last executing test programs: 1m6.568326508s ago: executing program 2 (id=517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1m6.513554019s ago: executing program 2 (id=518): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x7) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000054d564b0000000001000000000000d0"]) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xa27000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r4, 0x147a5000) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f00000000c0), 0x10) 1m6.511919849s ago: executing program 2 (id=519): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904f28988a69957c2010203010902240201000010000904430002317d55000905030200020200"/54], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000080)={0x8, 0x200008, 0xfffffffffffffffc, 0x7, 0x8003, 0xae4, 0x5, 0xfffffffffffffffc, 0x40000000000123e, 0x4, 0x4ad48b4b, 0x0, 0x9, 0x0, 0xd, 0x746, 0x5, 0x7ebb, 0x0, 0x6d, 0x10000, 0x6, 0x6, 0x8001, 0x4, 0x4}) (async) rt_sigtimedwait(&(0x7f0000000240)={[0x5]}, 0x0, &(0x7f0000000280), 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x61, r2}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket(0x2, 0x3, 0xff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x93, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a431676"}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x1000000) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 1m3.505469335s ago: executing program 2 (id=555): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1000000}], 0x0, 0x0, 0x0}) write$P9_RVERSION(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75459af8f676fd4d113ccfdfad35a922a526cafa7ac4239c3c8bfd08599ca07538c08483e3af51ebabc5d3c9510d04e7b209b05400434e1769fb2df28bdc445dd2c3d0eeb0b3b15325a418440527df7b9cccf18f510b85e82dd45b36f81f0e309a884ec4deb18feb52343496469edb30bdaa69f2191dc739eb6c05f3417f4660986382268c1190892a6753ccf040"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) recvmsg(r3, &(0x7f0000000540)={&(0x7f0000000580)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000480)=""/164, 0xa4}, 0x40010040) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000400)={0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x806f, 0x4, 0x0, 0x803, 0x0, 0x0, 0x20}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000f00)={0x2020}, 0x2020) 1m3.441641956s ago: executing program 2 (id=556): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000035c0), 0x2, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xf8c) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f00"/28, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) 1m3.390328777s ago: executing program 2 (id=557): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext=\"', @ANYRES8=0x0, @ANYRESHEX=0x0]) 1m3.350723157s ago: executing program 32 (id=557): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext=\"', @ANYRES8=0x0, @ANYRESHEX=0x0]) 18.411335961s ago: executing program 0 (id=1283): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x1005, 0xfffffffffffffffe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x300, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 18.357355171s ago: executing program 0 (id=1284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) (async) r3 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff00000000, 0x20000) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r4, 0x0, 0x0) 18.356872781s ago: executing program 0 (id=1285): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x17}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 18.349663781s ago: executing program 0 (id=1286): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="88010000100013070000000000000000fe880000000000000000000000000001fc01000000800000000000000000000000000401000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000003c0000002001000000000000000000000000000200000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000027bd7000023500000200000000000000000000004c0012"], 0x188}}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c00"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000000}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sigaltstack(&(0x7f0000000100)={&(0x7f0000000440)=""/71, 0x2, 0x47}, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000480)=0x23, 0x4) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="810000010000009f00000000950063e01cdbe90e00000400e6ed2c86b4ccb9eae691eb2799c7481127c47b05a4cda69b9a9fec1779d41877ee46e18f7710d91072fc216672fca36c3f1d0b1089f7a7d3a5839829ed343626390a4ee27c9195d76c8676dcd659b2cd4cd79c4bf89e806d2f0ecc32be86f3cc8c4abf4bcaab03eaff534061791cd500f155aa6a322ebf"]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/225, 0xe1, 0x2, 0x6}, @fda={0x66646185, 0x3, 0x0, 0x18}, @fda={0x66646185, 0x6, 0x0, 0xf}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 18.298766422s ago: executing program 0 (id=1287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x24}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/200, 0xc8}, {&(0x7f0000000000)=""/250, 0xf8}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000e80)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000540)=""/85, 0x55}, {&(0x7f0000000780)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x2100, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x6, r5, 0x1, r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.190625024s ago: executing program 0 (id=1288): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000800)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') setresuid(0xee01, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r3, &(0x7f0000000240)="26b2a8dd3bb50b8ceb62f430e5885746b5fd58b5a47a2bf28b373c8660a05cf8181b4b7a61b8ce127e9a2c0e92dea9379d5ca6b58c15037915bb4319621bdbead01cade5fc0535760d2286578af05881b83e2c2007508ed17ff1e44b5f91fd57e1077aaaf77b6741f58c4e426bb9b1ac269ddb81ba7c1d6ee457f1bb8ceb4e8a69db85ebb1df95fec7f3b5bd95dd726c920792e9a54f1641d5578f4347df0d583f76f962383980e8c6a1c123a70212d089e9b35900b052f0ee59eed7cf1e133398f5f5bd78d5c9820ee007f32894a57377a97af57c6d6dd108231b10a94c67f18552a65b870b7a9afcdfb72b57b81b1e424f739df21dfeebfaca906901b2626cfa482aabcc62b510255ee5010b4c1b260471011275c7f242659df63a8de398c2b0dfa67422e519853a439752898451f9f02defd4ae71ecc8aadd28d21a339d35cb425e109a5452d01d1ca2fc9cd2572a1252582d4b179876cc489b1b3fe4767d0356c29e6e0b891991f1dd5acc3c3e35f9d0048ed0e28b9771295729aeb5a1e262ec2fcbb545c3e24799bc424924294928312b42be902842083b4d7383ed289b307b66c8568277b3c17fea747ee49b750d83dd7ea1f18a5eae198451bd2968f823e03a4656cbbb154145465ddc7bcdd0c7b1d07366c0a4090e4023fd98d0f77d3949d7788bf0b31c52c7704bbfd681c4691d16ef610708ad2ae5af88301c5b0451ae9f292f16aa44230e53874a432be156fc74c9690983928aff88c8d817c86913fdc8425cf2cc43297e89321dfbbba3f4f1b8bcb602a17f1f5918c0657a9e0230f2722f2aca5f2f931c8c91dca589c02a711db5b7ca36f3a49282c4ec3b447ddcbb2f94e257a384d8c17980a3962b2c7b5c0b661899fd1451ce783dfb29355650454b65479ef40a319e37e90757ec3e3e08a2bbe0b9bed99d8bb31e5d240ffa66d5162748f30635658f92d864dc6ee1d95d9b6e19e554f6a4a5cb4a067b3c7d7d882ed4f908337febfd5cf00a6fd68e95fe62f5c374399f6d3201d3482a0637ac4d9d8253fbbf6bfdc3feb9db0a3d8a85cb337dc7a1328973e20bb82bcc2ec03a637f4f29e1efcf4fec09568a42ece4ee0508a0da8206989d12e522a65e76c4d64bbaec9f328b927391f2b15c7e8b3f138ef345afcac4d566448f327f84ed41f69b4d40c8309d9d5ed6846f788198e151a48f654d29b659f923858d443e118409541cea176cda5c518a938d10086148efdecda55cd4990922cffc06633c59db0c21d12e4b311e3858e82001c24c2225844019f9d633679ee75a70521da58cb8809c193c0f3389dcf540884ff0b44f224cbe03623ee16ad37e00abd1bdda5972379bfb097aa2ffe5e881ff988644b1364d8117feb6859fa4a942260aa6ac51387bc4c9173b8656813929744af772742e69d78f5b127b3ec8a64a3781a603a56e05eb948a003e54f3095e56899dc6413c4317e12141b3409ee8d33dc77ff33b10c5294c5e6b969848dee370c19e732f3e75a6bf21ad433c99d3978f8a8254fcc589eb067e3663e6179cd7904e080048565f0d8aae47d0dec7830d5eb48cd386ea8ff0cebf7bf86eda674cabd0d06f2068817d1d85f39bff655bda536ca5d9727545b8202a982818c388ab0219021fdf4dcdc5de8731edb03e9170a8867b614e5317f76f44c33563fabb73eb4cf8a766b6299e52d00646262e6e7704748a35322cdd7c52e6bae2654295f7804f68e807d5ce420213a278b751b360bffbc1bb9a027b98e65e9dab8fd143e02c2e6192eb8f411d80aad0fa5ff40ced48d26e076cda037ffed74f19b1a35839239b5d14e57fcba05aad705435f998d5a85c05d944bfc472ecda2974332b9b44c448365682d00e271f0fd2a436057adfb7b8eca4abdb8c1329121d6dae395dd1506a95c0de8191bd69cd1f68ec5af9a88fbb1a37c082b9df5cb390379f2db48c63e9f779b875ef9891a84181900bec4d6f512e4633f6b43b6abcb87e2e72f74d8cb0ea3019860339fdcff45dfe7e0817de819eef61d6e91b05a6b8ce8b0e1416e0210813429ff7a75cbd6e7a8f5c1e41012f8b092c6f0b45896a3de1a278b80104157dec7e210aab22aebb54ec881291fee48bc1c413f6a0704e45c1b00f39d4618147e4e11f429592bc92044a772bb33349d3ee4b6c2c5a5a8fdd5ad65434943c3987be2ab99807e23db8b9ec30a3030be076b7871c1bc7a9d4506f3a1e7b986d2ea1b60f9240db71a360c919dc6dc24f6af5878efd95d83f5a9529266f2fef29af2b60d214b21b6e3b8e5b3555849453f66e3b2fe46c2547690b745cf6b850312d825c73049a9a009d66d0d58801f254e2dc32897d9f3bf6fc3fd9ca6fef5d0f0dc55e85a99d735d1800f418010986d80f04e7f5a37109b73432db749b569966e781e646c0e373c94d7797960e1b73cb6cf58ffed290c567d7b5dc54f7a9c911d19fab72aded28cb7c063c46fd530b6ea9efef61c4da2bd5bad7d317743314ab01046b0f92d9d428a13bf5ff427fe25bdce29637f916b2da55f2f5ff05ea17002bf139a5740b7f2b60d6048844cc3909c76eb9ea0735ebed9c201efb8228245373c97d8c565e1ddb4c4d07c1ee7e3a942eea3cb88b2b263a0e4eef9b5cbc99f0b1fde017d01b15820f55f51d325c77c298b6973ad694b1f3bd5440fe8e8ea72fb10b53bbfb84c7d2b7be416df5cb60ad3607c71b387687752a119afb71cdc53b8a395e0398a5be4ac9a175df444ea715fbb2703911bcc6867a85ae2d76d25af06ed0e3688660dad6d69c1f356d43e655811e4169ff9f3f275a8417c44a9b7f5cc3e6ae05ed6a226da85946e84144191b4018d2a226e957e583fb34af3d4bdfbb59da087565fdd7faca17d652208c129549f16541f8addf7be170c6041459600364f025362ea0726f48cf82521d47eb478c341da8b0ba94e96942787d4046d04e86b3ecdbf4b3579aa8f00ca70e132609df358d9183f6cf6b200dfd16fac3e0bcdb13cc5bfb20bde3cc139967c70fefe3c39f484c442b75a5606a2b4952c799b04957e151d3dd76eeac764170a1929a88a668926fd6c22e9c2327f85fe88d388f4eed175a5c13e82bd6f42a7669341d2f3012c75c9871e419e0f3c7e50e347856415b8584eb2d2a0214d5bb03b10a26505ea9ffc7d5aca844e24af916eebe7513d8dd9145049aa0dd8e2a5a9fc53cef6239f56f2ba429601ead8223b5d89e5326e09f9d7c409a466fe5781435b9c324efc040cface76eb40b2da68b71a8baf2f916303726256c772cf27806d5208724cdf9f4eef7c7f3084a25242479fbe759bde637a7cb96d98510f0a68876d04cb47a3e7614b0b51f8812727b0881da22bf270d4a44206a581e71a7150c4096dc1fbd9e724ac572adfa13d6c2129e51df101bd5fd45bc57c356d67b65f270168bd0601e0241e887becb130fcb72c398c6e50d5123f5e8cef49d7ae92ae8e7de2221677a8aa6a285824ef679c68f87330224ce2c11299878adf4f46ed510fa4286f6110dd9965c189c21e85654d44992593ad75bb264fa4c9c7f600224b8eee14e6bac1aa0f9c9bc8c10caee2826cc6d8a787a9b98f908d062732ac0226268047fb44fd950d8ae380620c1f594a68a0813b492bfa3a8560dc1458ba84ddbf9b58f0f7317589a36c66493d1b1093c50719fe4e7b3a7f9dc61e961b0a36b0d65bd14029ad5b9dacdb4edbf090c2455c6c1af080e5447ec7aad8d1a532a48ce280decb70918738b3dcd49d3ffe16e1a2099f7e083aec3a97866e51d43e2581530e53d269c4ff2a6f576ecadc018f4e233b6e7da57130bdd369bdf5973031b7280d7bfcfc443dfb578de9d60be87e741e3aabedffd7b46e6a1c342661b0a122d579623e6e86e745e6ec3ee53545e9a1f63c1db363f68ee2a693a8f8bcd5f97c575db2ce1e03fee213bbd7a38a288fb83a07b1adeb99932fa55dda4b7e6be199f8f008abaa88c63f59179b47c541d8707709c7cd5f5aa5ed5c4dc63093596b09858952e64133cbe6b7d02b60528d6a263c9b72aa3e751a99e9fd1664121fc0ba9018d61011edd23d29d05c2080e33c721e503113be23973351a68fb5da582205a0e89e69fc84e24f3d4e8629847f9b6ba77e2ffe6ce394f99b1a94576c677e7433aa8bdc4d9779cbb706c6e2f426806d111173ffb0cd4f7be3ccffcfc9e66a16ab2806b6118ce28bc935624f1cbef0c9c4da396e6dc0e87ff20d0fd0e07d49327d8c0c97c7d70c50b584fbe563cde1cb17f36a73ebbe6b331b6321ac5ceba510a35ee913c5542a9d7b12805a29a99d25a5d3bc13a330435d6f0305bf522cc71e261c39d82584440d47fd82b9b31ad4ea0d2922558e6bab6fb6d3f6da9eb2a2e824af6928ee2ce41baee61fd4b5f896bf92bb1cf06c0c5a1b9b81a8216084c8e90451823d6be884a735a2be130304a22d8168c06db9cb6d62ba30079ecc831952f2564b760153311226d2188bc523928aa63223e785e6cf67a01962eed4195d5b06f06f272fe27d38660153c1727cfb438b5d98da5778070791c5ace1fd3ae756c8f261ad9d1c6aec5722a8e0609c3bb672c628879b65fbba3692070781c13bd34a93a5b9fff4f9ac4cd6aa3fdf076eeb4c0cfa14d2a41193e723d6d013995f34c97bd5d438eae8ca9a8a2dfdadec39c84c11cc9e9506020e072908178a6b60c53321c0b857d12b9adb58d90197c090e558d20a29bfd9f2ae297c23f47a544daa537f5780ec75b1824be5c92c20785499143252dd2f6d1f8aaf47deccbabf74ee0d55793b046aee7dc763353249f03cf2f0c60f6dd6ff082a051ffe2c8ef4ae9b1d8a046af67ffab68a4587ccd0a503906cca13aac0b7309d5fed12abd5303d2803f928651b51dd8747db79c56c3e3f89e6799a9dac3a7c57257c6575e133379b6c616dbab839b530e7ede62dc529acf5a6fa061fd1244fbc82d6e883388291ecaf1130151c8da538f8bccb9b871d2ce3417a9212ad94fe94c6e13e06975d8ba285d7e937ac4c6fd89aae06db06940670463d6b86a18856cc978a49f7e407f2e4f042d7ee1b7791cb33697824c68b2535af6c803e7940512da7db39c98ed1030e615569c200bc3ab833156187c25c1f659dcde3434f47a8cce56d821617c58907f80d5628214a0a8aad3fa2087647d52ac1c9692c6b57b85d70cd12875f110e631f3a9e34f21afc401797d9a13753deabb43fef92d691efb19a7120167f838d283fc5f2f1d7b4c2ef736fb1c8a47befcfd320f98461756d6908f00cea4a252733db78b6f67620e1a209e39f788a8360b8f42ccf1776259c6f70ef7ca2b0ee8caf4bf27017730236669eab62ada6db1d381ec2f8c60bebf555425bab9fa4d46823d3b0a1b1f51add64961aa2a073929116f02ea230bfb354019e47800415edeacf72a7daf8930c64adff306aba841fbe75bb18da73441721c86d3a70f9e6025e7fc95516703372fcae04421b08d0edbc5f1b6b6a3c66225011dc19f575111180e8d173922c2e28123347036b3ff2418dd529c49beb2e335801a3a5473c73d71d084c8271c10d86f283a659deaa57fff6673519645e0ee4c915cc3b8c440584fe222b1bc0cc0888142b9753ad409ed41ca16a92a3126ee73f7237523c6c781959fd255c5c0dff4ff324dc3e2246da77281809ead68df57e4ae6c1f8001e6d292e8e42f897b59770ec26b508ac5d57b47ee9696f9d40ceb39f9653a14737ede3f3213147381417d9633d30cc1107dde46e5ead6e4e4dec617202e10b9093e3bb2dfd785dd96a6a64f44bef7465552dc2e391c978c7ac1ce2b8f774d7b3934d15fc6d96eb3de6f0e9402a8538c6081712e5affa5b67b4153217b38f3248b2565c804226f4a31688d5fafacfe2e4fc191791c7164cfa33a474f4a9cd90fb5f37f5268e1801a2a762b00e8b7b2bda1db7a90ccc74ccc0fb015eb49a6ed0236d8b6b0e67bcaeeb750a499cfc3b2dc34e9024ea9bf00e5f0013a15509992979b50617dc14aeb0bac46c6961eca1e96ab2b45d342bc68e88b765a79d73f1eec58167e8ea4752981fd898f1ce528e9ba947723bd4d2ce228b6e5787227697d52f2bd0d4ecbebf5c6164f5819313060579ebb3ddb3c6423adb999975427c2d3da65b3cf52849c75464b46ede138be670742b175474222a47755f8006d4752b6c271643aa622f8439903abe53595792e7856a6e5a5e1b309fa139c2e64e927620c87aec8f36b9509c1d5cdee296bdde21d2cc54e7738070d93552d9ecd799325fe6fae9f3d7046ef1459d401922e3da284b7f6ef67ae196f274f6ce94887bb5ec25c0101618d6118b4cf47e0dfcb8dc89e8f44b47ba19c326db51a75a5b790620a2e460110dbc0f923a7d3825e4ac1d04597c0693fd05d93aabe907b47b1581f915de89c16580ae484f864e583b43ddc0991d716e401f60b6f62ebd52178a9e0adfbecc706dfffe8eee93f67ba2c9da4515bdfffd764741527ec04c3503da653271f2051ddad922ae38cae98c9a2eba5f8470d2551d2224add25a32b9c4d573f69ed15445d2b72ab20d1cd07c2d897dd7c97edab293db9f217a5eee5de9ad08da2f734e617b9f5268a3b91336237f5e9738a65f4adde4279eea09ce40e577b97eb5c67772e4ebee5a33afc7de28c70d97a514cdcd95908d26ad62800900a7cb9dcb88955b5401ccd4d965d00ebf0da48bf43cd2f5b61331894f523685b17beb253c3f50db89e11e664d6427a2551b5bfb2cbbfbf1e8240909d5eef23ccfa23d185391713d1205078be21e99063ff6316c06cd77969dda4d7f3350d4f2f29a23f12e14788fd60cbe4c3c00685a5e42b861597fd3b70c5e0e4d9f02355b754bf353fa2bd5dc0225080c26eb39be11a5b3cfe5264f39399167ab55ae7286f09c1d7fd0fc69bc9c7fca34867b5bf11c43612d3e010d2918a0d9b620549402f2c56e9cf3aa53b7614337f0867fe08170ffb272c5d340f237cdca3e023d2e65b250acf4f265ab8794a5388c5358d7e1cccbf82d99dd1aeba50f3363b9c3b6ac43542334bde8cf2ffd29da1d516bb5d950938f410829e2e37684916e1eac5c2ea1352e7cf6d0bc19bf16bf4ee61e44cd339fadcdf18126c46c0aba43c927510f3b876b32f606bfd2f657254e9715f8151099da8897c287ec1eb9077c72a0a31171f5e2672c16d3907caf659a73a15ec1bbdf240cf5796c22a99933999dd36ab3c354736b45b990e1631be048cad72829f782504ccff0cfc2e1eb5fb3e52e9fa4c3a39ec9ae7ef7b4b9e7e9a721a3f6addace5ca68d525ab9dc0d26b05333dd638bba4e40ec0a716b29172fc84a26c046dcdd0a744af3a7da0eb295a6b0d2a4e45bd6222464cae11bdb5a6c02f8ebb9c8846ca03175d4cab8b9c9531ae686029cc740c296feee12fda2cfb130808a3fd435c13bfca388ab530b8c4b546c4fc9af86596daec4569b5e82c8fd452731e27f9dffdc5713562b99fde6b59948a46f2a44ed0e539469040bb04a54fdf390f589c6491f1057b3d44573838dd2a1271ef8ccec3796012d2debeddb9dd0e252bf622f2671d6940f1c89b3ae38b4fcaa37103d96f4504c5654e603b80f710dc575bfdf2f4fa01741ab79057c15b627cd03e7dc24aab3ee312dd1d7e96731c28e24df9b051fa5972615858f07572d07f6a6f947fecf8acb05d220b68a4962b0bb9e2bb6341b97b0bfb18dc92764ceca8f723592c02104a020dfb9ff06bebc81ea80c68a1fa6175ab4042abd3305c1a17b72ba5491dc812def91672873fdd98632871ed0387e00a80c173b9e8c75e185149d32a9945e2f9707301c96337cd1c44cc13a9f38dc23720558c31c4cf6ff72559794c04af4deccbeddb04f267308e220963bf64d0aa830af54a91ae3ae0eb1aa3d48dde97ddd0916e3c16f4d90ef3e66f06f8c4c3d4fcfe41094708f49ac8d4e7150a74d9378a75018dba062fd1ec331776aafdb64e5e1732ab0f0ce0bd8985ec4b1374a6245b6d714a1c02ababcdc1fe22481a6ad3276662d4c9adf65e9d275afa6d57d6c3bcc6ab68234f4a1dade56c852c86c0bb4f427387bc9ea23e7361b7f518039af614141a12499b9602f95e2a969c7f31cf1056fe3b1954ecaa3db219f546a28e954964268be0296ea2765a8194d88b14869d388996d645f34511d63a602d92e795a0b29773052ce44b008556b6a0fb418a9233ed13edf3bda3db479211d00c16d40ee6321241d884fffeb3c1e2c01707c7aa387778779a241699ef4bd5d7cb8e40986539d0778cc242e98f17e630a09d62155b469ef5dba920d2ef80686c8f9eaf1965b42935d6dc470de7fbe0f5083a4b6ced2fa06b255fc35c3325bcc57ae3ef95ef58edb0b45bbff699de88afa565ab9f98b1c98255dfd6bd3eb18af00b94cbe5f94421b2828b0583c91e7cecd4754003ad8f46a206da99e75056705f9cccc481b591d4c33d96b21acbbdb4e70dfd9b6a2fccaa6a0af7f97fca9da759e62a6fb222341cbab0c808d320ff13a5989ce707aabd7f7c569b3e22e0c91613c483c136fb5b94ff7bdc1f51cbb9f5c46e4b62a19cca73057b78d1f3f8a9b0e2a20b8b8d9f2e8d0459df86c18353fbb3cb6e8b804e28dee571349e16b5df662cdedf1aa5a44eea00b778bc79c16138d85fab98c15ad9f2b83eebdb9432634280768397d2895c10012da8c6659e02295cfa52d6d06ef1e6ed0546d46c676048e5a455261659c83492d355eee56596e520962467fa8b3ae99cea9547d99a6d6b674682363c0dd5c8bd5c63d3bc2d45a94fb4e090ca27028b29a61c53d96ade29f1c60cffb5053b494dd2d7c7ccffc7006e16eb2bdcb360a1e0a3fa1f380616d0298e315808db7ae9ad16b6c4bb7dece5c2c4ba52d514f7fdc9b00e66302d1b6c6a7b5b58adb313e0cec67448238f66f69dd480d304a9831833a1b94f8109c0d2f85e646077bbaf140f9c7e72301d8e452f13711be18bdb48e2f0031c38da789a9e4161b7f0a6da09075414aaf9984ab7f141647c532e3b2530f3fd8a93b4218ecbbff44c4a58cdde1f9d89eb60ebe8033dc10116cbc09d4903bfd0830ef8b0d33572ce61bc028133be720544872e4a205fed6b005e8ed240ceb6e9efdd313b6eb0aed6bdcd335cb1765f2d7ed7f1819e0c04a8989183abcaa3677c35c33d95b139ed63f9f67e51386206ee2a3ad54bd4312b1178ece5a5a76eac9534faf2bb8c7b5105811a34a110553c63f1b9168ec5758e39d1f1baa4fd3e8dec73026c08ddf1568fa04b1a36a98055b6912f4faa0741e0bb5f063dfab6e6a8605b997affc69369980188967e4655c954d31b3ebea8dff5face904366191f0695fd3ccdc5e82c5982243e16a895f8aaf9d63d37ee1d323b296862ad265760a392378bc2ae5d7b75039b77aec33aa00c134f554ca9e5fd162296e915ccd359976e7ce4099bcaa5494c8eb6fa4da2a2e245920762f3639fa4fd4eb0e5e167a5f2111bfa669576ff3e0711a4ad78d2f8477363b03e6a13cd5b479817a62614ef613ac2b03a340114909c7b21ee93adf74c2ee2d4c666f1ab8bc43368e7643f3ea8da5a919b1e3078875228d2b519387ac49b7b9990d7dc229fb9ff0d551d3dfbeb843c8b2782f50cf8c575dec6836259a160a9a047165791d1e759c74ea65f4f9da990fc0e789bcd4ddf716442864788be6f2c5b607b6ddc7f9575b4e8375eea50e98cd9320fe736114e03aa0a2c1430d5cb507b29b388ace6ab58393513724607102a0458a458998e94d71b758df51ed4ecb6c6f2b94c31fb480745fbc6f6dc595c9558161fa14462779952982adb70d70a9f9a734fcbde17652e1a91422f93a6ff7d6c80fc92a5005bedf58aefe9bbba9d0ab3441e86b863bb5a3fdfd2a9c6f6d10717d2cd35d3c2a892f0e58545b1794d9aae993d72c215a6673bbe38976cc7d03cda84999c637aec8036ea1a23b143ed6288dcbc7d1ee487b1b6a4f6e8ef63b378acd4ff888bf95d86336907939c29695b2e0cc58efab49056f88a9027cad6d724e635f94f45f4cbddd8188608663ec7e46547e2aac7dec6cc5609e9f5f41ef26a1f16ecf6bfe200b0a955f98d9a4d41a2a268f8857670e33fbd4f076aa11c49cebd8306a4de3c86f7726fde93c7fc984079ae60e63854ee9a14162c749d7e308530c6b84cb5cafdd09ec3411cc0302c77d316beff973e3108ddb9b249e206d5476d605b7b24603ca344c2263bda8d7d3db55b9e2fcdce69be9b1ce24f8c4df129cd62a299fcbbff3309031973b5da452654c0b8ca4cf65891a8bdb8dedd20f631a34964e3bb0fa45c618861da79b259d79ecde8394061c99c661851c016c35ee8c91d52bbbc25f52b5e2f77ef2f63c764b717e8cce4d291742d5a7ef7f5d7ec1a96620eda1f962fb2448c388873f8b8abea4d27a5da092833c43c57c4b14099597f83785a31190798826f4264ba8f998cfbf7f20f9678e10e05c793f5781f8accca245d047d3be6c10541b2610c02c6e916d3db9776c6964e4519cf2e30708c954ef2492d3418c552dd9b5db4320dab8be6ac3394cb4b3fb1b9d5222c6ca9bd06aae2fef510e541db1209cde21fae56507020e80862d0b875d958346c42ebb781955ab337be61a68534281100247904b81b86aed49544c2452ecffaf6cc116f9d3c7362fc2cc390ab2ad29928b6e8bf90a4f21442fb213dbeeea4b8f481792fc6579b608e3a9c4fbe2755010d7ab3cd122de7a40a1f7780350a31d83ee5006ade36854cbc8e8c648259b29f2f7042719ab4d4d4d1f0c5fe6b717d23a5504335922f84ea8b20c78a5f1ddf6009089ea221353c01963fb8cabd3d795831c86d084660fa7f7d08f3ff15780c5b301ee27ab8d98fb358b90e92de4c96687c37e327ac1f0f23208c41a36e67cc22356df854f2dc309c110cfae51c5cc69051d22477caa1d2a2f276ccfbe907b263bd79ad4c5f6ea2687466f325ff2b1a736fff687c14d477c4c744e9c82be5b8ebfb69db2b312ff540ec8cadfcba9b609cae7e54ff347ed3d2649f9214600870ecba27f98943b4fb72f93b5ecb6d64dc1c7b2e8c2f2cf1006e39a237c5818014df9281feb6e522f6cb2d5ca35aeada09a58d5a6bdc9a75cf81a1c51faa8a3824a58d192a27be9fee5098b2e71d0d3f12917d50667415e418b790e0942260f4d2589c57aa1bd36017bd2bece963f0776f9f76cc66876c3f88f8bdbc35e329ecb56887948fd2c05d49c664509a682c6ff60350070bfd111be86ad2eee8c0d76b851fdb75f08e11fa47b5fd29b57568abbf91d3760652d475558bce2a1393688c9e2b4ae06cb072c294e1396b58db00b09ba8dbdc047a1684cca6e5b04cb52a40dd7b7f72c55292e7af0f3b8dda380d45b4e71c6cf57179247923750551ffd955f815cfbc29dfe5e0b2689eafdf44ce362b9c5864e4003326b2f183df7d39de7632bf3b2a85dca04cda08d10a5bad9ed9b481227e39804c3fd52d8a8f03288e13eb09c9075e23f82123a416e58864d95a321a719f88c8633201eb7d5c429348dfd83b476510f71808f95ab3b11d521004acc6d9168771736ec0a5f7c73ca78a46787c19299a79b453e49317353d6bee5b", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000)=0xfffffffa, 0x4) waitid(0x0, r2, 0x0, 0x2, 0x0) prlimit64(r2, 0x6, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 18.170790674s ago: executing program 33 (id=1288): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000800)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') setresuid(0xee01, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r3, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000)=0xfffffffa, 0x4) waitid(0x0, r2, 0x0, 0x2, 0x0) prlimit64(r2, 0x6, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 1.172588832s ago: executing program 4 (id=1443): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x2}, 0x15, [0x40000, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x44], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5], [0x0, 0x40000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10, 0x7, 0x0, 0x0, 0x2, 0x80000000], [0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xd5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa53, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa]}, 0x45c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000200240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a0001"], 0x48}}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000580)={r5}) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 1.127029273s ago: executing program 4 (id=1444): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@acquire={0x134, 0x17, 0x15, 0x70bd27, 0x25dfdbfb, {{@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, @in=@rand_addr=0x64010101, {@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 0x4e22, 0x52fc, 0x2, 0x0, 0x20, 0x2c}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x4e21, 0x4, 0x2, 0x80, 0xc0, 0x6}, {0x5, 0xe81, 0x1, 0x1, 0x5, 0x7, 0x7, 0x34a}, {0x7fffffffffffffff, 0xfffffffffffffff8, 0x8, 0x4}, 0x0, 0x6e6bb1, 0x2, 0x1, 0x0, 0x3}, 0xcf5, 0x3, 0x6, 0x70bd2d}, [@mark={0xc, 0x15, {0x35075c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000180)={0x60, 0x6, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4, &(0x7f0000000040)=[{0x1, 0x2, 0x100000000}, {0x6, 0x1, 0x5}, {0x7fffffffffffffff, 0x200, 0x7fffffff}], 0x3, 0xffffffffffffffb0, 0x4, 0x8, 0x20, 0x11}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r2, 0x4758f000) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x2d, 0x10100, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000200)={0x3, 0x5}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x1c, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "b08fa368fa71ecc0", "f5f13d58a6e2777206049bc5fdd9bfd5", "9d2e373d", "f1cfd61eb727eb07"}, 0x28) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.058943654s ago: executing program 4 (id=1448): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000006000000020000", 0x58}], 0x1) 972.391115ms ago: executing program 4 (id=1452): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0xe6, 0x4, 0x6, 0x4e, @empty, @loopback, 0x40, 0x80, 0x9, 0x3ff}}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @remote, r1}, 0xc) r2 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x40, 0x8058, 0x3, 0xfee, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x66, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@generic={0x88, 0x10, "e7292599d80e59915f3ff4e8f97e"}, @end, @end, @timestamp={0x44, 0x14, 0x15, 0x0, 0xc, [0x1, 0x8, 0x3, 0x8]}, @timestamp_addr={0x44, 0x2c, 0xa2, 0x1, 0xa, [{@loopback, 0x3c}, {@empty, 0x4}, {@local, 0x9}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xfffff900}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x148, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xff}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x45}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x844) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000480)={0x3, r2, 'id0\x00'}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000540)='pids.events\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb8, 0x4, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5a696198}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1302991b}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31c1c502}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ca709bb}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r9 = fsmount(r7, 0x74f62e7c01d93278, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000000700)) pwritev(r8, &(0x7f0000000c80)=[{&(0x7f0000000740)="b022830f64dca2e88c42e94b35b653e7ce9fa241cf86b4dff0bf8e84b020c22322cf12a2c1c9e5d280ed651e8fde838012e9f25cb2104940fad40caf96422cfd", 0x40}, {&(0x7f0000000780)="318512380e5938a6227b68bd3e3f4987506d4439747fad0ba30224bd44faee6f1253567217403deedf1c07a498b43c082b52788b07dad042b8f74b61ff1969eb7deeb9808dd1982e2b420e636cde5c699f917c515acec06ccb9b9e85acfff8f461f3f1bf6a7abb3c9b786666ff7e9401b7693fb541610dcbbee47e32b89c999c5462dba226107e6234a78ea7fe25616c8af9c24369a17c1ddc329f10940ed551b63b1666f3c268ca105e91e32f97cef7b96e92955095d012b47ef121f51332f4bd669c07ddf168c0948a44cbcc64eb842d2b3ccb23dfd666", 0xd8}, {&(0x7f0000000880)="a2bb0e9db9e8d0977b4aabd7b232a22f23c85a51c772a2597e7f6f00a84d421872c907a83644dbefdd1b8643c55d9df84c02e2f63a81b864d2633bba79ac2ffc5d1664a43f4be8d5bf9220530b65827ae259e4cb931c50f7863b1f27213e89b1378b9c6bee1c8b03093f81", 0x6b}, {&(0x7f0000000900)="eed8db41fd14b0367cac8a1a0378505951c1555b6f7b9288180ac9275334cf4e24c1fb765c23ab25ebc39a9deda66110ccd822c9e9f9692b3aeb7f14354db791a8c9f97d39cf634c669df1afb53331be98168ea9bd0c0bbfb6bab8f67cdbb87d6df6a48a9c72774b656c8198f1f0aea411339f33dc729bce84f293371736828b09386d11a90df7d244be902cb57356c1e76d336964572561c48a2ba56873f689b255fcc10acdb460a224d226eba94a02b56df7f41332f9df70decbf844d6396bd6bebb062bd2b20bf4", 0xc9}, {&(0x7f0000000a00)="aff3968e02e439fc2565059e5d5b4d5fa62505af6382e32cb506e60fd19db4af51aed8bc86449d0428f76e55e635c9", 0x2f}, {&(0x7f0000000a40)="45b11c0c3149748fc8a02cd54303148e1eb30c1bd67f96d6463548b5bbe453aa9bcbc10f0094a5f6cbffcd527e49d45ed8d272e206f564cb36fe7c5ddbdadadc857e177070d605f225bba3c6f35ae47805aedd0ac813e6254d5106e72ac348e45e74cdfb836c0627ac9d3c071587b7e8a6531bf3a3a38291d46b3d25d6fb542d8b260b78", 0x84}, {&(0x7f0000000b00)="dd29050e3934f545e3f4670a3bf009ab466159ade7e4a1ab17a8fd4f8e6b58cbd0e11f2308f3cd22854f2828c2ea0b965b83f0770818958eb6baa894999d8fc30aec6771052f61c9568ab75df7b4cf38208f18a8fbe4b598708821d2cdb19de7a99230da297e2c360c92ba1b053ef1c96fefb6a64de8608704e17aeca90cf856f06910af65b53907d1d287ca8fd638f2aad3a3900af0ca46d9ebbcab581db875d057fe9a1b19f79ecc57cac81f256439e442b4d58de49f9ce0c35a4c553bebc1f8e786f50398fa", 0xc7}, {&(0x7f0000000c00)="0f2f4ffc0d42f40eb1beac0575ca0141f487b84bc628965bc9fe", 0x1a}, {&(0x7f0000000c40)="3b983eaf362257f2e899b0c4a7062f68bb8636cb151769ffc72eb7bf2fd7c2c4a2b63d58fe2d421b17300863f18d", 0x2e}], 0x9, 0x39a5, 0x9) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000d40), 0x3c7100, 0x0) socket(0x28, 0x5, 0x3) r10 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG(r10, 0x50009402, 0x0) getsockopt$inet_buf(r9, 0x0, 0x23, &(0x7f0000000d80)=""/6, &(0x7f0000000dc0)=0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000e00)={0xc05e, {{0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x1ff}}}, 0x88) close(r7) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000011c0)={0x5, &(0x7f0000000ec0)=[{@none}, {@none}, {@fixed}, {}, {@fixed}]}) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001280)=[@text64={0x40, &(0x7f0000001200)="66b83a010f00d8b98f0400000f32c4a1fd283eb9410101c00f32b805000000b9060000000f01c1430f01c33e6565400f01d1660f3881603c643e664f0f3a167e006266460f3acff804", 0x49}], 0x1, 0x0, &(0x7f00000012c0)=[@efer={0x2, 0x401}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000001340)) openat$kvm(0xffffffffffffff9c, &(0x7f0000001380), 0x200000, 0x0) syz_usb_connect(0x5, 0xaeb, &(0x7f00000013c0)={{0x12, 0x1, 0x200, 0xdd, 0x65, 0xbe, 0x10, 0x7aa, 0x3c, 0xa650, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad9, 0x4, 0x5, 0x9, 0x80, 0x4, [{{0x9, 0x4, 0x66, 0x2, 0x6, 0x51, 0x7, 0xb8, 0x9, [], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x5c, 0x7, 0x12, [@generic={0x77, 0x23, "d69a613ae9c43a2fee89f3abe2b0544b40fe3372f8129352ce77c7f1998b1b70ae254577ccf6f3eea561a62d16aeb2f56c66c098b0132230a12c1fe49af0e12c676e0afbc5ebe48aeea5fde906cec7b2842236b606b298bb3764a4c57b463c1cedab592f5ab235243d330bf3bf3f35acf05e29b24f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xfff5}]}}, {{0x9, 0x5, 0x3, 0x8, 0x218, 0x7, 0x14, 0x4, [@generic={0x8b, 0xf, "23c4d9776d060a5e1f7ccc6fab748b5380a16d4c2bcc3f3bfe9340e58f55cffcff75c0038711471d667372322ee864a95831fe15709498eb2734c142b68d40f267774af6086650aebeb4de61f36eaf87d55c9319ebb214d50ef39641c6d66d91cb0d0024253079916b0854d0fc14fd5df3a530d238597980178ad45bdc4646fb6f352922abc64e3b57"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x7, 0x5, 0xb}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3}, @generic={0xc7, 0xc, "37c95f42e88c3529022fb66d6d99bfe0cb32d297cf37a5b00db83a5d2bdc872cf2d0dc08265bd423d0b6a2a231d6e1042a4f96ab7774d64e440cf66d1477ccfa8e5b36fb2299f3e7313a00343136a4a54bd463218f56a025ea31a142a190ff251ffec9385efc6f88b52c4f72bfd705adc4b6879ff54e4d7724681524a02aa3331ffa68d3e57a9e026085a622d999b610ddf65be0f3f624b765054f55b8bca24d6b9c0e522b1540ed31fbe7845328d1d2969698c9385be6d56c8a9e62ed237c1636ab7a7581"}]}}, {{0x9, 0x5, 0x7b2c6b60093b8969, 0xa, 0x20, 0x9, 0x3c, 0x6e, [@generic={0x70, 0x11, "521a681107c9b229591508de86596e729f4fe089e8070eb6a9a03a35b36511af3eb94c39e6bc200554f64470f84ede0b53935b66e794106000c55ffdc39c485b07c482f968f23fa894c48cf0e31fdf5075ac6918da4e8c5006e83dc475f83320680692ed0bf8cbddab0e08df5b8d"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xad, 0x1, 0x7}}]}}, {{0x9, 0x4, 0xce, 0x81, 0xd, 0xff, 0x45, 0x46, 0x9, [], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x2, 0x1, 0x6, [@generic={0xea, 0x22, "2a2ab081c9e70fb8146b8860d68900408352ef3cbd395d17cc846f85e6334fd114214b99857803d5a2ae08257859048008c65b6f8d441fe1a8dcd5dbbb173804f823c159701d0305d49929879113e9dd1caafde1b64c5f9769c84404e049455f7f48e009d9d11a1a6f377e2dca8d004f0fc5befb2d7a5e421a4b484a0aad2e662fdcab07097031f2ac4a7211f14198f9f55d58349b986f1bb48452664b6e7493c6c3f499ab3aac6d3fe53eb19c065d84684a6b35485b79918bbe7741da772bc42f05c4e6b4bc5477084d22f8e419ac30ba45042cad97b07c0375886743cf65203a1d0ac7749cdaac"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7b, 0xfff8}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x3a, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x62e2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xca, 0x200}]}}, {{0x9, 0x5, 0x80, 0x8, 0x430, 0x0, 0x4, 0x5, [@generic={0x100, 0x22, "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"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x10, 0x5d, 0x8, [@generic={0x6c, 0xc, "6d6fa3b0894366f58945076875279c767850cb49f17cb69bfcb461bacd6d7a32045d2f131e7d4f9cceb899960dea00655128d2801dc31e7a4796cb2ecc0d94688f8513c4c96b9bff3c79ffeadf9f61537a576590b3639604bb8bdd632e4ee8bff675798a80325d4d3169"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xbe, 0x4}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x6, 0x8, 0x3, [@generic={0xa4, 0x23, "ce3db22392b3146a1e11ed42f933efac4ab587f6295a95a6893fb6f685c2ba2ae5ede208738ea5dbd82ef3c94aba7377d8252b1e5db3862059d2395a4b386a48c69def7bc86e2ac90e0b80b59a66ea07acedf49f3c9898f7f1dd41e54c9d1c32c3646515ed66625d96407c4ab4aa6c6b8d63a6d25d15b256f86dca37d7215fed36289582e8bb3c43e2d17295f01f0f3560aa4cc34580c4c4e8961c382d242b77dcdc"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x108, 0x9, 0x1, 0x9}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x2, 0x9, 0xbd, [@generic={0x2a, 0x2, "cd10f547e2b9a3be9a0b3c27d49a2b0a4566052a91488815d24849fbf140b2b16c24e6455137d55e"}, @generic={0x70, 0x23, "97544a24f1906338614af8ca301b35f939303163cff77bff0c244bf0dd302eb2b8647e40b71ac9835515827442b4290738e089f5b0fba6cccda829d3df13702744b7b8ef4bfd5542c5ef5ab3e670c5f1f6db74c197a41bf764cb8ea8be15111be35db9bef53c72b61eb753f071b6"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0xb, 0x5, 0xf}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x9, 0x7f, 0xc}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xf1, 0xf8, 0xfa}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0xee, 0x3b, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1ff}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x0, 0x33, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x4}, @generic={0x101, 0x31, "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"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x9, 0x3, 0x3}}]}}, {{0x9, 0x4, 0x69, 0xd, 0x5, 0x56, 0xff, 0x1c, 0x45, [], [{{0x9, 0x5, 0x7, 0x10, 0x10, 0x81, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xf6d2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8001}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x2, 0x7f, 0x2, [@generic={0xad, 0x24, "7abf8cace365e29c32207132be39ab282e4e20df1c3beab267471a0041eaf6f801c30af3fc78810f51bff28b6063746e98ab10b3447557c4a8cde14a860bc3cb1ac2737b7a331ebda4fa0b7583a18b69683a75fc3baea204beb883e910a903bb29c880450c748a1d30b04a21caa1e503bbf90db83bb2e318b4e5149e63c64d8c586754e0967e38c4387dfaba7035d350d61e090f4ad03ee9642c7cf267e244ba5039ef0c356aa84926a6a9"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x2, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x8, 0x7, [@generic={0xf9, 0x7, "70c05717917a9a2fd136fed3dcad942e8fd247a7fc5fc355e88f6c00fe9f5c115dc1cef17f81150299722d77ba205f9288028047404db8e39d7b20c841c69c66d41243074c3bb3c0ca896122bd242f3a95de9b8615a474d329df549db4865251031496d2833bc5b00fda93111436be3bc22a46305f9fc3e9f057e53772456ab02750259f77ed3c22ffd49faba8c70d2242829d6fbcc25449b521ee2f08f93d6a0760d15e16649986fd8839b51248e92620dc43297ad6708e58397a1fcf7d8480917fc5b2cda4a25d4b724942f1bf89299d142021f426260d2d8eaf4a2becece973972ac7653132ce4a22aba71881af0bf564f669fe87e8"}]}}, {{0x9, 0x5, 0x14, 0xc, 0x10, 0xf5, 0x9, 0x1}}]}}, {{0x9, 0x4, 0x3, 0x4, 0x2, 0xac, 0xcb, 0x5, 0x7, [], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x9, 0x7, [@generic={0x38, 0x24, "01edefcbb4f5f25f4236ed1b08e589a30db31c30fe9fd198fe97b4c6931b6bb50028f5eafd13c8da48db006d7ef125191cd702d9fe36"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x8, 0x4, 0x9, [@generic={0xb4, 0x30, "df85f9ff43b9d0eefcf96314180c11f97d4d6b12269d7c60d4428d75bdd9a7b39aa90c52f3ea54a2cd5b9e9a8e0f820c8e068ac865b0243679d9628d20568c9c704db4d6a8debe0cb370b650fa3c7d4a8375836a2e7280992126dc3da6ea7645bdb54a27a82d3607575927aecb269769f8904c2409977ecaccbd2264488a85a0848f61ef7ac677f32d3a6aa389e9eb629a38b9ef71dcf73b75a43f5516eaeb076f374579eaaf624d85b171f34e6254eec06d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6}]}}]}}]}}]}}, &(0x7f00000022c0)={0xa, &(0x7f0000001ec0)={0xa, 0x6, 0x201, 0x0, 0x9, 0x2, 0xff, 0x7}, 0x24, &(0x7f0000001f00)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x2, 0x0, 0x4, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "3a9b976cd4a61d786b9c8a01f1896630"}]}, 0xa, [{0x99, &(0x7f0000001f40)=@string={0x99, 0x3, "06fdbe2e8edb29730d783158bc5cfffcdc18e0e6256fa206b0d7fc76bbd187af10a117d080fdbc1f40bb69c041031f6620c1e7d415eec54678aaba87e8d8ed6098cb39c644039566fb5707f36ad143863cb1abadb11d113aa6b264dda1d1946bef1a1e30e55b6497895ea6476a0835be1571d4b682908beefbe2a471a2120689a54396c5d2c53c9d2c9a2aa270cac3dee0b8aab14e71ee"}}, {0x65, &(0x7f0000002000)=@string={0x65, 0x3, "d67a64279cf09c2dcf1b19559c91526a3d8f09726be3e00cb29b59804625e255bca18be32a09f908640991e2c5fc1d411879d88ee7ce891de2a10edfb22ef0b5e5b7e61e4874021eae24d0039d20350d3e13d5d430774843287e4d183f12d7139acd13"}}, {0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0x3c3d}}, {0x5e, &(0x7f0000002100)=@string={0x5e, 0x3, "98d9c8b9fa68428024a9e024f765e025b25cd69fd3f5dad0e994c00a1e653c92245a9ba08fac4db7c0f80ed35b91e167e2b09b1a7815258367fde3a55940500c68468a31d1e156f7f19912d921f96188c5eff8b265d593f2ccd0e939"}}, {0x23, &(0x7f0000002180)=@string={0x23, 0x3, "d717237fcd24a8af20345b2f8901aa38b8250239fe9951de2c200e3c2612f6cfd4"}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x421}}]}) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000002380)={{0x2, 0x8}, 0x100, './file0\x00'}) 682.35826ms ago: executing program 1 (id=1461): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee00fffffffe000000020000", 0x58}], 0x1) 673.13956ms ago: executing program 1 (id=1462): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xa1, 0x2) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x200001200000b0ed) (fail_nth: 2) 665.55326ms ago: executing program 1 (id=1463): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x402001, 0x112) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000140)={0xed, 0x0, 0x7}) 613.581851ms ago: executing program 1 (id=1464): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) unshare(0x62040200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udp6\x00') (async) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000155000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="66b89e008ee8c4e28d9d65020f06b8010000000f01d9dfb0bce500000f01cb64d179a6670f21350f217eb9bc0a00000f32", 0x31}], 0x1, 0x8, &(0x7f0000000200)=[@dstype0={0x6, 0xa}, @efer={0x2, 0x8c00}], 0x2) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r5, 0x0) write$selinux_load(r2, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2f506d04eb3c4c94cca1ae1060238c6ebf2a309079606000000000000167eaa250489cd9e7c133beb717a0e137489ab04"}, 0x5c) close_range(r0, 0xffffffffffffffff, 0x0) (async) fsopen(0x0, 0x0) 612.317211ms ago: executing program 1 (id=1465): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@acquire={0x134, 0x17, 0x15, 0x70bd27, 0x25dfdbfb, {{@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, @in=@rand_addr=0x64010101, {@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 0x4e22, 0x52fc, 0x2, 0x0, 0x20, 0x2c}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x4e21, 0x4, 0x2, 0x80, 0xc0, 0x6}, {0x5, 0xe81, 0x1, 0x1, 0x5, 0x7, 0x7, 0x34a}, {0x7fffffffffffffff, 0xfffffffffffffff8, 0x8, 0x4}, 0x0, 0x6e6bb1, 0x2, 0x1, 0x0, 0x3}, 0xcf5, 0x3, 0x6, 0x70bd2d}, [@mark={0xc, 0x15, {0x35075c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000180)={0x60, 0x6, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4, &(0x7f0000000040)=[{0x1, 0x2, 0x100000000}, {0x6, 0x1, 0x5}, {0x7fffffffffffffff, 0x200, 0x7fffffff}], 0x3, 0xffffffffffffffb0, 0x4, 0x8, 0x20, 0x11}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r2, 0x4758f000) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x2d, 0x10100, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000200)={0x3, 0x5}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x1c, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "b08fa368fa71ecc0", "f5f13d58a6e2777206049bc5fdd9bfd5", "9d2e373d", "f1cfd61eb727eb07"}, 0x28) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 537.780082ms ago: executing program 1 (id=1466): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x45809000) madvise(&(0x7f0000a48000/0x4000)=nil, 0x4000, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000240)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x5) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='\x00', &(0x7f0000000200)='/dev/cpu/#/msr\x00', 0x0) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000740)={@multicast2, @private=0xa010101}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000000400000000000000c3e4feff060000000100000045000080250000a8fd000400526496ebcc0400ad000d000000000000068f4a49c2", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$uac1(0x2, 0xaf, 0x0, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000040)="818a53f43c92eda18e572272729e32e9640bcd0753a56ed0c3480fa2408871a23575c07e882a9694eaf14f64776a7bcc6e4b370e3e", 0x35}, {&(0x7f00000004c0)="e3705cf033450fc4641450ce2a177daed9097d42451f940214afe023389be427c5c10d96ad2bca7e11ad026ce49c5737dff4ffd50da4929ac0420b4b15cc3a7114e8311c5d149f8de6cf6fe08c9738d3e64a3e335b091a506053317eb47aec739ebebd020315058883865be6efc8dffc506e6c5fc30453033e109629cb2a2b76447a3afe44f071f0a8ca6c8f78ede1dd30c0189ed9468e", 0x97}], 0x2, 0x2, 0x0, 0xa) close_range(r6, 0xffffffffffffffff, 0x0) unshare(0x22020600) socket$inet6(0xa, 0x3, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 459.131133ms ago: executing program 3 (id=1470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x1b, 0x0, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 434.554464ms ago: executing program 3 (id=1472): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f000011c000/0x2000)=nil, 0x2000, 0x3000001, 0x50, r0, 0x83639000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xff) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000093, 0x0, 0x3}, {0xd49, 0x0, 0x3}]}) getdents64(r1, 0x0, 0x0) 430.309174ms ago: executing program 4 (id=1473): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x2c, 0x1, @thr={&(0x7f0000000080)="f17f1332abd1fa30386752a39908aeb9f1d31846d72f81333b0bf5a5db75347c24d4d399707a6268", &(0x7f00000000c0)="c660af4900299690d2406ae52acb2b233c3eb62f3e94bf5469fa296c54ab0a0daabb1e9eafe79859d238842dccc5bae1616f5e2b48ab09a3ec36e6053e9310f719ad7c9c9c56ca9f7a2c91d43fae36b53c2214246afcadae3e9136443fe66dfc0d0130889ed479c0043861dc340fa4e9c441f8d4579f97c7c4b326013097a1d4af9f0f498c8d89506973f760d744b93a51714615df65752a0bae2f9d79e8d163c2be30a14ad1eb3eb8d110c6df1096b2f4f702b3d0b6a5293d4bf63b5c4f6981f7659d3601e84dcdde4b235721625a6ba747657620555fc15465bc84c4908570c8c194525900e06e2f"}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f00000002c0)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) 429.553094ms ago: executing program 3 (id=1475): r0 = socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f806000100"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) sendmmsg$sock(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}], 0x1, 0x20000844) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x98, 0x0, &(0x7f0000000180)="b9c40d4c734a25432ab48bdbab5661fcb6b66847feb578434e1057b2c85079323bb87f70bd3246c369fc80ac5fccfabcb5790147da6802efb25824f67b0aa7da43eaca8bd26e154d032e890b6f6646f9fb5d853bb5d0bdb922abccb54cb0cc5310f74a1dd101ca3963ed51b8b015790f378cf7a7d34600fd7c2ff1fa04b431298112bbaf0ca9a41a4de5ea0a28ae3a77b7306041bbe6222a"}) 428.308364ms ago: executing program 4 (id=1476): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) epoll_pwait2(r1, &(0x7f0000000280)=[{}, {}, {}, {}], 0x4, &(0x7f0000001500), &(0x7f0000001540)={[0x8]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000001c0)='hsr0\x00') ptrace$peek(0x2, r2, &(0x7f0000000180)) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x21, 0x0, &(0x7f0000001700)=[@clear_death, @enter_looper, @dead_binder_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)={@ptr={0x70742a85, 0x1, &(0x7f0000001580)=""/79, 0x0, 0x0, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000001600)=""/87, 0x0, 0x2, 0x21}}, &(0x7f0000000200)}}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) write$UHID_INPUT(r1, &(0x7f0000000480)={0x8, {"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", 0x1000}}, 0x1006) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1) ioctl$int_out(r4, 0x2, &(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x100001, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x100}, @ptr={0x70742a85, 0x0, 0x0, 0xfffffffffffffe6a, 0x1, 0x40}, @flat=@weak_binder={0x77622a85, 0x1300, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x1000}], 0xfeed, 0x0, 0x0}) 337.417225ms ago: executing program 3 (id=1477): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) capset(&(0x7f00000001c0)={0x20080522, r1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = socket(0x1, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x13, 0x0, &(0x7f0000002400)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x80, 0x10, @mcast2, @empty, 0x1, 0x0, 0x0, 0x5d}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', r5, 0x0, 0xff, 0xdd, 0xf, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x10, 0xfffffffe, 0xfffffffd}}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4188aec6, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x4ae2000) (async) r9 = userfaultfd(0x80801) write$binfmt_elf64(r9, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x326) (async) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00003fe000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r11, &(0x7f0000000100)={0x1f, @any, 0x5}, 0xa) (async) r12 = openat$cgroup_freezer_state(r10, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r12, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) (async) r13 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r13, 0x80111500, &(0x7f0000000180)) 335.316195ms ago: executing program 3 (id=1478): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xac506000) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r1, &(0x7f00000031c0)={0x2020}, 0x2020) timer_create(0x4, &(0x7f0000000040)={0x0, 0x37, 0x2, @thr={&(0x7f0000000200)="7b8f23219817b6c0b7555eb7f300253af58a3a86fc7853aace3c4a8eb9825af741ac3b8de6a8c275cf41e8f7049645985a32a22431290bb72065f03630ee233f1bced4e8de146168911209649e911ffa1b09690891f6c078c340c63e01c78f5891e43685b13a6fbdb13d538dd2", &(0x7f0000000180)="ffc532d5f38a5754422926126ef73c991b0e464508b119b818469e46e236bfe72123160c2506b8d1fca1e0e2a6308b2412bbb08408a2db026da0a9fc9d1be2bb5f980145f10ede897db7f54b385566168b080dbb14da31"}}, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1983, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d06, &(0x7f0000000000)={0x0, 0x4}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000100)='ro\x00', 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000000)=0x100, 0x4) 335.075725ms ago: executing program 3 (id=1479): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x30, 0x9, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x7, 0x1, 0x2, 0xa0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x5, 0x7f}}}}}]}}]}}, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x6}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 200.787757ms ago: executing program 5 (id=1484): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x10}, {0x6, 0xfff1}, {0xfff1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={0x0, @private, @private}, &(0x7f0000000300)=0xc) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r9, &(0x7f0000000000)={0x11, 0x1c, r10, 0x1, 0x1, 0x6, @random="2c3691212329"}, 0x14) (async) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="000428bd7000ffdbdf2504000000400001801400020074756e6c300000000000000000000000140002006d6163736563300000000000000000001400020076657468315f746f5f6272696467650018000180140002006272696467655f736c6176655f3000000c00018008000300010000004000018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030003000000080003000000000008000300000000001400020070696d367265670000000000000000004c0001800800030001000000140002006c6f000000000000000000000000000008000300010000001400020076657468305f6d616376746170000000080003000100000008000300000000007c00018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x20000001}, 0x2) (async) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r13, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r13, &(0x7f0000000040)={0x50, 0x0, r14, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, r14}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616e616d65ae51653d7766646e6f2c0000005e7b0600000000"]) r15 = open(&(0x7f0000000080)='./file1\x00', 0x11f942, 0x1) sendfile(r15, r0, 0x0, 0x3) (async, rerun: 32) getpeername$packet(r9, &(0x7f0000000340), &(0x7f0000000380)=0x14) (rerun: 32) 200.619967ms ago: executing program 5 (id=1485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000040)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x9c, 0xd, 0x0, 0xfffff024}, {0x6, 0x0, 0xfc, 0x3}]}, 0x10) sendmmsg(r10, 0x0, 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) 153.652488ms ago: executing program 5 (id=1486): creat(&(0x7f0000000140)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x803}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,debug=0x0000000000000006,aname=,nodevmap']) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) (async) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r3, 0x5509, &(0x7f00000000c0)=0x7) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r4, 0xc0085504, &(0x7f00000002c0)=0x1000000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 144.406108ms ago: executing program 5 (id=1487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x0, 0xe, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="43297e8848278db59e9244350431", 0xe}], 0x1}}], 0x1, 0x200400c1) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff7) close_range(r0, 0xffffffffffffffff, 0x0) 1.31589ms ago: executing program 5 (id=1488): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'virt_wifi0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)="4a107d48d42281220d56db74fa0ee4b224c7583c822aded79c55a15f2d7854255b99ace21c4cb3b603db7e5fdd7d82f3a84eac49a0fc6f938d86b95ac80ba6ea5dcdf326fdcf807fe829ba1b04af5d27964d94987d71b641c04fb836bfef269cb2ef3db80ef3d432506e0aefade7445e870f0bd197a69b5e346cd804d4f93a75d5177008c4ff15a039a92410b1eaad54e4983e355991df22802766287593ae13a3bfe0748b0f8ba7fa6770d41f7a8f382366d1443eac44ee5006740b9e6de64c90195c6d", 0xc4}, {&(0x7f0000000440)="6cfda0cad79c5fbd863ce2139e322c824d37a98e7c39241ecbac9fe40ce5616eb096f91983a0b1f86b6bd2c78e236968a793066d7389b09865036bbbde6409b9ce8f", 0x42}, {&(0x7f00000004c0)="c278bce77e4b8d954775aea567e1f1ff04d5ac9a6396b6c63486205eefde681bc4232a1fe336c31082cdef0fb390e15a793f9b96b4abbe3372327afe844c660a6c845936b278baf05e6aa26d5d3189ab2b438ac32be85c337832bbe2608ae4dcbdf95e17df898049390cda63b1200028a3f7b5ad354f0fa8a5f137dbe81db362b2d54c0e28a8276c8a73d775ae50018224e51b46dd9d", 0x96}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="0345e8bfc80a7caa787eec8b6749bf452fb8f4a2a1ff05e4a652317f0ce6ce95db52d8421d52e416b540e206bd27ac7ba781d507ad6a8380112415adf0d31f9fcb03d11410bf170ef79421a0221cd2b2896b45e9a8fe228b194929bddccb9eacd07f56c2893372852d42ec0de675fe6c4428ba7833f2807c3de768a7", 0x7c}, {&(0x7f0000001600)="dfaa62ea8370b5c9bce4d3350304fb42e244977b0d1fb295b172985825", 0x1d}, {&(0x7f0000001640)="74b4b3b90239707c75fb1f", 0xb}], 0x7, &(0x7f0000001740)=[@ip_retopts={{0xe0, 0x0, 0x7, {[@rr={0x7, 0x13, 0x7b, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0xc8, 0x3, 0x5, [{@empty, 0x6}, {@rand_addr=0x64010101}, {@multicast2, 0x1}, {@private=0xa010102, 0x106}, {@local, 0x5}, {@multicast1}]}, @lsrr={0x83, 0x23, 0xd1, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, @private=0xa010101, @broadcast, @empty, @private=0xa010100, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x9f, 0x3, 0x5, [{@multicast1, 0x4}, {@loopback, 0x2}, {@multicast2, 0x7}, {@local, 0x7}, {@multicast1, 0x2}]}, @timestamp={0x44, 0x1c, 0x4c, 0x0, 0x7, [0xc0000000, 0x1ff, 0x9, 0x674f, 0x2, 0x1]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x2e, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast2}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0xc, [{@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x3}, {@private=0xa010102, 0x9}, {@loopback, 0x9}]}, @timestamp={0x44, 0x8, 0x79, 0x0, 0x6, [0xd]}, @ssrr={0x89, 0x17, 0x51, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @multicast1, @multicast2]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @rr={0x7, 0x3, 0x51}, @noop, @timestamp_addr={0x44, 0x44, 0xcc, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x70e}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0x8}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc6a1}, {@local, 0x8001}, {@remote, 0x2}]}, @noop, @ssrr={0x89, 0xf, 0x96, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x1e8}, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x1, 0x0, 0x4) close(r2) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001100090468fe0700000000000700ff3f0800000045000e001a003d7a12ec87eaceac996c9902dda1c6d5c03cbef94b9b0cf1af9fa8", 0x39}], 0x1) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000040)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x3}}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7f, r6, &(0x7f0000000180)="fc376dd3edde4860f00f3fda6503520f9ee0b54a2c1eca942487396ef143d6900c80fee68f7fcf921eb449cd68d7c8009dd359913f8ae84789ae0052d3b3d20ffc82aed85f0e17575e1334319988b82297c885095c3b96b04c9016fc1449906f720bd2af7e76e5ab157374649575a9459e08e505dcb4104c532a22ad125d0a15d96e0234afccb6ad2722138cd4ba06f095d9e46e951e2470171f8044451c36d8156611dd13872be40d008633182ad5fdd01726bbaa59e5503f2ab1ddd602bc2e399299c38e85a876d45ad80a494086c51d428045ac8609bc54257d8e08e1bdd4200a61b9ce2fd1905f1bb6b3", 0xec, 0x0, 0x0, 0x0, r0}, &(0x7f0000000300)) 0s ago: executing program 5 (id=1489): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) (async) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0xffffff4a}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000000)="55d0a001cb4e1e8d09701f75c9dc0cc2306af77d76923500"/38, 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x3, 0x4048841) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c008d862e43e99e663b4b660b62bd86533c23dfe0f2197530693b5ef24e4a90215851ae66beae0a2ad8b26884c333fef043f73a9bea3f48f003309cb1ab5f8d683ade94efc181cd2a1ea639c7c4fd4308545bdbce2915fce7b09df08c8069a7dae40ca328d4fa24c031e163b6e5a92a67599f05b564fb880cffd3f0a5accb6d227906be8e488f8eb25bb484e05e124d1f8fb2e013ba4747d5b13c0e335ef663ecafd977725a0c82b7c33d908c"]) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101002, 0x0) kernel console output (not intermixed with test programs): hidraw0: HID v0.05 Device [syz0] on syz1 [ 45.155949][ T9] hid (null): unknown global tag 0xc [ 45.161381][ T9] hid (null): unknown global tag 0xe [ 45.167061][ T1343] fido_id[1343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.167645][ T9] hid-generic 0008:7FFFFFFF:0006.0005: unknown global tag 0xc [ 45.191787][ T9] hid-generic 0008:7FFFFFFF:0006.0005: item 0 2 1 12 parsing failed [ 45.201351][ T9] hid-generic 0008:7FFFFFFF:0006.0005: probe with driver hid-generic failed with error -22 [ 45.277499][ T1350] rust_binder: Error while translating object. [ 45.277520][ T1350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 45.283919][ T1350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:241 [ 45.533724][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 45.693824][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 45.702233][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.40 [ 45.711533][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.720182][ T9] usb 1-1: Product: 忂䛀퀴䤈ޤ穛䚇꾂뀧⽏♰䲋茱ǧ⺵臧廬핮䳝驙Ȩ洭朹燦⸇୒慦坒ꜜຘᓇ쪈規穼꼍벍骨䍛၌厌鵶Ƀ⅓㕼튬肥咞挡၃኷骼ꇁ뮙㹠맘찃ס꠯䱽뙣ᯚ⽱空蓪︾칐성쿿﹌竚⸡䞚极٣檫箆璨쓬斸蓫 [ 45.748611][ T9] usb 1-1: Manufacturer: ఁ [ 45.753565][ T9] usb 1-1: SerialNumber: 쮯鬹셫촛ﯸ洑뷽ᱸ뀁鬓컔不뤒槾ꭸಖꪖ욑攋㔽⋤臙⽍눂構嫩ᑟᄬᑆ蜔礀ꀁ汻誩ٯ맍浛꘶薕檬堐幂먏꓈ꑚ㼎槮賒ᓠȺ㺃ḁ歳沛眴៽︳陳ﲪ剟薆ﳹ쓪औ錐ݧ췹헦ኹ숿墆촛媚즬壺鄋駤鞤ㅹ⁠篠擔뱻륻㎳䓈ࢗ眫瞢价췺ｌꐡ볳鍵滛룅뎊`䩽懔텗⛑ᐖ唟狿ꏫ剖繅 [ 45.835499][ T1355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 45.844502][ T1355] tipc: Enabling of bearer rejected, media not registered [ 45.852494][ T1356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 45.862224][ T1356] tipc: Enabling of bearer rejected, media not registered [ 45.944707][ T1367] overlayfs: failed to clone upperpath [ 46.194661][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 46.200779][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 46.211915][ T9] usb 1-1: USB disconnect, device number 17 [ 46.705702][ T1403] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.705725][ T1403] rust_binder: Read failure Err(EFAULT) in pid:243 [ 47.017552][ T1405] rust_binder: Write failure EINVAL in pid:274 [ 47.142235][ T1412] overlayfs: failed to clone lowerpath [ 47.162930][ T1414] /dev/rnullb0: Can't lookup blockdev [ 47.168609][ T1415] /dev/rnullb0: Can't lookup blockdev [ 47.187483][ T629] usb 4-1: USB disconnect, device number 12 [ 47.225244][ T1423] rust_binder: validate_parent_fixup: fixup_min_offset=70, parent_offset=63 [ 47.225263][ T1423] rust_binder: Error while translating object. [ 47.234123][ T1423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.240320][ T1423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 47.253665][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 47.272857][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 47.272873][ T36] audit: type=1400 audit(1751661511.479:428): avc: denied { create } for pid=1424 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 47.273239][ T1425] netlink: 32 bytes leftover after parsing attributes in process `syz.3.391'. [ 47.371862][ T36] audit: type=1400 audit(1751661511.569:429): avc: denied { mount } for pid=1426 comm="syz.3.392" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 47.414701][ T9] usb 3-1: config 1 has an invalid interface number: 119 but max is 1 [ 47.423392][ T9] usb 3-1: config 1 has an invalid interface number: 33 but max is 1 [ 47.431659][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 47.440576][ T9] usb 3-1: config 1 has no interface number 0 [ 47.446696][ T9] usb 3-1: config 1 has no interface number 1 [ 47.453030][ T9] usb 3-1: config 1 interface 119 altsetting 104 has an invalid descriptor for endpoint zero, skipping [ 47.464526][ T9] usb 3-1: config 1 interface 119 altsetting 104 has a duplicate endpoint with address 0x1, skipping [ 47.475509][ T9] usb 3-1: config 1 interface 33 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 47.486482][ T9] usb 3-1: config 1 interface 33 altsetting 255 endpoint 0xC has an invalid bInterval 129, changing to 11 [ 47.497891][ T9] usb 3-1: config 1 interface 33 altsetting 255 endpoint 0x6 has invalid maxpacket 1463, setting to 64 [ 47.508956][ T9] usb 3-1: config 1 interface 33 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 47.522240][ T9] usb 3-1: config 1 interface 33 altsetting 255 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 47.534845][ T9] usb 3-1: config 1 interface 33 altsetting 255 has a duplicate endpoint with address 0x89, skipping [ 47.547182][ T9] usb 3-1: config 1 interface 33 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 47.558672][ T9] usb 3-1: config 1 interface 33 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 47.570246][ T9] usb 3-1: config 1 interface 33 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 47.581323][ T9] usb 3-1: config 1 interface 33 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 47.593314][ T9] usb 3-1: config 1 interface 33 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 47.604864][ T9] usb 3-1: config 1 interface 33 altsetting 255 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 47.616434][ T9] usb 3-1: config 1 interface 33 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 47.627463][ T9] usb 3-1: config 1 interface 33 altsetting 255 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 47.641508][ T9] usb 3-1: config 1 interface 119 has no altsetting 0 [ 47.648668][ T9] usb 3-1: config 1 interface 33 has no altsetting 0 [ 47.656821][ T9] usb 3-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=ff.5a [ 47.666226][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.674421][ T9] usb 3-1: Product: ࠓ [ 47.679542][ T9] usb 3-1: Manufacturer: 㐊 [ 47.684197][ T9] usb 3-1: SerialNumber: syz [ 47.823695][ T359] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 47.894120][ T9] hub 3-1:1.119: Invalid hub with more than one config or interface [ 47.902306][ T9] hub 3-1:1.119: probe with driver hub failed with error -22 [ 47.915740][ T9] usb 3-1: USB disconnect, device number 14 [ 47.975486][ T359] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 47.985266][ T359] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 47.995123][ T359] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.009746][ T359] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 48.019249][ T359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 48.027851][ T359] usb 1-1: Product: syz [ 48.032006][ T359] usb 1-1: Manufacturer: syz [ 48.036625][ T359] usb 1-1: SerialNumber: syz [ 48.249001][ T359] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 48.285047][ T1453] rust_binder: Write failure EINVAL in pid:148 [ 48.292462][ T36] audit: type=1400 audit(1751661512.489:430): avc: denied { mount } for pid=1454 comm="syz.1.404" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.294483][ T1457] 9pnet_fd: Insufficient options for proto=fd [ 48.547100][ T305] usb 1-1: USB disconnect, device number 18 [ 48.556671][ T305] usblp0: removed [ 48.557025][ T1500] random: crng reseeded on system resumption [ 48.561760][ T36] audit: type=1400 audit(1751661512.759:431): avc: denied { append } for pid=1499 comm="syz.2.419" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 48.745588][ T1503] rust_binder: Write failure EFAULT in pid:291 [ 48.983580][ T36] audit: type=1400 audit(1751661513.179:432): avc: denied { accept } for pid=1525 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.048582][ T1530] netlink: 'syz.2.428': attribute type 10 has an invalid length. [ 49.058011][ T1532] tipc: Enabling of bearer rejected, failed to enable media [ 49.082787][ T1537] netlink: 88 bytes leftover after parsing attributes in process `syz.0.432'. [ 49.184773][ T1555] mmap: syz.0.437 (1555) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.463818][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 49.493815][ T359] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 49.564649][ T36] audit: type=1400 audit(1751661513.769:433): avc: denied { lock } for pid=1576 comm="syz.1.445" path="socket:[13013]" dev="sockfs" ino=13013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 49.634719][ T9] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 49.646079][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.665004][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 49.673669][ T359] usb 1-1: device descriptor read/64, error -71 [ 49.683653][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.691867][ T9] usb 4-1: Product: syz [ 49.696048][ T9] usb 4-1: Manufacturer: syz [ 49.700695][ T9] usb 4-1: SerialNumber: syz [ 49.716255][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 49.723082][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 49.923660][ T359] usb 1-1: device descriptor read/64, error -71 [ 49.978184][ T36] audit: type=1400 audit(1751661514.179:434): avc: denied { create } for pid=1557 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.066258][ T1588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.077193][ T1588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.174544][ T359] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 50.303676][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 50.313773][ T359] usb 1-1: device descriptor read/64, error -71 [ 50.553665][ T359] usb 1-1: device descriptor read/64, error -71 [ 50.663782][ T359] usb usb1-port1: attempt power cycle [ 51.003665][ T359] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 51.024911][ T359] usb 1-1: device descriptor read/8, error -71 [ 51.133712][ T31] usb 3-1: device descriptor read/64, error -71 [ 51.154808][ T359] usb 1-1: device descriptor read/8, error -71 [ 51.393702][ T359] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 51.402363][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.413295][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 51.422492][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.432043][ T31] usb 3-1: config 0 descriptor?? [ 51.437095][ T359] usb 1-1: device descriptor read/8, error -71 [ 51.574636][ T359] usb 1-1: device descriptor read/8, error -71 [ 51.683732][ T359] usb usb1-port1: unable to enumerate USB device [ 51.846528][ T31] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 51.864385][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input11 [ 51.953787][ T31] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 52.211661][ T1640] FAULT_INJECTION: forcing a failure. [ 52.211661][ T1640] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.224964][ T1640] CPU: 0 UID: 0 PID: 1640 Comm: syz.0.467 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 52.224989][ T1640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.224996][ T1640] Call Trace: [ 52.225001][ T1640] [ 52.225006][ T1640] __dump_stack+0x21/0x30 [ 52.225031][ T1640] dump_stack_lvl+0x10c/0x190 [ 52.225050][ T1640] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.225071][ T1640] dump_stack+0x19/0x20 [ 52.225089][ T1640] should_fail_ex+0x3d9/0x530 [ 52.225112][ T1640] should_fail+0xf/0x20 [ 52.225122][ T1640] should_fail_usercopy+0x1e/0x30 [ 52.225133][ T1640] _copy_to_user+0x24/0xa0 [ 52.225146][ T1640] simple_read_from_buffer+0xed/0x160 [ 52.225157][ T1640] proc_fail_nth_read+0x19e/0x210 [ 52.225173][ T1640] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.225192][ T1640] ? bpf_lsm_file_permission+0xd/0x20 [ 52.225211][ T1640] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.225229][ T1640] vfs_read+0x278/0xb60 [ 52.225245][ T1640] ? capable+0x88/0xf0 [ 52.225257][ T1640] ? __cfi_vfs_read+0x10/0x10 [ 52.225268][ T1640] ? __kasan_check_write+0x18/0x20 [ 52.225278][ T1640] ? mutex_lock+0x92/0x1c0 [ 52.225289][ T1640] ? __cfi_mutex_lock+0x10/0x10 [ 52.225299][ T1640] ? __fget_files+0x2c5/0x340 [ 52.225321][ T1640] ksys_read+0x141/0x250 [ 52.225342][ T1640] ? __cfi_ksys_read+0x10/0x10 [ 52.225364][ T1640] ? __kasan_check_read+0x15/0x20 [ 52.225383][ T1640] __x64_sys_read+0x7f/0x90 [ 52.225395][ T1640] x64_sys_call+0x2638/0x2ee0 [ 52.225406][ T1640] do_syscall_64+0x58/0xf0 [ 52.225415][ T1640] ? clear_bhb_loop+0x50/0xa0 [ 52.225427][ T1640] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.225438][ T1640] RIP: 0033:0x7fa2a858d33c [ 52.225448][ T1640] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.225464][ T1640] RSP: 002b:00007fa2a93b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.225484][ T1640] RAX: ffffffffffffffda RBX: 00007fa2a87b5fa0 RCX: 00007fa2a858d33c [ 52.225498][ T1640] RDX: 000000000000000f RSI: 00007fa2a93b70a0 RDI: 0000000000000008 [ 52.225510][ T1640] RBP: 00007fa2a93b7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.225521][ T1640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.225532][ T1640] R13: 0000000000000000 R14: 00007fa2a87b5fa0 R15: 00007ffd9ab45728 [ 52.225546][ T1640] [ 52.259692][ T1615] GUP no longer grows the stack in syz.2.457 (1615): 200000004000-200000008000 (200000002000) [ 52.333538][ T36] audit: type=1326 audit(1751661516.529:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1648 comm="syz.0.470" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2a858e929 code=0x0 [ 52.349057][ T1615] CPU: 1 UID: 0 PID: 1615 Comm: syz.2.457 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 52.349092][ T1615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.349105][ T1615] Call Trace: [ 52.349111][ T1615] [ 52.349118][ T1615] __dump_stack+0x21/0x30 [ 52.349145][ T1615] dump_stack_lvl+0x10c/0x190 [ 52.349167][ T1615] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.349187][ T1615] ? find_vma+0xcd/0x110 [ 52.349209][ T1615] ? _raw_spin_trylock+0xaf/0x130 [ 52.349227][ T1615] ? vma_is_secretmem+0x11/0x50 [ 52.349247][ T1615] dump_stack+0x19/0x20 [ 52.349266][ T1615] __get_user_pages+0x1e34/0x22d0 [ 52.349284][ T1615] ? __cfi___switch_to+0x10/0x10 [ 52.349316][ T1615] ? populate_vma_page_range+0x230/0x230 [ 52.349334][ T1615] get_user_pages_remote+0x392/0xbe0 [ 52.349353][ T1615] ? __cfi_mtree_load+0x10/0x10 [ 52.349375][ T1615] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 52.349398][ T1615] ? __cfi_get_user_pages_remote+0x10/0x10 [ 52.349417][ T1615] __access_remote_vm+0x1e2/0x640 [ 52.349444][ T1615] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 52.349464][ T1615] ? access_remote_vm+0x60/0x60 [ 52.349487][ T1615] ? __kasan_check_write+0x18/0x20 [ 52.349508][ T1615] ? _raw_spin_lock+0x8c/0x120 [ 52.349524][ T1615] ? __cfi__raw_spin_lock+0x10/0x10 [ 52.349542][ T1615] access_remote_vm+0x39/0x60 [ 52.349565][ T1615] proc_pid_cmdline_read+0x4bb/0xbf0 [ 52.349584][ T1615] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 52.349602][ T1615] ? bpf_lsm_file_permission+0xd/0x20 [ 52.349623][ T1615] vfs_readv+0x62b/0xa50 [ 52.349639][ T1615] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 52.349655][ T1615] ? do_readv+0x2d0/0x2d0 [ 52.349685][ T1615] __x64_sys_preadv+0x197/0x2a0 [ 52.349708][ T1615] ? __cfi___x64_sys_preadv+0x10/0x10 [ 52.349732][ T1615] ? switch_fpu_return+0x12/0x20 [ 52.349750][ T1615] x64_sys_call+0x1ee9/0x2ee0 [ 52.349773][ T1615] do_syscall_64+0x58/0xf0 [ 52.349789][ T1615] ? clear_bhb_loop+0x50/0xa0 [ 52.349810][ T1615] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.349830][ T1615] RIP: 0033:0x7fe5a7d8e929 [ 52.349846][ T1615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.349861][ T1615] RSP: 002b:00007fe5a8b13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 52.349881][ T1615] RAX: ffffffffffffffda RBX: 00007fe5a7fb5fa0 RCX: 00007fe5a7d8e929 [ 52.349896][ T1615] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000005 [ 52.349909][ T1615] RBP: 00007fe5a7e10b39 R08: 0000000000000200 R09: 0000000000000000 [ 52.349922][ T1615] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 52.349934][ T1615] R13: 0000000000000000 R14: 00007fe5a7fb5fa0 R15: 00007ffe68621808 [ 52.349950][ T1615] [ 52.359796][ T31] usb 3-1: USB disconnect, device number 15 [ 52.385106][ T629] usb 4-1: USB disconnect, device number 13 [ 52.860594][ T1664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=1664 comm=syz.1.476 [ 52.922969][ T1685] /dev/loop0: Can't lookup blockdev [ 52.929318][ T1685] lo: entered promiscuous mode [ 52.935818][ T1685] lo: left promiscuous mode [ 53.113670][ T359] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 53.262123][ T1701] rust_binder: 1701: no such ref 1 [ 53.266663][ T359] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.279165][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 53.290540][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 53.303268][ T359] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.316278][ T359] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.325347][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.334287][ T359] usb 4-1: config 0 descriptor?? [ 53.573744][ T629] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 53.636126][ T36] audit: type=1400 audit(1751661517.839:436): avc: denied { setopt } for pid=1705 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.723677][ T629] usb 1-1: Using ep0 maxpacket: 8 [ 53.731479][ T629] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.740561][ T629] usb 1-1: config 1 has no interface number 1 [ 53.744440][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.746719][ T629] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 53.755151][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.769070][ T629] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 53.775885][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.788603][ T629] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.794280][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.805575][ T629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.812667][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.822005][ T629] usb 1-1: Product: syz [ 53.830630][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.834597][ T629] usb 1-1: Manufacturer: syz [ 53.842782][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.847279][ T629] usb 1-1: SerialNumber: syz [ 53.854953][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.866899][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.874397][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.882768][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.891900][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.899471][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.907091][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.914621][ T359] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 53.922441][ T359] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 53.933915][ T359] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 54.027401][ T31] usb 4-1: USB disconnect, device number 14 [ 54.054730][ T1710] overlayfs: missing 'lowerdir' [ 54.064508][ T1700] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.064530][ T1700] rust_binder: Read failure Err(EFAULT) in pid:275 [ 54.073107][ T1700] rust_binder: 1700: no such ref 4294967293 [ 54.086165][ T1700] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.086185][ T1700] rust_binder: Read failure Err(EFAULT) in pid:275 [ 54.100466][ T629] usb 1-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 54.133808][ T629] usb 1-1: USB disconnect, device number 23 [ 54.168723][ T1720] fuseblk: Bad value for 'source' [ 54.515289][ T1748] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 54.524457][ T1748] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 54.750235][ T36] audit: type=1400 audit(1751661518.949:437): avc: denied { write } for pid=1764 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.793647][ T629] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 54.903654][ T305] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 54.944797][ T629] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.954964][ T629] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.964755][ T629] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 54.973935][ T629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.982014][ T629] usb 3-1: SerialNumber: syz [ 54.983668][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 55.053921][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 55.067131][ T305] usb 4-1: config 0 has no interfaces? [ 55.072854][ T305] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 55.088914][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.099480][ T305] usb 4-1: config 0 descriptor?? [ 55.123654][ T31] usb 1-1: device descriptor read/64, error -71 [ 55.221734][ T629] usb 3-1: MIDIStreaming interface descriptor not found [ 55.234242][ T629] usb 3-1: USB disconnect, device number 16 [ 55.247145][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.279166][ T1773] 9pnet: Could not find request transport: fdErfdWw0x0000000000000003 [ 55.306388][ T359] usb 4-1: USB disconnect, device number 15 [ 55.363712][ T31] usb 1-1: device descriptor read/64, error -71 [ 55.603727][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 55.733779][ T31] usb 1-1: device descriptor read/64, error -71 [ 55.910306][ T1791] rust_binder: 1791: no such ref 3 [ 55.983684][ T31] usb 1-1: device descriptor read/64, error -71 [ 56.033669][ T359] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 56.093977][ T31] usb usb1-port1: attempt power cycle [ 56.110902][ T36] audit: type=1326 audit(1751661520.309:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1772 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bc58e929 code=0x7fc00000 [ 56.159691][ T1800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 56.159714][ T1800] rust_binder: Read failure Err(EFAULT) in pid:189 [ 56.163692][ T359] usb 3-1: device descriptor read/64, error -71 [ 56.181201][ T36] audit: type=1400 audit(1751661520.379:439): avc: denied { create } for pid=1801 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 56.232098][ T1803] rust_binder: 1803: no such ref 0 [ 56.433828][ T359] usb 3-1: device descriptor read/64, error -71 [ 56.443721][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 56.474699][ T31] usb 1-1: device descriptor read/8, error -71 [ 56.604992][ T31] usb 1-1: device descriptor read/8, error -71 [ 56.673726][ T359] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 56.803747][ T359] usb 3-1: device descriptor read/64, error -71 [ 56.843777][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 56.865017][ T31] usb 1-1: device descriptor read/8, error -71 [ 56.994938][ T31] usb 1-1: device descriptor read/8, error -71 [ 57.043695][ T359] usb 3-1: device descriptor read/64, error -71 [ 57.103788][ T31] usb usb1-port1: unable to enumerate USB device [ 57.153787][ T359] usb usb3-port1: attempt power cycle [ 57.178743][ T1834] overlayfs: failed to clone upperpath [ 57.184958][ T1834] overlayfs: failed to clone upperpath [ 57.208252][ T1839] overlayfs: failed to clone upperpath [ 57.374711][ T36] audit: type=1400 audit(1751661521.579:440): avc: denied { checkpoint_restore } for pid=1840 comm="syz.3.539" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.375302][ T1841] rust_binder: Error while translating object. [ 57.398209][ T1841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 57.404537][ T1841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:219 [ 57.414700][ T1843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.493704][ T359] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 57.509717][ T1850] rust_binder: 1850: no such ref 0 [ 57.518625][ T1851] rust_binder: Write failure EINVAL in pid:228 [ 57.518729][ T1852] rust_binder: Read failure Err(EAGAIN) in pid:228 [ 57.526602][ T359] usb 3-1: device descriptor read/8, error -71 [ 57.664930][ T359] usb 3-1: device descriptor read/8, error -71 [ 57.786280][ T36] audit: type=1400 audit(1751661521.989:441): avc: denied { remount } for pid=1867 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.824344][ T1872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 57.824371][ T1872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:295 [ 57.862113][ T36] audit: type=1400 audit(1751661522.059:442): avc: denied { read write } for pid=1880 comm="syz.0.551" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.894520][ T36] audit: type=1400 audit(1751661522.059:443): avc: denied { open } for pid=1880 comm="syz.0.551" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.903793][ T359] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 57.919186][ T36] audit: type=1400 audit(1751661522.059:444): avc: denied { ioctl } for pid=1880 comm="syz.0.551" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.944673][ T359] usb 3-1: device descriptor read/8, error -71 [ 58.012304][ T1885] overlayfs: failed to get inode (-116) [ 58.017994][ T1885] overlayfs: failed to get inode (-116) [ 58.084885][ T359] usb 3-1: device descriptor read/8, error -71 [ 58.193780][ T359] usb usb3-port1: unable to enumerate USB device [ 58.263683][ T31] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 58.415103][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.423401][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 58.431872][ T31] usb 1-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 58.441205][ T31] usb 1-1: config 219 interface 0 has no altsetting 0 [ 58.448119][ T31] usb 1-1: config 219 interface 0 has no altsetting 1 [ 58.456388][ T31] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 58.465682][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.473882][ T31] usb 1-1: Product: syz [ 58.478040][ T31] usb 1-1: Manufacturer: syz [ 58.482763][ T31] usb 1-1: SerialNumber: syz [ 58.693079][ T31] usb 1-1: selecting invalid altsetting 0 [ 58.699469][ T31] usb 1-1: selecting invalid altsetting 0 [ 58.708007][ T31] usb 1-1: USB disconnect, device number 28 [ 58.743552][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:219.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.820813][ T1889] rust_binder: 1889: no such ref 0 [ 58.826194][ T1889] rust_binder: Write failure EINVAL in pid:350 [ 58.925262][ T12] bridge_slave_1: left allmulticast mode [ 58.938027][ T12] bridge_slave_1: left promiscuous mode [ 58.944076][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.951983][ T12] bridge_slave_0: left allmulticast mode [ 58.957928][ T12] bridge_slave_0: left promiscuous mode [ 58.963553][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.026379][ T36] audit: type=1400 audit(1751661523.229:445): avc: denied { mounton } for pid=1891 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 59.062081][ T1891] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.069161][ T1891] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.076577][ T1891] bridge_slave_0: entered allmulticast mode [ 59.083170][ T1891] bridge_slave_0: entered promiscuous mode [ 59.090229][ T1891] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.097698][ T1891] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.105187][ T1891] bridge_slave_1: entered allmulticast mode [ 59.111403][ T1891] bridge_slave_1: entered promiscuous mode [ 59.118160][ T12] veth1_macvtap: left promiscuous mode [ 59.123701][ T12] veth0_vlan: left promiscuous mode [ 59.177208][ T36] audit: type=1400 audit(1751661523.379:446): avc: denied { map } for pid=1902 comm="syz.1.561" path="socket:[14109]" dev="sockfs" ino=14109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 59.238299][ T1910] netlink: 'syz.0.562': attribute type 5 has an invalid length. [ 59.267248][ T1891] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.274602][ T1891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.282646][ T1891] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.289716][ T1891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.308117][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.316957][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.327564][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.335380][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.347156][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.354337][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.378083][ T1891] veth0_vlan: entered promiscuous mode [ 59.389825][ T1891] veth1_macvtap: entered promiscuous mode [ 59.434528][ T36] audit: type=1400 audit(1751661523.639:447): avc: denied { connect } for pid=1917 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.455735][ T1918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.465133][ T36] audit: type=1400 audit(1751661523.669:448): avc: denied { execute } for pid=1917 comm="syz.4.558" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.503701][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 59.608822][ T36] audit: type=1400 audit(1751661523.809:449): avc: denied { map } for pid=1923 comm="syz.4.566" path="socket:[15534]" dev="sockfs" ino=15534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 59.632165][ T582] Bluetooth: hci1: command 0x1003 tx timeout [ 59.632338][ T1269] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 59.653726][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 59.660291][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 59.669465][ T31] usb 1-1: config 0 has no interface number 0 [ 59.676524][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 59.685136][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 59.694466][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.702916][ T31] usb 1-1: Product: syz [ 59.707109][ T31] usb 1-1: Manufacturer: syz [ 59.711704][ T31] usb 1-1: SerialNumber: syz [ 59.717620][ T31] usb 1-1: config 0 descriptor?? [ 59.723358][ T31] smsc75xx v1.0.0 [ 60.232323][ T1945] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 60.246560][ T1945] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 60.278816][ T1948] overlayfs: missing 'lowerdir' [ 60.324957][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 60.336286][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.494885][ T1977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.586'. [ 60.651028][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.651052][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.658541][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.672675][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.680005][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.686675][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.693110][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.699723][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.706848][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.713289][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.719762][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.726428][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.732886][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.739688][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.746193][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.752622][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.759074][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.765624][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.772515][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.778987][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.785516][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.792045][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.798683][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.805417][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.811920][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.818794][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.825373][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.831808][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.838855][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.845684][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.852143][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.858690][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.865206][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.871640][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.878125][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.884732][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.891351][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.897930][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.904438][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.910959][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.917595][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.924082][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.930811][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.937444][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.944000][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.950439][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.956955][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.963428][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.969993][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.976546][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.982987][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.989476][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.996007][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.002624][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.009332][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.016058][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.022741][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.029406][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.036184][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.042805][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.049444][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.055996][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.062522][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.069021][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.073527][ T1991] 9pnet: Could not find request transport: f:33> D5}0x0000000000000007 [ 61.140512][ T2001] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 61.157807][ T2001] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 61.403312][ T2027] input: syz0 as /devices/virtual/input/input12 [ 61.417720][ T2026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 61.465864][ T2033] netlink: 56 bytes leftover after parsing attributes in process `syz.1.597'. [ 61.549245][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 61.567938][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 61.587082][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 61.603496][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 61.679500][ T2050] binder: Bad value for 'stats' [ 61.953748][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.029429][ T2060] netlink: 'syz.1.617': attribute type 16 has an invalid length. [ 62.039801][ T2060] /dev/loop0: Can't lookup blockdev [ 62.105585][ T31] usb 5-1: config 8 has an invalid interface number: 106 but max is 0 [ 62.114024][ T31] usb 5-1: config 8 has no interface number 0 [ 62.120133][ T31] usb 5-1: config 8 interface 106 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 62.131199][ T31] usb 5-1: config 8 interface 106 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 62.142355][ T31] usb 5-1: config 8 interface 106 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 62.153307][ T31] usb 5-1: config 8 interface 106 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 62.164701][ T31] usb 5-1: config 8 interface 106 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 62.176164][ T31] usb 5-1: config 8 interface 106 has no altsetting 0 [ 62.184824][ T31] usb 5-1: New USB device found, idVendor=0681, idProduct=0040, bcdDevice=75.16 [ 62.194262][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.202496][ T31] usb 5-1: Product: 搆伞ꊯ霴恓愝蔎ᬵ䛨ุ蒸獱恭ꗱ。岷햠颗瘷쓒뻳螦ᲇ᝜ஜ订⾢렰춟䛇▖⨩ﳺዺ⚧命됷겠橞䛘ᢃ辶䖸浜鐳඼䈐狶䆴烓­뿄⯨贏沱ੈ緾⧬눅蔭䍵눢ⳮ뇍鼦䢒譐䗭㣥㦘抝Ⰶ넱뺁舟⑃佰ᎃ넖ᩝ픎࢞퓋碷⪙ [ 62.231691][ T31] usb 5-1: Manufacturer: Ѓ [ 62.236681][ T31] usb 5-1: SerialNumber: 䐋 [ 62.242810][ T2057] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 62.451629][ T2057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.460343][ T2057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.575988][ T64] usb 1-1: USB disconnect, device number 29 [ 62.675320][ T31] usb 5-1: USB disconnect, device number 2 [ 62.691781][ T2087] macsec0: entered promiscuous mode [ 62.697744][ T2087] macsec0: entered allmulticast mode [ 62.703081][ T2087] veth1_macvtap: entered allmulticast mode [ 62.710437][ T2087] overlay: Unknown parameter 'euid<00000000000000000000' [ 62.717941][ T2087] overlayfs: missing 'lowerdir' [ 62.723936][ T2087] bridge0: port 3(dummy0) entered blocking state [ 62.730377][ T2087] bridge0: port 3(dummy0) entered disabled state [ 62.737164][ T2087] dummy0: entered allmulticast mode [ 62.742770][ T2087] dummy0: entered promiscuous mode [ 62.748316][ T2087] bridge0: port 3(dummy0) entered blocking state [ 62.754690][ T2087] bridge0: port 3(dummy0) entered forwarding state [ 63.053086][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 63.053103][ T36] audit: type=1400 audit(1751661527.249:469): avc: denied { accept } for pid=2096 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 63.143660][ T64] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 63.189646][ T2103] /dev/nullb0: Can't lookup blockdev [ 63.248416][ T2104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.293833][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 63.307047][ T64] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.318060][ T64] usb 1-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.331071][ T64] usb 1-1: config 0 interface 0 has no altsetting 0 [ 63.337805][ T64] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 63.347297][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.355821][ T64] usb 1-1: config 0 descriptor?? [ 63.591343][ T2106] netlink: 'syz.1.637': attribute type 5 has an invalid length. [ 63.764479][ T64] usbhid 1-1:0.0: can't add hid device: -71 [ 63.770444][ T64] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 63.779829][ T64] usb 1-1: USB disconnect, device number 30 [ 64.274838][ T36] audit: type=1400 audit(1751661528.479:470): avc: denied { read } for pid=2144 comm="syz.0.647" name="/" dev="configfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.297157][ T36] audit: type=1400 audit(1751661528.479:471): avc: denied { open } for pid=2144 comm="syz.0.647" path="/" dev="configfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.319956][ T2145] netlink: 100 bytes leftover after parsing attributes in process `syz.0.647'. [ 64.329707][ T36] audit: type=1400 audit(1751661528.539:472): avc: denied { map } for pid=2144 comm="syz.0.647" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.413923][ T359] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 64.518652][ T2151] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 64.544447][ T2161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.561036][ T2161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.574757][ T359] usb 5-1: Invalid ep0 maxpacket: 32 [ 64.592813][ T36] audit: type=1400 audit(1751661528.789:473): avc: denied { create } for pid=2163 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 64.613177][ T2164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 64.713674][ T359] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 64.734740][ T2179] overlayfs: failed to clone upperpath [ 64.783669][ T64] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 64.803363][ T2187] tipc: Enabling of bearer rejected, failed to enable media [ 64.856288][ T36] audit: type=1400 audit(1751661529.059:474): avc: denied { write } for pid=2192 comm="syz.3.663" name="dev_mcast" dev="proc" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 64.857960][ T2193] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 64.879997][ T359] usb 5-1: Invalid ep0 maxpacket: 32 [ 64.884904][ T36] audit: type=1400 audit(1751661529.059:475): avc: denied { read write } for pid=2192 comm="syz.3.663" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.888770][ T359] usb usb5-port1: attempt power cycle [ 64.893513][ T36] audit: type=1400 audit(1751661529.059:476): avc: denied { open } for pid=2192 comm="syz.3.663" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.955045][ T2199] rust_binder: Error while translating object. [ 64.955079][ T2199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 64.963664][ T2199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:339 [ 64.973506][ T36] audit: type=1400 audit(1751661529.159:477): avc: denied { bind } for pid=2198 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.021827][ T36] audit: type=1400 audit(1751661529.219:478): avc: denied { write } for pid=2209 comm="syz.3.667" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.112691][ T2224] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.112710][ T2224] rust_binder: Read failure Err(EFAULT) in pid:318 [ 65.144980][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 65.273683][ T359] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 65.294043][ T359] usb 5-1: Invalid ep0 maxpacket: 32 [ 65.313716][ T488] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 65.423688][ T359] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 65.444209][ T359] usb 5-1: Invalid ep0 maxpacket: 32 [ 65.450054][ T359] usb usb5-port1: unable to enumerate USB device [ 65.464990][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.476073][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.485959][ T488] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.498906][ T488] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.508129][ T488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.516777][ T488] usb 1-1: config 0 descriptor?? [ 65.924542][ T488] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 65.932752][ T488] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 65.941624][ T488] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 66.130845][ T2256] overlayfs: failed to clone upperpath [ 66.235290][ T2262] fuseblk: Bad value for 'source' [ 66.765575][ T2286] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=2286 comm=syz.1.691 [ 66.823619][ T2297] overlayfs: failed to clone upperpath [ 67.213730][ T1269] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 67.353708][ T9] usb 1-1: reset high-speed USB device number 31 using dummy_hcd [ 67.523645][ T359] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 67.673670][ T359] usb 4-1: Using ep0 maxpacket: 8 [ 67.680555][ T359] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 67.689611][ T359] usb 4-1: config 0 has no interface number 1 [ 67.695809][ T359] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.711576][ T359] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 67.723558][ T359] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 67.735869][ T359] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 67.746296][ T359] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.761332][ T359] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 67.770947][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.779276][ T359] usb 4-1: Product: syz [ 67.783526][ T359] usb 4-1: Manufacturer: syz [ 67.788306][ T359] usb 4-1: SerialNumber: syz [ 67.795342][ T359] usb 4-1: config 0 descriptor?? [ 67.802504][ T2314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.814894][ T359] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 67.845782][ T2342] netlink: 'syz.1.709': attribute type 13 has an invalid length. [ 67.859777][ T2342] overlayfs: failed to clone upperpath [ 67.878512][ T2344] netlink: 'syz.1.710': attribute type 32 has an invalid length. [ 67.887018][ T2345] netlink: 'syz.1.710': attribute type 32 has an invalid length. [ 67.932500][ T2352] overlayfs: failed to clone upperpath [ 68.013861][ T359] usb 4-1: USB disconnect, device number 17 [ 68.080332][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 68.080348][ T36] audit: type=1400 audit(1751661532.281:482): avc: denied { map } for pid=2362 comm="syz.0.716" path="pipe:[2314]" dev="pipefs" ino=2314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 68.844092][ T488] usb 1-1: USB disconnect, device number 31 [ 69.064088][ T36] audit: type=1400 audit(1751661533.271:483): avc: denied { relabelfrom } for pid=2391 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 69.082899][ T2392] syzkaller0: entered promiscuous mode [ 69.083997][ T36] audit: type=1400 audit(1751661533.271:484): avc: denied { relabelto } for pid=2391 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 69.089335][ T2392] syzkaller0: entered allmulticast mode [ 69.419024][ T2407] rust_binder: 2407: no such ref 0 [ 69.475155][ T2407] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 69.484701][ T2407] rust_binder: Write failure EINVAL in pid:370 [ 69.484749][ T2407] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 69.498784][ T2407] rust_binder: Write failure EINVAL in pid:370 [ 69.498829][ T2407] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 69.512757][ T2407] rust_binder: Write failure EINVAL in pid:370 [ 69.528339][ T2407] rust_binder: Write failure EINVAL in pid:370 [ 69.763692][ T488] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 69.853676][ T9] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 69.924997][ T488] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.935249][ T488] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.945782][ T488] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 69.955222][ T488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.963419][ T488] usb 4-1: SerialNumber: syz [ 70.004727][ T9] usb 1-1: config 18 has an invalid interface number: 41 but max is 0 [ 70.014377][ T9] usb 1-1: config 18 has no interface number 0 [ 70.021757][ T9] usb 1-1: config 18 interface 41 has no altsetting 0 [ 70.030302][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 70.040500][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.049019][ T9] usb 1-1: Product: syz [ 70.053547][ T9] usb 1-1: Manufacturer: syz [ 70.059795][ T9] usb 1-1: SerialNumber: syz [ 70.075794][ T36] audit: type=1400 audit(1751661534.281:485): avc: denied { connect } for pid=2423 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.234394][ T2426] rust_binder: Write failure EFAULT in pid:344 [ 70.237170][ T488] usb 4-1: MIDIStreaming interface descriptor not found [ 70.257874][ T488] usb 4-1: USB disconnect, device number 18 [ 70.273007][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.311539][ T36] audit: type=1400 audit(1751661534.511:486): avc: denied { map } for pid=2434 comm="syz.4.741" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.321075][ T2435] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 70.607763][ T2453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113 [ 70.706085][ T36] audit: type=1400 audit(1751661534.911:487): avc: denied { accept } for pid=2459 comm="syz.4.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 70.735983][ T36] audit: type=1400 audit(1751661534.921:488): avc: denied { unmount } for pid=1891 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.873558][ T2422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.882722][ T2422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.892362][ T2422] rust_binder: Error while translating object. [ 70.892409][ T2422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.898643][ T2422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 70.909131][ T9] CoreChips 1-1:18.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 70.933168][ T9] CoreChips 1-1:18.41: probe with driver CoreChips failed with error -71 [ 70.943470][ T9] usb 1-1: USB disconnect, device number 32 [ 70.977138][ T2477] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 70.991899][ T2477] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.009548][ T36] audit: type=1400 audit(1751661535.211:489): avc: denied { mount } for pid=2478 comm="syz.1.756" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 71.031689][ T36] audit: type=1326 audit(1751661535.211:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2478 comm="syz.1.756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1bc58e929 code=0x0 [ 71.033667][ T359] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 71.205172][ T359] usb 5-1: not running at top speed; connect to a high speed hub [ 71.214098][ T359] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 71.223479][ T359] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 71.233786][ T359] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.244128][ T359] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.253245][ T359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.262316][ T359] usb 5-1: Product: ਯ嫢캕ꨵ㨣첹븩憴Ꝉꙇ꺻ꡢ癘ᗞ [ 71.269895][ T359] usb 5-1: Manufacturer: 퇃흦쭴Ó﷣㗤⿌ȝ཯ά‐瘮缓䀨睎췩㈾ვ൪ﮖ왃␠ᚹ愯ٮﳞ㽞睳둊책洹ㅯՄし씊盕䓍觰鯱䝌塮罣ܤᲲܔᐇￏﰬЀ᱿﷙婱퓐ↄ좖ﲃ纚ʣ슽쑄贵畃忦끟襏ᨊᐟ㝇嗅鵉벥꺛꒫㇉䝂㴲栣❴禎厬ꙡ⪁︻忶ܟ熢뱈眼ⶶ䗅␹㗭呋顿뜄놟㯧㽧 [ 71.302205][ T359] usb 5-1: SerialNumber: ࠾ [ 71.512514][ T359] usb 5-1: 0:2 : does not exist [ 71.523262][ T359] usb 5-1: USB disconnect, device number 7 [ 71.532826][ T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.152699][ T2504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 72.152722][ T2504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:128 [ 72.258544][ T36] audit: type=1400 audit(1751661536.461:491): avc: denied { setcurrent } for pid=2514 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.470110][ T2529] binder: Bad value for 'max' [ 72.666033][ T2537] rust_binder: Write failure EFAULT in pid:359 [ 72.803699][ T359] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 72.903410][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.903432][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 72.913015][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.919704][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 72.928087][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.934630][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 72.943132][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.950270][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 72.950574][ T2558] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.963976][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.972114][ T2559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.981675][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 72.981989][ T2558] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 72.989890][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.998280][ T2558] rust_binder: Write failure EINVAL in pid:365 [ 73.005850][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.021131][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.028015][ T359] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 73.038404][ T2565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.044599][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.044788][ T359] usb 5-1: config 0 has no interface number 0 [ 73.051332][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.058651][ T359] usb 5-1: config 0 interface 41 has no altsetting 0 [ 73.067683][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.074966][ T359] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 73.079426][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.086069][ T359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.095254][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.103442][ T359] usb 5-1: Product: syz [ 73.111478][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.118143][ T359] usb 5-1: Manufacturer: syz [ 73.122518][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.130534][ T359] usb 5-1: SerialNumber: syz [ 73.135403][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.142740][ T359] usb 5-1: config 0 descriptor?? [ 73.153701][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.159476][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.167821][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.176848][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.183406][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.191937][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.198731][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.206938][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.214196][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.222196][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.228760][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.236802][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.243397][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.252123][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.258685][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.267776][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.274409][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.282633][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.289191][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.297317][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.303998][ T9] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 73.319711][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.319771][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.326395][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.334575][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.341080][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.349191][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.355880][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.364222][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.370889][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.379162][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.385801][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.394486][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.401095][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.409308][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.416056][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.425341][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.431938][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.440496][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.447046][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.455456][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.462205][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.471448][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.478093][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 73.488346][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.491532][ T2556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.498202][ T2556] rust_binder: Read failure Err(EFAULT) in pid:405 [ 73.574295][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 73.574311][ T36] audit: type=1400 audit(1751661537.781:494): avc: denied { execute } for pid=2575 comm="syz.0.787" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.613669][ T9] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 73.763642][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 73.769318][ T9] usb usb4-port1: attempt power cycle [ 73.893695][ T64] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 73.958148][ T359] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 74.043648][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 74.051684][ T64] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 74.064019][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.072646][ T64] usb 1-1: Product: syz [ 74.076975][ T64] usb 1-1: Manufacturer: syz [ 74.081733][ T64] usb 1-1: SerialNumber: syz [ 74.088662][ T64] r8152-cfgselector 1-1: Unknown version 0x0000 [ 74.095216][ T64] r8152-cfgselector 1-1: config 0 descriptor?? [ 74.133693][ T9] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 74.154141][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 74.283665][ T9] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 74.304079][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 74.309905][ T64] r8152-cfgselector 1-1: Unknown version 0x0000 [ 74.317200][ T9] usb usb4-port1: unable to enumerate USB device [ 74.324678][ T64] r8152-cfgselector 1-1: bad CDC descriptors [ 74.421859][ T359] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 74.435635][ T359] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 74.446714][ T359] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 74.459522][ T359] usb 5-1: USB disconnect, device number 8 [ 74.744635][ T64] r8152-cfgselector 1-1: USB disconnect, device number 33 [ 75.006345][ T2589] mmap: syz.1.791 (2589): VmData 29204480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 75.021075][ T36] audit: type=1326 audit(1751661539.221:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2587 comm="syz.1.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bc58e929 code=0x7fc00000 [ 75.064571][ T36] audit: type=1326 audit(1751661539.271:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2593 comm="syz.1.793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1bc58e929 code=0x0 [ 75.087794][ T2601] rust_binder: Failed to allocate buffer. len:296, is_oneway:true [ 75.097014][ T2603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.308420][ T36] audit: type=1400 audit(1751661539.511:497): avc: denied { execmod } for pid=2605 comm="syz.0.797" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.339450][ T36] audit: type=1400 audit(1751661539.521:498): avc: denied { map } for pid=2605 comm="syz.0.797" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.363610][ T64] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 75.386936][ T36] audit: type=1400 audit(1751661539.591:499): avc: denied { setopt } for pid=2607 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.514917][ T64] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.526808][ T64] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 75.537459][ T64] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.550412][ T64] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.557433][ T64] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 75.566827][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.575613][ T64] usb 5-1: config 0 descriptor?? [ 75.581697][ T2603] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 75.793703][ T305] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 75.942518][ T2625] fuse: Bad value for 'group_id' [ 75.947796][ T2625] fuse: Bad value for 'group_id' [ 75.954892][ T305] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.966084][ T305] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.976693][ T305] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.986122][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.994406][ T305] usb 1-1: SerialNumber: syz [ 75.995665][ T64] hid-generic 0003:1B1C:1C0D.0009: item fetching failed at offset 6/8 [ 76.012638][ T64] hid-generic 0003:1B1C:1C0D.0009: probe with driver hid-generic failed with error -22 [ 76.086231][ T36] audit: type=1400 audit(1751661540.291:500): avc: denied { mounton } for pid=2641 comm="syz.3.809" path="/129/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 76.194898][ T2603] rust_binder: Write failure EINVAL in pid:163 [ 76.195119][ T2603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 76.204986][ T2647] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.214485][ T2603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.224350][ T2619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.236121][ T64] usb 5-1: USB disconnect, device number 9 [ 76.243210][ T2619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.345685][ T36] audit: type=1326 audit(1751661540.551:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.4.817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe97cd8e929 code=0x0 [ 76.403844][ T359] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 76.418642][ T305] usb 1-1: USB disconnect, device number 34 [ 76.553635][ T359] usb 4-1: Using ep0 maxpacket: 32 [ 76.560157][ T359] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 76.568648][ T359] usb 4-1: config 0 has no interface number 0 [ 76.574788][ T359] usb 4-1: config 0 interface 184 has no altsetting 0 [ 76.582803][ T359] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 76.592044][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.600395][ T359] usb 4-1: Product: syz [ 76.604709][ T359] usb 4-1: Manufacturer: syz [ 76.609378][ T359] usb 4-1: SerialNumber: syz [ 76.614690][ T359] usb 4-1: config 0 descriptor?? [ 76.620666][ T359] smsc75xx v1.0.0 [ 77.005648][ T2672] overlayfs: failed to clone upperpath [ 77.012514][ T2672] overlayfs: failed to clone upperpath [ 77.183679][ T488] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 77.221726][ T359] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 77.232985][ T359] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 77.242182][ T36] audit: type=1400 audit(1751661541.441:502): avc: denied { setattr } for pid=2679 comm="syz.4.823" name="NETLINK" dev="sockfs" ino=19485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.252592][ T2682] futex_wake_op: syz.4.824 tries to shift op by -1; fix this program [ 77.320303][ T2694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=2694 comm=syz.4.828 [ 77.354726][ T488] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 77.362861][ T488] usb 1-1: config 0 has no interface number 0 [ 77.369135][ T488] usb 1-1: config 0 interface 41 has no altsetting 0 [ 77.378192][ T488] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 77.387714][ T488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.395773][ T488] usb 1-1: Product: syz [ 77.400000][ T488] usb 1-1: Manufacturer: syz [ 77.404639][ T488] usb 1-1: SerialNumber: syz [ 77.409949][ T488] usb 1-1: config 0 descriptor?? [ 77.496417][ T36] audit: type=1400 audit(1751661541.701:503): avc: denied { create } for pid=2711 comm="syz.4.833" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.217964][ T488] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 78.641126][ T488] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 78.652926][ T488] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 78.662595][ T488] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 78.672321][ T488] usb 1-1: USB disconnect, device number 35 [ 79.279320][ T2646] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 79.279367][ T2646] rust_binder: Error while translating object. [ 79.292498][ T2646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.299153][ T2646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:381 [ 79.376930][ T359] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 79.399391][ T359] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 79.411217][ T359] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 79.421052][ T359] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 79.431388][ T359] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 79.445726][ T359] usb 4-1: USB disconnect, device number 23 [ 79.843727][ T305] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 80.003635][ T305] usb 1-1: Using ep0 maxpacket: 16 [ 80.011632][ T305] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.026935][ T305] usb 1-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.040381][ T305] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.047309][ T305] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 80.056785][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.068310][ T305] usb 1-1: config 0 descriptor?? [ 80.075896][ T305] usbhid 1-1:0.0: can't add hid device: -22 [ 80.083188][ T305] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 80.096935][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 80.096951][ T36] audit: type=1400 audit(1751661544.301:508): avc: denied { load_policy } for pid=2793 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 80.100970][ T2794] SELinux: failed to load policy [ 80.276062][ T305] usb 1-1: USB disconnect, device number 36 [ 80.336097][ T2807] syzkaller0: entered promiscuous mode [ 80.341754][ T2807] syzkaller0: entered allmulticast mode [ 80.530373][ T2812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 80.537673][ T36] audit: type=1400 audit(1751661544.731:509): avc: denied { unlink } for pid=1891 comm="syz-executor" name="file0" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.573911][ T305] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 80.733739][ T305] usb 1-1: Using ep0 maxpacket: 32 [ 80.740633][ T305] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 80.749255][ T305] usb 1-1: config 0 has no interface number 0 [ 80.755670][ T305] usb 1-1: config 0 interface 184 has no altsetting 0 [ 80.764269][ T305] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 80.773525][ T305] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 80.781988][ T305] usb 1-1: Product: syz [ 80.786477][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 80.794501][ T305] usb 1-1: Manufacturer: syz [ 80.799857][ T305] usb 1-1: SerialNumber: syz [ 80.810158][ T305] usb 1-1: config 0 descriptor?? [ 80.819191][ T305] smsc75xx v1.0.0 [ 80.963661][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 80.970023][ T45] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 80.978237][ T45] usb 4-1: config 0 has no interface number 0 [ 80.984461][ T45] usb 4-1: config 0 interface 184 has no altsetting 0 [ 80.994112][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.003803][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.012344][ T45] usb 4-1: Product: syz [ 81.016540][ T45] usb 4-1: Manufacturer: syz [ 81.021176][ T45] usb 4-1: SerialNumber: syz [ 81.026694][ T45] usb 4-1: config 0 descriptor?? [ 81.032599][ T45] smsc75xx v1.0.0 [ 81.226816][ T305] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 81.238902][ T2814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.247505][ T305] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 81.248729][ T2814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.257373][ T305] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 81.275976][ T305] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 81.287122][ T305] usb 1-1: USB disconnect, device number 37 [ 81.485622][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 81.498070][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 81.508015][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 81.525957][ T45] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 81.773678][ T305] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 81.923677][ T305] usb 1-1: Using ep0 maxpacket: 32 [ 81.930219][ T305] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 81.939060][ T305] usb 1-1: config 225 has too many interfaces: 101, using maximum allowed: 32 [ 81.949480][ T305] usb 1-1: config 225 has an invalid descriptor of length 144, skipping remainder of the config [ 81.962304][ T305] usb 1-1: config 225 has 0 interfaces, different from the descriptor's value: 101 [ 81.976887][ T305] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 81.986439][ T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.994977][ T305] usb 1-1: Product: syz [ 81.999311][ T305] usb 1-1: Manufacturer: syz [ 82.003932][ T305] usb 1-1: SerialNumber: syz [ 83.055955][ T2912] netlink: 37 bytes leftover after parsing attributes in process `syz.1.900'. [ 83.543624][ T306] usb 4-1: USB disconnect, device number 24 [ 83.602005][ T36] audit: type=1326 audit(1751661548.801:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.3.905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34ad38e929 code=0x0 [ 83.652049][ T2928] netlink: 'syz.3.905': attribute type 27 has an invalid length. [ 83.673710][ T2928] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.680947][ T2928] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.715191][ T2928] syzkaller0: left promiscuous mode [ 83.720428][ T2928] syzkaller0: left allmulticast mode [ 83.776563][ T2953] rust_binder: 2953: no such ref 0 [ 83.782758][ T2953] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 83.790576][ T2953] rust_binder: Write failure EINVAL in pid:425 [ 84.233760][ T306] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 84.280058][ T2983] /dev/loop0: Can't lookup blockdev [ 84.310547][ T305] usb 1-1: USB disconnect, device number 38 [ 84.350276][ T3000] overlayfs: failed to clone upperpath [ 84.356436][ T3006] raw_sendmsg: syz.0.931 forgot to set AF_INET. Fix it! [ 84.390326][ T3011] tmpfs: Unknown parameter '' [ 84.394675][ T306] usb 4-1: config 1 interface 0 has no altsetting 0 [ 84.403134][ T3012] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 84.403157][ T3012] rust_binder: Read failure Err(EFAULT) in pid:471 [ 84.413099][ T306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 84.429648][ T3015] tipc: Enabling of bearer rejected, failed to enable media [ 84.442328][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.458263][ T306] usb 4-1: Product: syz [ 84.467062][ T306] usb 4-1: Manufacturer: syz [ 84.471848][ T306] usb 4-1: SerialNumber: syz [ 84.541130][ T36] audit: type=1400 audit(1751661549.741:511): avc: denied { getopt } for pid=3041 comm="syz.4.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.570961][ T3030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:477 [ 84.644554][ T36] audit: type=1400 audit(1751661549.851:512): avc: denied { read } for pid=3047 comm="syz.0.944" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.708948][ T36] audit: type=1400 audit(1751661549.851:513): avc: denied { open } for pid=3047 comm="syz.0.944" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.756095][ T36] audit: type=1400 audit(1751661549.881:514): avc: denied { ioctl } for pid=3047 comm="syz.0.944" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.894439][ T306] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 84.918218][ T3064] overlay: ./file0 is not a directory [ 85.073648][ T488] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 85.203653][ T488] usb 1-1: device descriptor read/64, error -71 [ 85.246450][ T36] audit: type=1400 audit(1751661550.451:515): avc: denied { read write } for pid=2969 comm="syz.3.920" name="lp0" dev="devtmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 85.269968][ T36] audit: type=1400 audit(1751661550.451:516): avc: denied { open } for pid=2969 comm="syz.3.920" path="/dev/usb/lp0" dev="devtmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 85.365203][ T10] usb 4-1: USB disconnect, device number 25 [ 85.372434][ T10] usblp0: removed [ 85.443652][ T488] usb 1-1: device descriptor read/64, error -71 [ 85.583841][ T3085] fuse: Bad value for 'fd' [ 85.693671][ T488] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 85.823670][ T488] usb 1-1: device descriptor read/64, error -71 [ 86.063633][ T488] usb 1-1: device descriptor read/64, error -71 [ 86.173749][ T488] usb usb1-port1: attempt power cycle [ 86.343942][ T3125] cgroup: No subsys list or none specified [ 86.513691][ T488] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 86.545950][ T488] usb 1-1: device descriptor read/8, error -71 [ 86.684868][ T488] usb 1-1: device descriptor read/8, error -71 [ 86.887937][ T3171] overlayfs: failed to clone upperpath [ 86.895458][ T3170] overlayfs: failed to clone upperpath [ 86.901201][ T3170] overlayfs: failed to clone upperpath [ 86.907409][ T3170] overlayfs: failed to clone upperpath [ 86.913093][ T3170] overlayfs: failed to clone upperpath [ 86.918992][ T3170] overlayfs: failed to clone upperpath [ 86.924704][ T3170] overlayfs: failed to clone upperpath [ 86.930450][ T3170] overlayfs: failed to clone upperpath [ 86.936043][ T488] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 86.944059][ T3170] overlayfs: failed to clone upperpath [ 86.950327][ T3170] overlayfs: failed to clone upperpath [ 86.956083][ T3170] overlayfs: failed to clone upperpath [ 86.961770][ T3170] overlayfs: failed to clone upperpath [ 86.967799][ T3170] overlayfs: failed to clone upperpath [ 86.974115][ T3170] overlayfs: failed to clone upperpath [ 86.974712][ T488] usb 1-1: device descriptor read/8, error -71 [ 86.987830][ T3170] overlayfs: failed to clone upperpath [ 86.995408][ T3170] overlayfs: failed to clone upperpath [ 87.002064][ T36] audit: type=1400 audit(1751661552.201:517): avc: denied { ioctl } for pid=3173 comm="syz.3.988" path="/163/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.014047][ T3170] overlayfs: failed to clone upperpath [ 87.035357][ T3174] bridge_slave_1: left allmulticast mode [ 87.035600][ T3170] overlayfs: failed to clone upperpath [ 87.041018][ T3174] bridge_slave_1: left promiscuous mode [ 87.041134][ T3174] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.059961][ T3170] overlayfs: failed to clone upperpath [ 87.060055][ T3174] bridge_slave_0: left allmulticast mode [ 87.071138][ T3174] bridge_slave_0: left promiscuous mode [ 87.071498][ T3170] overlayfs: failed to clone upperpath [ 87.076841][ T3174] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.089755][ T3170] overlayfs: failed to clone upperpath [ 87.095813][ T3170] overlayfs: failed to clone upperpath [ 87.101632][ T3170] overlayfs: failed to clone upperpath [ 87.107489][ T3170] overlayfs: failed to clone upperpath [ 87.113164][ T3170] overlayfs: failed to clone upperpath [ 87.120590][ T3170] overlayfs: failed to clone upperpath [ 87.121130][ T488] usb 1-1: device descriptor read/8, error -71 [ 87.132749][ T3170] overlayfs: failed to clone upperpath [ 87.139168][ T3170] overlayfs: failed to clone upperpath [ 87.145846][ T3170] overlayfs: failed to clone upperpath [ 87.151589][ T3170] overlayfs: failed to clone upperpath [ 87.157615][ T3170] overlayfs: failed to clone upperpath [ 87.164221][ T3170] overlayfs: failed to clone upperpath [ 87.170089][ T3170] overlayfs: failed to clone upperpath [ 87.176362][ T3170] overlayfs: failed to clone upperpath [ 87.182432][ T3170] overlayfs: failed to clone upperpath [ 87.190298][ T3170] overlayfs: failed to clone upperpath [ 87.196824][ T3170] overlayfs: failed to clone upperpath [ 87.202640][ T3170] overlayfs: failed to clone upperpath [ 87.208519][ T3170] overlayfs: failed to clone upperpath [ 87.214794][ T3170] overlayfs: failed to clone upperpath [ 87.220710][ T3170] overlayfs: failed to clone upperpath [ 87.226732][ T3170] overlayfs: failed to clone upperpath [ 87.232905][ T3170] overlayfs: failed to clone upperpath [ 87.235159][ T488] usb usb1-port1: unable to enumerate USB device [ 87.245701][ T3170] overlayfs: failed to clone upperpath [ 87.251770][ T3170] overlayfs: failed to clone upperpath [ 87.257812][ T3170] overlayfs: failed to clone upperpath [ 87.264802][ T3170] overlayfs: failed to clone upperpath [ 87.271897][ T3170] overlayfs: failed to clone upperpath [ 87.284280][ T3170] overlayfs: failed to clone upperpath [ 87.295111][ T3170] overlayfs: failed to clone upperpath [ 87.311341][ T3170] overlayfs: failed to clone upperpath [ 87.327332][ T3170] overlayfs: failed to clone upperpath [ 87.333261][ T3170] overlayfs: failed to clone upperpath [ 87.340888][ T3170] overlayfs: failed to clone upperpath [ 87.347090][ T3170] overlayfs: failed to clone upperpath [ 87.352931][ T3170] overlayfs: failed to clone upperpath [ 87.359035][ T3170] overlayfs: failed to clone upperpath [ 87.367113][ T3170] overlayfs: failed to clone upperpath [ 87.373983][ T3170] overlayfs: failed to clone upperpath [ 87.379732][ T3170] overlayfs: failed to clone upperpath [ 87.388410][ T3170] overlayfs: failed to clone upperpath [ 87.394850][ T3170] overlayfs: failed to clone upperpath [ 87.401079][ T3170] overlayfs: failed to clone upperpath [ 87.409289][ T3170] overlayfs: failed to clone upperpath [ 87.415325][ T3170] overlayfs: failed to clone upperpath [ 87.421673][ T3170] overlayfs: failed to clone upperpath [ 87.445890][ T3197] binder: Unknown parameter 'fscontext?}' [ 87.460353][ T36] audit: type=1400 audit(1751661552.661:518): avc: denied { create } for pid=3199 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 87.746344][ T3237] /dev/rnullb0: Can't lookup blockdev [ 87.877704][ T3252] option changes via remount are deprecated (pid=3251 comm=syz.0.1017) [ 87.906929][ T3252] fuse: Bad value for 'group_id' [ 87.911878][ T3252] fuse: Bad value for 'group_id' [ 88.021294][ T3255] loop2: detected capacity change from 0 to 7 [ 88.219376][ T3271] overlayfs: failed to clone upperpath [ 88.225445][ T3271] overlayfs: failed to clone upperpath [ 88.383649][ T10] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 88.444258][ T3285] tipc: Enabled bearer , priority 0 [ 88.482089][ T3293] overlayfs: failed to resolve './file1': -2 [ 88.500430][ T3298] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1034'. [ 88.523640][ T10] usb 1-1: device descriptor read/64, error -71 [ 88.759858][ T3322] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1044'. [ 88.769054][ T10] usb 1-1: device descriptor read/64, error -71 [ 88.770684][ T3322] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1044'. [ 89.013645][ T10] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 89.143652][ T10] usb 1-1: device descriptor read/64, error -71 [ 89.383675][ T10] usb 1-1: device descriptor read/64, error -71 [ 89.496760][ T10] usb usb1-port1: attempt power cycle [ 89.510174][ T3344] syz.1.1053 (3344): attempted to duplicate a private mapping with mremap. This is not supported. [ 89.521749][ T3344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3344 comm=syz.1.1053 [ 89.563678][ T9] tipc: Node number set to 2619430634 [ 89.843665][ T10] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 89.864615][ T10] usb 1-1: device descriptor read/8, error -71 [ 89.995163][ T10] usb 1-1: device descriptor read/8, error -71 [ 90.100787][ T36] audit: type=1400 audit(1751661555.301:519): avc: denied { create } for pid=3368 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.195321][ T3389] tipc: Started in network mode [ 90.201797][ T3389] tipc: Node identity ac14140f, cluster identity 4711 [ 90.209036][ T3389] tipc: New replicast peer: 255.255.255.255 [ 90.215512][ T3389] tipc: Enabled bearer , priority 10 [ 90.233665][ T10] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 90.254605][ T10] usb 1-1: device descriptor read/8, error -71 [ 90.371147][ T3420] overlayfs: failed to clone lowerpath [ 90.378055][ T3420] /dev/loop0: Can't lookup blockdev [ 90.383651][ T3420] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1080'. [ 90.384787][ T10] usb 1-1: device descriptor read/8, error -71 [ 90.399262][ T3420] gretap0: entered promiscuous mode [ 90.405952][ T3420] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1080'. [ 90.415324][ T3420] 0{X: renamed from gretap0 [ 90.421091][ T3420] 0{X: left promiscuous mode [ 90.427642][ T3420] 0{X: entered allmulticast mode [ 90.435916][ T3420] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 90.523724][ T10] usb usb1-port1: unable to enumerate USB device [ 91.055752][ T3458] 9pnet_fd: Insufficient options for proto=fd [ 91.070309][ T3460] 9pnet_fd: Insufficient options for proto=fd [ 91.169464][ T36] audit: type=1326 audit(1751661556.371:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.1099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2a858e929 code=0x0 [ 91.343646][ T10] tipc: Node number set to 2886997007 [ 91.360922][ T36] audit: type=1400 audit(1751661556.561:521): avc: denied { getopt } for pid=3480 comm="syz.3.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.283985][ T3496] overlayfs: failed to clone upperpath [ 93.674119][ T3532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1115'. [ 93.846694][ T3534] /dev/rnullb0: Can't lookup blockdev [ 93.943218][ T3547] /dev/loop0: Can't lookup blockdev [ 93.948658][ T3547] /dev/loop0: Can't lookup blockdev [ 93.954029][ T3547] /dev/loop0: Can't lookup blockdev [ 93.959360][ T3547] /dev/loop0: Can't lookup blockdev [ 93.964704][ T3547] /dev/loop0: Can't lookup blockdev [ 93.970442][ T3547] /dev/loop0: Can't lookup blockdev [ 93.976028][ T3547] /dev/loop0: Can't lookup blockdev [ 93.978826][ T3553] overlayfs: failed to clone lowerpath [ 93.981565][ T3547] /dev/loop0: Can't lookup blockdev [ 93.992334][ T3547] /dev/loop0: Can't lookup blockdev [ 93.998900][ T3547] /dev/loop0: Can't lookup blockdev [ 94.004409][ T3547] /dev/loop0: Can't lookup blockdev [ 94.009750][ T3547] /dev/loop0: Can't lookup blockdev [ 94.015228][ T3547] /dev/loop0: Can't lookup blockdev [ 94.016829][ T3560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=3560 comm=syz.4.1124 [ 94.020558][ T3547] /dev/loop0: Can't lookup blockdev [ 94.033607][ T3561] netlink: 5308 bytes leftover after parsing attributes in process `syz.4.1124'. [ 94.038555][ T3547] /dev/loop0: Can't lookup blockdev [ 94.048115][ T3560] netlink: 5308 bytes leftover after parsing attributes in process `syz.4.1124'. [ 94.053451][ T3547] /dev/loop0: Can't lookup blockdev [ 94.067991][ T3547] /dev/loop0: Can't lookup blockdev [ 94.073299][ T3547] /dev/loop0: Can't lookup blockdev [ 94.078636][ T3547] /dev/loop0: Can't lookup blockdev [ 94.084060][ T3547] /dev/loop0: Can't lookup blockdev [ 94.089342][ T3547] /dev/loop0: Can't lookup blockdev [ 94.094852][ T3547] /dev/loop0: Can't lookup blockdev [ 94.100349][ T3547] /dev/loop0: Can't lookup blockdev [ 94.105740][ T3547] /dev/loop0: Can't lookup blockdev [ 94.111037][ T3547] /dev/loop0: Can't lookup blockdev [ 94.116591][ T3547] /dev/loop0: Can't lookup blockdev [ 94.121942][ T3547] /dev/loop0: Can't lookup blockdev [ 94.127294][ T3547] /dev/loop0: Can't lookup blockdev [ 94.132603][ T3547] /dev/loop0: Can't lookup blockdev [ 94.138010][ T3547] /dev/loop0: Can't lookup blockdev [ 94.143318][ T3547] /dev/loop0: Can't lookup blockdev [ 94.148680][ T3547] /dev/loop0: Can't lookup blockdev [ 94.153989][ T3547] /dev/loop0: Can't lookup blockdev [ 94.163704][ T3547] /dev/loop0: Can't lookup blockdev [ 94.169072][ T3547] /dev/loop0: Can't lookup blockdev [ 94.179647][ T3547] /dev/loop0: Can't lookup blockdev [ 94.185137][ T3547] /dev/loop0: Can't lookup blockdev [ 94.190467][ T3547] /dev/loop0: Can't lookup blockdev [ 94.196874][ T3547] /dev/loop0: Can't lookup blockdev [ 94.202457][ T36] audit: type=1400 audit(1751661559.411:522): avc: denied { create } for pid=3563 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.210614][ T3547] /dev/loop0: Can't lookup blockdev [ 94.228130][ T3547] /dev/loop0: Can't lookup blockdev [ 94.233530][ T3547] /dev/loop0: Can't lookup blockdev [ 94.239987][ T3547] /dev/loop0: Can't lookup blockdev [ 94.245637][ T3547] /dev/loop0: Can't lookup blockdev [ 94.251193][ T3547] /dev/loop0: Can't lookup blockdev [ 94.256638][ T3547] /dev/loop0: Can't lookup blockdev [ 94.262137][ T3547] /dev/loop0: Can't lookup blockdev [ 94.267609][ T3547] /dev/loop0: Can't lookup blockdev [ 94.272949][ T3547] /dev/loop0: Can't lookup blockdev [ 94.278631][ T3547] /dev/loop0: Can't lookup blockdev [ 94.284232][ T3547] /dev/loop0: Can't lookup blockdev [ 94.289826][ T3547] /dev/loop0: Can't lookup blockdev [ 94.295733][ T3547] /dev/loop0: Can't lookup blockdev [ 94.301188][ T3547] /dev/loop0: Can't lookup blockdev [ 94.306698][ T3547] /dev/loop0: Can't lookup blockdev [ 94.311694][ T3581] SELinux: security_context_str_to_sid () failed with errno=-22 [ 94.312254][ T3547] /dev/loop0: Can't lookup blockdev [ 94.325105][ T3547] /dev/loop0: Can't lookup blockdev [ 94.330432][ T3547] /dev/loop0: Can't lookup blockdev [ 94.336425][ T3547] /dev/loop0: Can't lookup blockdev [ 94.341785][ T3547] /dev/loop0: Can't lookup blockdev [ 94.347644][ T3547] /dev/loop0: Can't lookup blockdev [ 94.353014][ T3547] /dev/loop0: Can't lookup blockdev [ 94.358533][ T3547] /dev/loop0: Can't lookup blockdev [ 94.364011][ T3547] /dev/loop0: Can't lookup blockdev [ 94.369765][ T3547] /dev/loop0: Can't lookup blockdev [ 94.418108][ T3587] rust_binder: 3587: no such ref 0 [ 94.475418][ T3588] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 94.482650][ T3588] rust_binder: Write failure EINVAL in pid:530 [ 94.483095][ T3588] rust_binder: 3588: no such ref 0 [ 94.582479][ T36] audit: type=1400 audit(1751661559.781:523): avc: denied { getopt } for pid=3601 comm="syz.4.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.773669][ T305] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 94.923648][ T305] usb 1-1: Using ep0 maxpacket: 16 [ 94.929972][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.941298][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.951120][ T305] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.964043][ T305] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.973089][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.981992][ T305] usb 1-1: config 0 descriptor?? [ 95.114917][ T3610] netlink: 'syz.4.1141': attribute type 5 has an invalid length. [ 95.252785][ T36] audit: type=1400 audit(1751661560.451:524): avc: denied { name_bind } for pid=3616 comm="syz.1.1143" src=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 95.373084][ T3637] overlayfs: failed to clone lowerpath [ 95.379816][ T3637] overlayfs: failed to clone upperpath [ 95.389579][ T305] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 95.402017][ T305] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 95.410473][ T305] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 95.421929][ T305] microsoft 0003:045E:07DA.000A: no inputs found [ 95.428300][ T305] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 95.594190][ T488] usb 1-1: USB disconnect, device number 47 [ 95.914116][ T3654] tmpfs: Bad value for 'nr_inodes' [ 96.353675][ T488] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 96.466606][ T36] audit: type=1400 audit(1751661561.671:525): avc: denied { getopt } for pid=3667 comm="syz.4.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.496318][ T3670] netlink: 'syz.4.1159': attribute type 5 has an invalid length. [ 96.504762][ T488] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.514995][ T488] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.524745][ T488] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.539705][ T488] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 96.548994][ T488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 96.557223][ T488] usb 1-1: Product: syz [ 96.561396][ T488] usb 1-1: Manufacturer: syz [ 96.566025][ T488] usb 1-1: SerialNumber: syz [ 96.606406][ T3672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1160'. [ 96.772614][ T3660] fuse: Bad value for 'user_id' [ 96.777587][ T3660] fuse: Bad value for 'user_id' [ 96.783030][ T36] audit: type=1400 audit(1751661561.981:526): avc: denied { ioctl } for pid=3659 comm="syz.0.1155" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 96.809636][ T488] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 96.862151][ T3690] batadv_slave_0: entered promiscuous mode [ 96.870222][ T3689] batadv_slave_0: left promiscuous mode [ 97.011038][ T488] usb 1-1: USB disconnect, device number 48 [ 97.017534][ T488] usblp0: removed [ 97.053155][ T3698] overlayfs: failed to clone upperpath [ 97.059158][ T3698] overlayfs: failed to clone upperpath [ 97.121282][ T3705] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1175'. [ 97.392763][ T3711] netlink: 'syz.1.1177': attribute type 5 has an invalid length. [ 97.759598][ T3722] overlay: ./file0 is not a directory [ 97.780638][ T3729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1183'. [ 98.345429][ T36] audit: type=1400 audit(1751661563.551:527): avc: denied { nlmsg_read } for pid=3745 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 98.375931][ T3752] netlink: 'syz.4.1193': attribute type 5 has an invalid length. [ 98.438999][ T3771] 2N: renamed from vcan0 (while UP) [ 98.532507][ T3783] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 98.695318][ T36] audit: type=1400 audit(1751661563.901:528): avc: denied { ioctl } for pid=3798 comm="syz.0.1207" path="socket:[23549]" dev="sockfs" ino=23549 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.231877][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.264733][ T3824] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1218'. [ 99.273853][ T3824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 99.282990][ T3824] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 99.432783][ T3832] overlayfs: failed to clone upperpath [ 99.954023][ T3845] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 100.152944][ T3863] /dev/rnullb0: Can't lookup blockdev [ 100.339284][ T36] audit: type=1400 audit(1751661565.541:529): avc: denied { mount } for pid=3864 comm="syz.4.1234" name="/" dev="ramfs" ino=24694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.397557][ T36] audit: type=1400 audit(1751661565.571:530): avc: denied { mounton } for pid=3864 comm="syz.4.1234" path="/" dev="ramfs" ino=24694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 100.595853][ T36] audit: type=1400 audit(1751661565.801:531): avc: denied { create } for pid=3887 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 100.853188][ T36] audit: type=1400 audit(1751661566.051:532): avc: denied { listen } for pid=3907 comm="syz.3.1248" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.292168][ T36] audit: type=1400 audit(1751661566.491:533): avc: denied { setopt } for pid=3926 comm="syz.1.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.312886][ T1269] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 101.312959][ T582] Bluetooth: hci0: command tx timeout [ 101.324416][ T3817] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.557674][ T3942] /dev/rnullb0: Can't lookup blockdev [ 101.851231][ T3948] 9pnet_fd: Insufficient options for proto=fd [ 101.887108][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x7 [ 101.895833][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x7 [ 101.903298][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.911462][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.918924][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.926378][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.933849][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.941293][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.948826][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.956270][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.963714][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.971141][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.978570][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.986039][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 101.993846][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.001540][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.009505][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.017023][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.024476][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.031864][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.039281][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.046694][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.054203][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.061742][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.069582][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.077199][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.084629][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.092099][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.099607][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.107464][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.114880][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.122297][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.130060][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.137560][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.144994][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.152380][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.160137][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.167538][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.175306][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x7 [ 102.182701][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x7 [ 102.190117][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.197710][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.205567][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.212953][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.220617][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.228019][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.235544][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.242939][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.250350][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.257844][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.265435][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.272830][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.280268][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.287674][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.295313][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.302712][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.310208][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.317720][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.325163][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.332534][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.339933][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.347418][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.354904][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.362285][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.369820][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.377233][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.385176][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.392575][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.400135][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.407669][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.415237][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.422639][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.430187][ T488] hid-generic 0000:009B:07FF.000B: unknown main item tag 0x0 [ 102.441345][ T488] hid-generic 0000:009B:07FF.000B: hidraw0: HID v0.03 Device [syz1] on syz1 [ 102.460471][ T3957] fido_id[3957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.481040][ T3960] binder: Bad value for 'stats' [ 102.509041][ T36] audit: type=1400 audit(1751661567.711:534): avc: denied { mount } for pid=3955 comm="syz.1.1263" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 102.544579][ T3968] overlayfs: failed to clone upperpath [ 102.544606][ T3967] overlayfs: failed to clone upperpath [ 102.571002][ T3973] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3973 comm=syz.1.1268 [ 102.578878][ T3975] rust_binder: 3975: no such ref 2 [ 102.727273][ T36] audit: type=1400 audit(1751661567.931:535): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.983650][ T488] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 103.134857][ T488] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 103.144116][ T488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.152715][ T488] usb 1-1: config 0 descriptor?? [ 103.363096][ T36] audit: type=1400 audit(1751661568.561:536): avc: denied { ioctl } for pid=3986 comm="syz.0.1272" path="socket:[24509]" dev="sockfs" ino=24509 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.457969][ T4001] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1277'. [ 103.938696][ T4023] rust_binder: Error while translating object. [ 103.938735][ T4023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.944962][ T4023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:616 [ 103.963557][ T4025] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1286'. [ 103.985291][ T4025] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 128, size: 225) [ 103.985353][ T4025] rust_binder: Error while translating object. [ 103.995970][ T4025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.002290][ T4025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:619 [ 104.016985][ T36] audit: type=1400 audit(1751661569.221:537): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 104.060152][ T488] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 104.071389][ T488] asix 1-1:0.0: probe with driver asix failed with error -71 [ 104.082338][ T488] usb 1-1: USB disconnect, device number 49 [ 104.232876][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.240027][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.247165][ T4027] bridge_slave_0: entered allmulticast mode [ 104.253382][ T4027] bridge_slave_0: entered promiscuous mode [ 104.262925][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.270359][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.278718][ T4027] bridge_slave_1: entered allmulticast mode [ 104.285369][ T4027] bridge_slave_1: entered promiscuous mode [ 104.352560][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.359749][ T4027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.367058][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.374108][ T4027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.393724][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.402256][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.412314][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.419432][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.428741][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.436176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.486555][ T4027] veth0_vlan: entered promiscuous mode [ 104.500328][ T4027] veth1_macvtap: entered promiscuous mode [ 104.537992][ T4048] netlink: 'syz.5.1289': attribute type 2 has an invalid length. [ 105.423387][ T4065] syzkaller0: entered promiscuous mode [ 105.429143][ T4065] syzkaller0: entered allmulticast mode [ 105.534497][ T4072] rust_binder: Write failure EINVAL in pid:14 [ 105.535472][ T4072] rust_binder: Write failure EINVAL in pid:14 [ 105.543926][ T4072] rust_binder: 4072: no such ref 2 [ 105.555472][ T4072] rust_binder: Write failure EINVAL in pid:14 [ 105.903648][ T305] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 106.063669][ T305] usb 6-1: Using ep0 maxpacket: 8 [ 106.071292][ T305] usb 6-1: unable to get BOS descriptor or descriptor too short [ 106.080401][ T305] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 106.089284][ T305] usb 6-1: config 0 has no interface number 0 [ 106.095622][ T305] usb 6-1: config 0 interface 28 altsetting 78 bulk endpoint 0x9 has invalid maxpacket 32 [ 106.107862][ T305] usb 6-1: config 0 interface 28 has no altsetting 0 [ 106.119185][ T305] usb 6-1: New USB device found, idVendor=5050, idProduct=0301, bcdDevice=e9.e2 [ 106.128857][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.137158][ T305] usb 6-1: Product: syz [ 106.143160][ T305] usb 6-1: Manufacturer: syz [ 106.148206][ T305] usb 6-1: SerialNumber: syz [ 106.153647][ T305] usb 6-1: config 0 descriptor?? [ 106.159187][ T4074] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 106.330003][ T36] audit: type=1326 audit(1751661571.531:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.4.1309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe97cd8e929 code=0x0 [ 106.371311][ T305] ftdi_sio 6-1:0.28: FTDI USB Serial Device converter detected [ 106.383697][ T305] ftdi_sio ttyUSB0: unknown device type: 0xe9e2 [ 106.394566][ T305] usb 6-1: USB disconnect, device number 2 [ 106.401365][ T305] ftdi_sio 6-1:0.28: device disconnected [ 106.506797][ T4114] futex_wake_op: syz.4.1318 tries to shift op by 144; fix this program [ 106.883467][ T4141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.883499][ T4141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 106.894104][ T4142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.913124][ T36] audit: type=1400 audit(1751661572.111:539): avc: denied { append } for pid=4145 comm="syz.5.1329" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 116.483686][ T306] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.637135][ T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.652093][ T306] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 116.653731][ T4204] overlayfs: missing 'lowerdir' [ 116.666013][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.666711][ T306] usb 6-1: config 0 descriptor?? [ 116.884696][ T4230] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 116.898842][ T4230] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 116.927348][ T306] usbhid 6-1:0.0: can't add hid device: -71 [ 116.955631][ T306] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 116.977215][ T306] usb 6-1: USB disconnect, device number 3 [ 116.984813][ T4237] input: syz0 as /devices/virtual/input/input16 [ 117.097992][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 117.270092][ T36] audit: type=1326 audit(1751661582.471:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.4.1366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe97cd8e929 code=0x0 [ 117.468530][ T4269] rust_binder: Error while translating object. [ 117.468551][ T4269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 117.474779][ T4269] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 117.484251][ T4269] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:59 [ 117.698587][ T36] audit: type=1400 audit(1751661582.901:541): avc: denied { create } for pid=4292 comm="syz.3.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 118.324355][ T4316] overlayfs: failed to resolve './file1': -2 [ 118.330801][ T4316] overlayfs: failed to resolve './file1': -2 [ 118.644453][ T4323] overlayfs: failed to resolve './bus': -2 [ 118.993638][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 119.145701][ T10] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 119.156416][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1088, setting to 1024 [ 119.167470][ T10] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 119.178873][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.188144][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.196268][ T10] usb 6-1: Product: ﳿ [ 119.200549][ T10] usb 6-1: Manufacturer: 顚쏈㈉쁿짨䨙氩빿퐶仞蜩ބ䭖즛瞭㗱ﹿ [ 119.211017][ T10] usb 6-1: SerialNumber: syz [ 119.421327][ T36] audit: type=1400 audit(1751661584.621:542): avc: denied { ioctl } for pid=4327 comm="syz.5.1392" path="/dev/usbmon5" dev="devtmpfs" ino=106 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.286912][ T36] audit: type=1400 audit(1751661585.491:543): avc: denied { create } for pid=4419 comm="syz.4.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 120.350721][ T4431] fuse: Bad value for 'rootmode' [ 120.381246][ T36] audit: type=1400 audit(1751661585.581:544): avc: denied { execute } for pid=4436 comm="syz.3.1432" name="file0" dev="ramfs" ino=27085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 120.406310][ T4438] overlayfs: failed to clone upperpath [ 120.411877][ T36] audit: type=1400 audit(1751661585.611:545): avc: denied { execute_no_trans } for pid=4436 comm="syz.3.1432" path="/file0" dev="ramfs" ino=27085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 120.435946][ T4438] overlayfs: failed to clone upperpath [ 120.507827][ T4440] overlayfs: missing 'workdir' [ 120.513256][ T4441] overlayfs: failed to clone upperpath [ 120.513256][ T4440] overlayfs: failed to clone upperpath [ 120.718042][ T36] audit: type=1400 audit(1751661585.921:546): avc: denied { bind } for pid=4448 comm="syz.3.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.719261][ T4449] fuse: Bad value for 'fd' [ 121.117544][ T36] audit: type=1400 audit(1751661586.321:547): avc: denied { getopt } for pid=4460 comm="syz.4.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.336293][ T36] audit: type=1400 audit(1751661586.541:548): avc: denied { create } for pid=4484 comm="syz.4.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 121.568817][ T4495] fuse: Unknown parameter 'rootJErmode' [ 121.677226][ T10] cdc_ncm 6-1:1.0: bind() failure [ 121.691776][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 121.700262][ T10] cdc_ncm 6-1:1.1: bind() failure [ 121.709212][ T10] usb 6-1: USB disconnect, device number 4 [ 121.797106][ T4522] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 121.810757][ T4522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4522 comm=syz.1.1466 [ 121.836829][ T4526] rust_binder: Write failure EINVAL in pid:85 [ 121.837145][ T4527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.895909][ T4543] netlink: 'syz.3.1475': attribute type 4 has an invalid length. [ 121.912071][ T4543] netlink: 'syz.3.1475': attribute type 5 has an invalid length. [ 121.920249][ T4543] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 122.288594][ T4589] TCP: out of memory -- consider tuning tcp_mem [ 122.295235][ T4589] ------------[ cut here ]------------ [ 122.300721][ T4589] WARNING: CPU: 0 PID: 4589 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790 [ 122.310355][ T4589] Modules linked in: [ 122.314331][ T4589] CPU: 0 UID: 0 PID: 4589 Comm: syz.5.1489 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 122.327948][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.338537][ T4589] RIP: 0010:inet_sock_destruct+0x681/0x790 [ 122.344408][ T4589] Code: a3 e8 d3 e6 c8 fc 0f 0b e9 53 fe ff ff e8 c7 e6 c8 fc 0f 0b e9 92 fe ff ff e8 bb e6 c8 fc 0f 0b e9 c4 fe ff ff e8 af e6 c8 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff [ 122.364248][ T4589] RSP: 0018:ffffc90004b2f9c8 EFLAGS: 00010293 [ 122.370324][ T4589] RAX: ffffffff84bcbc81 RBX: 0000000080001000 RCX: ffff888130f5a600 [ 122.378368][ T4589] RDX: 0000000000000000 RSI: 0000000080001000 RDI: 0000000000000000 [ 122.386473][ T4589] RBP: ffffc90004b2fa10 R08: ffff88811646517f R09: 1ffff11022c8ca2f [ 122.394686][ T4589] R10: dffffc0000000000 R11: ffffed1022c8ca30 R12: ffff888116465000 [ 122.403008][ T4589] R13: ffff888116465000 R14: ffff888116465164 R15: 1ffff11022c8ca02 [ 122.410999][ T4589] FS: 00007fde453456c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 122.420492][ T4589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.427209][ T4589] CR2: 0000000000000000 CR3: 0000000134702000 CR4: 00000000003526b0 [ 122.435335][ T4589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.444064][ T4589] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.452170][ T4589] Call Trace: [ 122.455483][ T4589] [ 122.458423][ T4589] ? __cfi_inet_sock_destruct+0x10/0x10 [ 122.463999][ T4589] __sk_destruct+0x68/0x6a0 [ 122.468507][ T4589] ? __sk_free+0x304/0x410 [ 122.472930][ T4589] __sk_free+0x313/0x410 [ 122.477296][ T4589] sk_free+0x58/0xb0 [ 122.481197][ T4589] tcp_close+0xc4/0x120 [ 122.485438][ T4589] inet_release+0x1b4/0x2c0 [ 122.489945][ T4589] sock_close+0xda/0x280 [ 122.494491][ T4589] ? __cfi_sock_close+0x10/0x10 [ 122.499876][ T4589] __fput+0x1fe/0xa00 [ 122.503881][ T4589] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 122.509457][ T4589] ____fput+0x20/0x30 [ 122.513425][ T4589] task_work_run+0x1e3/0x250 [ 122.518043][ T4589] ? __cfi_task_work_run+0x10/0x10 [ 122.523153][ T4589] get_signal+0x1307/0x14f0 [ 122.527686][ T4589] ? __kasan_check_write+0x18/0x20 [ 122.532806][ T4589] ? _raw_spin_lock+0x8c/0x120 [ 122.537677][ T4589] ? __cfi__raw_spin_lock+0x10/0x10 [ 122.542880][ T4589] ? fput+0x1a5/0x240 [ 122.546906][ T4589] arch_do_signal_or_restart+0x96/0x720 [ 122.552460][ T4589] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 122.558639][ T4589] ? __kasan_check_write+0x18/0x20 [ 122.563780][ T4589] syscall_exit_to_user_mode+0x58/0xb0 [ 122.569251][ T4589] do_syscall_64+0x64/0xf0 [ 122.573691][ T4589] ? clear_bhb_loop+0x50/0xa0 [ 122.578371][ T4589] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.584298][ T4589] RIP: 0033:0x7fde4458e929 [ 122.588801][ T4589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.608543][ T4589] RSP: 002b:00007fde45345038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 122.617106][ T4589] RAX: 0000000000000000 RBX: 00007fde447b5fa0 RCX: 00007fde4458e929 [ 122.625286][ T4589] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 122.634004][ T4589] RBP: 00007fde44610b39 R08: 0000000000000000 R09: 0000000000000000 [ 122.643629][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.652238][ T4589] R13: 0000000000000000 R14: 00007fde447b5fa0 R15: 00007fff0d6ff128 [ 122.661097][ T4589] [ 122.664175][ T4589] ---[ end trace 0000000000000000 ]---