last executing test programs: 3m33.848332869s ago: executing program 0 (id=505): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x2) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x1024000, &(0x7f00000000c0)={[{@verity_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@nfs_export_on}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) umount2(&(0x7f0000000180)='./bus\x00', 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000640), 0xe0400, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000400)=0x3fd, 0x4) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x24c01, 0x191) setxattr$incfs_metadata(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)="9e2a9e5b02cf39cae8d3071310c2ecb7b9ad6c53f199dbd300fd79c6856350acca74a67eb567b7c6fb241e8ac6d1dfef31de92ecd9f2cce927754afeacb053072d987047182251eb00845d941f", 0x4d, 0x2) io_setup(0x202, &(0x7f0000000200)=0x0) getpeername$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000007c0)=r8) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r9, 0x0, 0x0, 0x3}]) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) bind$inet(r9, &(0x7f0000000680)={0x2, 0x4e23, @broadcast}, 0x10) 3m33.77123262s ago: executing program 0 (id=507): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xfffffffffffffff7, 0x4, 0x6, 0x4, 0xfffffffffffffffe}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x5, 0xfff, 0x9, 0x3, 0x2, 0x1, 0xfa, 0x81, 0x3, 0x1, 0xf, 0xf9, 0x7fffffffffffffff}, {0x0, 0x81, 0x0, 0x9, 0xbc, 0xf, 0x3, 0xe, 0x3d, 0x9e, 0x47, 0x61}, {0x2, 0x4, 0x6, 0x1, 0x4, 0x4, 0xf, 0x9, 0x4, 0x2, 0xd, 0xab, 0xfffffffffffffff9}], 0x10000}) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20042, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3m33.564089471s ago: executing program 0 (id=510): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000440), 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 3m33.561819811s ago: executing program 0 (id=511): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000002c0)={0xffffffffcefecfc2, 0x87e7, 0x1, 0x1000, 0x0, [0x81, 0xfffffe31, 0xda, 0x4]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) memfd_secret(0x80000) write$cgroup_pressure(r1, &(0x7f0000000600)={'full', 0x20, 0xffffffffffffff01, 0x20, 0x8000}, 0x2f) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003033dd608f80600b0a85d0102030109021b00010908b006090405090184435f0709052c"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) r6 = syz_clone(0xa5102000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r3, 0x7, r4, &(0x7f0000000180)={r5, r4, 0xfffffffc}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x6, 0xf5, 0x57e, 0x8, 0x2, 0x7ff, 0x3, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0xfffffffe, 0x400, 0x3, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0x40000ff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0x0, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0xffffffff, 0x4, 0x8003, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x2f}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r8, 0x0, r8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) 3m32.374985748s ago: executing program 0 (id=523): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='lo\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x3, 0x3, 0xa, 0x3}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r2, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)="68b3998d94f649ae7fbb1d9d21aae2ac469ddb1dd1643461a321385804eb801c91373f0a812fcfe23ad953a9e76f5a1cabc37afddf4e42e4c53329c2d70d21443b623bd7de113d887db8739a55d1dcbf21ce047fcafcca7785b0010ed0a989fede2c94bb2689fa396aa70df340ad595fa25c7afab475055539f82a14d9be70f5c4abcd5241e478f4798c994abcbf089347f34b70daff60f5a63b645440d7222d3e74222542f75576abae739e350c3b8fd2ab545cb4752438aa91b6b2223545c78a3f31ddfab63f1c2407cb325b9e4c50c02f6c7e22776ce199d30868feb074f3d71abc", 0xe3) 3m32.222706219s ago: executing program 0 (id=527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x2}) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1d0, 0x5, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x81b5706db958b54, 0x10, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x7, 0x6, {0x6, 0x22, "c45c6489"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x50, 0x0, &(0x7f0000000200)="8b5071c6cd864231b996623c8df2e03839b8dfb0d7865c6fefe39ea389c7aa220de978dcab534586578e40fae0a3789b088ab8b56d769cd2cadefaee2a968ca46b3383b56ef623398a2938a4cff98b31"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x2}) (async) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) close(r1) (async) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1d0, 0x5, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x81b5706db958b54, 0x10, 0x0, 0x7}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x7, 0x6, {0x6, 0x22, "c45c6489"}}, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x50, 0x0, &(0x7f0000000200)="8b5071c6cd864231b996623c8df2e03839b8dfb0d7865c6fefe39ea389c7aa220de978dcab534586578e40fae0a3789b088ab8b56d769cd2cadefaee2a968ca46b3383b56ef623398a2938a4cff98b31"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000040)) (async) 3m32.17115798s ago: executing program 32 (id=527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x2}) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1d0, 0x5, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x81b5706db958b54, 0x10, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x7, 0x6, {0x6, 0x22, "c45c6489"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x50, 0x0, &(0x7f0000000200)="8b5071c6cd864231b996623c8df2e03839b8dfb0d7865c6fefe39ea389c7aa220de978dcab534586578e40fae0a3789b088ab8b56d769cd2cadefaee2a968ca46b3383b56ef623398a2938a4cff98b31"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x2}) (async) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) close(r1) (async) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1d0, 0x5, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x81b5706db958b54, 0x10, 0x0, 0x7}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x7, 0x6, {0x6, 0x22, "c45c6489"}}, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x50, 0x0, &(0x7f0000000200)="8b5071c6cd864231b996623c8df2e03839b8dfb0d7865c6fefe39ea389c7aa220de978dcab534586578e40fae0a3789b088ab8b56d769cd2cadefaee2a968ca46b3383b56ef623398a2938a4cff98b31"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000040)) (async) 21.273355007s ago: executing program 4 (id=3910): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000042, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x281, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x7, 0x9, 0xc, 0x16, 0xb, 0x7, 0x4, 0x14, 0x1}}) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r4, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000006b40)={0x2020}, 0xfffffffffffffc8f) (async) read$FUSE(r6, &(0x7f0000006b40)={0x2020}, 0xfffffffffffffc8f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 21.102115758s ago: executing program 4 (id=3917): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000001a80), 0x7, 0x9001) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x1000000012abec) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) 21.075085898s ago: executing program 4 (id=3918): syz_open_dev$tty20(0xc, 0x4, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5e114b60, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a3, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) 21.054250708s ago: executing program 4 (id=3919): ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x4, 0x489, 0x3, 0x9, 0x3, 0xfff}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffeff]}, 0x8) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000080)={0x1f, "455b7ea874fbd73ba607d983373a92365bec6d18376e16334fd1a5b73eae84"}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) rt_sigprocmask(0x0, &(0x7f0000000140)={[0x1]}, &(0x7f0000000180), 0x8) times(&(0x7f00000001c0)) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfffffffffffffffc) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x40) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000240)) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) utime(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x3, 0x5}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000400)=0x0) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = getegid() r12 = getegid() read$FUSE(r0, &(0x7f0000002940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000004980)={{}, {0x1, 0x2}, [{0x2, 0x0, r2}, {0x2, 0x6, r3}, {0x2, 0x6, r4}, {0x2, 0x3, r5}, {0x2, 0x3, 0xee01}, {0x2, 0x2, r6}, {0x2, 0x5, r7}, {0x2, 0x7c3dbbde3da2ed5}], {0x4, 0x2}, [{0x8, 0x1, r8}, {0x8, 0x4, r9}, {0x8, 0x4, r11}, {0x8, 0x0, 0xee01}, {0x8, 0x0, r12}, {0x8, 0x6, r13}], {0x10, 0x4}}, 0x94, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000004a40), 0x228881, 0x0) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004ac0), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000004b80)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004b40)={&(0x7f0000004b00)={0x2c, r14, 0x400, 0x800, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x10004) bind$inet6(r0, &(0x7f0000004bc0)={0xa, 0x4e24, 0x2, @empty}, 0x1c) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000004c00)={r10, 0x0, 0x6}) 20.702547111s ago: executing program 2 (id=3921): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0x7fff}}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x6e, &(0x7f0000000c40)=ANY=[@ANYBLOB="12011001020000102505a1a4400001020301090b5c000101d1800609040010030206002d0824060000de77e805240009000d240f01070000000100f8ff070c241b06000500050907004904240205052415020009058103cf07090659090582020800017f000905030268ef293903303800f826fa09"], &(0x7f0000000bc0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x151, 0x41, 0x6, 0xdb, 0x8, 0x9}, 0x97, &(0x7f0000000ac0)={0x5, 0xf, 0x97, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x3, 0x5, 0x3, 0x8}, @generic={0x73, 0x10, 0xb, "53ff0d9eb062d1f0fbd71fb9d74f75953aff0ca9cd043cc522e8f53ac24f258f428969d991e83efed1efb24f3e704c146e5c4b711481a6d7ed558ad1aec7f81c4be361b3c0b3452abe7b7ed5474e51af328893e7e03bc5534aab0419b7209956d6f5c64bdca64aa221058c2da6182d0a"}, @ss_container_id={0x14, 0x10, 0x4, 0x2a, "84039d34e3e883e87b839341d593cfe3"}]}, 0x2, [{0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="f2660000ace2839d8137dc06200ddcff38"]}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x810}}]}) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x400001000001fe) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={&(0x7f0000003dc0)="832f0a39700816c942e1513b556050a6e12780c9f37beed9f88892cc301771d0665ab1794d8efc", 0x0}}, &(0x7f0000bbdffc)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000640)=[@rdmsr={0x32, 0x18, {0x30d}}, @wrmsr={0x1e, 0x20, {0x2a1, 0x3}}, @code={0xa, 0x79, {"b9800000c00f3235008000000f30b91f0b00000f32c44199e592620f00000f01f8b9f4080000b88000c0feba000000000f300fc72d0c00000066bad004b000ee0f01d1b805000000b9c98600000f01d948b807800000000000000f23d00f21f8352000000a0f23f8"}}, @wr_drn={0x6e, 0x20, {0x1, 0x7fffffffffffffff}}, @uexit={0x0, 0x18, 0xd}, @in_dx={0x82, 0x20, {0x374d, 0x3}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x14, 0x18, {0x671, 0xbb0e}}, @set_irq_handler={0xbe, 0x20, {0xc}}, @rdmsr={0x32, 0x18, {0x920}}, @code={0xa, 0x80, {"440f01f848b8a7000000000000000f23d80f21f835800000300f23f80f0f111cb91b060000b881f90000ba000000000f30b9480200000f32366566420f71e392260f0dc8c744240081000000c744240298760000c7442406000000000f011c246667362666400f3a0c0ea7f030730b"}}, @out_dx={0xaa, 0x28, {0xd5cc, 0x0, 0x5}}, @wrmsr={0x1e, 0x20, {0x160b, 0x3}}, @cpuid={0x14, 0x18, {0x5, 0x8}}, @cpuid={0x14, 0x18, {0x1ff, 0x8}}, @in_dx={0x82, 0x20, {0x382e, 0x2}}, @code={0xa, 0x59, {"0fc77cc900c4019b7c70e30f01f82e430f01c466b81c018ed8430febefc4c121e5f7460f00dcc403e16d1963c744240045c1e999c74424020f000000c7442406000000000f011c24"}}, @uexit={0x0, 0x18, 0x5}, @set_irq_handler={0xbe, 0x20, {0x72, 0x1}}, @cpuid={0x14, 0x18, {0x5, 0x8}}, @wrmsr={0x1e, 0x20, {0x324, 0x2}}, @uexit={0x0, 0x18, 0xd}, @wr_crn={0x46, 0x20, {0x3, 0x200}}, @code={0xa, 0x53, {"0f01f82683b7cd000000adf2ab650fc75810440f01d1c402d5aced66b874008ed0b805000000b936878b2f0f01d9f30f30b9e6090000b800000000ba000000000f30"}}, @rdmsr={0x32, 0x18, {0xb5c}}, @set_irq_handler={0xbe, 0x20, {0x68, 0x1}}, @wr_drn={0x6e, 0x20, {0x3, 0x5}}, @wr_crn={0x46, 0x20, {0x0, 0x9}}], 0x46d}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f00000004c0)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r4, 0x0, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r2, 0x66053000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000e00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000cc0)={0x134, 0x3, 0x8, 0x0, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff0001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000c00), 0x3) mlock2(&(0x7f0000385000/0x1000)=nil, 0x1000, 0x0) 20.547477032s ago: executing program 1 (id=3923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) (async) r1 = dup(0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async, rerun: 32) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x2b71) (async, rerun: 32) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000240)={0x60, 0x4000000, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4, 0x0, 0x0, 0x8, 0x40, 0x15, 0x4d}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) (async) flock(r1, 0x4) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000200)=0x2) 20.487922772s ago: executing program 1 (id=3924): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1001e, 0x11, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1001e, 0x11, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)) (async) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r2, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) 20.426665952s ago: executing program 1 (id=3925): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4a20, 0x3ff, @mcast2, 0xa}, 0x1c, 0x0, 0x0, 0x0, 0x3e8}}], 0x1, 0x0) 20.415091912s ago: executing program 1 (id=3926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x20, 0x205, 0x70bd2c, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008020}, 0x24000010) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper], 0x6c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699d"}) 20.347795433s ago: executing program 1 (id=3927): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000003c0)=0x2, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)={0x17a6, 0x4, [{0x1, 0x1}, {0x8}, {0x9}, {0x1, 0x1}]}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x20801, 0x1, 0x0, 0x1, 0xfffd, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05"], 0x0) statx(r0, &(0x7f0000000300)='./file0\x00', 0x6000, 0x200, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f0000000540)=0xc) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000200)={{{@in=@private, @in=@multicast1}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@private2, @in6=@local}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000005f40)=0xe8) fstat(r0, &(0x7f0000005f80)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000006000)={{{@in6=@private2, @in=@local}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000006280), 0x4000, 0x0) sendmsg$AUDIT_SET(r7, &(0x7f0000006380)={&(0x7f00000062c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006340)={&(0x7f0000006300)={0x3c, 0x3e9, 0x20, 0x70bd24, 0x25dfdbfe, {0x16, 0x0, 0x1, r6, 0xc, 0x7fff, 0xfff, 0x3, 0x0, 0x3}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xa004800}, 0xeff0cb84318d8134) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) getsockopt$sock_int(r8, 0x1, 0x28, 0x0, &(0x7f00000001c0)) 20.205408434s ago: executing program 4 (id=3928): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x13, 0x7, 0x6, 0x6}}) (async) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x701200, 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x1, 0x8, 0x3, 0x101000, {{0x1f, 0x4, 0x2, 0x4, 0x7c, 0x64, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x41, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x40}}, {@broadcast, 0xa}, {@local, 0x8}, {@rand_addr=0x64010101, 0x9}, {@private=0xa010101, 0x81}, {@private=0xa010101, 0x737b}, {@empty, 0x7}, {@empty, 0x2}]}, @ssrr={0x89, 0x7, 0x8b, [@rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xc0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @remote]}]}}}}}) sendto$packet(r0, &(0x7f0000000240)="f0c56266229277c0278d7ff8ba10136fa359dca53ba8d1ea82a0527b48a5dd3cfb76807819131a20555331ca32dc580a800c2468068fd840e7badd188975d5e9", 0x40, 0x20040005, &(0x7f00000003c0)={0x11, 0x10, r2, 0x1, 0x5}, 0x14) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 20.169640054s ago: executing program 4 (id=3929): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7551ecdef6"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x11c, 0x25, 0x200, 0x70bd29, 0x25dfdbff, {0x15}, [@nested={0x5f, 0x142, 0x0, 0x1, [@nested={0x4, 0x6b}, @typed={0x8, 0x136, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x9b}, @generic="9e3854e96a23d06a792631b74c9f2f9f062c5c3821d91f179275ee6b675f51393268a85de3b14e182cab51a55dd358e31e143f1e59d963ad61a1b1e01319dbb36b76870b03228c5b6e5870"]}, @generic="154114ddebd5e02cffa9fb902deda098d82c8e33a859c82ba4034fdc1d4fc02bca134b0380fe5568077a9582f018873e4534d86a7fdfce4356fc25e6c51bf9de0b2d3474777e89a2dd9b517772b0af7a91174bb4a7991337363b43caeebb42d3fa5263896d9496e0882be9d43fc5ee8c7963c6832c91e96ce4961745decb32af7fcb7530e1787ddf67c6f0b903082cc5d0", @generic="a924028180063fc2ebe9c1098b4f14", @typed={0x8, 0xbb, 0x0, 0x0, @uid=r4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x800) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) 20.124087544s ago: executing program 2 (id=3930): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) capset(&(0x7f0000000080)={0x20080522}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000140)={0x10000, 0x9000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x80000, 0x5, 0x0, 0x2, 0x8001], 0x0, 0x2200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x5, 0x4, 0x3, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x6, 0x1], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.123573744s ago: executing program 2 (id=3931): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000300)=""/225) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000040), 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @flat=@binder={0x73622a85, 0x10b, 0x1}, @fda={0x66646185, 0x9, 0x2, 0x18}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$FITHAW(r1, 0xc0045878) 20.059960875s ago: executing program 2 (id=3932): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000140001002bbd7000dbdf25fc0100000000000000000045d1000000640101000000000000000000000000004e21000d4e2400080a00200073800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e00010000000a0010000100000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x29, 0x4, 0x8, 0x3, 0x72, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x0, 0x6, 0x200}}) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 20.033447275s ago: executing program 2 (id=3933): eventfd2(0x200, 0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) rt_sigaction(0x7, &(0x7f0000000180)={&(0x7f00000001c0)="ca00d1c4b6ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x6]}}, 0x0, 0x8, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) prlimit64(r3, 0xe, &(0x7f00000000c0)={0x2, 0x8000000000000000}, &(0x7f0000000140)) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x13, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x4, 0xffffffffffffffff, 0x100000000000000, 0x800, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r5, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f00000003c0)=0x43df, 0x4) 19.852149306s ago: executing program 1 (id=3934): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000300), 0x22382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x3ffdb8, 0x1, 0x101, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r0, 0x0) r4 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x400080, 0x11f) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000080)=',,\x83\'@.\\\x00', &(0x7f00000001c0)='./file0\x00', r5) 19.779875406s ago: executing program 2 (id=3935): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000000c0)=0x8000, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setscheduler(0x0, 0x2, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x0, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') write$ppp(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x8, 0x0) fchdir(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x400}) 17.315851402s ago: executing program 3 (id=3945): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x9}}, 0x18) ioctl$sock_inet_SIOCSARP(r2, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x2e, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_virt_wifi\x00'}) 17.315130382s ago: executing program 3 (id=3946): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x4, 0x8, 0xfffffbc5, 0x0, [{0x6d, 0x4, 0xb0, '\x00', 0xe}, {0x7, 0x8, 0x72, '\x00', 0x5}, {0x0, 0x41, 0x9, '\x00', 0x5}, {0x51, 0x3, 0x8, '\x00', 0x9}, {0x7, 0x50, 0x82, '\x00', 0x60}, {0x3, 0x0, 0x2, '\x00', 0x7}, {0x3, 0xf4, 0x41, '\x00', 0x8}, {0xa, 0x7, 0xb, '\x00', 0x70}, {0x8, 0x5, 0xfe, '\x00', 0xff}, {0x6, 0x6, 0x0, '\x00', 0x6}, {0x40, 0x11, 0x2, '\x00', 0x1}, {0x8, 0x21, 0x0, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xe9}, {0x5, 0x4e, 0x2, '\x00', 0xfd}, {0x2, 0x4, 0x2, '\x00', 0x7}, {0x0, 0x0, 0x7, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x4c, 0x3, 0x2, '\x00', 0xff}, {0x8, 0x6, 0xbe, '\x00', 0xff}, {0x2, 0x3, 0xb, '\x00', 0x80}, {0x7, 0x21, 0x2, '\x00', 0x4}, {0x5, 0x0, 0x0, '\x00', 0x4}, {0x93, 0x3, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0x8, '\x00', 0x57}]}}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0x926139, 0x101200) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x3, 0x98, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00'], 0x0}, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000079e000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_io_uring_setup(0x65ec, &(0x7f0000000180)={0x0, 0xfdcf, 0x800, 0x3, 0x30e}, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB='max=00000G00000000000000000,\x00']) 14.723610618s ago: executing program 3 (id=3947): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x81, 0xfffffffb}) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x1461, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f000025b000/0x1000)=nil, 0x1000, 0x1000008) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r1, &(0x7f0000000400)="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", 0x1f000) 4.979261878s ago: executing program 33 (id=3929): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7551ecdef6"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x11c, 0x25, 0x200, 0x70bd29, 0x25dfdbff, {0x15}, [@nested={0x5f, 0x142, 0x0, 0x1, [@nested={0x4, 0x6b}, @typed={0x8, 0x136, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x9b}, @generic="9e3854e96a23d06a792631b74c9f2f9f062c5c3821d91f179275ee6b675f51393268a85de3b14e182cab51a55dd358e31e143f1e59d963ad61a1b1e01319dbb36b76870b03228c5b6e5870"]}, @generic="154114ddebd5e02cffa9fb902deda098d82c8e33a859c82ba4034fdc1d4fc02bca134b0380fe5568077a9582f018873e4534d86a7fdfce4356fc25e6c51bf9de0b2d3474777e89a2dd9b517772b0af7a91174bb4a7991337363b43caeebb42d3fa5263896d9496e0882be9d43fc5ee8c7963c6832c91e96ce4961745decb32af7fcb7530e1787ddf67c6f0b903082cc5d0", @generic="a924028180063fc2ebe9c1098b4f14", @typed={0x8, 0xbb, 0x0, 0x0, @uid=r4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x800) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) 4.482926952s ago: executing program 34 (id=3934): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000300), 0x22382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x3ffdb8, 0x1, 0x101, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r0, 0x0) r4 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x400080, 0x11f) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000080)=',,\x83\'@.\\\x00', &(0x7f00000001c0)='./file0\x00', r5) 4.433313422s ago: executing program 35 (id=3935): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000000c0)=0x8000, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setscheduler(0x0, 0x2, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x0, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') write$ppp(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x8, 0x0) fchdir(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x400}) 3.931589235s ago: executing program 5 (id=3952): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) keyctl$set_reqkey_keyring(0xe, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (rerun: 64) 3.0910164s ago: executing program 5 (id=3953): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x29) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x2, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000004800", [0x0, 0x3]}}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000040)={0x7, 'dvmrp0\x00', {0xb}, 0x2}) 2.922131441s ago: executing program 5 (id=3954): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='!(+.\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x85b83000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000100)={'batadv_slave_1\x00', {0x2, 0x40, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000340)={'team_slave_1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x1, 0x6a44a593, 0x681d, 0x0, 0x3, 0x1, 0x0, 0x0, 0x100, 0x82}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050100008ddfb240490b4f06fdd4010203010902120001f38d00000904"], 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r5, 0x40187013, &(0x7f0000000040)) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000001c0)={0x2, 0x2}) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) read(r6, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f00000000c0)={'vlan0\x00', 0x1}) 2.732728273s ago: executing program 6 (id=3949): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000a0c000/0x4000)=nil, 0x4000}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0) setreuid(0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @rand_addr=0x640100fe}, 0x3, 0x4, 0x3, 0x3ffc}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getresuid(&(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000180)=0x0) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000302, r6, 0x0) connect$pppl2tp(r5, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x101, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}}, 0x32) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) unshare(0x22020400) mmap$usbmon(&(0x7f0000256000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x81) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5202) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) getsockopt(r5, 0x111, 0x4, 0x0, &(0x7f0000000080)) getrandom(0x0, 0x0, 0x600) syz_clone(0x4080, 0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x1f000) socket(0x2b, 0x3, 0xfff) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2.720522062s ago: executing program 7 (id=3950): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x8001, 0x0) r1 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="3116", @ANYRES8=r1], 0x31) renameat2(r0, &(0x7f0000000100)='./file1/file2\x00', r1, &(0x7f0000000140)='./file1/file2\x00', 0x4) lsetxattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x2dac, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) 2.611856613s ago: executing program 7 (id=3955): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x94040) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x4}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r4) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) close_range(r0, 0xffffffffffffffff, 0x0) 2.282327495s ago: executing program 3 (id=3956): r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x80) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x198, 0x0, &(0x7f0000002940)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x38}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/68, 0xfffffffffffffefd, 0x1, 0x1c}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/134, 0x86, 0x2, 0x3f}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}, 0x400}, @clear_death={0x400c630f, 0xfffffffe}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_binder={0x77622a85, 0x10b, 0x1}, @fd, @fda={0x66646185, 0x3, 0x3, 0x31}}, &(0x7f00000000c0)={0x56, 0x18, 0x30}}, 0x1000}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@fd, @fda={0x66646185, 0x3, 0x0, 0xd}, @ptr={0x70742a85, 0x0, &(0x7f0000000940)=""/4096, 0x1000, 0x2, 0x3f}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x1400}, @enter_looper], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) 2.200991095s ago: executing program 7 (id=3957): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) capset(&(0x7f0000000080)={0x20080522}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x80000, 0x5, 0x0, 0x2, 0x8001], 0x0, 0x2200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x5, 0x4, 0x3, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x6, 0x1], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.075904947s ago: executing program 6 (id=3958): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) splice(r3, 0x0, r4, &(0x7f00000002c0), 0x6, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) setns(r9, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x10a, 0x0, 0xdc}]}) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) 1.706154529s ago: executing program 5 (id=3959): r0 = socket$inet6(0xa, 0x80002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r1, 0xfffffffffffffc01, 0x0) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, r3, &(0x7f0000000080)='./file0\x00') mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYRES32]) 1.608156169s ago: executing program 5 (id=3960): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) capset(&(0x7f0000000080)={0x20080522}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000140)={0x10000, 0x9000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x80000, 0x5, 0x0, 0x2, 0x8001], 0x0, 0x2200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x5, 0x4, 0x3, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x6, 0x1], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.207798612s ago: executing program 6 (id=3961): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x84040, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149004006040800", 0x58}], 0x1) (async) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f00000022c0)={{0x3, 0x0, 0x27, {0xd000, 0x80af000, 0x2}}, "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", "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"}) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) (async) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000fddbdf2554000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d, 0x0, 0x1}, {}, {0x16}]}) (async) socket$netlink(0x10, 0x3, 0xe) r11 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r11, r8, 0x0, 0xffffffff) 1.206826152s ago: executing program 6 (id=3962): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0xff01000000000000, 0x200}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x4400017e) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14400000", @ANYRES16=r5, @ANYBLOB="ab8b000000000000080011000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="715d04000bd8d0020000000000000000507824c7", @ANYRES16=r7, @ANYBLOB="100027bd7000fddbdf251f000000050092000100000008009a0002000000200022801c0000800800050007000000080002004000000008000400810000000400cc0008009a0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4040811}, 0x8080) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) inotify_add_watch(r4, &(0x7f0000000180)='./bus\x00', 0x1) 130.194999ms ago: executing program 3 (id=3963): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000027c0), r2) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002800)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200001, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000003000000000000000000000003000000000000726f6f746d6f646500000000000000"], 0x29) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x40841, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x8008770b, &(0x7f0000000540)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9dp\x00\x00\x00\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t=T_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\x05\x00\x00\x00<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\xbe/]\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\x00\x00\x00\x00\x00\x00\x00\b$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000600)="3666450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@generic={0x1a, "4d39627609f3a43299b0e8b52092d73631a2aafef6360fd4de39d8265435a844d2befad27e42002af454dddcdbb55bd72a5a3d2297221451b57f7de38fd9dc73faddbe7d1b50bbac3ecbf980e45978bf984d04a87f2b7283a9a7c1d58604f675cee21b1a4f33376856f743e21862a104eeb33cae628d572af1f1c79c2f2e"}, 0x80, 0x0}, 0x20004010) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000080)) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r6}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000480)={0x2c, 0x10, 0x1, 0x2, 0x25dfdbfe, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x11}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0x5}]}, 0x2c}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 95.569109ms ago: executing program 3 (id=3964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000000)=""/156, &(0x7f00000000c0)=0x9c) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto(r4, 0x0, 0x0, 0x4884, &(0x7f0000000480)=@xdp={0x2c, 0x6, r3, 0x36}, 0x80) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) lseek(r1, 0x7a3a, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000000)=""/156, &(0x7f00000000c0)=0x9c) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) sendto(r4, 0x0, 0x0, 0x4884, &(0x7f0000000480)=@xdp={0x2c, 0x6, r3, 0x36}, 0x80) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) (async) lseek(r1, 0x7a3a, 0x3) (async) 5.174509ms ago: executing program 6 (id=3965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = socket(0x18, 0x4, 0x8) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f00000009c0)={0xa, 0x4e21, 0xffff, @mcast2, 0x9}, 0x1c) socket(0x1d, 0x3, 0x0) (async) r4 = socket(0x1d, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f0000004740)=[{{&(0x7f0000000a00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x200000c4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0xffffb000) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) (async) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x0, r8}, 0x10) (async) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x0, r8}, 0x10) bind$xdp(r5, &(0x7f0000000200)={0x2c, 0x1, r8, 0x0, r6}, 0x10) (async) bind$xdp(r5, &(0x7f0000000200)={0x2c, 0x1, r8, 0x0, r6}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) (async) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r11, 0x0, 0x0, 0x20000081, &(0x7f0000000240)={0x6, 0x1, r10, 0x1, 0xa4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000400)={@dev}, &(0x7f0000000440)=0x14) (async) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000400)={@dev, 0x0}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="74000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f627269646765001400020076657468315f766c616e0000000000001400020076657468305f766972745f776966690014000200726f736530000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="24000e4a08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="3000018008000100", @ANYRES32=r8, @ANYBLOB="1400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x40002}, 0x8001) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) sendmsg$can_bcm(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x7, 0xc3, 0x7, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "f3575047c96cc226"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000084}, 0x20008001) 0s ago: executing program 5 (id=3966): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6ac"}) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="0100000000000000000003000000580001804400040020000100"], 0x6c}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) r1 = getpid() (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) (async) futex(&(0x7f0000000100)=0x1, 0x8, 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x2) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) (async) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) (rerun: 32) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (async) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) (async) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) (async) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) (async, rerun: 32) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) kernel console output (not intermixed with test programs): _178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 225.548290][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 225.551150][ T2518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:391 [ 225.559900][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 225.564736][ T2518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 225.569448][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 225.585241][ T2585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.740'. [ 225.589974][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 225.600581][ T2518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:391 [ 225.610239][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 225.645731][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 225.655694][ T79] usb 2-1: USB disconnect, device number 26 [ 225.667527][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 225.679118][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 225.690305][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 225.701419][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 225.712565][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 225.723781][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 225.734969][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 225.748657][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 225.759844][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 225.770941][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 225.782020][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 225.793118][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 225.804296][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 225.815610][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 225.826718][ T45] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 225.839389][ T45] ax88179_178a 4-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 6a:46:89:93:11:a2 [ 225.857610][ T45] usb 4-1: USB disconnect, device number 22 [ 225.863962][ T45] ax88179_178a 4-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 225.920701][ T36] audit: type=1400 audit(7119321103.951:383): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 226.058343][ T2592] binder: Unknown parameter 'pcr' [ 226.103625][ T2599] __vm_enough_memory: pid: 2599, comm: syz.3.746, bytes: 18014402804453376 not enough memory for the allocation [ 226.170418][ T36] audit: type=1400 audit(7119321104.201:384): avc: denied { unmount } for pid=2604 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 226.292820][ T2623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.317333][ T2627] overlayfs: failed to clone upperpath [ 226.385477][ T79] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 226.482431][ T36] audit: type=1400 audit(7119321104.511:385): avc: denied { setopt } for pid=2632 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.535472][ T79] usb 4-1: Using ep0 maxpacket: 8 [ 226.545141][ T2603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:506 [ 226.546245][ T79] usb 4-1: unable to get BOS descriptor or descriptor too short [ 226.563749][ T79] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 226.571432][ T79] usb 4-1: can't read configurations, error -71 [ 226.835722][ T36] audit: type=1400 audit(7119321104.871:386): avc: denied { mount } for pid=2641 comm="syz.1.759" name="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 226.858422][ T36] audit: type=1400 audit(7119321104.871:387): avc: denied { search } for pid=2641 comm="syz.1.759" name="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.512439][ T2715] 9pnet_fd: Insufficient options for proto=fd [ 227.547483][ T2717] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 227.605779][ T2725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 227.677962][ T2727] overlayfs: lower data-only dirs require metacopy support. [ 227.815433][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 227.933847][ T2746] overlayfs: failed to clone lowerpath [ 227.975460][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 227.982072][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.990595][ T45] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 227.998775][ T45] usb 4-1: config 0 has no interface number 0 [ 228.004975][ T45] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 228.016869][ T45] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 228.026746][ T45] usb 4-1: config 0 interface 88 has no altsetting 0 [ 228.033834][ T45] usb 4-1: language id specifier not provided by device, defaulting to English [ 228.045578][ T45] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 228.054675][ T45] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 228.062836][ T45] usb 4-1: Product: syz [ 228.067051][ T45] usb 4-1: SerialNumber: syz [ 228.072386][ T45] usb 4-1: config 0 descriptor?? [ 228.278827][ T2723] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 238) [ 228.278857][ T2723] rust_binder: Error while translating object. [ 228.289561][ T2723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 228.295856][ T2723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:525 [ 228.316776][ T45] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input13 [ 228.337421][ T45] usb 4-1: USB disconnect, device number 25 [ 228.448749][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 228.448766][ T36] audit: type=1400 audit(7119321106.481:396): avc: denied { write } for pid=2754 comm="syz.4.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.497619][ T2759] __vm_enough_memory: pid: 2759, comm: syz.4.799, bytes: 18014402804453376 not enough memory for the allocation [ 229.086419][ T2824] kvm: kvm [2823]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 229.175459][ T435] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 229.326691][ T435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 229.337739][ T435] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 229.346899][ T435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.356176][ T435] usb 5-1: config 0 descriptor?? [ 229.365644][ T2814] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 229.373079][ T36] audit: type=1400 audit(7119321107.401:397): avc: denied { ioctl } for pid=2827 comm="syz.3.821" path="socket:[16833]" dev="sockfs" ino=16833 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 229.490425][ T2835] rust_binder: Got transaction with invalid offset. [ 229.490516][ T2835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.500205][ T2835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:550 [ 229.515431][ T36] audit: type=1400 audit(7119321107.541:398): avc: denied { audit_read } for pid=2836 comm="syz.1.825" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.602523][ T2842] rust_binder: Error in use_page_slow: ESRCH [ 229.602553][ T2842] rust_binder: use_range failure ESRCH [ 229.608946][ T2842] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 229.614496][ T2842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 229.622470][ T2842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:552 [ 229.701169][ T36] audit: type=1400 audit(7119321107.731:399): avc: denied { create } for pid=2858 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 229.774217][ T2877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:562 [ 229.788595][ T2879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:565 [ 229.855459][ T2890] input: syz1 as /devices/virtual/input/input14 [ 229.880459][ T36] audit: type=1400 audit(7119321107.911:400): avc: denied { execute_no_trans } for pid=2889 comm="syz.3.847" path="/187/file0" dev="tmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.987159][ T2814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.996976][ T2814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.007185][ T435] usbhid 5-1:0.0: can't add hid device: -71 [ 230.015087][ T435] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 230.026728][ T435] usb 5-1: USB disconnect, device number 10 [ 230.070200][ T2905] overlayfs: failed to clone upperpath [ 230.076775][ T2905] netlink: 64 bytes leftover after parsing attributes in process `syz.1.852'. [ 230.155483][ T79] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 230.287717][ T36] audit: type=1400 audit(7119321108.321:401): avc: denied { create } for pid=2909 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 230.305461][ T79] usb 4-1: Using ep0 maxpacket: 32 [ 230.309434][ T36] audit: type=1400 audit(7119321108.321:402): avc: denied { create } for pid=2909 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 230.317244][ T79] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.365415][ T79] usb 4-1: config 0 has no interface number 0 [ 230.371523][ T79] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.397304][ T36] audit: type=1400 audit(7119321108.431:403): avc: denied { write } for pid=2921 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.397577][ T79] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.417328][ T36] audit: type=1400 audit(7119321108.431:404): avc: denied { read } for pid=2921 comm="syz.2.858" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.426861][ T79] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 230.460155][ T36] audit: type=1400 audit(7119321108.491:405): avc: denied { ioctl } for pid=2921 comm="syz.2.858" path="socket:[16964]" dev="sockfs" ino=16964 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.460494][ T79] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.493837][ T79] usb 4-1: config 0 descriptor?? [ 230.563607][ T2926] rust_binder: Got transaction with invalid offset. [ 230.563674][ T2926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 230.570755][ T2926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:216 [ 230.646860][ T2932] netlink: 64 bytes leftover after parsing attributes in process `syz.4.860'. [ 230.666514][ T2929] loop7: detected capacity change from 0 to 7 [ 230.673710][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 230.682937][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.691174][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 230.700389][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.708416][ T2929] loop7: unable to read partition table [ 230.714568][ T2929] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 230.729793][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.739004][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.743057][ T2942] netlink: 'syz.1.866': attribute type 4 has an invalid length. [ 230.755107][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 230.764868][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.766268][ T2942] netlink: 'syz.1.866': attribute type 5 has an invalid length. [ 230.774194][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.782263][ T2942] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.866'. [ 230.790311][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.807860][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.816211][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.825363][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.833541][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.843024][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 231.288369][ T2962] netlink: 'syz.2.871': attribute type 27 has an invalid length. [ 231.789267][ T2984] rust_binder: Write failure EFAULT in pid:235 [ 231.847820][ T2987] rust_binder: Error in use_page_slow: ESRCH [ 231.854111][ T2987] rust_binder: use_range failure ESRCH [ 231.860802][ T2987] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 231.866479][ T2987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 231.874354][ T2987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:239 [ 231.932731][ T2989] loop7: detected capacity change from 0 to 7 [ 231.948656][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 231.957896][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 231.966038][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 231.975267][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 231.983178][ T2989] loop7: unable to read partition table [ 231.990600][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 231.993433][ T2989] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 232.276784][ T2997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.883'. [ 232.318936][ T3000] af_packet: tpacket_rcv: packet too big, clamped from 4066 to 4294967272. macoff=96 [ 232.329118][ T3000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 232.685525][ T336] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.855440][ T336] usb 5-1: Using ep0 maxpacket: 8 [ 232.870726][ T336] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.884909][ T336] usb 5-1: config 6 has an invalid interface number: 194 but max is 0 [ 232.903321][ T336] usb 5-1: config 6 has no interface number 0 [ 232.914918][ T336] usb 5-1: config 6 interface 194 has no altsetting 0 [ 232.923979][ T336] usb 5-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=32.00 [ 232.933210][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.944273][ T336] usb 5-1: Product: syz [ 232.948842][ T336] usb 5-1: Manufacturer: syz [ 232.953573][ T79] usbhid 4-1:0.1: can't add hid device: -71 [ 232.959612][ T336] usb 5-1: SerialNumber: syz [ 232.964345][ T79] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 232.981216][ T79] usb 4-1: USB disconnect, device number 26 [ 233.179844][ T336] ftdi_sio 5-1:6.194: FTDI USB Serial Device converter detected [ 233.187961][ T336] usb 5-1: Detected FT233HP [ 233.192730][ T336] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 233.199804][ T336] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 233.207559][ T336] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 233.220489][ T336] usb 5-1: USB disconnect, device number 11 [ 233.232472][ T336] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 233.245853][ T336] ftdi_sio 5-1:6.194: device disconnected [ 233.697954][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 233.697972][ T36] audit: type=1400 audit(7119321111.731:408): avc: denied { write } for pid=3030 comm="syz.4.895" name="raw6" dev="proc" ino=4026532825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 233.743209][ T3035] rust_binder: Write failure EFAULT in pid:257 [ 233.757133][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 233.766661][ T3040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 233.790453][ T36] audit: type=1400 audit(7119321111.821:409): avc: denied { setopt } for pid=3039 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.799561][ T3043] usb usb8: usbfs: process 3043 (syz.4.900) did not claim interface 0 before use [ 233.847792][ T3043] rust_binder: Write failure EFAULT in pid:262 [ 233.890312][ T3067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3067 comm=syz.1.908 [ 233.926579][ T45] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 233.935041][ T45] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 233.947116][ T45] usb 4-1: config 220 has no interface number 2 [ 233.953743][ T45] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 233.969152][ T45] usb 4-1: config 220 interface 0 has no altsetting 0 [ 233.976152][ T45] usb 4-1: config 220 interface 76 has no altsetting 0 [ 233.983185][ T45] usb 4-1: config 220 interface 1 has no altsetting 0 [ 233.992107][ T45] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 234.001519][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.009815][ T45] usb 4-1: Product: syz [ 234.014147][ T45] usb 4-1: Manufacturer: syz [ 234.019089][ T45] usb 4-1: SerialNumber: syz [ 234.085458][ T79] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 234.225857][ T3029] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 234.234664][ T3029] rust_binder: Write failure EINVAL in pid:589 [ 234.247940][ T79] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 234.273364][ T3083] netlink: 128 bytes leftover after parsing attributes in process `syz.3.913'. [ 234.282684][ T79] usb 5-1: config 1 has an invalid interface number: 4 but max is 0 [ 234.291050][ T3083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=3083 comm=syz.3.913 [ 234.295459][ T79] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 234.305306][ T3083] tmpfs: Unknown parameter 'iRodhv' [ 234.320178][ T3083] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 234.320203][ T3083] rust_binder: Read failure Err(EFAULT) in pid:596 [ 234.329453][ T3083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3083 comm=syz.3.913 [ 234.332971][ T79] usb 5-1: config 1 has no interface number 0 [ 234.368068][ T79] usb 5-1: config 1 has no interface number 1 [ 234.374233][ T79] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.407802][ T79] usb 5-1: config 1 interface 4 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.427760][ T79] usb 5-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 234.451779][ T45] usb 4-1: selecting invalid altsetting 0 [ 234.455442][ T79] usb 5-1: config 1 interface 105 has no altsetting 0 [ 234.460382][ T45] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 234.470922][ T45] usb 4-1: No valid video chain found. [ 234.485436][ T79] usb 5-1: config 1 interface 4 has no altsetting 0 [ 234.496769][ T45] usb 4-1: USB disconnect, device number 27 [ 234.517101][ T79] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 234.526277][ T79] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 234.544244][ T79] usb 5-1: Product: syz [ 234.555421][ T79] usb 5-1: Manufacturer: syz [ 234.560107][ T79] usb 5-1: SerialNumber: syz [ 234.720342][ T36] audit: type=1400 audit(7119321112.751:410): avc: denied { create } for pid=3098 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 234.776995][ T79] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 234.805636][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 234.956902][ T45] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.968322][ T45] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.982653][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 234.990155][ T701] usb 5-1: USB disconnect, device number 12 [ 235.005524][ T45] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 235.014624][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.028053][ T45] usb 4-1: config 0 descriptor?? [ 235.067629][ T36] audit: type=1400 audit(7119321113.101:411): avc: denied { create } for pid=3105 comm="syz.1.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 235.125302][ T3113] veth0_to_batadv: entered allmulticast mode [ 235.131669][ T3113] veth0_to_batadv: left allmulticast mode [ 235.320924][ T3123] overlayfs: failed to clone upperpath [ 235.441541][ T45] uclogic 0003:145F:0212.000F: interface is invalid, ignoring [ 235.788931][ T3089] rust_binder: Error in use_page_slow: ESRCH [ 235.788956][ T3089] rust_binder: use_range failure ESRCH [ 235.789175][ T3135] rust_binder: Error in use_page_slow: ESRCH [ 235.795140][ T3089] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 235.800725][ T3135] rust_binder: use_range failure ESRCH [ 235.806686][ T3089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 235.814915][ T3135] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 235.820174][ T434] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 235.829768][ T3135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 235.837620][ T3089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:601 [ 235.845235][ T3135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:601 [ 235.996590][ T434] usb 5-1: config 192 has an invalid interface number: 34 but max is 1 [ 236.014178][ T434] usb 5-1: config 192 has an invalid interface number: 84 but max is 1 [ 236.022791][ T434] usb 5-1: config 192 has no interface number 0 [ 236.029329][ T434] usb 5-1: config 192 has no interface number 1 [ 236.035925][ T434] usb 5-1: config 192 interface 34 altsetting 249 bulk endpoint 0xC has invalid maxpacket 1023 [ 236.046572][ T434] usb 5-1: config 192 interface 34 altsetting 249 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 236.057989][ T434] usb 5-1: config 192 interface 34 altsetting 249 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 236.069546][ T434] usb 5-1: config 192 interface 34 altsetting 249 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 236.081785][ T434] usb 5-1: config 192 interface 34 altsetting 249 endpoint 0x87 has invalid maxpacket 30299, setting to 64 [ 236.093526][ T434] usb 5-1: config 192 interface 34 altsetting 249 endpoint 0xD has invalid maxpacket 943, setting to 64 [ 236.104954][ T434] usb 5-1: config 192 interface 34 altsetting 249 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 236.119319][ T434] usb 5-1: config 192 interface 34 has no altsetting 0 [ 236.126423][ T434] usb 5-1: config 192 interface 84 has no altsetting 0 [ 236.134946][ T434] usb 5-1: New USB device found, idVendor=19d2, idProduct=1481, bcdDevice=e7.c3 [ 236.144347][ T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.152601][ T434] usb 5-1: Product: syz [ 236.157216][ T3139] 9pnet_fd: Insufficient options for proto=fd [ 236.158169][ T434] usb 5-1: Manufacturer: syz [ 236.173306][ T434] usb 5-1: SerialNumber: syz [ 236.179265][ T3133] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 236.398950][ T434] usb 5-1: USB disconnect, device number 13 [ 236.414920][ T3162] sit0: entered promiscuous mode [ 236.421351][ T3162] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 236.429046][ T3162] netlink: 1 bytes leftover after parsing attributes in process `syz.2.943'. [ 236.450299][ T36] audit: type=1400 audit(7119321114.481:412): avc: denied { create } for pid=3163 comm="syz.2.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.974612][ T3175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=3175 comm=syz.2.949 [ 236.988028][ T3176] rust_binder: 3173 RLIMIT_NICE not set [ 236.988187][ T3176] rust_binder: 271: no such ref 0 [ 237.047433][ T36] audit: type=1400 audit(7119321115.081:413): avc: denied { create } for pid=3183 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 237.069886][ T3184] rust_binder: Write failure EFAULT in pid:280 [ 237.465069][ T371] usb 4-1: USB disconnect, device number 28 [ 237.531413][ T3200] sock: sock_timestamping_bind_phc: sock not bind to device [ 237.575451][ T3208] tipc: Can't bind to reserved service type 0 [ 237.594229][ T36] audit: type=1400 audit(7119321115.621:414): avc: denied { mount } for pid=3205 comm="syz.3.961" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 237.637218][ T36] audit: type=1400 audit(7119321115.621:415): avc: denied { mounton } for pid=3205 comm="syz.3.961" path="/199/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 237.719015][ T36] audit: type=1326 audit(7119321115.751:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3215 comm="syz.2.964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3c09f86567 code=0x0 [ 237.916453][ T371] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 238.015454][ T701] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 238.076518][ T371] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 238.092420][ T371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.104447][ T371] usb 4-1: config 0 descriptor?? [ 238.110353][ T3247] overlayfs: failed to clone upperpath [ 238.175436][ T701] usb 5-1: Using ep0 maxpacket: 16 [ 238.186568][ T701] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.205431][ T701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.215943][ T701] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 238.231274][ T701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.245585][ T701] usb 5-1: config 0 descriptor?? [ 238.453426][ T36] audit: type=1326 audit(7119321116.481:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3221 comm="syz.4.965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c18f6c9 code=0x0 [ 238.556330][ T701] usbhid 5-1:0.0: can't add hid device: -71 [ 238.573804][ T701] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 238.586029][ T701] usb 5-1: USB disconnect, device number 14 [ 238.675737][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 238.909276][ T36] audit: type=1326 audit(7119321116.941:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3295 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34118f6c9 code=0x7fc00000 [ 238.932764][ T36] audit: type=1326 audit(7119321116.961:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3295 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34118f6c9 code=0x7fc00000 [ 238.973485][ T3303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=3303 comm=syz.1.993 [ 239.533398][ T36] audit: type=1400 audit(7119321117.561:420): avc: denied { mounton } for pid=3311 comm="syz.1.997" path="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.559082][ T371] usb 4-1: Cannot set autoneg [ 239.563876][ T371] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 239.800232][ T3320] GUP no longer grows the stack in syz.2.1000 (3320): 200000005000-200000008000 (200000004000) [ 239.815457][ T3320] CPU: 0 UID: 0 PID: 3320 Comm: syz.2.1000 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 239.815499][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.815524][ T3320] Call Trace: [ 239.815533][ T3320] [ 239.815543][ T3320] __dump_stack+0x21/0x30 [ 239.815583][ T3320] dump_stack_lvl+0x10c/0x190 [ 239.815615][ T3320] ? __cfi_dump_stack_lvl+0x10/0x10 [ 239.815646][ T3320] ? futex_lock_pi_atomic+0xdd/0xc70 [ 239.815676][ T3320] dump_stack+0x19/0x20 [ 239.815706][ T3320] fixup_user_fault+0x63d/0x6d0 [ 239.815736][ T3320] fault_in_user_writeable+0x76/0xe0 [ 239.815758][ T3320] futex_lock_pi+0x258/0xa10 [ 239.815786][ T3320] ? __cfi_futex_lock_pi+0x10/0x10 [ 239.815813][ T3320] ? __kasan_check_write+0x18/0x20 [ 239.815848][ T3320] ? wake_up_q+0x10f/0x1c0 [ 239.815884][ T3320] ? __cfi_futex_wake_mark+0x10/0x10 [ 239.815915][ T3320] ? mas_find+0x358/0x5f0 [ 239.815938][ T3320] ? __kasan_check_write+0x18/0x20 [ 239.815974][ T3320] do_futex+0x25c/0x500 [ 239.815997][ T3320] ? __cfi_do_futex+0x10/0x10 [ 239.816020][ T3320] ? __vm_munmap+0x2c7/0x370 [ 239.816044][ T3320] __se_sys_futex+0x28f/0x300 [ 239.816068][ T3320] ? __x64_sys_futex+0x110/0x110 [ 239.816093][ T3320] ? __kasan_check_write+0x18/0x20 [ 239.816128][ T3320] __x64_sys_futex+0xe9/0x110 [ 239.816153][ T3320] x64_sys_call+0x227f/0x2ee0 [ 239.816186][ T3320] do_syscall_64+0x58/0xf0 [ 239.816219][ T3320] ? clear_bhb_loop+0x50/0xa0 [ 239.816245][ T3320] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 239.816270][ T3320] RIP: 0033:0x7f3c09f8f6c9 [ 239.816294][ T3320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.816315][ T3320] RSP: 002b:00007f3c0ada2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.816344][ T3320] RAX: ffffffffffffffda RBX: 00007f3c0a1e5fa0 RCX: 00007f3c09f8f6c9 [ 239.816362][ T3320] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 239.816378][ T3320] RBP: 00007f3c0a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 239.816393][ T3320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.816408][ T3320] R13: 00007f3c0a1e6038 R14: 00007f3c0a1e5fa0 R15: 00007fff0a292588 [ 239.816429][ T3320] [ 240.725580][ T885] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 240.731960][ T884] Bluetooth: hci0: command 0x1003 tx timeout [ 240.842252][ T3381] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 240.880225][ T3391] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 241.073509][ T371] usb 4-1: USB disconnect, device number 29 [ 241.136881][ T36] audit: type=1400 audit(7119321119.171:421): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 241.455459][ T371] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 241.484914][ T36] audit: type=1400 audit(7119321119.511:422): avc: denied { ioctl } for pid=3430 comm="syz.4.1039" path="socket:[17834]" dev="sockfs" ino=17834 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 241.615447][ T371] usb 4-1: Using ep0 maxpacket: 16 [ 241.623248][ T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.638926][ T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.649420][ T371] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.677080][ T371] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 241.687077][ T371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.700957][ T371] usb 4-1: config 0 descriptor?? [ 241.766798][ T36] audit: type=1326 audit(7119321119.801:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.4.1052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c18f6c9 code=0x0 [ 241.870247][ T3474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1052'. [ 242.111964][ T371] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 242.120096][ T371] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 242.131862][ T371] microsoft 0003:045E:07DA.0010: no inputs found [ 242.138426][ T371] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 242.311610][ T701] usb 4-1: USB disconnect, device number 30 [ 242.601947][ T36] audit: type=1400 audit(7119321120.631:424): avc: denied { write } for pid=3480 comm="syz.1.1059" name="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.659363][ T36] audit: type=1400 audit(7119321120.691:425): avc: denied { shutdown } for pid=3489 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.699635][ T36] audit: type=1326 audit(7119321120.731:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.1.1061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34118f6c9 code=0x0 [ 242.716924][ T3495] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 242.731430][ T3495] overlayfs: missing 'lowerdir' [ 242.850668][ T3501] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14608 sclass=netlink_xfrm_socket pid=3501 comm=syz.1.1061 [ 243.542525][ T3517] block device autoloading is deprecated and will be removed. [ 243.662117][ T3528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1076'. [ 244.725547][ T884] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 244.725584][ T885] Bluetooth: hci0: command 0x1003 tx timeout [ 244.989234][ T434] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 244.992237][ T36] audit: type=1400 audit(7119321123.021:427): avc: denied { remount } for pid=3601 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 245.152209][ T434] usb 5-1: No LPM exit latency info found, disabling LPM. [ 245.175754][ T434] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.188220][ T434] usb 5-1: config 1 has no interface number 1 [ 245.194366][ T434] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 245.227845][ T434] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 245.250889][ T434] usb 5-1: string descriptor 0 read error: -22 [ 245.257319][ T434] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.269335][ T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.300935][ T434] usb 5-1: low speed audio streaming not supported [ 245.787518][ T701] usb 5-1: USB disconnect, device number 15 [ 245.854170][ T36] audit: type=1400 audit(7119321123.881:428): avc: denied { create } for pid=3681 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 245.874759][ T36] audit: type=1400 audit(7119321123.891:429): avc: denied { write } for pid=3683 comm="syz.2.1134" path="socket:[19353]" dev="sockfs" ino=19353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.899680][ T36] audit: type=1400 audit(7119321123.941:430): avc: denied { create } for pid=3681 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 246.581502][ T3726] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 246.589392][ T3726] netlink: 'syz.3.1149': attribute type 3 has an invalid length. [ 246.597219][ T3726] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1149'. [ 246.925127][ T3755] tipc: Started in network mode [ 246.930071][ T3755] tipc: Node identity ac14142f, cluster identity 4711 [ 246.936995][ T3755] tipc: New replicast peer: 0.0.0.0 [ 246.942450][ T3755] tipc: Enabled bearer , priority 10 [ 246.991923][ T3764] bridge0: port 3(erspan0) entered blocking state [ 246.998498][ T3764] bridge0: port 3(erspan0) entered disabled state [ 247.005133][ T3764] erspan0: entered allmulticast mode [ 247.010958][ T3764] erspan0: entered promiscuous mode [ 247.016374][ T3764] bridge0: port 3(erspan0) entered blocking state [ 247.022813][ T3764] bridge0: port 3(erspan0) entered forwarding state [ 247.207182][ T36] audit: type=1326 audit(7119321125.241:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.3.1166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba1cd8f6c9 code=0x0 [ 247.230037][ T36] audit: type=1326 audit(7119321125.241:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.3.1166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba1cd8f6c9 code=0x0 [ 247.493065][ T3806] syz.3.1177 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 247.515475][ T434] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 247.631811][ T3814] 9pnet_fd: p9_fd_create_unix (3814): problem connecting socket: ./file0: -111 [ 247.676663][ T434] usb 5-1: config index 0 descriptor too short (expected 53712, got 36) [ 247.685224][ T434] usb 5-1: config 21 has too many interfaces: 162, using maximum allowed: 32 [ 247.694240][ T434] usb 5-1: config 21 has an invalid descriptor of length 1, skipping remainder of the config [ 247.704644][ T434] usb 5-1: config 21 has 0 interfaces, different from the descriptor's value: 162 [ 247.716187][ T434] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 247.725921][ T36] audit: type=1400 audit(7119321125.761:433): avc: denied { unmount } for pid=3821 comm="syz.2.1184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 247.726015][ T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.753638][ T434] usb 5-1: Product: syz [ 247.757894][ T434] usb 5-1: Manufacturer: syz [ 247.762563][ T434] usb 5-1: SerialNumber: syz [ 247.975348][ T434] usb 5-1: USB disconnect, device number 16 [ 248.055470][ T9] tipc: Node number set to 2886997039 [ 248.236010][ T3859] overlayfs: failed to clone lowerpath [ 248.367957][ T3882] netlink: 'syz.1.1208': attribute type 15 has an invalid length. [ 248.375897][ T3882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1208'. [ 248.918870][ T3922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1222'. [ 249.163769][ T3940] overlayfs: failed to clone upperpath [ 249.515535][ T3984] 9pnet_fd: p9_fd_create_tcp (3984): problem connecting socket to 127.0.0.1 [ 249.701438][ T4009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4009 comm=syz.2.1256 [ 249.763072][ T4013] rust_binder: 381: no such ref 3 [ 249.783207][ T4018] overlayfs: failed to clone upperpath [ 250.059039][ T45] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 250.236717][ T45] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 250.245895][ T36] audit: type=1326 audit(7119321128.271:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4051 comm="syz.3.1275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba1cd8f6c9 code=0x0 [ 250.269374][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.279013][ T45] usb 5-1: config 0 descriptor?? [ 250.880364][ T36] audit: type=1400 audit(7119321128.911:435): avc: denied { ioctl } for pid=4065 comm="syz.1.1279" path="socket:[20704]" dev="sockfs" ino=20704 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 251.112515][ T36] audit: type=1326 audit(7119321129.141:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.3.1284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba1cd8f6c9 code=0x0 [ 251.392551][ T4020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.402267][ T4020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.414535][ T45] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 251.427375][ T45] asix 5-1:0.0: probe with driver asix failed with error -71 [ 251.438943][ T45] usb 5-1: USB disconnect, device number 17 [ 252.024039][ T4108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 252.024077][ T4108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 252.375412][ T45] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 252.565463][ T45] usb 5-1: device descriptor read/64, error -71 [ 252.763543][ T4144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1307'. [ 252.782808][ T4148] cgroup: Invalid name [ 252.805859][ T45] usb 5-1: device descriptor read/64, error -71 [ 252.911093][ T4178] +$<: renamed from bridge0 (while UP) [ 253.055483][ T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 253.185451][ T45] usb 5-1: device descriptor read/64, error -71 [ 253.426747][ T45] usb 5-1: device descriptor read/64, error -71 [ 253.451443][ T4189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4189 comm=syz.3.1323 [ 253.538502][ T4211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 253.551782][ T45] usb usb5-port1: attempt power cycle [ 253.566948][ T4214] overlayfs: failed to clone upperpath [ 253.632601][ T4222] overlayfs: failed to clone upperpath [ 253.905469][ T45] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 253.926546][ T45] usb 5-1: device descriptor read/8, error -71 [ 254.056560][ T45] usb 5-1: device descriptor read/8, error -71 [ 254.305445][ T45] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 254.326572][ T45] usb 5-1: device descriptor read/8, error -71 [ 254.336380][ T4259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 254.456854][ T45] usb 5-1: device descriptor read/8, error -71 [ 254.464231][ T4282] netlink: 'syz.2.1357': attribute type 11 has an invalid length. [ 254.472424][ T4282] netlink: 'syz.2.1357': attribute type 2 has an invalid length. [ 254.512102][ T4290] overlayfs: unescaped trailing colons in lowerdir mount option. [ 254.604998][ T45] usb usb5-port1: unable to enumerate USB device [ 255.036847][ T4296] cgroup: Invalid name [ 255.145746][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 255.297259][ T4310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 255.487278][ T4322] input: syz0 as /devices/virtual/input/input16 [ 255.765063][ T4359] netlink: 'syz.4.1381': attribute type 27 has an invalid length. [ 255.883567][ T4366] rust_binder: 434: no such ref 3 [ 255.888765][ T4366] rust_binder: inc_ref_done called when no active inc_refs [ 255.888786][ T4366] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 255.903063][ T4366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:434 [ 255.961523][ T36] audit: type=1400 audit(7119321133.991:437): avc: denied { mount } for pid=4374 comm="syz.4.1386" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 256.245671][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 256.395444][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 256.401907][ T9] usb 5-1: config 8 has an invalid interface number: 212 but max is 1 [ 256.410203][ T9] usb 5-1: config 8 has an invalid interface number: 194 but max is 1 [ 256.418469][ T9] usb 5-1: config 8 has an invalid interface number: 199 but max is 1 [ 256.426753][ T9] usb 5-1: config 8 has 3 interfaces, different from the descriptor's value: 2 [ 256.435828][ T9] usb 5-1: config 8 has no interface number 0 [ 256.441991][ T9] usb 5-1: config 8 has no interface number 1 [ 256.448201][ T9] usb 5-1: config 8 has no interface number 2 [ 256.454493][ T9] usb 5-1: config 8 interface 212 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 256.465889][ T9] usb 5-1: config 8 interface 212 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 256.476879][ T9] usb 5-1: config 8 interface 212 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 256.487887][ T9] usb 5-1: config 8 interface 212 altsetting 6 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 256.499116][ T9] usb 5-1: config 8 interface 212 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 256.504499][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 256.510193][ T9] usb 5-1: config 8 interface 212 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 256.530041][ T9] usb 5-1: config 8 interface 212 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 256.540879][ T9] usb 5-1: config 8 interface 212 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 256.551956][ T9] usb 5-1: config 8 interface 212 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 256.562943][ T9] usb 5-1: config 8 interface 212 altsetting 6 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 256.576294][ T9] usb 5-1: config 8 interface 194 altsetting 154 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.586433][ T9] usb 5-1: config 8 interface 194 altsetting 154 has a duplicate endpoint with address 0x6, skipping [ 256.597424][ T9] usb 5-1: config 8 interface 194 altsetting 154 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 256.608699][ T9] usb 5-1: config 8 interface 199 altsetting 215 has a duplicate endpoint with address 0x9, skipping [ 256.619709][ T9] usb 5-1: config 8 interface 199 altsetting 215 has an invalid descriptor for endpoint zero, skipping [ 256.631028][ T9] usb 5-1: config 8 interface 199 altsetting 215 has a duplicate endpoint with address 0x4, skipping [ 256.642021][ T9] usb 5-1: config 8 interface 199 altsetting 215 has a duplicate endpoint with address 0x3, skipping [ 256.653025][ T9] usb 5-1: config 8 interface 199 altsetting 215 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 256.664290][ T9] usb 5-1: config 8 interface 199 altsetting 215 has a duplicate endpoint with address 0x1, skipping [ 256.675276][ T9] usb 5-1: config 8 interface 212 has no altsetting 0 [ 256.682154][ T9] usb 5-1: config 8 interface 194 has no altsetting 0 [ 256.689211][ T9] usb 5-1: config 8 interface 199 has no altsetting 0 [ 256.703829][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=f9d1, bcdDevice=7d.16 [ 256.713301][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.721664][ T9] usb 5-1: Manufacturer: ࠌ [ 256.726540][ T9] usb 5-1: SerialNumber: 《 [ 256.838928][ T4397] tipc: Failed to remove unknown binding: 66,1,1/0:3392957080/3392957083 [ 256.848245][ T4397] tipc: Failed to remove unknown binding: 66,1,1/0:3392957080/3392957083 [ 256.857071][ T4397] tipc: Failed to remove unknown binding: 66,1,1/0:3392957080/3392957083 [ 256.935818][ T9] ftdi_sio 5-1:8.212: FTDI USB Serial Device converter detected [ 256.943994][ T9] ftdi_sio ttyUSB0: unknown device type: 0x7d16 [ 256.952630][ T9] ftdi_sio 5-1:8.194: FTDI USB Serial Device converter detected [ 256.960726][ T9] ftdi_sio ttyUSB1: unknown device type: 0x7d16 [ 256.968833][ T9] ftdi_sio 5-1:8.199: FTDI USB Serial Device converter detected [ 256.976907][ T9] ftdi_sio ttyUSB2: unknown device type: 0x7d16 [ 256.985100][ T9] usb 5-1: USB disconnect, device number 22 [ 256.994413][ T9] ftdi_sio 5-1:8.212: device disconnected [ 257.001904][ T9] ftdi_sio 5-1:8.194: device disconnected [ 257.008447][ T9] ftdi_sio 5-1:8.199: device disconnected [ 257.814376][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 257.826312][ T4458] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1419'. [ 257.837280][ T36] audit: type=1400 audit(7119321135.871:438): avc: denied { mount } for pid=4457 comm="syz.4.1419" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 258.088541][ T4500] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1434'. [ 258.101304][ T4500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.152630][ T4502] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1435'. [ 258.162809][ T4502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4502 comm=syz.1.1435 [ 258.259336][ T36] audit: type=1400 audit(7119321136.291:439): avc: denied { listen } for pid=4523 comm="syz.1.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.278888][ T36] audit: type=1400 audit(7119321136.291:440): avc: denied { accept } for pid=4523 comm="syz.1.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.445463][ T371] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 258.595472][ T371] usb 5-1: Using ep0 maxpacket: 32 [ 258.601950][ T371] usb 5-1: config 4 has an invalid interface number: 228 but max is 0 [ 258.610345][ T371] usb 5-1: config 4 has no interface number 0 [ 258.616508][ T371] usb 5-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 40384, setting to 1024 [ 258.627871][ T371] usb 5-1: config 4 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 1024 [ 258.638094][ T371] usb 5-1: config 4 interface 228 has no altsetting 0 [ 258.651460][ T371] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 258.661002][ T371] usb 5-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 258.669568][ T371] usb 5-1: Product: syz [ 258.673770][ T371] usb 5-1: Manufacturer: syz [ 258.678625][ T371] usb 5-1: SerialNumber: syz [ 258.684045][ T4514] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 258.750133][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 258.861387][ T4547] netlink: 76 bytes leftover after parsing attributes in process ` [ 258.861387][ T4547]  !'. [ 258.873014][ T4547] netlink: 12 bytes leftover after parsing attributes in process ` [ 258.873014][ T4547]  !'. [ 258.906956][ T371] usb 5-1: USB disconnect, device number 23 [ 258.916726][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 258.965237][ T36] audit: type=1400 audit(7119321136.991:441): avc: denied { accept } for pid=4561 comm="syz.1.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 259.368204][ T4616] overlayfs: failed to clone upperpath [ 259.424869][ T4626] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 259.424901][ T4626] rust_binder: Error while translating object. [ 259.437882][ T4626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 259.444399][ T4626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484 [ 259.599258][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 259.632157][ T36] audit: type=1400 audit(7119321905.664:442): avc: denied { listen } for pid=4651 comm="syz.4.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 259.633034][ T4653] binder: Unknown parameter 'fscontext?}' [ 259.716640][ T36] audit: type=1326 audit(7119321905.754:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.1.1495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34118f6c9 code=0x0 [ 259.745924][ T4662] rust_binder: Write failure EINVAL in pid:508 [ 259.746081][ T4662] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 260.028385][ T36] audit: type=1400 audit(7119321906.064:444): avc: denied { lock } for pid=4673 comm="syz.4.1498" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.178583][ T4686] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 260.387018][ T4716] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 260.405828][ T36] audit: type=1400 audit(7119321906.444:445): avc: denied { map } for pid=4715 comm="syz.4.1510" path="pipe:[22308]" dev="pipefs" ino=22308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 260.439810][ T4718] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 260.439834][ T4718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 260.447972][ T4718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:544 [ 260.478568][ T4723] rust_binder: Error while translating object. [ 260.488144][ T4723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 260.494341][ T4723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:549 [ 260.669976][ T4751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1523'. [ 261.037304][ T4788] netlink: 'syz.2.1536': attribute type 2 has an invalid length. [ 261.060197][ T4791] 9p filesystem being mounted at /469/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 261.262559][ T4797] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 261.726668][ T4802] netlink: 'syz.3.1541': attribute type 3 has an invalid length. [ 261.734772][ T4802] fuse: Bad value for 'fd' [ 261.754348][ T36] audit: type=1400 audit(7119321907.784:446): avc: denied { mounton } for pid=4803 comm="syz.3.1542" path="/335/file0" dev="tmpfs" ino=1790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 261.993281][ T36] audit: type=1400 audit(7119321908.024:447): avc: denied { map } for pid=4816 comm="syz.2.1547" path="socket:[22502]" dev="sockfs" ino=22502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 262.024491][ T36] audit: type=1400 audit(7119321908.054:448): avc: denied { module_load } for pid=4820 comm="syz.2.1549" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=22513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 262.054850][ T4825] mmap: syz.2.1551 (4825): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 262.129165][ T36] audit: type=1326 audit(7119321908.164:449): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.1553" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c09f8f6c9 code=0x0 [ 263.571837][ T4894] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1580'. [ 263.789589][ T4933] overlayfs: failed to clone upperpath [ 263.824866][ T36] audit: type=1400 audit(7119321909.854:450): avc: denied { getopt } for pid=4936 comm="syz.3.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.881121][ T36] audit: type=1400 audit(7119321909.914:451): avc: denied { remount } for pid=4943 comm="syz.3.1599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 263.900956][ T36] audit: type=1400 audit(7119321909.914:452): avc: denied { mount } for pid=4943 comm="syz.3.1599" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 263.975468][ T9] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 264.126497][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.151755][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.167120][ T4962] netlink: 'syz.2.1606': attribute type 15 has an invalid length. [ 264.174961][ T4962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1606'. [ 264.184105][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 264.190864][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 264.200650][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.221161][ T9] usb 5-1: config 0 descriptor?? [ 264.440448][ T36] audit: type=1400 audit(7119321910.474:453): avc: denied { execute } for pid=4976 comm="syz.1.1610" path="/cpuacct.usage_percpu" dev="ramfs" ino=23310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 264.480303][ T4980] overlay: ./file0 is not a directory [ 264.501124][ T4980] 9pnet: Could not find request transport:  [ 264.541741][ T4991] 9pnet_fd: Insufficient options for proto=fd [ 264.548414][ T36] audit: type=1401 audit(7119321910.584:454): op=fscreate invalid_context=CFA7AE [ 264.631899][ T9] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 264.639363][ T9] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 264.647424][ T9] hid-steam 0003:28DE:1102.0011: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 264.828248][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 264.832838][ T371] usb 5-1: USB disconnect, device number 24 [ 265.458760][ T36] audit: type=1400 audit(7119321911.494:455): avc: denied { connect } for pid=5046 comm="syz.4.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.460027][ T5047] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 265.653431][ T5060] netlink: 'syz.4.1643': attribute type 46 has an invalid length. [ 265.677115][ T5063] tipc: Enabling of bearer rejected, already enabled [ 265.763289][ T5073] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1648'. [ 265.936498][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1657'. [ 266.145449][ T9] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 266.283779][ T9] usb 5-1: device descriptor read/64, error -71 [ 266.535428][ T9] usb 5-1: device descriptor read/64, error -71 [ 266.775428][ T9] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 266.875062][ T5118] 9p filesystem being mounted at /503/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 266.905482][ T9] usb 5-1: device descriptor read/64, error -71 [ 267.155452][ T9] usb 5-1: device descriptor read/64, error -71 [ 267.228865][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 267.228884][ T36] audit: type=1326 audit(7119321913.264:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.1.1672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa34118f6c9 code=0x0 [ 267.265669][ T9] usb usb5-port1: attempt power cycle [ 267.605419][ T9] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 267.636798][ T9] usb 5-1: device descriptor read/8, error -71 [ 267.767043][ T9] usb 5-1: device descriptor read/8, error -71 [ 267.786773][ T5183] netlink: 'syz.3.1690': attribute type 11 has an invalid length. [ 268.005488][ T9] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 268.026522][ T9] usb 5-1: device descriptor read/8, error -71 [ 268.156375][ T9] usb 5-1: device descriptor read/8, error -71 [ 268.204795][ T5204] overlayfs: missing 'workdir' [ 268.251930][ T5210] cgroup: Name too long [ 268.265618][ T9] usb usb5-port1: unable to enumerate USB device [ 268.316773][ T5214] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5214 comm=syz.2.1701 [ 268.666564][ T5239] netlink: 'syz.1.1709': attribute type 12 has an invalid length. [ 268.693952][ T5241] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 268.928906][ T5287] rust_binder: Error in use_page_slow: ESRCH [ 268.928925][ T5287] rust_binder: use_range failure ESRCH [ 268.945487][ T5287] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 268.951029][ T5287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 268.975435][ T5287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:605 [ 269.408842][ T5325] overlayfs: failed to clone upperpath [ 269.635428][ T31] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 269.785474][ T31] usb 5-1: device descriptor read/64, error -71 [ 270.035703][ T31] usb 5-1: device descriptor read/64, error -71 [ 270.145140][ T5364] 9p filesystem being mounted at /543/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 270.261408][ T36] audit: type=1400 audit(7119321923.297:461): avc: denied { setopt } for pid=5369 comm="syz.2.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.296876][ T31] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 270.427265][ T31] usb 5-1: device descriptor read/64, error -71 [ 270.668209][ T31] usb 5-1: device descriptor read/64, error -71 [ 270.778715][ T31] usb usb5-port1: attempt power cycle [ 271.041138][ T5410] 9p filesystem being mounted at /405/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 271.120151][ T31] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 271.151039][ T31] usb 5-1: device descriptor read/8, error -71 [ 271.267534][ T5435] /dev/nbd2: Can't lookup blockdev [ 271.272987][ T5435] /dev/nbd2: Can't lookup blockdev [ 271.280147][ T5435] /dev/nbd2: Can't lookup blockdev [ 271.281739][ T31] usb 5-1: device descriptor read/8, error -71 [ 271.285618][ T5435] /dev/nbd2: Can't lookup blockdev [ 271.297113][ T5435] /dev/nbd2: Can't lookup blockdev [ 271.302974][ T5435] /dev/nbd2: Can't lookup blockdev [ 271.308332][ T5435] /dev/nbd2: Can't lookup blockdev [ 271.313807][ T5435] /dev/nbd2: Can't lookup blockdev [ 271.541517][ T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 271.562594][ T31] usb 5-1: device descriptor read/8, error -71 [ 271.693492][ T31] usb 5-1: device descriptor read/8, error -71 [ 271.801618][ T31] usb usb5-port1: unable to enumerate USB device [ 271.813125][ T5487] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 271.835925][ T36] audit: type=1326 audit(7119321925.861:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.1.1797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34118f6c9 code=0x0 [ 272.153234][ T5516] netlink: 'syz.3.1806': attribute type 3 has an invalid length. [ 272.741490][ T371] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 272.891517][ T371] usb 5-1: Using ep0 maxpacket: 32 [ 272.897965][ T371] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 157, changing to 11 [ 272.911476][ T371] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.921399][ T371] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 272.932385][ T371] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.945401][ T371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.952096][ T371] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 272.961307][ T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.969993][ T371] usb 5-1: config 0 descriptor?? [ 273.044333][ T5540] 9pnet_fd: Insufficient options for proto=fd [ 273.588248][ T5523] tipc: Started in network mode [ 273.593362][ T5523] tipc: Node identity ac14142f, cluster identity 4711 [ 273.600375][ T5523] tipc: New replicast peer: 0.0.0.0 [ 273.606130][ T5523] tipc: Enabled bearer , priority 10 [ 273.613320][ T5523] rust_binder: Error while translating object. [ 273.613373][ T5523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 273.619743][ T5523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:628 [ 273.631364][ T371] usbhid 5-1:0.0: can't add hid device: -71 [ 273.647226][ T371] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 273.659387][ T371] usb 5-1: USB disconnect, device number 33 [ 273.887722][ T36] audit: type=1400 audit(7119321927.911:463): avc: denied { shutdown } for pid=5551 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.982952][ T5557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1822'. [ 274.158761][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'. [ 274.168102][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'. [ 274.386777][ T5572] 9p filesystem being mounted at /573/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 274.451490][ T371] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 274.602982][ T371] usb 5-1: unable to get BOS descriptor or descriptor too short [ 274.611179][ T371] usb 5-1: not running at top speed; connect to a high speed hub [ 274.619904][ T371] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.630184][ T371] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.639313][ T371] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.652286][ T371] usb 5-1: config 1 interface 0 has no altsetting 0 [ 274.660912][ T371] usb 5-1: string descriptor 0 read error: -22 [ 274.667771][ T371] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.676882][ T371] usb 5-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11 [ 274.721513][ T336] tipc: Node number set to 2886997039 [ 274.891747][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1834'. [ 274.994279][ T5606] rust_binder: Write failure EINVAL in pid:641 [ 274.994366][ T5606] rust_binder: Write failure EINVAL in pid:641 [ 275.005026][ T5609] futex_wake_op: syz.2.1839 tries to shift op by 144; fix this program [ 275.008936][ T5602] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1837'. [ 275.312585][ T36] audit: type=1400 audit(7119321929.341:464): avc: denied { read } for pid=5626 comm="syz.3.1846" name="file0" dev="tmpfs" ino=2316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 276.400576][ T5686] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1866'. [ 276.410695][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 276.484275][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'. [ 277.230853][ T336] usb 5-1: USB disconnect, device number 34 [ 277.266433][ T36] audit: type=1326 audit(7119321931.291:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34118f6c9 code=0x0 [ 277.382743][ T5745] batadv_slave_0: entered promiscuous mode [ 277.454502][ T36] audit: type=1400 audit(7119321931.481:466): avc: denied { create } for pid=5757 comm="syz.4.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.509367][ T5769] rust_binder: inc_ref_done called when no active inc_refs [ 277.509400][ T5769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:665 [ 277.517390][ T5769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.552368][ T5744] batadv_slave_0: left promiscuous mode [ 277.568891][ T5772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.581528][ T5772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.589550][ T5772] binder: Unknown parameter 'defcontext01777777777777777777777' [ 277.801510][ T434] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 277.951504][ T434] usb 5-1: Using ep0 maxpacket: 8 [ 277.957846][ T434] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 277.966198][ T434] usb 5-1: config 0 has no interface number 0 [ 277.973769][ T434] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 277.982955][ T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.991052][ T434] usb 5-1: Product: syz [ 277.995344][ T434] usb 5-1: Manufacturer: syz [ 277.999974][ T434] usb 5-1: SerialNumber: syz [ 278.005713][ T434] usb 5-1: config 0 descriptor?? [ 278.130814][ T36] audit: type=1400 audit(7119321932.151:467): avc: denied { getopt } for pid=5782 comm="syz.2.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 278.155026][ T36] audit: type=1400 audit(7119321932.161:468): avc: denied { execute } for pid=5782 comm="syz.2.1896" path="/597/cpuacct.usage_percpu" dev="tmpfs" ino=3247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 278.179643][ T36] audit: type=1400 audit(7119321932.191:469): avc: denied { mounton } for pid=5789 comm="syz.2.1898" path="/599/file0" dev="tmpfs" ino=3258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 278.222699][ T434] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 278.238105][ T434] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 278.265137][ T434] usb 5-1: USB disconnect, device number 35 [ 278.423477][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.431080][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.438478][ T5798] bridge_slave_0: entered allmulticast mode [ 278.445082][ T5798] bridge_slave_0: entered promiscuous mode [ 278.458761][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.466028][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.473262][ T5798] bridge_slave_1: entered allmulticast mode [ 278.479600][ T5798] bridge_slave_1: entered promiscuous mode [ 278.566214][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.573311][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.580605][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.587773][ T5798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.616248][ T5262] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.624085][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.634736][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.641839][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.651594][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.658721][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.668954][ T5264] erspan0: left allmulticast mode [ 278.674766][ T5264] erspan0: left promiscuous mode [ 278.679942][ T5264] bridge0: port 3(erspan0) entered disabled state [ 278.686967][ T5264] bridge_slave_1: left allmulticast mode [ 278.692728][ T5264] bridge_slave_1: left promiscuous mode [ 278.698437][ T5264] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.706464][ T5264] bridge_slave_0: left allmulticast mode [ 278.712152][ T5264] bridge_slave_0: left promiscuous mode [ 278.718012][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.792635][ T5798] veth0_vlan: entered promiscuous mode [ 278.803869][ T5798] veth1_macvtap: entered promiscuous mode [ 278.834425][ T5264] tipc: Disabling bearer [ 278.839857][ T5264] tipc: Left network mode [ 278.845762][ T5264] veth1_macvtap: left promiscuous mode [ 278.851377][ T5264] veth0_vlan: left promiscuous mode [ 279.201613][ T371] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 279.220636][ T5847] fuse: Unknown parameter '' [ 279.362554][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.375605][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.385882][ T371] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.399384][ T371] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.409069][ T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.418852][ T371] usb 5-1: config 0 descriptor?? [ 279.479663][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 279.591823][ T5874] fuseblk: Unknown parameter '(' [ 279.695761][ T36] audit: type=1400 audit(7119321933.721:470): avc: denied { bind } for pid=5875 comm="syz.2.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 279.828965][ T5835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.837743][ T5835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.847369][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.854978][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.862479][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.870029][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.877515][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.885007][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.892481][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.899868][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.907341][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.914834][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.922295][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.929712][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.937208][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.944710][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.952169][ T371] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 279.959758][ T371] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 279.968829][ T371] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 280.102806][ T371] usb 5-1: USB disconnect, device number 36 [ 280.244604][ T5886] 9p filesystem being mounted at /479/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 280.424457][ T36] audit: type=1400 audit(7119321934.451:471): avc: denied { connect } for pid=5922 comm="syz.1.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 280.620062][ T36] audit: type=1326 audit(7119321934.641:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.4.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c18f6c9 code=0x7ffc0000 [ 280.643647][ T36] audit: type=1326 audit(7119321934.641:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.4.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c18f6c9 code=0x7ffc0000 [ 280.668647][ T36] audit: type=1326 audit(7119321934.641:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.4.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c18f6c9 code=0x7ffc0000 [ 280.676542][ T5937] 9pnet_fd: Insufficient options for proto=fd [ 280.692368][ T36] audit: type=1326 audit(7119321934.641:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.4.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c18f6c9 code=0x7ffc0000 [ 280.699696][ T5937] 9pnet_fd: Insufficient options for proto=fd [ 280.722226][ T36] audit: type=1326 audit(7119321934.641:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.4.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5c5c18f6c9 code=0x7ffc0000 [ 280.752605][ T36] audit: type=1326 audit(7119321934.641:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.4.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c18f6c9 code=0x7ffc0000 [ 280.776067][ T36] audit: type=1326 audit(7119321934.651:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.4.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c18f6c9 code=0x7ffc0000 [ 280.799471][ T36] audit: type=1326 audit(7119321934.651:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.4.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c18f6c9 code=0x7ffc0000 [ 280.844843][ T5942] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 280.857107][ T5942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:687 [ 281.036563][ T5262] Bluetooth: hci0: Frame reassembly failed (-84) [ 281.377786][ T5986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1963'. [ 281.726623][ T6019] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1975'. [ 281.933359][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 281.956948][ T6032] 9pnet_fd: Insufficient options for proto=fd [ 281.994624][ T6041] netlink: 'syz.3.1982': attribute type 1 has an invalid length. [ 282.024293][ T6045] devpts: called with bogus options [ 282.191857][ T6048] 9pnet_fd: Insufficient options for proto=fd [ 283.051558][ T885] Bluetooth: hci0: command 0x1003 tx timeout [ 283.057671][ T884] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 283.239966][ T6103] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 283.249119][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2004'. [ 283.311486][ T31] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 283.441492][ T31] usb 5-1: device descriptor read/64, error -71 [ 283.657776][ T6197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2022'. [ 283.681510][ T31] usb 5-1: device descriptor read/64, error -71 [ 283.921487][ T31] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 284.061526][ T31] usb 5-1: device descriptor read/64, error -71 [ 284.291725][ T6251] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.2040'. [ 284.301348][ T6251] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.311507][ T31] usb 5-1: device descriptor read/64, error -71 [ 284.421624][ T31] usb usb5-port1: attempt power cycle [ 284.761490][ T31] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 284.783086][ T31] usb 5-1: device descriptor read/8, error -71 [ 284.912569][ T31] usb 5-1: device descriptor read/8, error -71 [ 285.151523][ T31] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 285.172620][ T31] usb 5-1: device descriptor read/8, error -71 [ 285.302604][ T31] usb 5-1: device descriptor read/8, error -71 [ 285.411580][ T31] usb usb5-port1: unable to enumerate USB device [ 285.526012][ T6282] 9pnet_fd: Insufficient options for proto=fd [ 286.056618][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 286.056636][ T36] audit: type=1400 audit(7119321940.081:525): avc: denied { lock } for pid=6285 comm="syz.1.2053" path="socket:[27283]" dev="sockfs" ino=27283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.118005][ T6291] rust_binder: 706: no such ref 0 [ 286.123132][ T6291] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 286.130229][ T6291] rust_binder: 706: no such ref 2 [ 286.135336][ T6291] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 286.581985][ T31] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 286.721514][ T31] usb 5-1: device descriptor read/64, error -71 [ 286.961497][ T31] usb 5-1: device descriptor read/64, error -71 [ 287.201559][ T31] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 287.294498][ T6330] futex_wake_op: syz.1.2069 tries to shift op by 144; fix this program [ 287.331548][ T31] usb 5-1: device descriptor read/64, error -71 [ 287.519849][ T36] audit: type=1400 audit(7119321941.541:526): avc: denied { lock } for pid=6353 comm="syz.1.2078" path="socket:[28222]" dev="sockfs" ino=28222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.571511][ T31] usb 5-1: device descriptor read/64, error -71 [ 287.681621][ T31] usb usb5-port1: attempt power cycle [ 287.818767][ T6363] fuse: Unknown parameter 'gropudrOggRqƃ' [ 288.021516][ T31] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 288.042575][ T31] usb 5-1: device descriptor read/8, error -71 [ 288.136067][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 288.172609][ T31] usb 5-1: device descriptor read/8, error -71 [ 288.411531][ T31] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 288.432682][ T31] usb 5-1: device descriptor read/8, error -71 [ 288.562684][ T31] usb 5-1: device descriptor read/8, error -71 [ 288.681600][ T31] usb usb5-port1: unable to enumerate USB device [ 288.787549][ T6401] team_slave_0: mtu less than device minimum [ 288.831311][ T6409] 9p filesystem being mounted at /45/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 289.012779][ T6421] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2100'. [ 289.033147][ T6423] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2101'. [ 289.182709][ T6426] rust_binder: Error while translating object. [ 289.182752][ T6426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 289.189234][ T6426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:708 [ 289.198915][ T6426] rust_binder: 708: no such ref 2 [ 289.213162][ T6426] rust_binder: 708: no such ref 2 [ 289.218204][ T6426] rust_binder: Write failure EINVAL in pid:708 [ 289.929504][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2115'. [ 289.932913][ T6470] mmap: syz.1.2112 (6470) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 290.212663][ T6500] batadv_slave_1: entered promiscuous mode [ 290.220908][ T6500] batadv_slave_1: left promiscuous mode [ 290.232658][ T6502] netlink: 'syz.4.2128': attribute type 13 has an invalid length. [ 290.259313][ T6508] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2129'. [ 290.291473][ T36] audit: type=1400 audit(7119321944.311:527): avc: denied { accept } for pid=6509 comm="syz.2.2131" laddr=fe80::11 lport=11 faddr=ff02::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 290.318328][ T6512] netlink: 'syz.4.2130': attribute type 1 has an invalid length. [ 290.343005][ T6514] netlink: 'syz.4.2132': attribute type 16 has an invalid length. [ 290.351184][ T6514] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 290.351301][ T6514] rust_binder: Write failure EINVAL in pid:730 [ 290.556208][ T6527] !@: renamed from xfrm0 (while UP) [ 290.580026][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2138'. [ 290.608197][ T36] audit: type=1400 audit(7119321944.631:528): avc: denied { create } for pid=6539 comm="syz.1.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 290.610128][ T6542] netlink: 'syz.1.2140': attribute type 6 has an invalid length. [ 290.628098][ T36] audit: type=1400 audit(7119321944.631:529): avc: denied { create } for pid=6539 comm="syz.1.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 290.635798][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 290.791513][ T9] usb 5-1: device descriptor read/64, error -71 [ 291.031590][ T9] usb 5-1: device descriptor read/64, error -71 [ 291.186586][ T6561] fuse: Unknown parameter '' [ 291.214611][ T36] audit: type=1400 audit(7119321945.241:530): avc: denied { execute_no_trans } for pid=6564 comm="syz.1.2149" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.271552][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 291.401499][ T9] usb 5-1: device descriptor read/64, error -71 [ 291.641751][ T9] usb 5-1: device descriptor read/64, error -71 [ 291.751609][ T9] usb usb5-port1: attempt power cycle [ 292.091542][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 292.112922][ T9] usb 5-1: device descriptor read/8, error -71 [ 292.242519][ T9] usb 5-1: device descriptor read/8, error -71 [ 292.491555][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 292.512671][ T9] usb 5-1: device descriptor read/8, error -71 [ 292.642475][ T9] usb 5-1: device descriptor read/8, error -71 [ 292.761584][ T9] usb usb5-port1: unable to enumerate USB device [ 293.060255][ T6667] overlayfs: failed to clone lowerpath [ 293.403066][ T6672] rust_binder: Error while translating object. [ 293.403091][ T6672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 293.409408][ T6672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:741 [ 293.430871][ T36] audit: type=1400 audit(7119321947.451:531): avc: denied { accept } for pid=6673 comm="syz.4.2192" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 293.437676][ T6674] netlink: 'syz.4.2192': attribute type 46 has an invalid length. [ 293.493422][ T36] audit: type=1400 audit(7119321947.521:532): avc: denied { ioctl } for pid=6682 comm="syz.4.2194" path="socket:[30792]" dev="sockfs" ino=30792 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 293.699674][ T6694] 9p filesystem being mounted at /576/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 293.870432][ T6703] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2203'. [ 293.908409][ T6711] fuse: Unknown parameter 'v')0x0000000000000005' [ 294.174743][ T6728] netlink: 'syz.3.2212': attribute type 28 has an invalid length. [ 294.207614][ T6732] netlink: 'syz.3.2214': attribute type 3 has an invalid length. [ 294.229203][ T6734] overlayfs: failed to clone upperpath [ 294.285768][ T6744] 9pnet_fd: Insufficient options for proto=fd [ 294.294004][ T6744] netlink: 'syz.3.2219': attribute type 1 has an invalid length. [ 294.330124][ T6748] 9pnet_fd: Insufficient options for proto=fd [ 294.337231][ T6748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65530 sclass=netlink_route_socket pid=6748 comm=syz.3.2221 [ 294.350534][ T6748] bdev: Unknown parameter ']]@^' [ 294.406949][ T6187] tipc: Subscription rejected, illegal request [ 294.949632][ T6801] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.2240'. [ 295.263682][ T6810] support for the xor transformation has been removed. [ 295.512308][ T31] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 295.644116][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.651187][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.658349][ T6812] bridge_slave_0: entered allmulticast mode [ 295.664827][ T6812] bridge_slave_0: entered promiscuous mode [ 295.671263][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.678352][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.685563][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 295.685951][ T6812] bridge_slave_1: entered allmulticast mode [ 295.691893][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.697536][ T6812] bridge_slave_1: entered promiscuous mode [ 295.707811][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.723346][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 295.732470][ T36] audit: type=1326 audit(7119321949.751:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf558f6c9 code=0x7fc00000 [ 295.755984][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.765394][ T31] usb 5-1: config 0 descriptor?? [ 295.776374][ T31] hub 5-1:0.0: USB hub found [ 295.828940][ T36] audit: type=1400 audit(7119321949.851:534): avc: denied { create } for pid=6822 comm="syz.2.2248" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 295.850764][ T6823] fuse: Bad value for 'user_id' [ 295.854932][ T36] audit: type=1400 audit(7119321949.871:535): avc: denied { mounton } for pid=6822 comm="syz.2.2248" path="/74/file0" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 295.856986][ T6823] fuse: Bad value for 'user_id' [ 295.887287][ T36] audit: type=1400 audit(7119321949.921:536): avc: denied { append } for pid=6822 comm="syz.2.2248" name="file0" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 295.901748][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.909973][ T36] audit: type=1400 audit(7119321949.921:537): avc: denied { map } for pid=6822 comm="syz.2.2248" path="/74/file0" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 295.916712][ T6812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.916866][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.953557][ T6812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.984814][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.992320][ T31] hub 5-1:0.0: 1 port detected [ 295.997483][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.008641][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.015749][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.033716][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.040823][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.063948][ T36] audit: type=1400 audit(7119321950.091:538): avc: denied { shutdown } for pid=6831 comm="syz.2.2249" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.084871][ T6812] veth0_vlan: entered promiscuous mode [ 296.103435][ T6812] veth1_macvtap: entered promiscuous mode [ 296.193878][ T31] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 296.201286][ T31] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 296.202561][ T6840] fuse: Unknown parameter 'u3!' [ 296.210864][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 296.219996][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 296.242433][ T31] usb 5-1: USB disconnect, device number 49 [ 296.801013][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.810292][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.041500][ T701] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 297.191475][ T701] usb 5-1: Using ep0 maxpacket: 16 [ 297.197816][ T701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 297.207919][ T701] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 297.223136][ T701] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 297.233836][ T701] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.247078][ T701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 297.255270][ T701] usb 5-1: SerialNumber: syz [ 297.255972][ T36] audit: type=1400 audit(7119321951.291:539): avc: denied { read } for pid=6864 comm="syz.1.2258" path="socket:[31072]" dev="sockfs" ino=31072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 297.281685][ T6845] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 297.291001][ T701] cdc_acm 5-1:1.0: skipping garbage [ 297.298250][ T701] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 297.389304][ T6886] __vm_enough_memory: pid: 6886, comm: syz.1.2263, bytes: 18014402804453376 not enough memory for the allocation [ 297.402351][ T6886] __vm_enough_memory: pid: 6886, comm: syz.1.2263, bytes: 18014402804453376 not enough memory for the allocation [ 297.428505][ T36] audit: type=1400 audit(7119321951.451:540): avc: denied { relabelfrom } for pid=6889 comm="syz.1.2264" name="" dev="pipefs" ino=31101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 297.428513][ T6890] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 297.460632][ T36] audit: type=1400 audit(7119321951.481:541): avc: denied { relabelto } for pid=6889 comm="syz.1.2264" name="" dev="pipefs" ino=31101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:src_t:s0" [ 297.685809][ T6902] netlink: 'syz.2.2270': attribute type 4 has an invalid length. [ 297.693640][ T6902] netlink: 992 bytes leftover after parsing attributes in process `syz.2.2270'. [ 297.731489][ T434] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 297.773841][ T371] usb 5-1: USB disconnect, device number 50 [ 297.902489][ T434] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.931458][ T434] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.961458][ T434] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 297.971343][ T434] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.011498][ T434] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.030787][ T434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.051693][ T434] usb 2-1: config 0 descriptor?? [ 298.220536][ T6917] 9p filesystem being mounted at /575/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 298.311445][ T36] audit: type=1400 audit(7119321952.331:542): avc: denied { view } for pid=6919 comm="syz.4.2275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 298.351525][ T36] audit: type=1400 audit(7119321952.361:543): avc: denied { read } for pid=6919 comm="syz.4.2275" name="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 298.397976][ T36] audit: type=1400 audit(7119321952.361:544): avc: denied { open } for pid=6919 comm="syz.4.2275" path="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 298.429024][ T36] audit: type=1400 audit(7119321952.361:545): avc: denied { map } for pid=6919 comm="syz.4.2275" path="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 298.460210][ T434] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 298.468038][ T36] audit: type=1400 audit(7119321952.361:546): avc: denied { execute } for pid=6919 comm="syz.4.2275" path="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 298.484878][ T434] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 298.531558][ T434] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 298.774662][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.784873][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.795459][ T6894] rust_binder: Got transaction with invalid offset. [ 298.795554][ T6894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 298.802480][ T6894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 298.814729][ T371] usb 2-1: USB disconnect, device number 27 [ 299.032227][ T6941] netlink: 'syz.3.2281': attribute type 4 has an invalid length. [ 299.041782][ T6941] netlink: 'syz.3.2281': attribute type 4 has an invalid length. [ 299.351777][ T36] audit: type=1400 audit(7119321953.381:547): avc: denied { accept } for pid=6955 comm="syz.1.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.387574][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.387618][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.394116][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.400287][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.406708][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.413321][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.419519][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.426206][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.432566][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.439063][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.445578][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.452011][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.458252][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.464691][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.470905][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.477150][ T31] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 299.491327][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.491366][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.497813][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.504398][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.510585][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.517329][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.523655][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.529943][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.536351][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.542738][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.548958][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.555410][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.561956][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.568177][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.574601][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.580833][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.587317][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.593697][ T6958] rust_binder: Write failure EFAULT in pid:48 [ 299.650418][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 299.671991][ T31] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 299.681150][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.697436][ T31] usb 5-1: config 0 descriptor?? [ 299.714865][ T6954] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 299.726708][ T6964] rust_binder: 54: no such ref 2 [ 299.731766][ T6964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 299.951274][ T36] audit: type=1326 audit(7119321953.971:548): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.3.2297" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba1cd8f6c9 code=0x0 [ 300.126002][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 300.134241][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 300.145964][ T31] usb 5-1: USB disconnect, device number 51 [ 300.485347][ T6999] rust_binder: Write failure EFAULT in pid:68 [ 300.657047][ T701] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 300.672389][ T701] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.707326][ T7006] fido_id[7006]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 300.732120][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 300.882702][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.893990][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.904142][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.917741][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.918641][ T7014] Invalid ELF header magic: != ELF [ 300.927107][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.952275][ T31] usb 2-1: config 0 descriptor?? [ 301.220553][ T7044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:781 [ 301.220977][ T7042] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2324'. [ 301.239685][ T7042] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2324'. [ 301.248896][ T7042] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2324'. [ 301.269113][ T7042] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2324'. [ 301.278322][ T7042] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2324'. [ 301.288590][ T7042] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2324'. [ 301.364190][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.374894][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.382708][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.390338][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.398434][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.406631][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.414341][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.422070][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.429554][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.437485][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.445184][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.453346][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.460882][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.469271][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.477094][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 301.485123][ T31] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 301.491505][ T434] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 301.503522][ T31] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 301.632652][ T31] usb 2-1: USB disconnect, device number 28 [ 301.662774][ T434] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.680097][ T434] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 301.701220][ T434] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.721560][ T434] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 301.746122][ T434] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.765577][ T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.781495][ T434] usb 5-1: Product: syz [ 301.791516][ T434] usb 5-1: Manufacturer: syz [ 301.800599][ T434] usb 5-1: SerialNumber: syz [ 301.949668][ T7059] overlayfs: failed to clone lowerpath [ 302.400330][ T434] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 302.421481][ T434] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 302.427749][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 302.427773][ T36] audit: type=1400 audit(7119321956.451:552): avc: denied { bind } for pid=7090 comm="syz.1.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.439352][ T434] usb 5-1: 2:1 : sample bitwidth 74 in over sample bytes 3 [ 302.482541][ T434] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 302.501954][ T434] usb 5-1: USB disconnect, device number 52 [ 302.661977][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 302.684540][ T7106] overlayfs: failed to clone upperpath [ 302.723742][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2340'. [ 303.028592][ T7132] rust_binder: Write failure EFAULT in pid:785 [ 303.029251][ T36] audit: type=1326 audit(7119321957.051:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.4.2345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5c18f6c9 code=0x0 [ 303.181511][ T701] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 303.332761][ T701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.344020][ T701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.353984][ T701] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.367025][ T701] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.376247][ T701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.385086][ T701] usb 2-1: config 0 descriptor?? [ 303.795953][ T701] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 303.804681][ T701] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 303.814248][ T701] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 304.078317][ T7157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 304.078361][ T7157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 304.151804][ T434] usb 2-1: USB disconnect, device number 29 [ 304.729714][ T7191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:794 [ 304.730018][ T7192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 304.739399][ T7192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:794 [ 305.011538][ T701] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 305.171476][ T701] usb 2-1: Using ep0 maxpacket: 16 [ 305.177954][ T701] usb 2-1: config 8 has an invalid interface number: 138 but max is 0 [ 305.186504][ T701] usb 2-1: config 8 has no interface number 0 [ 305.192903][ T701] usb 2-1: config 8 interface 138 has no altsetting 0 [ 305.201365][ T701] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=40.9e [ 305.211003][ T701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.219344][ T701] usb 2-1: Product: syz [ 305.223835][ T701] usb 2-1: Manufacturer: syz [ 305.228571][ T701] usb 2-1: SerialNumber: syz [ 305.488141][ T7222] binder: Bad value for 'defcontext' [ 305.682084][ T7226] rust_binder: Error while translating object. [ 305.682583][ T7226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 305.688977][ T7226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:812 [ 305.974050][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.991505][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.998679][ T7240] bridge_slave_0: entered allmulticast mode [ 306.005190][ T7240] bridge_slave_0: entered promiscuous mode [ 306.016636][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.023874][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.031043][ T7240] bridge_slave_1: entered allmulticast mode [ 306.037651][ T7240] bridge_slave_1: entered promiscuous mode [ 306.064508][ T6159] bridge_slave_1: left allmulticast mode [ 306.071505][ T6159] bridge_slave_1: left promiscuous mode [ 306.079399][ T6159] +$<: port 2(bridge_slave_1) entered disabled state [ 306.087033][ T6159] bridge_slave_0: left allmulticast mode [ 306.094411][ T6159] bridge_slave_0: left promiscuous mode [ 306.100152][ T6159] +$<: port 1(bridge_slave_0) entered disabled state [ 306.146119][ T701] snd-usb-audio 2-1:8.138: probe with driver snd-usb-audio failed with error -71 [ 306.161560][ T701] usb 2-1: USB disconnect, device number 30 [ 306.176701][ T36] audit: type=1400 audit(7119321960.201:554): avc: denied { sys_module } for pid=7240 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 306.201562][ T36] audit: type=1400 audit(7119321960.221:555): avc: denied { read write } for pid=1919 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.225801][ T36] audit: type=1400 audit(7119321960.221:556): avc: denied { open } for pid=1919 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.250728][ T36] audit: type=1400 audit(7119321960.231:557): avc: denied { ioctl } for pid=1919 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.276897][ T36] audit: type=1400 audit(7119321960.231:558): avc: denied { read write } for pid=7257 comm="syz.4.2385" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.300433][ T36] audit: type=1400 audit(7119321960.231:559): avc: denied { open } for pid=7257 comm="syz.4.2385" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.323953][ T36] audit: type=1400 audit(7119321960.231:560): avc: denied { ioctl } for pid=7257 comm="syz.4.2385" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.349340][ T6159] tipc: Disabling bearer [ 306.355066][ T6159] tipc: Left network mode [ 306.361387][ T6159] veth1_macvtap: left promiscuous mode [ 306.367038][ T6159] veth0_vlan: left promiscuous mode [ 306.419875][ T36] audit: type=1400 audit(7119321960.441:561): avc: denied { create } for pid=7240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.428250][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.447517][ T7240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.454845][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.461916][ T7240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.486885][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.494630][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.505221][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.512371][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.521276][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.528389][ T6187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.554500][ T7240] veth0_vlan: entered promiscuous mode [ 306.566339][ T7240] veth1_macvtap: entered promiscuous mode [ 306.572314][ T434] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 306.722552][ T434] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 306.747504][ T7279] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 306.747713][ T7279] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 306.750253][ T434] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 306.773273][ T434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.808712][ T434] usb 5-1: config 0 descriptor?? [ 306.821509][ T7258] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.241839][ T434] hid-generic 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 307.718606][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 307.718625][ T36] audit: type=1400 audit(7119321961.741:603): avc: denied { unlink } for pid=6812 comm="syz-executor" name="file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 307.747988][ T36] audit: type=1400 audit(7119321961.751:604): avc: denied { write } for pid=7316 comm="syz.1.2403" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 307.770946][ T36] audit: type=1400 audit(7119321961.751:605): avc: denied { write } for pid=7316 comm="syz.1.2403" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 307.794322][ T36] audit: type=1400 audit(7119321961.821:606): avc: denied { write } for pid=7257 comm="syz.4.2385" name="hidraw0" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 307.914093][ T7325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 307.914569][ T36] audit: type=1400 audit(7119321961.941:607): avc: denied { mount } for pid=7324 comm="syz.1.2406" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 307.949799][ T36] audit: type=1400 audit(7119321961.981:608): avc: denied { mounton } for pid=7324 comm="syz.1.2406" path="/44/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 307.973762][ T36] audit: type=1400 audit(7119321961.981:609): avc: denied { mount } for pid=7324 comm="syz.1.2406" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 307.996150][ T36] audit: type=1400 audit(7119321961.981:610): avc: denied { ioctl } for pid=7324 comm="syz.1.2406" path="socket:[33992]" dev="sockfs" ino=33992 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 308.031010][ T36] audit: type=1400 audit(7119321961.981:611): avc: denied { setopt } for pid=7324 comm="syz.1.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 308.055980][ T36] audit: type=1400 audit(7119321961.981:612): avc: denied { bind } for pid=7324 comm="syz.1.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 308.311930][ T371] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 308.462561][ T371] usb 2-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 308.471680][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.480668][ T371] usb 2-1: config 0 descriptor?? [ 308.528880][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 308.538054][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 308.547765][ T7333] binder: Unknown parameter '' [ 309.095947][ T7344] overlayfs: workdir and upperdir must reside under the same mount [ 309.375912][ T7351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 309.402158][ T45] usb 5-1: USB disconnect, device number 53 [ 309.408341][ T7355] netlink: 'syz.3.2416': attribute type 3 has an invalid length. [ 309.425035][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 309.436986][ T7355] rust_binder: Write failure EFAULT in pid:21 [ 309.561528][ T45] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 309.691596][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 309.733500][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.733529][ T7383] overlay: ./bus is not a directory [ 309.749017][ T7383] 9pnet_fd: Insufficient options for proto=fd [ 309.750887][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 167, changing to 7 [ 309.781324][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.791169][ T45] usb 5-1: config 1 interface 1 has no altsetting 0 [ 309.803944][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.811868][ T7398] binder: Unknown parameter '6O1xt' [ 309.813395][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.838337][ T7400] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 309.841471][ T45] usb 5-1: Product: syz [ 309.846705][ T7400] syzkaller0: entered promiscuous mode [ 309.850645][ T45] usb 5-1: Manufacturer: syz [ 309.856632][ T7400] syzkaller0: entered allmulticast mode [ 309.860762][ T45] usb 5-1: SerialNumber: syz [ 309.958712][ T7404] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 309.958799][ T7404] rust_binder: Error while translating object. [ 309.967633][ T7404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 309.974072][ T7404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 310.101770][ T45] usb 5-1: USB disconnect, device number 54 [ 310.205039][ T7410] rust_binder: Write failure EFAULT in pid:169 [ 310.326212][ T7415] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 310.340169][ T7415] rust_binder: 24: no such ref 0 [ 310.345411][ T7415] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 310.353004][ T7415] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 310.360274][ T7415] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 310.360420][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'. [ 310.368034][ T7415] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 310.413764][ T7424] __vm_enough_memory: pid: 7424, comm: syz.3.2439, bytes: 18014402804453376 not enough memory for the allocation [ 310.479257][ T7429] batadv_slave_1: entered promiscuous mode [ 310.486260][ T7428] batadv_slave_1: left promiscuous mode [ 310.501702][ T7434] tipc: Enabling of bearer rejected, failed to enable media [ 310.673466][ T7455] rust_binder: Write failure EFAULT in pid:36 [ 310.682202][ T7456] netlink: 'syz.2.2445': attribute type 1 has an invalid length. [ 310.704760][ T7460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.712154][ T7460] IPv6: NLM_F_CREATE should be set when creating new route [ 310.719396][ T7460] IPv6: NLM_F_CREATE should be set when creating new route [ 310.817796][ T7467] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 310.941478][ T434] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 311.102752][ T434] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 311.112063][ T434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.121185][ T434] usb 4-1: config 0 descriptor?? [ 311.531829][ T434] thrustmaster 0003:044F:B65A.0018: hidraw0: USB HID v1.01 Device [HID 044f:b65a] on usb-dummy_hcd.3-1/input0 [ 311.558245][ T434] thrustmaster 0003:044F:B65A.0018: no inputs found [ 311.882683][ T7526] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 311.882715][ T7526] rust_binder: Error while translating object. [ 311.895319][ T7526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 311.901796][ T7526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 311.981489][ T31] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 312.141946][ T31] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 312.150920][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 312.158872][ T31] usb 5-1: can't read configurations, error -61 [ 312.236918][ T45] usb 4-1: USB disconnect, device number 31 [ 312.291561][ T31] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 312.461890][ T31] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 312.473722][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 312.491451][ T31] usb 5-1: can't read configurations, error -61 [ 312.498038][ T31] usb usb5-port1: attempt power cycle [ 312.785035][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.795032][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.805517][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 312.805537][ T36] audit: type=1400 audit(7119321966.831:671): avc: denied { write } for pid=7545 comm="syz.1.2479" name="file2" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.844337][ T31] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 312.861551][ T36] audit: type=1400 audit(7119321966.861:672): avc: denied { open } for pid=7545 comm="syz.1.2479" path="/67/file2" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.892486][ T31] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 312.901525][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 312.909171][ T31] usb 5-1: can't read configurations, error -61 [ 312.914391][ T36] audit: type=1400 audit(7119321966.861:673): avc: denied { ioctl } for pid=7545 comm="syz.1.2479" path="/67/file2" dev="tmpfs" ino=370 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.949153][ T7548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 313.061770][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 313.102275][ T31] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 313.111144][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 313.119283][ T31] usb 5-1: can't read configurations, error -61 [ 313.125936][ T31] usb usb5-port1: unable to enumerate USB device [ 313.216952][ T36] audit: type=1400 audit(7119321967.241:674): avc: denied { mount } for pid=7556 comm="syz.3.2483" name="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 313.270772][ T36] audit: type=1400 audit(7119321967.261:675): avc: denied { search } for pid=7556 comm="syz.3.2483" name="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 313.313177][ T36] audit: type=1400 audit(7119321967.261:676): avc: denied { setattr } for pid=7556 comm="syz.3.2483" name="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 313.383251][ T36] audit: type=1400 audit(7119321967.411:677): avc: denied { write } for pid=7558 comm="syz.1.2484" name="snmp6" dev="proc" ino=4026532565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 313.451494][ T36] audit: type=1400 audit(7119321967.451:678): avc: denied { create } for pid=7558 comm="syz.1.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 313.501190][ T36] audit: type=1400 audit(7119321967.501:679): avc: denied { ioctl } for pid=7560 comm="syz.1.2485" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.503895][ T7565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 313.529933][ T7567] netlink: 'syz.1.2487': attribute type 4 has an invalid length. [ 313.549653][ T7567] netlink: 'syz.1.2487': attribute type 17 has an invalid length. [ 313.582196][ T36] audit: type=1400 audit(7119321967.611:680): avc: denied { wake_alarm } for pid=7563 comm="syz.1.2487" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.586754][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.649826][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.759352][ T7574] binder: Bad value for 'stats' [ 313.772420][ T371] usbhid 2-1:0.0: can't add hid device: -32 [ 313.778537][ T371] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 314.658277][ T7587] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 314.757503][ T7590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2494'. [ 314.759618][ T7592] netlink: 'syz.2.2495': attribute type 4 has an invalid length. [ 314.774360][ T7592] netlink: 992 bytes leftover after parsing attributes in process `syz.2.2495'. [ 314.785395][ T7592] netlink: 'syz.2.2495': attribute type 4 has an invalid length. [ 314.795070][ T7592] netlink: 'syz.2.2495': attribute type 4 has an invalid length. [ 314.816303][ T7594] 9pnet_fd: Insufficient options for proto=fd [ 314.818152][ T7595] binder: Unknown parameter '' [ 314.822589][ T7596] binder: Unknown parameter '' [ 314.842476][ T371] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 315.001508][ T371] usb 4-1: Using ep0 maxpacket: 32 [ 315.008679][ T371] usb 4-1: config 7 has an invalid interface number: 199 but max is 0 [ 315.016912][ T371] usb 4-1: config 7 has no interface number 0 [ 315.024938][ T371] usb 4-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=5a.a6 [ 315.034129][ T371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.042397][ T371] usb 4-1: Product: syz [ 315.046636][ T371] usb 4-1: Manufacturer: syz [ 315.051295][ T371] usb 4-1: SerialNumber: syz [ 315.156043][ T7637] binder: Unknown parameter 'euid>00000000000000000000' [ 315.169099][ T7637] +$<: renamed from bridge0 (while UP) [ 315.179871][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.188588][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.231462][ T31] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 315.259932][ T371] ums-cypress 4-1:7.199: USB Mass Storage device detected [ 315.313383][ T371] usb 4-1: USB disconnect, device number 32 [ 315.381533][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 315.387793][ T31] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.398809][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.405528][ T31] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 315.414617][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.423287][ T31] usb 5-1: config 0 descriptor?? [ 315.504932][ T7648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2512'. [ 315.682787][ T7656] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 315.685982][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 315.700727][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 315.711552][ T31] usb 5-1: USB disconnect, device number 59 [ 315.831092][ T7665] __vm_enough_memory: pid: 7665, comm: syz.1.2518, bytes: 18014402804453376 not enough memory for the allocation [ 315.929551][ T7683] netlink: 'syz.2.2524': attribute type 4 has an invalid length. [ 315.938108][ T7683] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2524'. [ 316.059492][ T7688] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2525'. [ 316.091097][ T7695] loop2: detected capacity change from 0 to 8388607 [ 316.096451][ T7697] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 316.097726][ T7697] rust_binder: Error while translating object. [ 316.107219][ T7697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 316.113743][ T7697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 316.146398][ T7700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 316.157490][ T7700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 316.250447][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.268574][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.411544][ T434] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 316.562859][ T434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.573900][ T434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.583739][ T434] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 316.592924][ T434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.601803][ T434] usb 4-1: config 0 descriptor?? [ 317.008944][ T434] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 317.016043][ T434] lenovo 0003:17EF:6047.0019: item fetching failed at offset 3/5 [ 317.024060][ T434] lenovo 0003:17EF:6047.0019: hid_parse failed [ 317.030388][ T434] lenovo 0003:17EF:6047.0019: probe with driver lenovo failed with error -22 [ 317.359264][ T7705] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 319.163694][ T371] usb 4-1: USB disconnect, device number 33 [ 319.192129][ T36] kauditd_printk_skb: 145 callbacks suppressed [ 319.192148][ T36] audit: type=1400 audit(7119321973.221:826): avc: denied { write } for pid=7720 comm="syz.3.2535" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 319.227134][ T36] audit: type=1400 audit(7119321973.221:827): avc: denied { open } for pid=7720 comm="syz.3.2535" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 319.251511][ T36] audit: type=1400 audit(7119321973.221:828): avc: denied { ioctl } for pid=7720 comm="syz.3.2535" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 319.296279][ T36] audit: type=1400 audit(7119321973.241:829): avc: denied { read } for pid=7725 comm="syz.1.2536" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 319.345105][ T7731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:887 [ 319.375300][ T7742] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 319.391100][ T7744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7744 comm=syz.4.2543 [ 319.464663][ T7754] 9p filesystem being mounted at /87/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 319.487971][ T7754] devpts: called with bogus options [ 319.488764][ T7757] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 319.493320][ T36] audit: type=1400 audit(7119321973.511:830): avc: denied { mounton } for pid=7753 comm="syz.1.2546" path="/87/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 319.536923][ T36] audit: type=1400 audit(7119321973.561:831): avc: denied { unmount } for pid=6812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 319.599758][ T36] audit: type=1400 audit(7119321973.621:832): avc: denied { getopt } for pid=7764 comm="syz.3.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 319.744022][ T36] audit: type=1400 audit(7119321973.771:833): avc: denied { lock } for pid=7773 comm="syz.1.2552" path="socket:[35210]" dev="sockfs" ino=35210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 319.767881][ T336] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 319.834183][ T7777] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 319.854357][ T7779] overlayfs: missing 'lowerdir' [ 319.871592][ T45] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 319.889270][ T36] audit: type=1400 audit(7119321973.911:834): avc: denied { read } for pid=7782 comm="syz.2.2557" name="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 319.911384][ T36] audit: type=1400 audit(7119321973.911:835): avc: denied { open } for pid=7782 comm="syz.2.2557" path="/" dev="configfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 319.941521][ T336] usb 5-1: Using ep0 maxpacket: 32 [ 319.948775][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.960011][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.969865][ T336] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 319.979022][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.987826][ T336] usb 5-1: config 0 descriptor?? [ 319.994152][ T336] hub 5-1:0.0: USB hub found [ 320.032683][ T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 320.044075][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.057284][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.060631][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.068747][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 320.076749][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.092612][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 320.101812][ T7786] rust_binder: 280: no such ref 0 [ 320.105876][ T45] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 320.119075][ T45] usb 4-1: Manufacturer: syz [ 320.124512][ T45] usb 4-1: config 0 descriptor?? [ 320.194163][ T336] hub 5-1:0.0: 1 port detected [ 320.532661][ T45] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 320.540212][ T45] appleir 0003:05AC:8243.001A: No inputs registered, leaving [ 320.549278][ T45] appleir 0003:05AC:8243.001A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 320.635658][ T336] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 320.642174][ T336] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 320.651234][ T336] usbhid 5-1:0.0: can't add hid device: -71 [ 320.657291][ T336] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 320.682506][ T336] usb 5-1: USB disconnect, device number 60 [ 320.792413][ T7770] tipc: Enabling of bearer rejected, media not registered [ 320.864703][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.874342][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.341829][ T7817] usb usb8: usbfs: process 7817 (syz.1.2566) did not claim interface 0 before use [ 321.358839][ T7817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.383932][ T7827] netlink: 'syz.1.2571': attribute type 13 has an invalid length. [ 321.447424][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.448643][ T7836] devtmpfs: Unknown parameter 'fuse' [ 321.458645][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.662792][ T7856] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.737537][ T7859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.918727][ T7866] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 321.929329][ T7869] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.954596][ T7872] devpts: called with bogus options [ 321.997282][ T7877] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2587'. [ 322.025513][ T7881] IPv6: Can't replace route, no match found [ 322.117352][ T7887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.117618][ T7888] rust_binder: Error in use_page_slow: ESRCH [ 322.127389][ T7888] rust_binder: use_range failure ESRCH [ 322.141439][ T7888] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 322.146961][ T7888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 322.168507][ T7888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:324 [ 322.620896][ T336] usb 4-1: USB disconnect, device number 34 [ 322.705644][ T7916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.705828][ T7916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.841875][ T7934] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 322.856042][ T7934] SELinux: failed to load policy [ 322.926510][ T7938] netlink: 488 bytes leftover after parsing attributes in process `syz.4.2609'. [ 322.960620][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.969418][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.979743][ T7942] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2611'. [ 322.989816][ T7942] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.091530][ T336] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 323.111916][ T7957] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 323.111937][ T7957] rust_binder: Error while translating object. [ 323.124175][ T7957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 323.130428][ T7957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:952 [ 323.238954][ T7963] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 323.252576][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 323.272281][ T336] usb 4-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.00 [ 323.281441][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.289707][ T7968] rust_binder: 963: no such ref 1 [ 323.291603][ T336] usb 4-1: config 0 descriptor?? [ 323.303984][ T7924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 323.435372][ T7975] rust_binder: Error while translating object. [ 323.435409][ T7975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 323.441721][ T7975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:969 [ 323.481219][ T7979] 9p filesystem being mounted at /320/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 323.513467][ T7924] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2603'. [ 323.604914][ T7983] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.727999][ T336] hid-generic 0003:046D:4024.001B: hidraw0: USB HID v1.01 Device [HID 046d:4024] on usb-dummy_hcd.3-1/input0 [ 323.944855][ T8002] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.992392][ T371] usb 4-1: USB disconnect, device number 35 [ 324.056119][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.065307][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.078756][ T8011] netlink: 'syz.1.2635': attribute type 15 has an invalid length. [ 324.086714][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2635'. [ 324.119345][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.128058][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.311488][ T31] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 324.462747][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.473020][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.482046][ T31] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 324.491113][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.500091][ T31] usb 5-1: config 0 descriptor?? [ 324.579367][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 324.579385][ T36] audit: type=1400 audit(7119321985.600:860): avc: denied { read write } for pid=8022 comm="syz.3.2640" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 324.584313][ T8023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:132 [ 324.585752][ T36] audit: type=1400 audit(7119321985.600:861): avc: denied { ioctl open } for pid=8022 comm="syz.3.2640" path="/45/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 324.709600][ T8015] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2634'. [ 324.745930][ T8031] TCP: TCP_TX_DELAY enabled [ 324.751272][ T8031] SELinux: policydb magic number 0x112 does not match expected magic number 0xf97cff8c [ 324.761187][ T8031] SELinux: failed to load policy [ 324.782399][ T371] usb 5-1: USB disconnect, device number 61 [ 325.001512][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 325.131651][ T31] usb 4-1: device descriptor read/64, error -71 [ 325.308389][ T8058] rust_binder: Read failure Err(EAGAIN) in pid:387 [ 325.309118][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.324379][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.372240][ T31] usb 4-1: device descriptor read/64, error -71 [ 325.531593][ T371] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 325.611563][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 325.682773][ T371] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 325.691031][ T371] usb 5-1: config 1 has no interface number 0 [ 325.697194][ T371] usb 5-1: config 1 interface 105 has no altsetting 0 [ 325.705451][ T371] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 325.714637][ T371] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 325.723201][ T371] usb 5-1: Product: syz [ 325.727375][ T371] usb 5-1: Manufacturer: syz [ 325.732020][ T371] usb 5-1: SerialNumber: syz [ 325.737621][ T8056] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 325.741638][ T31] usb 4-1: device descriptor read/64, error -71 [ 325.991519][ T31] usb 4-1: device descriptor read/64, error -71 [ 326.101576][ T31] usb usb4-port1: attempt power cycle [ 326.153711][ T8056] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 326.362059][ T8056] netlink: 'syz.4.2652': attribute type 15 has an invalid length. [ 326.369955][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2652'. [ 326.441542][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 326.462478][ T31] usb 4-1: device descriptor read/8, error -71 [ 326.580562][ T371] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 326.592683][ T31] usb 4-1: device descriptor read/8, error -71 [ 326.818648][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.827287][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.838339][ T371] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 326.850720][ T31] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 326.859938][ T371] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d2:2d:e7:9f:b9:af [ 326.873907][ T371] usb 5-1: USB disconnect, device number 62 [ 326.880490][ T371] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 326.885512][ T36] audit: type=1400 audit(7119321987.900:862): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 326.892763][ T31] usb 4-1: device descriptor read/8, error -71 [ 326.917063][ T36] audit: type=1400 audit(7119321987.940:863): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.939960][ T36] audit: type=1400 audit(7119321987.940:864): avc: denied { read } for pid=150 comm="dhcpcd" name="n16" dev="tmpfs" ino=4716 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.962127][ T36] audit: type=1400 audit(7119321987.940:865): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=4716 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.986532][ T36] audit: type=1400 audit(7119321987.940:866): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=4716 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 327.009652][ T36] audit: type=1400 audit(7119321988.030:867): avc: denied { read } for pid=8075 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.033181][ T371] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 327.033589][ T36] audit: type=1400 audit(7119321988.030:868): avc: denied { open } for pid=8075 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.051495][ T371] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 327.068123][ T36] audit: type=1400 audit(7119321988.030:869): avc: denied { getattr } for pid=8075 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.088291][ T371] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 327.112185][ T31] usb 4-1: device descriptor read/8, error -71 [ 327.221555][ T31] usb usb4-port1: unable to enumerate USB device [ 327.774162][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2662'. [ 328.151548][ T435] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 328.302724][ T435] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.312880][ T435] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.321914][ T435] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 328.330964][ T435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.339741][ T435] usb 4-1: config 0 descriptor?? [ 328.549593][ T8104] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2661'. [ 328.592916][ T435] usb 4-1: USB disconnect, device number 40 [ 329.351536][ T45] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 329.378694][ T8148] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 329.386121][ T8148] rust_binder: Write failure EINVAL in pid:1010 [ 329.504776][ T45] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 329.519991][ T45] usb 4-1: config 1 has no interface number 0 [ 329.526199][ T45] usb 4-1: config 1 interface 105 has no altsetting 0 [ 329.534592][ T45] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 329.543983][ T45] usb 4-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 329.552566][ T45] usb 4-1: Product: syz [ 329.556750][ T45] usb 4-1: Manufacturer: syz [ 329.561343][ T45] usb 4-1: SerialNumber: syz [ 329.568519][ T8127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.605754][ T8159] netlink: 'syz.4.2684': attribute type 4 has an invalid length. [ 329.613701][ T8159] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2684'. [ 329.979553][ T8127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 330.174888][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 330.174921][ T36] audit: type=1400 audit(7119321991.200:885): avc: denied { append } for pid=8186 comm="syz.1.2695" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 330.189294][ T8127] netlink: 'syz.3.2670': attribute type 15 has an invalid length. [ 330.206395][ T36] audit: type=1400 audit(7119321991.200:886): avc: denied { ioctl } for pid=8186 comm="syz.1.2695" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 330.219290][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2670'. [ 330.376506][ T8198] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 330.402560][ T8203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1053 [ 330.425166][ T8205] rust_binder: 1055: no such ref 0 [ 330.439917][ T8205] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 330.447263][ T8205] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 330.454380][ T8205] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 330.461463][ T8205] rust_binder: 1055: no such ref 0 [ 330.466668][ T45] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 330.477450][ T36] audit: type=1400 audit(7119321991.490:887): avc: denied { map } for pid=8204 comm="syz.4.2702" path="socket:[39463]" dev="sockfs" ino=39463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 330.728345][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.737136][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.745159][ T31] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 330.752890][ T45] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 330.765428][ T45] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:31:73:5e:e6:34 [ 330.785487][ T45] usb 4-1: USB disconnect, device number 41 [ 330.794273][ T45] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 330.843452][ T45] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 330.852912][ T45] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 330.862356][ T45] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 330.922495][ T31] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 330.930723][ T31] usb 5-1: config 1 has no interface number 0 [ 330.937568][ T31] usb 5-1: config 1 interface 105 has no altsetting 0 [ 330.947018][ T31] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 330.956370][ T31] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 330.965066][ T31] usb 5-1: Product: syz [ 330.969316][ T31] usb 5-1: Manufacturer: syz [ 330.974146][ T31] usb 5-1: SerialNumber: syz [ 331.161279][ T36] audit: type=1400 audit(7119321992.180:888): avc: denied { bind } for pid=8241 comm="syz.1.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.180734][ T36] audit: type=1400 audit(7119321992.190:889): avc: denied { name_bind } for pid=8241 comm="syz.1.2707" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 331.201723][ T36] audit: type=1400 audit(7119321992.190:890): avc: denied { node_bind } for pid=8241 comm="syz.1.2707" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 331.224857][ T36] audit: type=1400 audit(7119321992.250:891): avc: denied { create } for pid=8241 comm="syz.1.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 331.357463][ T8254] No source specified [ 331.393636][ T8256] SELinux: security_context_str_to_sid (sytem_7:z>) failed with errno=-22 [ 331.394005][ T8257] SELinux: security_context_str_to_sid (sytem_7:z>) failed with errno=-22 [ 331.551503][ T435] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 331.624343][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 331.635388][ T31] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 331.646429][ T31] usb 5-1: USB disconnect, device number 63 [ 331.681540][ T435] usb 4-1: device descriptor read/64, error -71 [ 331.696611][ T36] audit: type=1400 audit(7119321992.720:892): avc: denied { audit_write } for pid=8262 comm="syz.1.2713" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 331.758421][ T36] audit: type=1400 audit(7119321992.780:893): avc: denied { unmount } for pid=6812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 331.921496][ T435] usb 4-1: device descriptor read/64, error -71 [ 332.161549][ T435] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 332.291540][ T435] usb 4-1: device descriptor read/64, error -71 [ 332.531517][ T435] usb 4-1: device descriptor read/64, error -71 [ 332.641685][ T435] usb usb4-port1: attempt power cycle [ 332.981538][ T435] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 333.002851][ T435] usb 4-1: device descriptor read/8, error -71 [ 333.132955][ T435] usb 4-1: device descriptor read/8, error -71 [ 333.371562][ T435] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 333.392657][ T435] usb 4-1: device descriptor read/8, error -71 [ 333.522712][ T435] usb 4-1: device descriptor read/8, error -71 [ 333.631627][ T435] usb usb4-port1: unable to enumerate USB device [ 348.824413][ T8274] 9pnet_fd: p9_fd_create_unix (8274): problem connecting socket: ./file0: -30 [ 348.827879][ T36] audit: type=1400 audit(7119322009.850:894): avc: denied { mounton } for pid=8272 comm="syz.3.2718" path="/51/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 348.834233][ T8274] /dev/rnullb0: Can't open blockdev [ 348.876537][ T36] audit: type=1400 audit(7119322009.890:895): avc: denied { write } for pid=8271 comm="syz.4.2715" path="socket:[38784]" dev="sockfs" ino=38784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 348.890752][ T8277] /dev/rnullb0: Can't open blockdev [ 348.916098][ T36] audit: type=1400 audit(7119322009.940:896): avc: denied { unmount } for pid=7240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 348.969057][ T36] audit: type=1400 audit(7119322009.990:897): avc: denied { lock } for pid=8288 comm="syz.1.2723" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 348.983103][ T8296] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 349.001784][ T8296] rust_binder: Write failure EINVAL in pid:454 [ 349.002618][ T36] audit: type=1400 audit(7119322010.030:898): avc: denied { setopt } for pid=8295 comm="syz.1.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 349.030893][ T36] audit: type=1400 audit(7119322010.050:899): avc: denied { read } for pid=8290 comm="syz.2.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.052788][ T36] audit: type=1400 audit(7119322010.070:900): avc: denied { read } for pid=8295 comm="syz.1.2725" laddr=fe80::f0b0:7dff:feb8:364d lport=16 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 349.078164][ T36] audit: type=1400 audit(7119322010.070:901): avc: denied { ioctl } for pid=8295 comm="syz.1.2725" path="socket:[39646]" dev="sockfs" ino=39646 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 349.111484][ T36] audit: type=1400 audit(7119322010.080:902): avc: denied { create } for pid=8295 comm="syz.1.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 349.131163][ T36] audit: type=1400 audit(7119322010.080:903): avc: denied { create } for pid=8295 comm="syz.1.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 349.220352][ T8319] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 349.227160][ T6160] Bluetooth: hci0: Frame reassembly failed (-84) [ 349.235397][ T8319] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 349.716594][ T8349] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 349.716614][ T8349] rust_binder: Error while translating object. [ 349.725452][ T8349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 349.731720][ T8349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1072 [ 349.805070][ T8354] netlink: 'syz.2.2741': attribute type 6 has an invalid length. [ 349.832218][ T8359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1077 [ 349.832795][ T8359] rust_binder: Error while translating object. [ 349.842541][ T8359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 349.848889][ T8359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1077 [ 349.944966][ T8384] binder: Unknown parameter 'context[7' [ 350.149248][ T8401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.963877][ T8411] netlink: 'syz.4.2758': attribute type 46 has an invalid length. [ 351.017993][ T8414] fuse: Bad value for 'fd' [ 351.031568][ T8417] binder: Unknown parameter ' O [ 351.031568][ T8417] L9ڎ/͹iRҸi' [ 351.291489][ T884] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 351.291485][ T885] Bluetooth: hci0: command 0x1003 tx timeout [ 351.963250][ T8454] rust_binder: Write failure EFAULT in pid:1108 [ 352.044623][ T8463] netlink: 'syz.1.2775': attribute type 28 has an invalid length. [ 352.060293][ T8463] netlink: 'syz.1.2775': attribute type 28 has an invalid length. [ 352.099629][ T8471] /dev/rnullb0: Can't open blockdev [ 352.105899][ T8471] /dev/rnullb0: Can't open blockdev [ 352.591473][ T1534] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 352.719840][ T8544] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2798'. [ 352.742612][ T8544] gretap0: entered promiscuous mode [ 352.761494][ T1534] usb 5-1: Using ep0 maxpacket: 32 [ 352.772256][ T1534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.791252][ T1534] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 352.812126][ T1534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.829807][ T1534] usb 5-1: config 0 descriptor?? [ 352.841452][ T1534] hub 5-1:0.0: USB hub found [ 353.036198][ T8566] binder: Unknown parameter 'context[7' [ 353.053393][ T1534] hub 5-1:0.0: 1 port detected [ 353.183448][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.202530][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.260117][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.281750][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.723078][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 353.801312][ T8636] fuse: Bad value for 'fd' [ 353.855028][ T8641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2833'. [ 353.954552][ T8647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:548 [ 353.955823][ T1534] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 353.956398][ T36] kauditd_printk_skb: 669 callbacks suppressed [ 353.956420][ T36] audit: type=1326 audit(7119322014.980:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8649 comm="syz.2.2835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bf558f6c9 code=0x0 [ 353.965188][ T45] usb 5-1: USB disconnect, device number 64 [ 354.594845][ T8659] rust_binder: Write failure EFAULT in pid:1130 [ 354.619923][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2840'. [ 354.690305][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2840'. [ 354.720708][ T8673] fuseblk: Bad value for 'fd' [ 354.747121][ T8676] rust_binder: 1141: no such ref 0 [ 354.755013][ T8676] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 354.763220][ T8676] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 354.770284][ T8676] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 354.777695][ T8676] rust_binder: 1141: no such ref 0 [ 354.802222][ T8686] rust_binder: 8677 RLIMIT_NICE not set [ 354.802274][ T8686] rust_binder: 552: no such ref 0 [ 354.828839][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.838042][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.854766][ T8696] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 354.854792][ T8696] rust_binder: Read failure Err(EFAULT) in pid:555 [ 354.881477][ T36] audit: type=1400 audit(7119322015.900:1574): avc: granted { setsecparam } for pid=8681 comm="syz.4.2848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 354.930918][ T8683] cgroup: fork rejected by pids controller in /syz4 [ 355.163410][ T8728] netlink: 'syz.4.2852': attribute type 4 has an invalid length. [ 355.466860][ T8737] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.2856' resets device [ 355.489615][ T8739] overlayfs: failed to clone upperpath [ 355.496176][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.505051][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.507827][ T36] audit: type=1400 audit(7119322016.540:1575): avc: denied { read } for pid=8738 comm="syz.3.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.537110][ T8749] syz.4.2856(8749): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 355.539924][ T36] audit: type=1400 audit(7119322016.560:1576): avc: denied { map } for pid=8736 comm="syz.4.2856" path="socket:[40930]" dev="sockfs" ino=40930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 355.662620][ T8755] rust_binder: Write failure EFAULT in pid:567 [ 355.887814][ T36] audit: type=1326 audit(7119322016.910:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.1.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266458f6c9 code=0x7fc00000 [ 355.921156][ T36] audit: type=1326 audit(7119322016.910:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.1.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266458f6c9 code=0x7fc00000 [ 356.017730][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2866'. [ 356.142168][ T8771] input: syz0 as /devices/virtual/input/input23 [ 356.157541][ T36] audit: type=1400 audit(7119322017.180:1579): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=748 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.181705][ T36] audit: type=1400 audit(7119322017.180:1580): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=748 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.205267][ T36] audit: type=1400 audit(7119322017.180:1581): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=748 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.294839][ T8786] /dev/rnullb0: Can't open blockdev [ 356.394649][ T8797] veth0_to_team: mtu greater than device maximum [ 356.425573][ T8802] netlink: 'syz.3.2877': attribute type 1 has an invalid length. [ 356.435258][ T8802] 9pnet_fd: Insufficient options for proto=fd [ 356.486333][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.495183][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.568179][ T8813] tipc: Enabling of bearer rejected, failed to enable media [ 357.095183][ T36] audit: type=1400 audit(7119322018.120:1582): avc: denied { create } for pid=8837 comm="syz.2.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 357.128404][ T8834] fuse: Bad value for 'fd' [ 357.165340][ T8851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:605 [ 357.186423][ T8857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8857 comm=syz.3.2896 [ 357.932679][ T8889] support for cryptoloop has been removed. Use dm-crypt instead. [ 358.089374][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.098198][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.439225][ T8903] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2912'. [ 358.448311][ T8903] netlink: 'syz.3.2912': attribute type 6 has an invalid length. [ 358.456191][ T8903] netlink: 'syz.3.2912': attribute type 5 has an invalid length. [ 358.464095][ T8903] netlink: 'syz.3.2912': attribute type 4 has an invalid length. [ 358.535908][ T8910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8910 comm=syz.4.2914 [ 358.563537][ T8913] rust_binder: 1217: no such ref 2 [ 358.568911][ T8913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1217 [ 358.639612][ T8922] rust_binder: Write failure EFAULT in pid:1226 [ 358.663368][ T6160] Bluetooth: hci0: Frame reassembly failed (-84) [ 358.804986][ T8935] rust_binder: Error while translating object. [ 358.805036][ T8935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 358.811682][ T8935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:612 [ 358.826840][ T8937] overlayfs: failed to clone upperpath [ 358.866379][ T8944] veth0_to_team: entered promiscuous mode [ 358.872190][ T8944] veth0_to_team: entered allmulticast mode [ 358.989114][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 358.989133][ T36] audit: type=1400 audit(7119322020.010:1588): avc: denied { bpf } for pid=8946 comm="syz.3.2929" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 359.034829][ T8952] 9p filesystem being mounted at /119/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 359.101137][ T36] audit: type=1400 audit(7119322020.120:1589): avc: denied { mount } for pid=8956 comm="syz.3.2932" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 359.317060][ T8969] 9p filesystem being mounted at /125/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 359.425841][ T36] audit: type=1400 audit(7119322020.450:1590): avc: denied { mounton } for pid=8973 comm="syz.3.2939" path="/127/file0" dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 359.826646][ T36] audit: type=1400 audit(7119322020.857:1591): avc: denied { bind } for pid=8992 comm="syz.1.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 359.923313][ T9001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 359.923370][ T9001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:629 [ 360.014697][ T9008] rust_binder: Write failure EINVAL in pid:636 [ 360.111701][ T6187] Bluetooth: hci1: Frame reassembly failed (-84) [ 360.305020][ T36] audit: type=1400 audit(7119322021.337:1592): avc: denied { bind } for pid=9030 comm="syz.3.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 360.731537][ T1736] Bluetooth: hci0: command 0x1003 tx timeout [ 360.731554][ T884] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 360.868061][ T9049] overlayfs: failed to clone lowerpath [ 360.914546][ T9049] overlayfs: failed to clone lowerpath [ 361.161433][ T36] audit: type=1400 audit(7119322022.187:1593): avc: denied { create } for pid=9056 comm="syz.3.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 361.304937][ T9073] rust_binder: Write failure EFAULT in pid:1233 [ 361.325723][ T9075] rust_binder: Write failure EFAULT in pid:1235 [ 361.450991][ T36] audit: type=1400 audit(7119322022.477:1594): avc: denied { execute_no_trans } for pid=9088 comm="syz.4.2981" path="/407/file0" dev="tmpfs" ino=2162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 361.510036][ T36] audit: type=1400 audit(7119322022.537:1595): avc: denied { read } for pid=9100 comm="syz.3.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 361.530875][ T36] audit: type=1400 audit(7119322022.557:1596): avc: denied { setopt } for pid=9100 comm="syz.3.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 361.599494][ T9107] 9pnet_fd: Insufficient options for proto=fd [ 361.607226][ T36] audit: type=1400 audit(7119322022.637:1597): avc: denied { bind } for pid=9105 comm="syz.3.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 361.628859][ T9108] binder: Bad value for 'stats' [ 362.171449][ T885] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 362.320834][ T9171] fuse: Unknown parameter 'Q' [ 362.736678][ T9203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.745931][ T9203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.845017][ T9203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3020'. [ 362.901445][ T31] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 363.071438][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 363.082956][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 363.101568][ T31] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 363.117382][ T31] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 363.132826][ T31] usb 5-1: config 8 interface 0 has no altsetting 0 [ 363.141049][ T31] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 363.152122][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.161350][ T31] usb 5-1: Product: syz [ 363.166555][ T31] usb 5-1: Manufacturer: syz [ 363.171316][ T31] usb 5-1: SerialNumber: syz [ 363.319135][ T9224] overlayfs: failed to clone lowerpath [ 363.537016][ T31] usb 5-1: selecting invalid altsetting 0 [ 363.557921][ T31] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 363.578984][ T9236] udevd[9236]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 363.579918][ T31] usb 5-1: USB disconnect, device number 65 [ 363.857444][ T9243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3033'. [ 363.884897][ T9247] 9p filesystem being mounted at /271/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 363.927937][ T9249] /dev/rnullb0: Can't open blockdev [ 364.055221][ T9282] binder: Bad value for 'stats' [ 364.131471][ T9296] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3052'. [ 364.148908][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.164423][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.535165][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 364.535186][ T36] audit: type=1400 audit(7119322025.567:1666): avc: denied { setattr } for pid=9316 comm="syz.2.3061" path="socket:[43497]" dev="sockfs" ino=43497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 364.641461][ T1534] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 364.734163][ T9334] fuse: Bad value for 'fd' [ 364.740491][ T9334] futex_wake_op: syz.3.3069 tries to shift op by 144; fix this program [ 364.757914][ T36] audit: type=1400 audit(7119322025.787:1667): avc: denied { read append } for pid=9335 comm="syz.1.3070" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 364.781944][ T36] audit: type=1400 audit(7119322025.787:1668): avc: denied { open } for pid=9335 comm="syz.1.3070" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 364.783950][ T9336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.810658][ T36] audit: type=1400 audit(7119322025.817:1669): avc: denied { ioctl } for pid=9335 comm="syz.1.3070" path="/dev/usbmon0" dev="devtmpfs" ino=89 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 364.820742][ T9336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.848114][ T1534] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.860963][ T1534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 364.875901][ T9340] 9pnet_fd: Insufficient options for proto=fd [ 364.882169][ T1534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 364.901006][ T1534] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.914390][ T1534] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.924181][ T1534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.931067][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 364.933598][ T1534] usb 5-1: config 0 descriptor?? [ 364.943032][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 364.949741][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 364.957403][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 364.963752][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 364.970242][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 364.976635][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 364.983009][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 364.989292][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 364.995635][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.002097][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.008548][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.015316][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.021659][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.027886][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.034252][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.040486][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.046871][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.053299][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.059567][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.065853][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.072239][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.078547][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.085079][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.091317][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.097927][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.104536][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.111049][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.117884][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.124329][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.130769][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.137443][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.144005][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.150330][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.157049][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.163385][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.169695][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.176036][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.182385][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.188721][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.195633][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.202286][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.208605][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.215541][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.222138][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.228521][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.235113][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.241703][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.248030][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.254652][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.260969][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.267975][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.274480][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.280862][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.287524][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.294145][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.300484][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.302063][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 365.307281][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.322058][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.328664][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.335486][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.341958][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.348692][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.355415][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.361916][ T9350] 9pnet_fd: Insufficient options for proto=fd [ 365.362795][ T1534] plantronics 0003:047F:FFFF.001C: ignoring exceeding usage max [ 365.379266][ T1534] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 365.391447][ T1534] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 365.407134][ T1534] usb 5-1: USB disconnect, device number 66 [ 365.425322][ T9380] fido_id[9380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 365.899007][ T9403] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3091'. [ 365.920609][ T9406] SELinux: security_context_str_to_sid () failed with errno=-22 [ 365.994087][ T9412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.002739][ T9412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.058182][ T9423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9423 comm=syz.3.3097 [ 366.072098][ T9423] /dev/loop0: Can't lookup blockdev [ 366.111163][ T9434] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 366.122072][ T36] audit: type=1400 audit(7119322027.157:1670): avc: denied { relabelto } for pid=9431 comm="syz.3.3100" name="198" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 366.148750][ T36] audit: type=1400 audit(7119322027.157:1671): avc: denied { associate } for pid=9431 comm="syz.3.3100" name="198" dev="tmpfs" ino=1075 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 366.176607][ T36] audit: type=1400 audit(7119322027.157:1672): avc: denied { write } for pid=9431 comm="syz.3.3100" name="198" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 366.181772][ T31] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 366.203133][ T36] audit: type=1400 audit(7119322027.157:1673): avc: denied { add_name } for pid=9431 comm="syz.3.3100" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 366.235531][ T36] audit: type=1400 audit(7119322027.157:1674): avc: denied { create } for pid=9431 comm="syz.3.3100" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 366.239083][ T9443] 9pnet: Could not find request transport: xen [ 366.256638][ T36] audit: type=1400 audit(7119322027.157:1675): avc: denied { associate } for pid=9431 comm="syz.3.3100" name="control" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 366.264245][ T9443] 9pnet: Could not find request transport: xen [ 366.291539][ T9443] 9pnet: Could not find request transport: xen [ 366.298338][ T9443] 9pnet: Could not find request transport: xen [ 366.305536][ T9443] 9pnet: Could not find request transport: xen [ 366.311972][ T9443] 9pnet: Could not find request transport: xen [ 366.318412][ T9443] 9pnet: Could not find request transport: xen [ 366.324777][ T9443] 9pnet: Could not find request transport: xen [ 366.331217][ T9443] 9pnet: Could not find request transport: xen [ 366.337591][ T9443] 9pnet: Could not find request transport: xen [ 366.344172][ T9443] 9pnet: Could not find request transport: xen [ 366.350537][ T9443] 9pnet: Could not find request transport: xen [ 366.357104][ T9443] 9pnet: Could not find request transport: xen [ 366.363371][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 366.368889][ T9443] 9pnet: Could not find request transport: xen [ 366.375243][ T31] usb 5-1: no configurations [ 366.379970][ T31] usb 5-1: can't read configurations, error -22 [ 366.386470][ T9443] 9pnet: Could not find request transport: xen [ 366.393195][ T9443] 9pnet: Could not find request transport: xen [ 366.399605][ T9443] 9pnet: Could not find request transport: xen [ 366.406044][ T9443] 9pnet: Could not find request transport: xen [ 366.412921][ T9443] 9pnet: Could not find request transport: xen [ 366.419359][ T9443] 9pnet: Could not find request transport: xen [ 366.425768][ T9443] 9pnet: Could not find request transport: xen [ 366.435394][ T9443] 9pnet: Could not find request transport: xen [ 366.441821][ T9443] 9pnet: Could not find request transport: xen [ 366.448258][ T9443] 9pnet: Could not find request transport: xen [ 366.454740][ T9443] 9pnet: Could not find request transport: xen [ 366.461223][ T9443] 9pnet: Could not find request transport: xen [ 366.467723][ T9443] 9pnet: Could not find request transport: xen [ 366.474227][ T9443] 9pnet: Could not find request transport: xen [ 366.480541][ T9443] 9pnet: Could not find request transport: xen [ 366.486964][ T9443] 9pnet: Could not find request transport: xen [ 366.493310][ T9443] 9pnet: Could not find request transport: xen [ 366.499594][ T9443] 9pnet: Could not find request transport: xen [ 366.506077][ T9443] 9pnet: Could not find request transport: xen [ 366.512523][ T9443] 9pnet: Could not find request transport: xen [ 366.518958][ T9443] 9pnet: Could not find request transport: xen [ 366.525655][ T31] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 366.533696][ T9443] 9pnet: Could not find request transport: xen [ 366.540246][ T9443] 9pnet: Could not find request transport: xen [ 366.547063][ T9443] 9pnet: Could not find request transport: xen [ 366.553599][ T9443] 9pnet: Could not find request transport: xen [ 366.560028][ T9443] 9pnet: Could not find request transport: xen [ 366.566497][ T9443] 9pnet: Could not find request transport: xen [ 366.572938][ T9443] 9pnet: Could not find request transport: xen [ 366.579767][ T9443] 9pnet: Could not find request transport: xen [ 366.586168][ T9443] 9pnet: Could not find request transport: xen [ 366.592697][ T9443] 9pnet: Could not find request transport: xen [ 366.599193][ T9443] 9pnet: Could not find request transport: xen [ 366.605504][ T9443] 9pnet: Could not find request transport: xen [ 366.611936][ T9443] 9pnet: Could not find request transport: xen [ 366.618528][ T9443] 9pnet: Could not find request transport: xen [ 366.625127][ T9443] 9pnet: Could not find request transport: xen [ 366.631504][ T9443] 9pnet: Could not find request transport: xen [ 366.638014][ T9443] 9pnet: Could not find request transport: xen [ 366.644401][ T9443] 9pnet: Could not find request transport: xen [ 366.650826][ T9443] 9pnet: Could not find request transport: xen [ 366.659323][ T9443] 9pnet: Could not find request transport: xen [ 366.665705][ T9443] 9pnet: Could not find request transport: xen [ 366.672299][ T9443] 9pnet: Could not find request transport: xen [ 366.678588][ T9443] 9pnet: Could not find request transport: xen [ 366.685034][ T9443] 9pnet: Could not find request transport: xen [ 366.691309][ T9443] 9pnet: Could not find request transport: xen [ 366.697528][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 366.698012][ T9443] 9pnet: Could not find request transport: xen [ 366.703124][ T31] usb 5-1: no configurations [ 366.709530][ T9443] 9pnet: Could not find request transport: xen [ 366.714076][ T31] usb 5-1: can't read configurations, error -22 [ 366.720403][ T9443] 9pnet: Could not find request transport: xen [ 366.726717][ T31] usb usb5-port1: attempt power cycle [ 366.739010][ T9443] 9pnet: Could not find request transport: xen [ 366.745547][ T9443] 9pnet: Could not find request transport: xen [ 366.756079][ T9458] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3108'. [ 366.765387][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3108'. [ 366.774399][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'. [ 367.073786][ T31] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 367.101852][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 367.107480][ T31] usb 5-1: no configurations [ 367.112328][ T31] usb 5-1: can't read configurations, error -22 [ 367.241466][ T31] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 367.261823][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 367.267477][ T31] usb 5-1: no configurations [ 367.272172][ T31] usb 5-1: can't read configurations, error -22 [ 367.278556][ T31] usb usb5-port1: unable to enumerate USB device [ 368.583665][ T9512] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3128'. [ 368.593077][ T9512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=9512 comm=syz.3.3128 [ 368.656982][ T9513] veth0_to_bridge: entered allmulticast mode [ 368.664596][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.060566][ T9555] SELinux: security_context_str_to_sid () failed with errno=-22 [ 369.295491][ T9567] loop7: detected capacity change from 0 to 7 [ 369.301958][ C1] blk_print_req_error: 6 callbacks suppressed [ 369.301978][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 369.317243][ C1] buffer_io_error: 4 callbacks suppressed [ 369.317262][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 369.331014][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 369.340179][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 369.348050][ T9567] loop7: unable to read partition table [ 369.351936][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 369.361702][ T9567] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 369.363350][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.385800][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 369.394097][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.403290][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 369.411674][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.420872][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 369.429224][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.438427][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 369.446901][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.456106][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 369.484280][ T9575] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 369.484320][ T9575] rust_binder: Error while translating object. [ 369.505963][ T9575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.520078][ T9575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:708 [ 369.570527][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3152'. [ 369.613709][ T9600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3155'. [ 369.678004][ T9606] 9p filesystem being mounted at /215/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 369.727594][ T9611] 9pnet_fd: Insufficient options for proto=fd [ 369.755546][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3160'. [ 369.771517][ T31] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 369.803942][ T9620] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 369.804081][ T9620] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 369.840260][ T9626] rust_binder: Error in use_page_slow: ESRCH [ 369.847341][ T9626] rust_binder: use_range failure ESRCH [ 369.847402][ T9626] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 369.853180][ T9626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 369.860965][ T9626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:718 [ 369.921490][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 369.927835][ T31] usb 5-1: unable to get BOS descriptor set [ 369.934576][ T31] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 369.944546][ T31] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 369.954410][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 369.962636][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 369.972209][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.980242][ T31] usb 5-1: Product: syz [ 369.984632][ T31] usb 5-1: Manufacturer: syz [ 369.989250][ T31] usb 5-1: SerialNumber: syz [ 369.996995][ T9584] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 370.004226][ T9584] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 370.079813][ T9643] rust_binder: Write failure EFAULT in pid:728 [ 370.160025][ T9645] veth1: entered allmulticast mode [ 370.172125][ T9645] rust_binder: 730: no such ref 0 [ 370.177813][ T9645] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 370.185140][ T9645] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 370.192257][ T9645] rust_binder: 730: no such ref 3 [ 370.197693][ T9644] veth1: left allmulticast mode [ 370.215138][ T31] cdc_ether 5-1:1.0: skipping garbage [ 370.220565][ T31] usb 5-1: bad CDC descriptors [ 370.227241][ T31] usb 5-1: USB disconnect, device number 71 [ 370.245267][ T9648] loop7: detected capacity change from 0 to 7 [ 370.252225][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.261434][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 370.269436][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.278604][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 370.286487][ T8279] loop7: unable to read partition table [ 370.293556][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 370.302805][ T9648] loop7: unable to read partition table [ 370.308553][ T9648] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 370.364719][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 370.364739][ T36] audit: type=1400 audit(7119322031.397:1684): avc: denied { accept } for pid=9654 comm="syz.2.3175" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 370.404983][ T9658] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3176'. [ 370.415388][ T36] audit: type=1400 audit(7119322031.447:1685): avc: denied { append } for pid=9657 comm="syz.1.3176" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.483485][ T36] audit: type=1400 audit(7119322031.517:1686): avc: denied { nlmsg_read } for pid=9664 comm="syz.2.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 370.543874][ T9671] FAULT_INJECTION: forcing a failure. [ 370.543874][ T9671] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 370.557100][ T9671] CPU: 0 UID: 0 PID: 9671 Comm: syz.1.3180 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 370.557137][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.557153][ T9671] Call Trace: [ 370.557162][ T9671] [ 370.557173][ T9671] __dump_stack+0x21/0x30 [ 370.557208][ T9671] dump_stack_lvl+0x10c/0x190 [ 370.557239][ T9671] ? __cfi_dump_stack_lvl+0x10/0x10 [ 370.557272][ T9671] ? vfs_write+0x93e/0xf30 [ 370.557294][ T9671] dump_stack+0x19/0x20 [ 370.557322][ T9671] should_fail_ex+0x3d9/0x530 [ 370.557345][ T9671] should_fail+0xf/0x20 [ 370.557367][ T9671] should_fail_usercopy+0x1e/0x30 [ 370.557390][ T9671] _copy_from_user+0x22/0xb0 [ 370.557418][ T9671] do_sock_getsockopt+0x1d7/0x6d0 [ 370.557451][ T9671] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 370.557484][ T9671] ? __fget_files+0x2c5/0x340 [ 370.557519][ T9671] __x64_sys_getsockopt+0x1d5/0x280 [ 370.557552][ T9671] x64_sys_call+0x10db/0x2ee0 [ 370.557591][ T9671] do_syscall_64+0x58/0xf0 [ 370.557619][ T9671] ? clear_bhb_loop+0x50/0xa0 [ 370.557644][ T9671] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 370.557668][ T9671] RIP: 0033:0x7f266458f6c9 [ 370.557687][ T9671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.557708][ T9671] RSP: 002b:00007f266538e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 370.557733][ T9671] RAX: ffffffffffffffda RBX: 00007f26647e5fa0 RCX: 00007f266458f6c9 [ 370.557751][ T9671] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 370.557766][ T9671] RBP: 00007f266538e090 R08: 0000200000000240 R09: 0000000000000000 [ 370.557781][ T9671] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 370.557796][ T9671] R13: 00007f26647e6038 R14: 00007f26647e5fa0 R15: 00007ffed47da8f8 [ 370.557816][ T9671] [ 371.000560][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.011017][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.041890][ T9709] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9709 comm=syz.3.3186 [ 371.061713][ T36] audit: type=1400 audit(7119322032.097:1687): avc: denied { bind } for pid=9700 comm="syz.3.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.083386][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3186'. [ 371.093495][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.102069][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.113414][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3186'. [ 371.121486][ T36] audit: type=1400 audit(7119322032.117:1688): avc: denied { setopt } for pid=9700 comm="syz.3.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.324851][ T9731] netlink: 'syz.2.3201': attribute type 11 has an invalid length. [ 371.341454][ T9731] netlink: 'syz.2.3201': attribute type 1 has an invalid length. [ 371.349235][ T9731] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.3201'. [ 371.604781][ T9745] 9pnet_fd: Insufficient options for proto=fd [ 371.649345][ T36] audit: type=1400 audit(7119322032.677:1689): avc: denied { listen } for pid=9753 comm="syz.2.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 371.730150][ T9771] /dev/rnullb0: Can't open blockdev [ 371.868331][ T9780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.877339][ T9780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.081459][ T31] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 372.232810][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 372.243809][ T31] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 372.252970][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.261837][ T31] usb 5-1: config 0 descriptor?? [ 372.267174][ T9778] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.615386][ T9795] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3225'. [ 372.678447][ T31] hid-generic 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 372.878701][ T31] usb 5-1: USB disconnect, device number 72 [ 373.073032][ T9850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3247'. [ 373.322883][ T9856] /dev/rnullb0: Can't open blockdev [ 373.338892][ T9859] rust_binder: Write failure EFAULT in pid:765 [ 373.361810][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.376592][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.403609][ T36] audit: type=1326 audit(7119322034.427:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.1.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266458f6c9 code=0x7ffc0000 [ 373.428561][ T36] audit: type=1326 audit(7119322034.427:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.1.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266458f6c9 code=0x7ffc0000 [ 373.437062][ T9874] audit: audit_backlog=65 > audit_backlog_limit=64 [ 373.453400][ T36] audit: type=1326 audit(7119322034.437:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.1.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f266458f6c9 code=0x7ffc0000 [ 373.507536][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.517868][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.529766][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.539571][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.663348][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 373.676513][ T9895] overlay: ./file0 is not a directory [ 373.721532][ T31] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 374.073764][ T9910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.085131][ T9910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.260060][ T9923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.271218][ T9923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.284743][ T9923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.294181][ T9923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.945800][ T9965] rust_binder: Error while translating object. [ 374.945905][ T9965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 374.957781][ T9965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:794 [ 374.986906][ T9968] rust_binder: Error while translating object. [ 374.999773][ T9968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 375.006319][ T9968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:797 [ 375.048994][ T9973] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 375.062640][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.082586][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.686985][ T9983] netlink: 'syz.1.3293': attribute type 1 has an invalid length. [ 375.704558][ T9983] __nla_validate_parse: 1 callbacks suppressed [ 375.704580][ T9983] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3293'. [ 375.889760][ T36] kauditd_printk_skb: 112 callbacks suppressed [ 375.889780][ T36] audit: type=1400 audit(7119322036.917:1800): avc: denied { execute } for pid=9992 comm="syz.1.3295" path="/proc/asound/timers" dev="proc" ino=4026532210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 375.967724][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.979007][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.989809][ T9997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9997 comm=syz.1.3296 [ 376.014492][ T9997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3296'. [ 376.552076][T10019] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 376.715766][T10057] __vm_enough_memory: pid: 10057, comm: syz.1.3317, bytes: 18014402804453376 not enough memory for the allocation [ 376.749574][ T36] audit: type=1400 audit(7119322037.777:1801): avc: denied { create } for pid=10060 comm="syz.4.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 376.880561][ T36] audit: type=1400 audit(7119322037.907:1802): avc: denied { create } for pid=10082 comm="syz.2.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 377.071346][T10089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10089 comm=syz.2.3326 [ 377.071473][ T36] audit: type=1400 audit(7119322038.097:1803): avc: denied { accept } for pid=10088 comm="syz.2.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 377.106814][T10090] netlink: 'syz.1.3325': attribute type 28 has an invalid length. [ 377.116342][T10090] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 377.251695][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3331'. [ 377.277924][T10101] overlayfs: conflicting options: metacopy=off,verity=require [ 377.452278][T10128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10128 comm=syz.3.3342 [ 377.634130][T10156] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3352'. [ 377.663855][T10162] fuse: Bad value for 'fd' [ 377.668995][T10162] cgroup: Unknown subsys name 'uid' [ 377.745489][T10164] overlayfs: failed to clone upperpath [ 377.786229][ T36] audit: type=1400 audit(7119322038.817:1804): avc: denied { setattr } for pid=10174 comm="syz.4.3359" name="RAWv6" dev="sockfs" ino=47450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 377.894852][T10191] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 377.894959][T10191] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 377.952892][T10195] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 378.182109][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 378.215059][T10233] cgroup: Setting release_agent not allowed [ 378.216799][ T36] audit: type=1400 audit(7119322039.247:1805): avc: denied { mounton } for pid=10231 comm="syz.2.3379" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 378.221241][T10232] cgroup: Setting release_agent not allowed [ 378.361976][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3385'. [ 378.372423][ T36] audit: type=1400 audit(7119322039.407:1806): avc: denied { create } for pid=10250 comm="syz.3.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 378.427345][T10263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3390'. [ 378.467906][ T36] audit: type=1400 audit(7119322039.497:1807): avc: denied { read } for pid=10277 comm="syz.2.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.091707][T10303] fuse: Bad value for 'user_id' [ 379.096713][T10303] fuse: Bad value for 'user_id' [ 379.673006][T10343] overlayfs: failed to clone lowerpath [ 380.000639][T10367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=10367 comm=syz.2.3425 [ 380.013207][ T885] Bluetooth: hci0: command 0x1003 tx timeout [ 380.013210][ T884] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 380.070416][ T36] audit: type=1326 audit(7119322041.097:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.2.3427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bf558f6c9 code=0x0 [ 380.179248][T10378] tipc: Started in network mode [ 380.184211][T10378] tipc: Node identity , cluster identity 4711 [ 380.190420][T10378] tipc: Failed to set node id, please configure manually [ 380.197691][T10378] tipc: Enabling of bearer rejected, failed to enable media [ 380.312300][ T36] audit: type=1400 audit(7119322041.347:1809): avc: granted { setsecparam } for pid=10379 comm="syz.1.3429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 380.382896][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.393382][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.926921][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 380.926939][ T36] audit: type=1400 audit(7119322041.957:1811): avc: denied { create } for pid=10401 comm="syz.4.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 381.129204][ T5261] Bluetooth: hci0: Frame reassembly failed (-84) [ 381.542719][ T36] audit: type=1400 audit(7119322042.577:1812): avc: denied { bind } for pid=10427 comm="syz.4.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.401451][T10459] 9p filesystem being mounted at /439/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 382.807131][T10528] overlayfs: failed to clone lowerpath [ 383.131466][ T884] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 383.139060][T10545] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3492'. [ 383.141458][T10544] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3492'. [ 383.183863][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.192229][ T36] audit: type=1400 audit(7119322044.217:1813): avc: denied { map } for pid=10552 comm="syz.3.3496" path="socket:[48055]" dev="sockfs" ino=48055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 383.217494][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.249365][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.258009][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.266137][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.274649][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.282816][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.291307][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.299500][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.308021][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.316113][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.324610][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.332746][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.341693][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.442482][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.450031][T10571] 9pnet_fd: Insufficient options for proto=fd [ 383.698475][ T36] audit: type=1326 audit(7119322044.727:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.4.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c18f6c9 code=0x7fc00000 [ 383.773030][T10605] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 384.135480][T10638] 9pnet_fd: p9_fd_create_tcp (10638): problem connecting socket to 127.0.0.1 [ 385.234917][T10696] netlink: 'syz.4.3544': attribute type 13 has an invalid length. [ 385.267022][ T36] audit: type=1400 audit(7119322046.297:1815): avc: denied { map } for pid=10701 comm="syz.4.3546" path="socket:[50276]" dev="sockfs" ino=50276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 385.297703][T10704] binder: Unknown parameter 'subj_type' [ 385.592716][ T36] audit: type=1400 audit(7119322046.627:1816): avc: denied { listen } for pid=10727 comm="syz.3.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.613569][ T36] audit: type=1400 audit(7119322046.627:1817): avc: denied { shutdown } for pid=10727 comm="syz.3.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.573247][T10799] netlink: 'syz.4.3580': attribute type 4 has an invalid length. [ 386.581165][T10799] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3580'. [ 386.590872][ T36] audit: type=1326 audit(7119322047.617:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.4.3580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5c18f6c9 code=0x0 [ 386.701617][T10816] 9p filesystem being mounted at /331/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 386.846613][T10829] 9pnet_fd: Insufficient options for proto=fd [ 386.898156][T10844] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3598'. [ 386.921512][ T36] audit: type=1400 audit(7119322047.957:1819): avc: denied { lock } for pid=10842 comm="syz.4.3598" path="socket:[49329]" dev="sockfs" ino=49329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.953969][T10844] Invalid ELF header len 1 [ 386.970352][ T36] audit: type=1400 audit(7119322047.987:1820): avc: denied { module_load } for pid=10842 comm="syz.4.3598" path="/536/file0" dev="tmpfs" ino=2862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 387.174046][ T36] audit: type=1400 audit(7119322048.207:1821): avc: denied { getopt } for pid=10862 comm="syz.2.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 387.194724][T10865] futex_wake_op: syz.2.3606 tries to shift op by 144; fix this program [ 387.221451][ T36] audit: type=1400 audit(7119322048.227:1822): avc: denied { execute } for pid=10864 comm="syz.2.3606" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=50539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.200911][T10897] 9p filesystem being mounted at /298/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 388.331743][T10917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 388.385693][T10921] netlink: 'syz.4.3628': attribute type 4 has an invalid length. [ 388.400039][T10921] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.3628'. [ 388.409658][ T5261] bridge_slave_1: left allmulticast mode [ 388.412634][T10923] overlayfs: failed to clone upperpath [ 388.420027][ T5261] bridge_slave_1: left promiscuous mode [ 388.426537][ T5261] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.434391][ T5261] bridge_slave_0: left allmulticast mode [ 388.440060][ T5261] bridge_slave_0: left promiscuous mode [ 388.447660][ T5261] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.496713][T10929] 9pnet_fd: Insufficient options for proto=fd [ 388.600738][T10946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3638'. [ 388.634976][T10948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3639'. [ 388.661768][T10948] 9pnet_fd: Insufficient options for proto=fd [ 388.677826][ T5261] veth1_macvtap: left promiscuous mode [ 388.685653][ T5261] veth0_vlan: left promiscuous mode [ 388.825832][ T36] audit: type=1326 audit(7119322049.854:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.4.3649" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5c18f6c9 code=0x0 [ 388.879235][ T36] audit: type=1326 audit(7119322049.903:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.4.3649" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5c18f6c9 code=0x0 [ 388.923657][ T9881] Bluetooth: hci0: Frame reassembly failed (-84) [ 388.932643][ T36] audit: type=1326 audit(7119322049.963:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.4.3649" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5c18f6c9 code=0x0 [ 388.984825][ T36] audit: type=1326 audit(7119322050.003:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10979 comm="syz.4.3649" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5c18f6c9 code=0x0 [ 389.188568][T11008] 9pnet_fd: Insufficient options for proto=fd [ 389.841645][T11056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3675'. [ 389.850772][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3675'. [ 390.414726][T11074] overlayfs: failed to clone upperpath [ 390.454242][T11079] netlink: 'syz.4.3684': attribute type 4 has an invalid length. [ 390.983153][ T884] Bluetooth: hci0: command 0x1003 tx timeout [ 390.989229][ T885] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 391.035418][T11097] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 391.187253][T11111] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 391.207191][T11113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 391.215295][T11113] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 391.295973][ T36] audit: type=1400 audit(7119322052.314:1827): avc: denied { watch watch_reads } for pid=11114 comm="syz.1.3697" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 391.344362][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3704'. [ 391.354338][T11135] /dev/rnullb0: Can't open blockdev [ 391.370861][T11137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 391.371024][T11137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 391.505873][T11146] cgroup: fork rejected by pids controller in /syz1 [ 391.669750][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.682716][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.872325][T11280] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3712'. [ 392.315090][T11329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 392.315898][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 392.315917][ T36] audit: type=1400 audit(7119322053.320:1829): avc: denied { accept } for pid=11327 comm="syz.1.3730" lport=44470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 392.322626][T11328] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 392.356953][T11328] rust_binder: Write failure EINVAL in pid:1069 [ 392.391218][T11331] fuse: Unknown parameter '000000000000000000050x0000000000000006' [ 392.561056][ T36] audit: type=1400 audit(7119322053.569:1830): avc: denied { name_bind } for pid=11347 comm="syz.2.3738" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 393.775777][ T36] audit: type=1400 audit(7119322054.785:1831): avc: denied { create } for pid=11396 comm="syz.1.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 394.085982][ T36] audit: type=1400 audit(7119322055.094:1832): avc: denied { getopt } for pid=11414 comm="syz.1.3763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 394.120514][ T36] audit: type=1400 audit(7119322055.123:1833): avc: denied { setcheckreqprot } for pid=11418 comm="syz.1.3765" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 394.199368][T11426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3768'. [ 394.208467][T11426] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3768'. [ 394.217460][T11426] netlink: 'syz.1.3768': attribute type 6 has an invalid length. [ 394.225212][T11426] netlink: 'syz.1.3768': attribute type 5 has an invalid length. [ 394.232981][T11426] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3768'. [ 394.367146][T11436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.375749][T11436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.471564][T11442] 9p filesystem being mounted at /372/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 394.617560][ T36] audit: type=1326 audit(7119322055.622:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11460 comm="syz.3.3782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2ec78f6c9 code=0x0 [ 394.980139][ T36] audit: type=1400 audit(7119322055.980:1835): avc: denied { read } for pid=11465 comm="syz.1.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 395.141274][T11473] netlink: 'syz.1.3786': attribute type 3 has an invalid length. [ 395.283649][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.290831][T11474] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.298097][T11474] bridge_slave_0: entered allmulticast mode [ 395.305061][T11474] bridge_slave_0: entered promiscuous mode [ 395.311938][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.319097][T11474] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.326820][T11474] bridge_slave_1: entered allmulticast mode [ 395.333538][T11474] bridge_slave_1: entered promiscuous mode [ 395.407580][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.414669][T11474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.421999][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.429045][T11474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.437233][ T5261] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.444554][ T5261] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.484472][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.491600][ T9881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.501825][ T5261] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.508927][ T5261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.542173][T11474] veth0_vlan: entered promiscuous mode [ 395.556107][T11474] veth1_macvtap: entered promiscuous mode [ 395.564776][T11490] netlink: 'syz.3.3790': attribute type 1 has an invalid length. [ 395.573385][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 395.582519][T11490] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.676833][T11506] rust_binder: Got transaction with invalid offset. [ 395.677030][T11506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 395.685242][T11506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 395.719112][T11514] tmpfs: Cannot retroactively limit inodes [ 396.995784][ T36] audit: type=1400 audit(7119322057.993:1836): avc: denied { read } for pid=11528 comm="syz.3.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 397.204111][T11551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11551 comm=syz.2.3815 [ 397.808659][ T884] Bluetooth: hci0: command 0x1003 tx timeout [ 397.814846][ T885] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 397.984969][ T36] audit: type=1400 audit(7119322058.969:1837): avc: denied { create } for pid=11564 comm="syz.2.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 398.224554][T11600] 9pnet_fd: Insufficient options for proto=fd [ 398.246292][T11604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3834'. [ 398.279378][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'. [ 398.283616][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'. [ 398.382724][T11632] binder: Unknown parameter '?cUCmax' [ 398.400299][T11634] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 398.410295][ T36] audit: type=1400 audit(7119322059.398:1838): avc: denied { relabelto } for pid=11633 comm="syz.1.3844" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 398.438382][ T36] audit: type=1400 audit(7119322059.398:1839): avc: denied { associate } for pid=11633 comm="syz.1.3844" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hostname_exec_t:s0" [ 398.466949][ T36] audit: type=1400 audit(7119322059.398:1840): avc: denied { read } for pid=11633 comm="syz.1.3844" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 398.517015][T11640] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 398.524991][T11640] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 398.525019][T11640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 398.533257][T11640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:9 [ 398.543713][T11644] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 398.579154][ T36] audit: type=1400 audit(7119322059.567:1841): avc: denied { write } for pid=11652 comm="syz.4.3850" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 398.613620][ T36] audit: type=1400 audit(7119322059.567:1842): avc: denied { open } for pid=11652 comm="syz.4.3850" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 398.667964][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3855'. [ 398.702564][T11667] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3857'. [ 398.831108][T11674] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3859'. [ 398.841622][T11674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 399.052370][T11675] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 399.147876][T11690] netlink: 'syz.4.3864': attribute type 12 has an invalid length. [ 399.444246][ T36] audit: type=1400 audit(7119322060.424:1843): avc: denied { create } for pid=11714 comm="syz.4.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 399.523851][T11715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 399.539021][ T36] audit: type=1400 audit(7119322060.524:1844): avc: denied { audit_read } for pid=11733 comm="syz.3.3881" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 399.543049][T11734] 9p filesystem being mounted at /419/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 399.640508][T11738] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 399.798366][T11766] sock: sock_set_timeout: `syz.3.3894' (pid 11766) tries to set negative timeout [ 400.003233][ T36] audit: type=1400 audit(7119322060.982:1845): avc: denied { remount } for pid=11799 comm="syz.4.3907" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 400.027625][T11807] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 400.027653][T11807] rust_binder: Error while translating object. [ 400.046996][T11807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 400.065161][T11807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 400.112732][ T36] audit: type=1400 audit(7119322061.092:1846): avc: denied { ioctl } for pid=11813 comm="syz.1.3912" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 400.194677][T11822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.207285][T11824] rust_binder: Error while translating object. [ 400.207335][T11824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 400.211792][T11822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.213970][T11824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:55 [ 400.740175][T11837] 9pnet_fd: p9_fd_create_tcp (11837): problem connecting socket to 127.0.0.1 [ 400.924669][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.933292][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.116978][T11853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 401.117011][T11853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 401.123923][T11854] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 401.130678][T11853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 401.214719][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3932'. [ 401.355950][T11868] fuse: Bad value for 'fd' [ 401.504178][T11870] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 403.057582][T11882] netlink: 'syz.3.3940': attribute type 30 has an invalid length. [ 416.542392][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.549512][T11901] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.557033][T11901] bridge_slave_0: entered allmulticast mode [ 416.563642][T11901] bridge_slave_0: entered promiscuous mode [ 416.570245][T11901] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.577932][T11901] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.585210][T11901] bridge_slave_1: entered allmulticast mode [ 416.591638][T11901] bridge_slave_1: entered promiscuous mode [ 416.664747][T11901] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.671855][T11901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.679281][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.686392][T11901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.715961][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.723997][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.736215][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.743852][ T9881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.754890][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.761977][ T9881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.798238][T11901] veth0_vlan: entered promiscuous mode [ 416.812427][T11901] veth1_macvtap: entered promiscuous mode [ 417.077486][ T45] usb 2-1: USB disconnect, device number 31 [ 417.413262][T11920] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.420538][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.420578][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.431493][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.445432][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.445462][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.451914][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.459051][T11920] bridge_slave_0: entered allmulticast mode [ 417.471566][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.471598][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.478447][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.485644][T11920] bridge_slave_0: entered promiscuous mode [ 417.498054][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.498084][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.504899][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.519032][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.531118][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.538948][T11920] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.552531][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.560569][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.560598][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.567155][T11920] bridge_slave_1: entered allmulticast mode [ 417.580210][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.580240][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.587736][T11920] bridge_slave_1: entered promiscuous mode [ 417.600381][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.600411][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.607201][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.613949][T11921] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.627905][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.627934][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.634440][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.641594][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.655911][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.655944][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.662808][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.669816][T11921] bridge_slave_0: entered allmulticast mode [ 417.682709][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.682738][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.689941][T11921] bridge_slave_0: entered promiscuous mode [ 417.712739][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.712770][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.725087][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.732404][T11921] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.746248][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.746278][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.752788][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.759658][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.774116][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.774146][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.780687][T11921] bridge_slave_1: entered allmulticast mode [ 417.793460][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.793489][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.800925][T11921] bridge_slave_1: entered promiscuous mode [ 417.813442][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.813472][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.825121][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.841712][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.855987][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.869750][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.886075][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.901510][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.921059][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.936764][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.954194][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.966305][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.986592][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.006687][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.013711][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.032158][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.051198][T11921] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.064734][T11921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.072087][T11921] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.079166][T11921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.087108][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.087139][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.094459][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.101034][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.108001][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.114541][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.121384][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.153961][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.171727][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.186018][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.186049][T11929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.193795][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.252320][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.259435][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.273823][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.280948][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.290371][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.297472][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.305546][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.312664][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.375790][T11947] __vm_enough_memory: pid: 11947, comm: syz.5.3954, bytes: 18014402804453376 not enough memory for the allocation [ 418.443133][T11921] veth0_vlan: entered promiscuous mode [ 418.453629][T11920] veth0_vlan: entered promiscuous mode [ 418.473043][T11921] veth1_macvtap: entered promiscuous mode [ 418.486498][T11920] veth1_macvtap: entered promiscuous mode [ 418.668575][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 418.842902][ T45] usb 6-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 418.852330][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.861381][ T45] usb 6-1: Product: syz [ 418.865726][ T45] usb 6-1: Manufacturer: syz [ 418.870977][ T45] usb 6-1: SerialNumber: syz [ 419.087403][ T45] usb 6-1: USB disconnect, device number 2 [ 419.673127][T11970] binder: Unknown parameter '' [ 420.305004][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 420.305025][ T36] audit: type=1400 audit(7119322081.225:1848): avc: denied { watch watch_reads } for pid=11980 comm="syz.6.3962" path="/3/bus" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 421.196496][T11987] netlink: 'syz.3.3963': attribute type 16 has an invalid length. syz-executor: executor/_include/flatbuffers/flatbuffer_builder.h:328: flatbuffers::uoffset_t flatbuffers::FlatBufferBuilder::ReferTo(flatbuffers::uoffset_t): Assertion `off && off <= size' failed. [ 421.305856][T11992] can: request_module (can-proto-0) failed. [ 421.316609][ T36] audit: type=1400 audit(7119322082.212:1849): avc: denied { write } for pid=284 comm="syz-executor" path="pipe:[2769]" dev="pipefs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 421.346108][T11993] can: request_module (can-proto-0) failed. [ 421.418308][ T36] audit: type=1400 audit(7119322082.332:1850): avc: denied { map } for pid=11991 comm="syz.6.3965" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 421.687982][ T6141] bridge_slave_1: left allmulticast mode [ 421.693691][ T6141] bridge_slave_1: left promiscuous mode [ 421.707818][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.724259][ T6141] bridge_slave_0: left allmulticast mode [ 421.737798][ T6141] bridge_slave_0: left promiscuous mode [ 421.743512][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.129798][ T6141] veth1_macvtap: left promiscuous mode [ 423.507073][ T6141] bridge_slave_1: left allmulticast mode [ 423.512745][ T6141] bridge_slave_1: left promiscuous mode [ 423.518417][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.525954][ T6141] bridge_slave_0: left allmulticast mode [ 423.531598][ T6141] bridge_slave_0: left promiscuous mode [ 423.537369][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.545039][ T6141] bridge_slave_1: left allmulticast mode [ 423.550681][ T6141] bridge_slave_1: left promiscuous mode [ 423.556392][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.563909][ T6141] bridge_slave_0: left allmulticast mode [ 423.569635][ T6141] bridge_slave_0: left promiscuous mode [ 423.575424][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.583133][ T6141] bridge_slave_1: left allmulticast mode [ 423.588899][ T6141] bridge_slave_1: left promiscuous mode [ 423.594556][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.602068][ T6141] bridge_slave_0: left allmulticast mode [ 423.607839][ T6141] bridge_slave_0: left promiscuous mode [ 423.613542][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.621148][ T6141] bridge_slave_1: left allmulticast mode [ 423.626837][ T6141] bridge_slave_1: left promiscuous mode [ 423.632457][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.640030][ T6141] bridge_slave_0: left allmulticast mode [ 423.645752][ T6141] bridge_slave_0: left promiscuous mode [ 423.651347][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.598925][ T6141] veth1_macvtap: left promiscuous mode [ 424.604462][ T6141] veth0_vlan: left promiscuous mode [ 424.610044][ T6141] veth1_macvtap: left promiscuous mode [ 424.615572][ T6141] veth0_vlan: left promiscuous mode [ 424.621098][ T6141] veth1_macvtap: left promiscuous mode [ 424.626677][ T6141] veth0_vlan: left promiscuous mode [ 424.632084][ T6141] veth1_macvtap: left promiscuous mode [ 424.637662][ T6141] veth0_vlan: left promiscuous mode