dev="tmpfs" ino=3034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.298429][ T45] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 133.449394][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.460429][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 133.472803][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.481912][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.489901][ T45] usb 1-1: Product: syz [ 133.494088][ T45] usb 1-1: Manufacturer: syz [ 133.498719][ T45] usb 1-1: SerialNumber: syz [ 133.504328][ T5478] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.796871][ T5507] binder: Unknown parameter 'o/> rejected, failed to enable media [ 134.417770][ T5563] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 134.417987][ T5563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 134.677857][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 134.677874][ T36] audit: type=1400 audit(1754826668.272:551): avc: denied { watch } for pid=5584 comm="syz.1.1728" path="/573/file0" dev="tmpfs" ino=3129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.778395][ T334] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 134.825511][ T45] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 134.831635][ T45] cdc_ncm 1-1:1.0: bind() failure [ 134.840176][ T45] usb 1-1: USB disconnect, device number 49 [ 134.929462][ T334] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.944438][ T5596] rust_binder: Error while translating object. [ 134.944480][ T5596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 134.944822][ T334] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 134.950951][ T5596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:727 [ 134.960654][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.974981][ T5596] /dev/rnullb0: Can't open blockdev [ 134.978295][ T334] usb 4-1: Product: syz [ 134.999738][ T334] usb 4-1: Manufacturer: syz [ 135.004381][ T334] usb 4-1: SerialNumber: syz [ 135.010188][ T334] usb 4-1: config 0 descriptor?? [ 135.025138][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.025388][ T36] audit: type=1400 audit(1754826668.622:552): avc: denied { map } for pid=5597 comm="syz.0.1732" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 135.031937][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.218121][ T5567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.227413][ T5567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.251321][ T334] usb 4-1: bad CDC descriptors [ 135.256241][ T334] usb 4-1: unsupported MDLM descriptors [ 135.265692][ T334] usb 4-1: USB disconnect, device number 35 [ 135.812925][ T5621] 9pnet_fd: Insufficient options for proto=fd [ 136.043329][ T5377] rust_binder: 5599: removing orphan mapping 0:24 [ 136.056536][ T5629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 136.058525][ T384] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 136.218409][ T384] usb 4-1: Using ep0 maxpacket: 32 [ 136.225212][ T384] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 187, changing to 11 [ 136.236456][ T384] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 49288, setting to 1024 [ 136.247672][ T384] usb 4-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.260520][ T384] usb 4-1: config 1 interface 0 has no altsetting 0 [ 136.268431][ T384] usb 4-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.40 [ 136.277453][ T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.285434][ T384] usb 4-1: Product: syz [ 136.289592][ T384] usb 4-1: Manufacturer: syz [ 136.294160][ T384] usb 4-1: SerialNumber: syz [ 136.504373][ T384] usbhid 4-1:1.0: can't add hid device: -71 [ 136.510525][ T384] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 136.519909][ T384] usb 4-1: USB disconnect, device number 36 [ 136.899982][ T36] audit: type=1400 audit(1754826670.502:553): avc: denied { getopt } for pid=5636 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.938540][ T5643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=5643 comm=syz.1.1750 [ 136.952055][ T5643] netlink: 'syz.1.1750': attribute type 11 has an invalid length. [ 137.048676][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 137.056314][ T551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.061572][ T5662] /dev/rnullb0: Can't open blockdev [ 137.298445][ T5377] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 137.450679][ T5377] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 137.459776][ T5377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.467758][ T5377] usb 3-1: Product: syz [ 137.472098][ T5377] usb 3-1: Manufacturer: syz [ 137.476685][ T5377] usb 3-1: SerialNumber: syz [ 137.902806][ T5671] netlink: 'syz.3.1758': attribute type 4 has an invalid length. [ 137.910625][ T5671] netlink: 'syz.3.1758': attribute type 5 has an invalid length. [ 137.918762][ T5671] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 137.954283][ T36] audit: type=1400 audit(1754826671.552:554): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=608 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 137.975812][ T36] audit: type=1400 audit(1754826671.552:555): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=608 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 137.998645][ T36] audit: type=1400 audit(1754826671.552:556): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=608 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 138.458404][ T334] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 138.609402][ T334] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 138.618487][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.626999][ T334] usb 4-1: config 0 descriptor?? [ 138.982243][ T5700] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 139.002888][ T36] audit: type=1400 audit(1754826672.602:557): avc: denied { setattr } for pid=5701 comm="syz.0.1769" name="secretmem" dev="secretmem" ino=44419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.060095][ T5709] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 139.942145][ T1341] usb 3-1: USB disconnect, device number 17 [ 140.107302][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.114352][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.121448][ T5741] bridge_slave_0: entered allmulticast mode [ 140.127549][ T5741] bridge_slave_0: entered promiscuous mode [ 140.133935][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.138442][ T342] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 140.141207][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.156564][ T5741] bridge_slave_1: entered allmulticast mode [ 140.162753][ T5741] bridge_slave_1: entered promiscuous mode [ 140.201457][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.209113][ T5741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.216363][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.223403][ T5741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.241755][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.249345][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.258688][ T1341] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 140.259157][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.273321][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.282333][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.289402][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.313036][ T5741] veth0_vlan: entered promiscuous mode [ 140.320148][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.324718][ T5741] veth1_macvtap: entered promiscuous mode [ 140.330268][ T342] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 140.349185][ T342] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 140.358269][ T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.370313][ T342] usb 1-1: config 0 descriptor?? [ 140.418400][ T1341] usb 3-1: Using ep0 maxpacket: 32 [ 140.424706][ T1341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.435843][ T1341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.445660][ T1341] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.455354][ T1341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.478546][ T1341] usb 3-1: config 0 descriptor?? [ 140.479475][ T5758] rust_binder: Error while translating object. [ 140.483544][ T5758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 140.484458][ T1341] hub 3-1:0.0: USB hub found [ 140.489976][ T5758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 140.685336][ T1341] hub 3-1:0.0: 1 port detected [ 140.781654][ T342] kovaplus 0003:1E7D:2D50.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 140.863132][ T334] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 140.874208][ T334] asix 4-1:0.0: probe with driver asix failed with error -71 [ 140.882575][ T334] usb 4-1: USB disconnect, device number 37 [ 141.291590][ T1341] hub 3-1:0.0: activate --> -90 [ 141.344133][ T5761] kvm: kvm [5760]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x41b [ 141.352874][ T5761] kvm: kvm [5760]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1f1f [ 141.367247][ T5761] kvm: kvm [5760]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000005d8 [ 141.376703][ T5761] kvm: kvm [5760]: vcpu10, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x100 [ 141.385488][ T5761] kvm: kvm [5760]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x104 [ 141.394142][ T5761] kvm: kvm [5760]: vcpu10, guest rIP: 0x9134 Unhandled WRMSR(0xc2) = 0x100 [ 141.409272][ T5761] kvm: kvm [5760]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000005d8 [ 141.419151][ T5761] kvm: kvm [5760]: vcpu10, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x100 [ 141.427899][ T5761] kvm: kvm [5760]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x104 [ 141.436689][ T5761] kvm: kvm [5760]: vcpu10, guest rIP: 0x9134 Unhandled WRMSR(0xc2) = 0x100 [ 141.744827][ T5767] /dev/rnullb0: Can't open blockdev [ 141.782971][ T5717] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 141.782999][ T5717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 141.791192][ T5717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:755 [ 141.801512][ T342] kovaplus 0003:1E7D:2D50.0011: couldn't init struct kovaplus_device [ 141.818756][ T342] kovaplus 0003:1E7D:2D50.0011: couldn't install mouse [ 141.826082][ T342] kovaplus 0003:1E7D:2D50.0011: probe with driver kovaplus failed with error -71 [ 141.836896][ T342] usb 1-1: USB disconnect, device number 50 [ 141.938410][ T384] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 142.088659][ T384] usb 2-1: Using ep0 maxpacket: 16 [ 142.094869][ T384] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 142.103732][ T384] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.114319][ T384] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.123281][ T384] usb 2-1: config 1 has no interface number 1 [ 142.129427][ T384] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.142219][ T384] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.156407][ T384] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.165473][ T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.173505][ T384] usb 2-1: Product: syz [ 142.177661][ T384] usb 2-1: Manufacturer: syz [ 142.182300][ T384] usb 2-1: SerialNumber: syz [ 142.390858][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.443680][ T5785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.452742][ T5785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.461520][ T5785] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 142.493258][ T5786] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1792'. [ 142.518923][ T5786] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 142.518947][ T5786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 142.527035][ T5786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:977 [ 142.568413][ T5377] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 142.739405][ T5377] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 142.747517][ T5377] usb 1-1: config 0 has no interface number 0 [ 142.768422][ T5377] usb 1-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 142.778498][ T5377] usb 1-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 142.799415][ T1341] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 142.799444][ T5377] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 142.806311][ T1341] usb 3-1-port1: config error [ 142.828386][ T5377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.836375][ T5377] usb 1-1: Product: syz [ 142.840646][ T5377] usb 1-1: Manufacturer: syz [ 142.845271][ T5377] usb 1-1: SerialNumber: syz [ 142.850718][ T5377] usb 1-1: config 0 descriptor?? [ 142.857319][ T5778] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 142.864516][ T5778] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 142.872429][ T5377] ums-usbat 1-1:0.23: USB Mass Storage device detected [ 143.075151][ T5778] rust_binder: pid 5778 performed invalid decrement on ref [ 143.238660][ T1341] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 143.251339][ T1341] usb 3-1: device reset changed ep0 maxpacket size! [ 143.258204][ T1341] usb 3-1: USB disconnect, device number 18 [ 143.269861][ T5377] ums-usbat 1-1:0.23: probe with driver ums-usbat failed with error -5 [ 143.282165][ T5377] usb 1-1: USB disconnect, device number 51 [ 143.408827][ T5797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.418016][ T5797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.558417][ T1341] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 143.638423][ T334] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 143.654137][ T5811] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 143.664120][ T5811] tipc: Enabled bearer , priority 0 [ 143.708407][ T1341] usb 3-1: Using ep0 maxpacket: 16 [ 143.714751][ T1341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.725691][ T1341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.735435][ T1341] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 143.744483][ T1341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.753118][ T1341] usb 3-1: config 0 descriptor?? [ 143.774486][ T5811] tipc: Disabling bearer [ 143.798386][ T334] usb 4-1: Using ep0 maxpacket: 16 [ 143.804817][ T334] usb 4-1: unable to get BOS descriptor or descriptor too short [ 143.813185][ T334] usb 4-1: config 0 has an invalid interface number: 152 but max is 0 [ 143.821384][ T334] usb 4-1: config 0 has no interface number 0 [ 143.827517][ T334] usb 4-1: config 0 interface 152 altsetting 8 endpoint 0xC has an invalid bInterval 29, changing to 8 [ 143.838614][ T334] usb 4-1: config 0 interface 152 altsetting 8 endpoint 0xC has invalid maxpacket 49650, setting to 1024 [ 143.844006][ T5814] overlayfs: unescaped trailing colons in lowerdir mount option. [ 143.849908][ T334] usb 4-1: config 0 interface 152 altsetting 8 endpoint 0xD has an invalid bInterval 127, changing to 7 [ 143.868766][ T334] usb 4-1: config 0 interface 152 has no altsetting 0 [ 143.870782][ T5814] rust_binder: Failed copying remainder into alloc: EFAULT [ 143.875581][ T5814] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 143.876878][ T334] usb 4-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=fd.3c [ 143.883258][ T5814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 143.891083][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.900687][ T5814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:772 [ 143.909853][ T334] usb 4-1: Product: syz [ 143.931277][ T334] usb 4-1: Manufacturer: syz [ 143.935911][ T334] usb 4-1: SerialNumber: syz [ 143.944850][ T334] usb 4-1: config 0 descriptor?? [ 144.153929][ T334] zaurus 4-1:0.152: skipping garbage [ 144.159266][ T334] usb 4-1: bad CDC descriptors [ 144.164908][ T1341] playstation 0003:054C:05C4.0012: unknown main item tag 0x1 [ 144.175260][ T334] usb 4-1: USB disconnect, device number 38 [ 144.181256][ T1341] playstation 0003:054C:05C4.0012: item fetching failed at offset 3/5 [ 144.188410][ T63] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 144.190641][ T1341] playstation 0003:054C:05C4.0012: Parse failed [ 144.203907][ T1341] playstation 0003:054C:05C4.0012: probe with driver playstation failed with error -22 [ 144.338396][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 144.344508][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.355885][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.365658][ T63] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 144.374748][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.379349][ T334] usb 3-1: USB disconnect, device number 19 [ 144.386632][ T63] usb 1-1: config 0 descriptor?? [ 144.408697][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 144.414732][ T551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.682204][ T5821] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 144.682231][ T5821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 144.690313][ T5821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:989 [ 144.770439][ T384] usb 2-1: USB disconnect, device number 14 [ 144.801896][ T63] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0013/input/input25 [ 144.835530][ T63] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0013/input/input26 [ 144.845738][ T5834] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1805'. [ 144.852979][ T63] kye 0003:0458:5012.0013: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 144.878419][ T63] usb 1-1: USB disconnect, device number 52 [ 144.892021][ T5835] fido_id[5835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 144.950031][ T5841] /dev/rnullb0: Can't open blockdev [ 144.969693][ T5846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=5846 comm=syz.1.1810 [ 144.986499][ T5846] netlink: 7220 bytes leftover after parsing attributes in process `syz.1.1810'. [ 144.998464][ T334] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 145.010492][ T36] audit: type=1400 audit(1754826678.602:558): avc: denied { write } for pid=5850 comm="syz.0.1811" dev="sockfs" ino=45012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.051311][ T5853] tipc: Started in network mode [ 145.056239][ T5853] tipc: Node identity 3a692b4c7bc7, cluster identity 4711 [ 145.063805][ T5853] tipc: Enabled bearer , priority 0 [ 145.075229][ T5853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29 [ 145.170068][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.174638][ T36] audit: type=1400 audit(1754826678.772:559): avc: denied { create } for pid=5858 comm="syz.0.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 145.198063][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.219471][ T334] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 145.233338][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.249166][ T334] usb 4-1: config 0 descriptor?? [ 145.413804][ T5873] 9pnet_fd: Insufficient options for proto=fd [ 145.428243][ T5877] rust_binder: Error while translating object. [ 145.428288][ T5877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 145.435013][ T5877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:803 [ 145.488532][ T5883] netlink: 'syz.0.1820': attribute type 4 has an invalid length. [ 145.609867][ T5887] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 145.629175][ T36] audit: type=1400 audit(1754826679.232:560): avc: denied { relabelto } for pid=5885 comm="syz.0.1822" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 145.658512][ T5887] rust_binder: Error while translating object. [ 145.658559][ T5887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 145.666694][ T334] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 145.675506][ T5887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:807 [ 145.682958][ T36] audit: type=1400 audit(1754826679.232:561): avc: denied { associate } for pid=5885 comm="syz.0.1822" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 145.719269][ T5892] rust_binder: 807: no such ref 3 [ 145.732209][ T334] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 145.761579][ T5892] rust_binder: inc_ref_done called when no active inc_refs [ 145.804960][ T5843] tipc: Disabling bearer [ 145.826273][ T334] cp2112 0003:10C4:EA90.0014: error requesting version [ 145.849727][ T334] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71 [ 145.868978][ T5895] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 145.890651][ T334] usb 4-1: USB disconnect, device number 39 [ 145.899020][ T5897] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 146.069997][ T36] audit: type=1400 audit(1754826679.672:562): avc: denied { execheap } for pid=5913 comm="syz.1.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.106225][ T5918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.106250][ T5918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.457714][ T5971] fuse: Unknown parameter 'rootmode00006000000000100000' [ 146.472688][ T5972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:811 [ 146.788400][ T63] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 146.928442][ T63] usb 4-1: device descriptor read/64, error -71 [ 146.968435][ T334] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 147.119441][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.130400][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.140154][ T334] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 147.149196][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.157751][ T334] usb 3-1: config 0 descriptor?? [ 147.168462][ T63] usb 4-1: device descriptor read/64, error -71 [ 147.408434][ T63] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 147.548430][ T63] usb 4-1: device descriptor read/64, error -71 [ 147.573430][ T6011] rust_binder: Error while translating object. [ 147.573451][ T6011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 147.579653][ T6011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:821 [ 147.606634][ T6015] netlink: 'syz.0.1861': attribute type 27 has an invalid length. [ 147.606851][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.615843][ T6015] netlink: 'syz.0.1861': attribute type 27 has an invalid length. [ 147.624018][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.631460][ T6015] netlink: 'syz.0.1861': attribute type 27 has an invalid length. [ 147.639319][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.646845][ T6015] netlink: 'syz.0.1861': attribute type 27 has an invalid length. [ 147.654708][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.662490][ T6015] netlink: 'syz.0.1861': attribute type 27 has an invalid length. [ 147.670267][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.677968][ T6015] netlink: 'syz.0.1861': attribute type 27 has an invalid length. [ 147.685753][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.693826][ T6015] netlink: 'syz.0.1861': attribute type 27 has an invalid length. [ 147.701441][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.709209][ T6015] netlink: 'syz.0.1861': attribute type 27 has an invalid length. [ 147.716880][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.724660][ T6015] netlink: 'syz.0.1861': attribute type 27 has an invalid length. [ 147.732500][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.755555][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.763389][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.771241][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.771728][ T334] usb 3-1: language id specifier not provided by device, defaulting to English [ 147.779036][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.795725][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.803671][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.811466][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.819255][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.826986][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.834749][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.842516][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.850272][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.858042][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.865808][ T63] usb 4-1: device descriptor read/64, error -71 [ 147.872154][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.879983][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.887752][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.895533][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.903317][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.911122][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.918885][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.926640][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.934434][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.942186][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.949961][ T6016] binder: Binderfs stats mode cannot be changed during a remount [ 147.978530][ T63] usb usb4-port1: attempt power cycle [ 148.031376][ T6022] overlay: Bad value for 'verity' [ 148.047539][ T6025] rust_binder: Write failure EINVAL in pid:835 [ 148.048101][ T6025] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 148.098784][ T6028] rust_binder: Write failure EINVAL in pid:835 [ 148.101178][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6030 comm=syz.1.1867 [ 148.119818][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6030 comm=syz.1.1867 [ 148.132367][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6030 comm=syz.1.1867 [ 148.144881][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6030 comm=syz.1.1867 [ 148.157355][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6030 comm=syz.1.1867 [ 148.169736][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6030 comm=syz.1.1867 [ 148.182153][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6030 comm=syz.1.1867 [ 148.194527][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6030 comm=syz.1.1867 [ 148.207054][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6030 comm=syz.1.1867 [ 148.231138][ T6034] overlayfs: conflicting options: metacopy=off,verity=require [ 148.239187][ T6034] overlayfs: failed to clone upperpath [ 148.302712][ T6049] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 148.329492][ T63] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 148.347623][ T6055] fuse: Bad value for 'fd' [ 148.352586][ T6055] bpf: Bad value for 'gid' [ 148.359354][ T63] usb 4-1: device descriptor read/8, error -71 [ 148.378067][ T6058] tipc: Enabling of bearer rejected, failed to enable media [ 148.499037][ T63] usb 4-1: device descriptor read/8, error -71 [ 148.738430][ T63] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 148.759413][ T63] usb 4-1: device descriptor read/8, error -71 [ 148.889442][ T63] usb 4-1: device descriptor read/8, error -71 [ 148.998508][ T63] usb usb4-port1: unable to enumerate USB device [ 149.072465][ T6088] rust_binder: Write failure EFAULT in pid:849 [ 149.143833][ T36] audit: type=1400 audit(1771604127.734:563): avc: denied { read } for pid=6093 comm="syz.0.1891" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 149.488419][ T45] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 149.524081][ T36] audit: type=1400 audit(1771604128.114:564): avc: denied { validate_trans } for pid=6107 comm="syz.3.1896" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 149.550818][ T36] audit: type=1400 audit(1771604128.144:565): avc: denied { create } for pid=6112 comm="syz.3.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 149.585778][ T36] audit: type=1400 audit(1771604128.174:566): avc: denied { accept } for pid=6119 comm="syz.3.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 149.638401][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 149.644652][ T45] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 149.653027][ T45] usb 1-1: config 0 has no interface number 0 [ 149.659288][ T45] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 149.675325][ T45] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 149.691254][ T334] uclogic 0003:256C:006D.0015: failed retrieving Huion firmware version: -71 [ 149.700497][ T45] usb 1-1: config 0 interface 41 has no altsetting 0 [ 149.707532][ T334] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 149.715349][ T334] uclogic 0003:256C:006D.0015: probe with driver uclogic failed with error -71 [ 149.725563][ T45] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 149.736148][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.745591][ T334] usb 3-1: USB disconnect, device number 20 [ 149.754786][ T45] usb 1-1: Product: syz [ 149.759954][ T45] usb 1-1: Manufacturer: syz [ 149.764594][ T45] usb 1-1: SerialNumber: syz [ 149.778800][ T45] usb 1-1: config 0 descriptor?? [ 149.786793][ T6104] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 149.796876][ T6104] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 149.809292][ T6134] rust_binder: Write failure EFAULT in pid:1038 [ 149.815450][ T36] audit: type=1400 audit(1771604128.404:567): avc: denied { ioctl } for pid=6132 comm="syz.2.1905" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 149.823930][ T6138] 9pnet_fd: Insufficient options for proto=fd [ 149.879204][ T6142] rust_binder: Error while translating object. [ 149.879228][ T6142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.885424][ T6142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1042 [ 149.959444][ T6147] SELinux: security_context_str_to_sid () failed with errno=-22 [ 149.993603][ T6149] cgroup: none used incorrectly [ 150.047245][ T6104] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 150.054635][ T6104] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 150.079030][ T6161] /dev/rnullb0: Can't open blockdev [ 150.248401][ T334] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 150.409500][ T334] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 150.418529][ T334] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 150.429621][ T334] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 150.439564][ T334] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 150.448750][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.478746][ T45] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 150.488293][ T45] usb 1-1: USB disconnect, device number 53 [ 150.668293][ T334] usb 3-1: string descriptor 0 read error: -71 [ 150.683513][ T334] usb 3-1: USB disconnect, device number 21 [ 150.749272][ T6199] tipc: Enabling of bearer rejected, failed to enable media [ 150.769087][ T6202] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 150.859731][ T6211] validate_nla: 26 callbacks suppressed [ 150.859748][ T6211] netlink: 'syz.1.1933': attribute type 4 has an invalid length. [ 151.058407][ T9] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 151.196199][ T6226] input: syz1 as /devices/virtual/input/input27 [ 151.211378][ T9] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 151.229700][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.247435][ T9] usb 4-1: can't read configurations, error -61 [ 151.308665][ T6231] loop8: detected capacity change from 0 to 79 [ 151.348713][ T6231] loop8: detected capacity change from 79 to 78 [ 151.399554][ T9] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 151.568845][ T9] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 151.578016][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.586134][ T9] usb 4-1: can't read configurations, error -61 [ 151.592808][ T9] usb usb4-port1: attempt power cycle [ 151.760380][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 151.760396][ T36] audit: type=1400 audit(1771604130.354:570): avc: denied { link } for pid=6244 comm="syz.2.1946" name="file1" dev="overlay" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 151.938432][ T9] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 151.961183][ T9] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 151.971152][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.978797][ T9] usb 4-1: can't read configurations, error -61 [ 152.108428][ T9] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 152.129126][ T9] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 152.139133][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 152.146697][ T9] usb 4-1: can't read configurations, error -61 [ 152.159696][ T9] usb usb4-port1: unable to enumerate USB device [ 152.166129][ T6276] SELinux: security_context_str_to_sid () failed with errno=-22 [ 152.174426][ T6276] SELinux: security_context_str_to_sid () failed with errno=-22 [ 152.438417][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 152.588382][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 152.594484][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.602607][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.612768][ T9] usb 1-1: config 0 has no interface number 0 [ 152.620111][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 152.629215][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.637210][ T9] usb 1-1: Product: syz [ 152.641376][ T9] usb 1-1: Manufacturer: syz [ 152.645957][ T9] usb 1-1: SerialNumber: syz [ 152.651048][ T9] usb 1-1: config 0 descriptor?? [ 152.659003][ T9] snd-usb-audio 1-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 152.672116][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.908306][ T5377] usb 1-1: USB disconnect, device number 54 [ 153.048433][ T9] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 153.198432][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 153.328418][ T9] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 153.424416][ T6292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1965'. [ 153.435378][ T6292] rust_binder: Failed copying remainder into alloc: EFAULT [ 153.435393][ T6292] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 153.442632][ T6292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 153.450896][ T6292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:892 [ 153.488397][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 153.502960][ T9] usb usb3-port1: attempt power cycle [ 153.858430][ T9] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 153.868455][ T5377] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 153.878748][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 153.936093][ T36] audit: type=1400 audit(1771604132.524:571): avc: denied { ioctl } for pid=6308 comm="syz.3.1972" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 154.028445][ T9] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 154.048433][ T5377] usb 1-1: Using ep0 maxpacket: 16 [ 154.053759][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 154.059456][ T9] usb usb3-port1: unable to enumerate USB device [ 154.066449][ T5377] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 154.077271][ T5377] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.086931][ T5377] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.099249][ T5377] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.108299][ T5377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.116310][ T5377] usb 1-1: Product: syz [ 154.120478][ T5377] usb 1-1: Manufacturer: syz [ 154.125050][ T5377] usb 1-1: SerialNumber: syz [ 154.532358][ T6296] fuse: Unknown parameter 'default_permissions' [ 154.540824][ T5377] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 154.553820][ T5377] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 154.568216][ T5377] usb 1-1: USB disconnect, device number 55 [ 154.579864][ T2978] udevd[2978]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.697011][ T13] tipc: Subscription rejected, illegal request [ 154.719986][ T6347] 9pnet_fd: Insufficient options for proto=fd [ 155.130191][ T6395] tipc: Enabled bearer , priority 0 [ 155.136904][ T6396] tipc: Enabling of bearer rejected, already enabled [ 155.146032][ T6395] tipc: Disabling bearer [ 155.813203][ T36] audit: type=1400 audit(1771604134.404:572): avc: denied { map } for pid=6401 comm="syz.1.2009" path="socket:[49331]" dev="sockfs" ino=49331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.857157][ T36] audit: type=1400 audit(1771604134.404:573): avc: denied { accept } for pid=6401 comm="syz.1.2009" path="socket:[49331]" dev="sockfs" ino=49331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.881928][ T36] audit: type=1400 audit(1771604134.434:574): avc: granted { setsecparam } for pid=6403 comm="syz.2.2011" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 156.038209][ T36] audit: type=1400 audit(1771604134.624:575): avc: denied { write } for pid=6417 comm="syz.2.2015" name="file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.061598][ T36] audit: type=1400 audit(1771604134.624:576): avc: denied { open } for pid=6417 comm="syz.2.2015" path="/66/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.216808][ T6428] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 156.216828][ T6428] rust_binder: Read failure Err(EFAULT) in pid:916 [ 156.234266][ T6430] fuse: Bad value for 'fd' [ 156.586681][ T6471] selinux_netlink_send: 24 callbacks suppressed [ 156.586697][ T6471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6471 comm=syz.1.2034 [ 156.638419][ T334] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 156.648719][ T6476] 9pnet_fd: Insufficient options for proto=fd [ 156.752051][ T6491] netlink: 'syz.1.2043': attribute type 4 has an invalid length. [ 156.809629][ T334] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 156.817822][ T334] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.829543][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.840674][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.852050][ T334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.865150][ T334] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.874350][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.884795][ T334] usb 3-1: config 0 descriptor?? [ 156.891514][ T6440] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.303299][ T6510] overlayfs: missing 'lowerdir' [ 157.309007][ T334] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 157.317590][ T334] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 157.336679][ T36] audit: type=1400 audit(1771604135.924:577): avc: denied { mounton } for pid=6511 comm="syz.1.2053" path="/128/file0" dev="tmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 157.359873][ T334] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 157.418422][ T5377] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 157.562346][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.569444][ T334] usb 3-1: USB disconnect, device number 26 [ 157.576187][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.585227][ T5377] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 157.609337][ T342] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 157.618410][ T5377] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.639278][ T5377] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.645902][ T5377] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 157.658389][ T5377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.668290][ T5377] usb 1-1: config 0 descriptor?? [ 157.673558][ T6497] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 157.769572][ T342] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 157.780520][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.791716][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.801649][ T342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 157.815544][ T342] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 157.824877][ T342] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 157.833120][ T342] usb 4-1: Manufacturer: syz [ 157.838975][ T342] usb 4-1: config 0 descriptor?? [ 158.082944][ T5377] kye 0003:0458:5015.0017: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 158.104679][ T5377] kye 0003:0458:5015.0017: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 158.115594][ T5377] kye 0003:0458:5015.0017: tablet-enabling feature report not found [ 158.123606][ T5377] kye 0003:0458:5015.0017: tablet enabling failed [ 158.181305][ T6518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=6518 comm=syz.1.2054 [ 158.194189][ T6518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2054'. [ 158.249283][ T342] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 158.256673][ T342] appleir 0003:05AC:8243.0018: No inputs registered, leaving [ 158.267287][ T342] appleir 0003:05AC:8243.0018: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 158.296171][ T6497] rust_binder: Error while translating object. [ 158.296213][ T6497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 158.302446][ T6497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:928 [ 158.336420][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.354544][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.434136][ T5377] usb 1-1: USB disconnect, device number 56 [ 158.509949][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.518630][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.008269][ T6526] binder: Bad value for 'max' [ 159.449316][ T36] audit: type=1326 audit(1771604138.044:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.0.2068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d0038ebe9 code=0x0 [ 159.500730][ T6566] binder: Unknown parameter 'stats' [ 159.608422][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 159.614464][ T551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 159.646813][ T36] audit: type=1400 audit(1771604138.234:579): avc: denied { append } for pid=6571 comm="syz.1.2071" name="file0" dev="tmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.678402][ T10] usb 4-1: reset high-speed USB device number 48 using dummy_hcd [ 159.680134][ T6572] 9pnet_fd: Insufficient options for proto=fd [ 159.726174][ T36] audit: type=1400 audit(1771604138.314:580): avc: denied { setattr } for pid=6571 comm="syz.1.2071" name="file0" dev="tmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.813967][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'. [ 160.674277][ T6617] overlayfs: failed to clone upperpath [ 161.218885][ T5377] usb 4-1: USB disconnect, device number 48 [ 161.290901][ T36] audit: type=1400 audit(1771604139.884:581): avc: denied { map } for pid=6638 comm="syz.1.2095" path="pipe:[50573]" dev="pipefs" ino=50573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 161.359276][ T6641] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 161.434343][ T36] audit: type=1400 audit(1771604140.024:582): avc: denied { relabelfrom } for pid=6642 comm="syz.0.2097" name="" dev="pipefs" ino=49918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 161.584574][ T6656] devpts: called with bogus options [ 161.599679][ T6656] rust_binder: 962: no such ref 0 [ 161.653563][ T6661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:964 [ 161.772260][ T6672] rust_binder: Write failure EFAULT in pid:976 [ 161.860821][ T6676] tipc: Can't bind to reserved service type 0 [ 161.894199][ T6676] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2107'. [ 161.916453][ T6676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.981796][ T6681] overlayfs: failed to clone lowerpath [ 162.010712][ T6685] rust_binder: Error while translating object. [ 162.010757][ T6685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 162.028426][ T6685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:982 [ 162.064526][ T6692] syz.3.2113: attempt to access beyond end of device [ 162.064526][ T6692] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 162.088049][ T6692] FAT-fs (loop3): unable to read boot sector [ 162.095786][ T6692] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 162.119295][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 162.197699][ T6704] /dev/rnullb0: Can't open blockdev [ 162.202068][ T6700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6700 comm=syz.1.2116 [ 162.261027][ T36] audit: type=1326 audit(1771604140.854:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.3.2121" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f646f78ebe9 code=0x0 [ 162.438417][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 162.498408][ T334] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 162.598391][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 162.604502][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 162.628395][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.638517][ T10] usb 1-1: config 0 has no interface number 0 [ 162.644583][ T10] usb 1-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.659378][ T334] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 162.668134][ T334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.678329][ T334] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.687317][ T334] usb 4-1: config 1 has no interface number 0 [ 162.693537][ T334] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 162.693640][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.704378][ T334] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 162.727675][ T334] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.728719][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.737324][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.752883][ T334] usb 4-1: Product: syz [ 162.754950][ T10] usb 1-1: Product: syz [ 162.757089][ T334] usb 4-1: Manufacturer: syz [ 162.765927][ T334] usb 4-1: SerialNumber: syz [ 162.768391][ T10] usb 1-1: Manufacturer: syz [ 162.775320][ T10] usb 1-1: SerialNumber: syz [ 162.788941][ T10] usb 1-1: config 0 descriptor?? [ 162.795714][ T10] smsc95xx v2.0.0 [ 162.799476][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 162.809593][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 163.188975][ T6717] /dev/rnullb0: Can't open blockdev [ 163.194632][ T10] usb 4-1: USB disconnect, device number 49 [ 163.328390][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 163.478388][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 163.488416][ T9] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 163.509065][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 163.516615][ T9] usb 3-1: can't read configurations, error -61 [ 163.648418][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 163.724835][ T6723] rust_binder: Error while translating object. [ 163.724873][ T6723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.731119][ T6723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1135 [ 163.798396][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 163.811324][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.830183][ T9] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 163.834095][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.867325][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 163.877569][ T9] usb 3-1: can't read configurations, error -61 [ 163.884535][ T9] usb usb3-port1: attempt power cycle [ 164.077815][ T6737] rust_binder: Error while translating object. [ 164.077850][ T6737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.084537][ T6737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1148 [ 164.104168][ T6739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.104280][ T6738] rust_binder: Error while translating object. [ 164.118425][ T6738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.124662][ T6738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1148 [ 164.238470][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 164.298729][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 164.304264][ T9] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 164.313702][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 164.321402][ T9] usb 3-1: can't read configurations, error -61 [ 164.337558][ T6752] SELinux: security_context_str_to_sid () failed with errno=-22 [ 164.458435][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 164.488426][ T36] audit: type=1400 audit(1771604143.074:584): avc: denied { mounton } for pid=6759 comm="syz.3.2136" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 164.521810][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 164.537097][ T9] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 164.550400][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 164.568087][ T9] usb 3-1: can't read configurations, error -61 [ 164.578482][ T9] usb usb3-port1: unable to enumerate USB device [ 164.620983][ T6768] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551500) [ 164.621004][ T6768] rust_binder: Error while translating object. [ 164.633291][ T6768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.639615][ T6768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1179 [ 164.802039][ T6780] kvm_pr_unimpl_wrmsr: 12 callbacks suppressed [ 164.802056][ T6780] kvm: kvm [6779]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x41b [ 164.850682][ T6780] kvm: kvm [6779]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1f1f [ 164.970025][ T6786] rust_binder: Error while translating object. [ 164.970064][ T6786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.986411][ T6786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1197 [ 165.138667][ T6792] tipc: Enabling of bearer rejected, failed to enable media [ 165.199775][ T45] usb 1-1: USB disconnect, device number 57 [ 165.297986][ T6813] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 165.611479][ T6826] SELinux: security_context_str_to_sid (syste_uGй :ߦ53g`F2iE 3:Ҧ(fK=)IIaXžp9cut{kE3PO[%b1l)K8߀J|/a^M`=Xc&;;/E8,XWr#m]- ~6(Ƃ}) failed with errno=-22 [ 165.651430][ T6829] fuse: Bad value for 'group_id' [ 165.656474][ T6829] fuse: Bad value for 'group_id' [ 165.713658][ T6829] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2159'. [ 165.784007][ T6836] rust_binder: Error while translating object. [ 165.784038][ T6836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 165.790240][ T6836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1216 [ 165.799944][ T6836] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.846461][ T6843] rust_binder: Error in use_page_slow: ESRCH [ 165.846487][ T6843] rust_binder: use_range failure ESRCH [ 165.852781][ T6843] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 165.858292][ T6843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 165.866326][ T6843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1223 [ 165.951441][ T6850] 9pnet_fd: Insufficient options for proto=fd [ 166.050103][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'. [ 166.059047][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'. [ 166.126666][ T36] audit: type=1326 audit(1771604144.714:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.2.2181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5688f8ebe9 code=0x0 [ 166.148422][ T9] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 166.149516][ T36] audit: type=1326 audit(1771604144.714:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.2.2181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5688f8ebe9 code=0x0 [ 166.289124][ T6911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.299423][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.316581][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 166.327692][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.349109][ T9] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 166.360827][ T6913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6913 comm=syz.0.2189 [ 166.365400][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.373953][ T6913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6913 comm=syz.0.2189 [ 166.393686][ T9] usb 4-1: Product: syz [ 166.397851][ T9] usb 4-1: Manufacturer: syz [ 166.402518][ T9] usb 4-1: SerialNumber: syz [ 166.407547][ T9] usb 4-1: config 0 descriptor?? [ 166.538411][ T45] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 166.617518][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.625985][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.689407][ T45] usb 3-1: config 0 has no interfaces? [ 166.698531][ T45] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 166.718404][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.729122][ T45] usb 3-1: Product: syz [ 166.733294][ T45] usb 3-1: Manufacturer: syz [ 166.737940][ T45] usb 3-1: SerialNumber: syz [ 166.748492][ T45] usb 3-1: config 0 descriptor?? [ 166.759290][ T45] usb 4-1: USB disconnect, device number 50 [ 166.841707][ T6932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.930378][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.955433][ T9] usb 3-1: USB disconnect, device number 31 [ 166.991477][ T6955] __vm_enough_memory: pid: 6955, comm: syz.0.2203, bytes: 18014402804453376 not enough memory for the allocation [ 167.015640][ T329] Bluetooth: hci1: Frame reassembly failed (-84) [ 167.488557][ T6972] SELinux: security_context_str_to_sid () failed with errno=-22 [ 167.768787][ T342] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 167.919458][ T342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.929258][ T342] usb 3-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 167.938293][ T342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.946874][ T342] usb 3-1: config 0 descriptor?? [ 168.356211][ T342] logitech-hidpp-device 0003:046D:C08A.0019: ignoring exceeding usage max [ 168.368150][ T342] logitech-hidpp-device 0003:046D:C08A.0019: hidraw0: USB HID v0.00 Device [HID 046d:c08a] on usb-dummy_hcd.2-1/input0 [ 168.559394][ T342] usb 3-1: USB disconnect, device number 32 [ 168.968414][ T1305] Bluetooth: hci0: command 0x1003 tx timeout [ 168.968414][ T551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.048419][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 169.349335][ T6999] rust_binder: Write failure EFAULT in pid:291 [ 169.364825][ T7001] fuse: Bad value for 'group_id' [ 169.376027][ T7001] fuse: Bad value for 'group_id' [ 169.517215][ T36] audit: type=1400 audit(1771604148.104:587): avc: denied { bind } for pid=7014 comm="syz.3.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.542250][ T7019] 9pnet: Could not find request transport: fs.?ho= [ 169.549742][ T7021] 9pnet: Could not find request transport: fs.?ho= [ 169.659671][ T7033] 9pnet_fd: Insufficient options for proto=fd [ 169.720954][ T7035] 9pnet_fd: Insufficient options for proto=fd [ 169.792857][ T7040] 9pnet_fd: Insufficient options for proto=fd [ 170.186234][ T7059] fuse: Bad value for 'rootmode' [ 170.196980][ T7061] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2234'. [ 170.206690][ T7059] 9pnet_fd: Insufficient options for proto=fd [ 170.728855][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2251'. [ 170.728862][ T7113] ------------[ cut here ]------------ [ 170.728881][ T7113] WARNING: CPU: 1 PID: 7113 at arch/x86/kvm/x86.c:11569 kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 170.752931][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.753538][ T7113] Modules linked in: [ 170.764762][ T7113] CPU: 1 UID: 0 PID: 7113 Comm: syz.2.2251 Not tainted 6.12.38-syzkaller-gd0c633175c04 #0 79f03ae2e0a264f34f505a942aaa3597bcba712e [ 170.768413][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.778224][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.796069][ T7113] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 170.798428][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.802503][ T7113] Code: 7e 3b e8 34 05 6a 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 4c 8b 64 24 40 48 8b 5c 24 28 e9 26 fd ff ff e8 11 05 6a 00 <0f> 0b e9 e4 fc ff ff e8 05 05 6a 00 0f 0b e9 0e fd ff ff e8 f9 04 [ 170.815367][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.829468][ T7113] RSP: 0018:ffffc900109079c0 EFLAGS: 00010293 [ 170.829489][ T7113] RAX: ffffffff811bd81f RBX: ffff88811cca4300 RCX: ffff888136903900 [ 170.829503][ T7113] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 170.829514][ T7113] RBP: ffffc90010907c70 R08: ffff888136903907 R09: 1ffff11026d20720 [ 170.829527][ T7113] R10: dffffc0000000000 R11: ffffed1026d20721 R12: ffff88811a1b1000 [ 170.829539][ T7113] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88811cca4378 [ 170.829551][ T7113] FS: 00007f5689ebb6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 170.829566][ T7113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.829577][ T7113] CR2: 000055558e5824a8 CR3: 00000001148dc000 CR4: 00000000003526b0 [ 170.829594][ T7113] Call Trace: [ 170.849121][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.850974][ T7113] [ 170.859201][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.866869][ T7113] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 170.874966][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.882810][ T7113] ? try_to_wake_up+0xe40/0x1b00 [ 170.891846][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.898300][ T7113] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 170.907242][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.909563][ T7113] ? ioctl_has_perm+0x1aa/0x4d0 [ 170.917138][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.919842][ T7113] ? __cfi_autoremove_wake_function+0x10/0x10 [ 170.927300][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.933160][ T7113] ? ioctl_has_perm+0x3e0/0x4d0 [ 170.933183][ T7113] ? has_cap_mac_admin+0xd0/0xd0 [ 170.940634][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.945567][ T7113] ? synchronize_rcu+0x77/0x2e0 [ 170.952909][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.958060][ T7113] ? __cfi_synchronize_rcu+0x10/0x10 [ 170.965533][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.970262][ T7113] ? __kasan_check_write+0x18/0x20 [ 170.977720][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.983677][ T7113] kvm_vcpu_ioctl+0x96f/0xee0 [ 170.991235][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 170.995873][ T7113] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 171.000879][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.008160][ T7113] ? do_futex+0x356/0x500 [ 171.008182][ T7113] ? __cfi_do_futex+0x10/0x10 [ 171.008201][ T7113] ? __fget_files+0x2c5/0x340 [ 171.013122][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.020438][ T7113] ? bpf_lsm_file_ioctl+0xd/0x20 [ 171.020464][ T7113] ? security_file_ioctl+0x34/0xd0 [ 171.035955][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.038159][ T7113] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 171.050963][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.057920][ T7113] __se_sys_ioctl+0x132/0x1b0 [ 171.057945][ T7113] __x64_sys_ioctl+0x7f/0xa0 [ 171.068390][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.070584][ T7113] x64_sys_call+0x1878/0x2ee0 [ 171.076016][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.079557][ T7113] do_syscall_64+0x58/0xf0 [ 171.079579][ T7113] ? clear_bhb_loop+0x50/0xa0 [ 171.079603][ T7113] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 171.085560][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.091721][ T7113] RIP: 0033:0x7f5688f8ebe9 [ 171.096951][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.101679][ T7113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.117013][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.121565][ T7113] RSP: 002b:00007f5689ebb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.121587][ T7113] RAX: ffffffffffffffda RBX: 00007f56891b5fa0 RCX: 00007f5688f8ebe9 [ 171.121602][ T7113] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 171.126557][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.130832][ T7113] RBP: 00007f5689011e19 R08: 0000000000000000 R09: 0000000000000000 [ 171.138439][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.142845][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.150417][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.154584][ T7113] R13: 00007f56891b6038 R14: 00007f56891b5fa0 R15: 00007ffef5c628e8 [ 171.154603][ T7113] [ 171.154610][ T7113] ---[ end trace 0000000000000000 ]--- [ 171.159497][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.297780][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.305181][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.312601][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.319993][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.327360][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.334760][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.342146][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.349534][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.356912][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.364296][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.371673][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.379044][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.386417][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.393787][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.401164][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.408551][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.415930][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.423313][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.430693][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.438049][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.445434][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.453773][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.461146][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.468529][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.475878][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.483249][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.490630][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.497988][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.505385][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.512767][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.520139][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.527505][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.534889][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.542302][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.549688][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.557053][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.564426][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.571800][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.579200][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.586563][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.593946][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.601317][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.608837][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.616193][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.623594][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.631000][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.638394][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.645757][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.653246][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.660627][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.667992][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.675365][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.682738][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.690466][ T10] hid-generic 0000:0002:0000.001A: unknown main item tag 0x0 [ 171.698966][ T10] hid-generic 0000:0002:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 171.713890][ T7117] fido_id[7117]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory