last executing test programs: 1m56.539576235s ago: executing program 3 (id=302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) 1m56.371131107s ago: executing program 3 (id=303): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000001dc0)) fchdir(r0) (async) fchdir(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') write$P9_RVERSION(r2, 0x0, 0x0) (async) write$P9_RVERSION(r2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x96, 0x1, 0xfffffffe}, 0x1c) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x96, 0x1, 0xfffffffe}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m56.370796527s ago: executing program 3 (id=304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x122) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x5, 0x5fb, "61dce6241840"}}) fdatasync(r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 1m56.363966218s ago: executing program 3 (id=305): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x90) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000940)={'#! ', './file2/file0'}, 0x11) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) (async) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r3, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r4, &(0x7f0000000040)=""/141, 0x8d) (async) read(r4, &(0x7f0000000040)=""/141, 0x8d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x240, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f00000006c0)={0xc1, 0x0, 0x2}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r7, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) (async) prlimit64(r7, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r8) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r4, r4, 0x0, 0x7ffff000) (async) sendfile(r4, r4, 0x0, 0x7ffff000) lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file2/file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1) 1m55.377445543s ago: executing program 3 (id=320): ptrace$setregs(0xf, 0x0, 0x6, &(0x7f0000000000)="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") r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000001000)={'\x00', 0x7fff, 0x4, 0x5, 0x0, 0x1689, 0x8000000, 0x106000, '\x00', 0x5}) (async) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000001000)={'\x00', 0x7fff, 0x4, 0x5, 0x0, 0x1689, 0x8000000, 0x106000, '\x00', 0x5}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000011c0)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000001240)={0x60, 0x5, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6, &(0x7f0000001200)=[{0x3ff8000000000000, 0x9, 0x3}, {0x9, 0xab0000000000, 0x97}], 0x2, 0x1, 0x5d, 0x0, 0xc, 0xc}) (async) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000001240)={0x60, 0x5, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6, &(0x7f0000001200)=[{0x3ff8000000000000, 0x9, 0x3}, {0x9, 0xab0000000000, 0x97}], 0x2, 0x1, 0x5d, 0x0, 0xc, 0xc}) r3 = socket(0x1, 0xa, 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000001440)={&(0x7f0000001300)={0x1d, r4}, 0x10, &(0x7f0000001400)={&(0x7f0000001380)={0x2, 0x8, 0x9bf, {0x77359400}, {r5, r6/1000+60000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x33, 0x2, 0x0, 0x0, "087531b7119565539b4ca45abd6110f309f2ee3d0c469425cea85f667d5993e687769fc84e802367839295a0989aa7111e9f0c09a9a08698ed4ce935f7a942e9"}}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x1) (async) sendmsg$can_bcm(r3, &(0x7f0000001440)={&(0x7f0000001300)={0x1d, r4}, 0x10, &(0x7f0000001400)={&(0x7f0000001380)={0x2, 0x8, 0x9bf, {0x77359400}, {r5, r6/1000+60000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x33, 0x2, 0x0, 0x0, "087531b7119565539b4ca45abd6110f309f2ee3d0c469425cea85f667d5993e687769fc84e802367839295a0989aa7111e9f0c09a9a08698ed4ce935f7a942e9"}}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000001540)={0x8, 0x300, &(0x7f0000001480)="fc7bd767c992604d6a766ae5a53429841d947dec69ed3377e2688665451beba2e88b48dd9d9f0876749b9af968a9ece9e8ba1021b37511f03aab2ecc89adf3c54d82899301fc1551af9298c9dfaf448f87f7484d3b0b5e197a48e1054eb01ec1258f2d574b", &(0x7f0000001500), 0x65}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000001580)={0x1, 0x0, [{0xb29, 0x0, 0x800}]}) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f00000015c0)={0x5000, 0xc000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001600)={0x10004, 0x4, 0x2, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r9 = dup3(r2, r0, 0x80000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x80010, r7, 0xc8818000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x80010, r7, 0xc8818000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x44, r10, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9be5b22b67"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bbe0ff8350"}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x4) (async) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x44, r10, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9be5b22b67"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bbe0ff8350"}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000001800)=[@mss={0x2, 0x8001}, @sack_perm, @sack_perm, @timestamp], 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000001800)=[@mss={0x2, 0x8001}, @sack_perm, @sack_perm, @timestamp], 0x4) r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r12, 0x4068aea3, &(0x7f0000001840)={0xc1, 0x0, 0x3}) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r12, 0x4068aea3, &(0x7f0000001840)={0xc1, 0x0, 0x3}) read$msr(r9, &(0x7f00000018c0)=""/232, 0xe8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2/custom1\x00', 0x2, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000001a40)={&(0x7f0000001a00), 0x1001000, 0x1800, 0xffffffc0, 0x2}, 0x20) fstat(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0), 0x48, &(0x7f0000001b80)={[{@verity_require}, {@volatile}, {@nfs_export_on}, {@uuid_off}], [{@dont_appraise}, {@uid_gt={'uid>', r13}}]}) (async) mount$overlay(0x0, &(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0), 0x48, &(0x7f0000001b80)={[{@verity_require}, {@volatile}, {@nfs_export_on}, {@uuid_off}], [{@dont_appraise}, {@uid_gt={'uid>', r13}}]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001c00), r9) 1m54.917798869s ago: executing program 3 (id=326): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000140)={0x0, 0x8000000000000000}) fadvise64(r0, 0x1003, 0xfffffffffffffffe, 0x5) (async, rerun: 64) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a13, 0x202812, r0, 0x7dfff000) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x58900, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30}, 0x30) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x0, 0x989680}) (async, rerun: 32) read$char_usb(r1, &(0x7f0000000080)=""/171, 0xab) (rerun: 32) 1m54.913599679s ago: executing program 32 (id=326): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000140)={0x0, 0x8000000000000000}) fadvise64(r0, 0x1003, 0xfffffffffffffffe, 0x5) (async, rerun: 64) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a13, 0x202812, r0, 0x7dfff000) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x58900, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30}, 0x30) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x0, 0x989680}) (async, rerun: 32) read$char_usb(r1, &(0x7f0000000080)=""/171, 0xab) (rerun: 32) 1m21.766957172s ago: executing program 0 (id=610): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x51, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x3c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x4, 0xffff, 0xe, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x6, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0x7, 0x0, 0xffffffff, 0x1, 0x9, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x7, 0x0, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x7, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x800009, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x1000, 0xfffffffe, 0x15, 0x8002, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 32) fadvise64(r0, 0x1003, 0x9, 0x5) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a13, 0x202812, r0, 0x7dfff000) (rerun: 64) 1m20.912166964s ago: executing program 0 (id=622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x40, "20854e8c4b94a5715f8227fd4236376e9708596b6fea1c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e3470c50febcb7566c61ba4ffbb8c84e5b"}, 0x0}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x802, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000e3ffffffff33"], 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4422803b}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x58, r7, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2f, 0xc}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x9}, @broadcast, @from_mac=@device_b}}]}, 0x58}}, 0xb83d63a88a788ed4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) ioprio_set$uid(0x3, r8, 0x4000) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) close(0x3) 1m19.816764101s ago: executing program 0 (id=632): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000180)={0x1f, @none, 0x15}, 0xa) (async) getpeername(r0, 0x0, &(0x7f0000000080)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x10000, @empty}, 0x1c) listen(r2, 0x0) (async) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) (async, rerun: 64) mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x9, 0x4, 0x20, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8000, 0x2, 0x5}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x42, r3}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) r6 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, 0x0) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000000)) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r8, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x25daa903, 0xffffffffffffffff, r10, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x50) (async) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1m19.794058131s ago: executing program 0 (id=634): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101241, 0x0) r1 = epoll_create1(0x80000) sendfile(r0, r1, &(0x7f0000000080)=0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x80000001, @local, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0xfff}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="e14d8ef81f460138900c6e9477f85ed909f79a57c30269775bd4610f172bcbad93e199e8", 0x24}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2e8}}], 0x1, 0x40015) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x10001) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x50, 0x0, 0x4, {0x7, 0x28, 0xfffffffc, 0x1088010, 0x0, 0x2, 0x2000000, 0x3, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000700)='attr/sockcreate\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 1m18.890646615s ago: executing program 0 (id=663): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1m18.817469296s ago: executing program 0 (id=665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xac, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x4, 0x2, 0x1}, @flat=@handle={0x73682a85, 0xb, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x9b74af8164a04e37}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1m3.829210143s ago: executing program 33 (id=665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xac, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x4, 0x2, 0x1}, @flat=@handle={0x73682a85, 0xb, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x9b74af8164a04e37}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 37.366898534s ago: executing program 4 (id=1366): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, 0xffffffffffffffff, 0x2b09d000) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x7f, "24432d9ad78c4921ff938b179fc8208415199b35b351d0a1059bf6f1152722bb28c265a7fab9f33ef1f015ce82651bcbc64ef7ebcde143a5c63fef29b71b8fbe9cc13d868952ced66dcbec2f4cef5f09f4ec6d4808400d389964d1e7f41926d43ff7f62a28edd2cad4f241a828b2fea0e4a4f76be2503c4a711055daba1634"}, 0x0}) gettid() gettid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 36.809458753s ago: executing program 4 (id=1380): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, r1, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000b20000/0x2000)=nil, 0x2000, 0x2, 0x10010, r1, 0x3c4d3000) 36.755441233s ago: executing program 4 (id=1383): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r1) ptrace$peek(0x2, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x4000010, r0, 0x6000) 36.755065743s ago: executing program 4 (id=1384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x2f}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x4c20, @multicast1}}}, 0x90) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x18, r3, 0x1, 0x0, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x18}}, 0x40000) fcntl$dupfd(r1, 0x0, r1) r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setown(r5, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffcf, 0x0, 0x0, 0x0}, 0x40}, @exit_looper], 0x4, 0x0, &(0x7f00000000c0)="5e0f626a1e61432d8aaee3cd35d1abe17cc39e0c2a98510ae6bc4115935e9cbdfe667acb249ac31d7c9921e97477b0977a3432b8c9e19220815400f3ade3a88b2efde8aa6358e822f7b953102a4ca518d710eb051f2b799def1465b9715cce1306bd0ee188ab9473f86f00bb92ae5d97e48d08ad"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) 36.739389194s ago: executing program 4 (id=1385): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101241, 0x0) r1 = epoll_create1(0x80000) sendfile(r0, r1, &(0x7f0000000080)=0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x80000001, @local, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0xfff}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="e14d8ef81f460138900c6e9477f85ed909f79a57c30269775bd4610f172bcbad93e199e8", 0x24}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2e8}}], 0x1, 0x40015) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x10001) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x50, 0x0, 0x4, {0x7, 0x28, 0xfffffffc, 0x1088010, 0x0, 0x2, 0x2000000, 0x3, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 35.833638497s ago: executing program 4 (id=1392): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x4, 0x0, 0x4}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder1\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000140)) listen(r2, 0x802) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r4, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@void, @val={0xc, 0x99, {0x40, 0x52}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000080)=[@enter_looper, @acquire_done, @acquire_done={0x40106309, 0x3}], 0xef, 0x0, &(0x7f0000000100)="de547e22bade76f1b03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e702e7acc6c61ff5c331bbeee557b368f30f363f1b36e0afbaa45297899655f80a993000600000000000000f043baed8e80b6230a60583b2bb95ee237e047127dce67edd615c545940ce9684f5ac0899e65ca34d63b97c0c0dd84c6e792ac38ae8f2bedfed6bf12022a9f9293748b83656201c45c7b150419f1719900034e1100f1880edb8271b68dadb6b5721533c564ea526e492928bf23041e4f8b03e218fb"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 19.77761126s ago: executing program 34 (id=1392): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x4, 0x0, 0x4}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder1\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000140)) listen(r2, 0x802) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r4, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@void, @val={0xc, 0x99, {0x40, 0x52}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000080)=[@enter_looper, @acquire_done, @acquire_done={0x40106309, 0x3}], 0xef, 0x0, &(0x7f0000000100)="de547e22bade76f1b03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e702e7acc6c61ff5c331bbeee557b368f30f363f1b36e0afbaa45297899655f80a993000600000000000000f043baed8e80b6230a60583b2bb95ee237e047127dce67edd615c545940ce9684f5ac0899e65ca34d63b97c0c0dd84c6e792ac38ae8f2bedfed6bf12022a9f9293748b83656201c45c7b150419f1719900034e1100f1880edb8271b68dadb6b5721533c564ea526e492928bf23041e4f8b03e218fb"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 3.069702993s ago: executing program 2 (id=1865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1181, 0x200000000000}) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000001200)=""/4109, &(0x7f0000000000)=0x100d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f0000000300)=""/89, 0x59}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r6}, 0x14) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 3.022429904s ago: executing program 5 (id=1867): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000380)={0x40, 0x13, 0x4, "badc0e3a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000080)=0x1) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) mmap(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x1000000, 0x4c011, r5, 0x2000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000"], 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000380)={0x40, 0x13, 0x4, "badc0e3a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000080)=0x1) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) (async) mmap(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x1000000, 0x4c011, r5, 0x2000) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) 2.253171686s ago: executing program 2 (id=1866): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x80000000}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4d0, 0x0, 0x8000000000000001}]}) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010002}]}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './file1'}}, {@xino_off}, {@xino_on}, {@xino_on}]}) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x20900, 0x16a, 0x19}, 0x31) (async) read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020) 1.929616491s ago: executing program 2 (id=1883): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xcb) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x6, 0x9, &(0x7f0000000080)={{0x21, @remote, 0x0, 0x3, 'sh\x00'}, {@private=0xa810101, 0x4, 0x0, 0x0, 0x100000, 0xfffffffe}}, 0x44) getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$clear(0x7, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fgetxattr(r6, &(0x7f0000000080)=ANY=[], 0x0, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) getdents64(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000180)={r8, 0x1, 0x6, @local}, 0x10) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)=ANY=[@ANYBLOB='dSrsync,\x00']) 1.843170112s ago: executing program 2 (id=1884): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) splice(r1, 0x0, r0, &(0x7f0000000580)=0x3, 0x2, 0xa) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) setns(0xffffffffffffffff, 0x10000000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x325, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r4, 0x0}]) socket$inet6(0xa, 0x3, 0x7) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002205000000a7807b5f30005e070d003dd012497384ba268cce0c92852b6c74cfdf12041025bca666f9502bbbef14ac14af1825143c3380fc505b5afab7678e4f74875795e7d4d4e08c1529274dcea04b1d1608bd9ea7982c32a923e6f94e71cdc2d8f9bbdd4e"], 0x0}, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0x60f19286, 0x600802) ioctl$KVM_CAP_HYPERV_VP_INDEX(r6, 0x4068aea3, &(0x7f0000000040)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.537188967s ago: executing program 5 (id=1885): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0xfffffffffffffffa, 0xdd, 0x8}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x4}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000000, 0x2012, r3, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.476891737s ago: executing program 5 (id=1886): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x804) (async) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) (async) dup2(r0, 0xffffffffffffffff) (async) r3 = memfd_create(&(0x7f0000000040)='&[\x00', 0x5) close_range(r1, r3, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 1.476407097s ago: executing program 5 (id=1887): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101241, 0x0) r1 = epoll_create1(0x80000) sendfile(r0, r1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x80000001, @local, 0x1}, 0x1c) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x10001) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x50, 0x0, 0x4, {0x7, 0x28, 0xfffffffc, 0x1088010, 0x0, 0x2, 0x2000000, 0x3, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 1.475978717s ago: executing program 5 (id=1888): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x3e}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000010c0), 0x200, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) add_key$keyring(&(0x7f0000000180), 0xfffffffffffffffd, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r1, r1, 0x0, 0x7ffff000) 1.049400214s ago: executing program 1 (id=1893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, &(0x7f0000000b80)) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x4) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000180)={0x60, 0x1, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xd210, &(0x7f0000000100)=[{0xd2d, 0x81, 0x3}, {0x200, 0x8}, {0x7fff, 0x0, 0x2}], 0x3, 0x2, 0x68, 0x0, 0x62, 0x42}) (async) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000003640)=ANY=[@ANYBLOB="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"], 0x1378}}, 0x80) (async) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) socket(0x5, 0x2, 0x9) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={r5, r6+60000000}, &(0x7f0000000080)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x13) (async) ioctl$TCXONC(r7, 0x540a, 0x3) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r9, 0x8070ae9f, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000280)={0x1000000c}) 1.047830104s ago: executing program 1 (id=1894): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x100000e, 0x11012, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 859.281507ms ago: executing program 1 (id=1895): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x4, 0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) fgetxattr(r0, &(0x7f0000000000)=@random={'system.', './binderfs\x00'}, &(0x7f00000001c0)=""/251, 0xfb) 843.669737ms ago: executing program 1 (id=1896): ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0xffffffffffffff01}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf, 0x2, 0x7, 0x6, 0x3, 0x9}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x404000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000000c0)=""/12) fcntl$getown(r0, 0x9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x40) r2 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') execveat$binfmt(r1, r2, &(0x7f0000000200)={[&(0x7f0000000180)='#{\'!&\x00', &(0x7f00000001c0)='/dev/input/event#\x00']}, &(0x7f0000000300)={[&(0x7f0000000240)='\\.\x00', &(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='/dev/input/event#\x00']}, 0x1000) r3 = socket$packet(0x11, 0x2, 0x300) shutdown(r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x3, 0x1, 0x0, 0x1}, {0x3}}, {{0x4, 0x1, 0x1, 0x1}, {0x4, 0x1}}, {{0x0, 0x1, 0x1}, {0x1, 0x1}}, {{0x4}, {0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}], 0x28) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_test', 0x20042, 0x2) syz_usb_connect$uac1(0x6, 0x129, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x117, 0x3, 0x1, 0x8, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x7f}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x6, 0x8, 0xfffc, 0xe4, 0x65}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x201, 0x6, 0x2, 0x9}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0xa, "08ba03"}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x5, 0x9, '`Q'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x6, 0x10, 0x2d, 0xd, 0x1}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0xff, 0x2, "85"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0xf0, "71f8af", "d4"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x5, "12b5f9712bf099a94f"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xe, 0x2, 0x5, 0x6, "9851a55289"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0xd, 0x81, {0x7, 0x25, 0x1, 0x82, 0x4, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0xb633, 0x0, "e96109"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xd, 0x6, 0x3, "8d38fff265dc934336"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x100, 0x8001, 0x5, "19a18a1d30"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x40, 0xbc22, 0x6, "a90e96ed25ba73"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x3d, 0x2, "57b2"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x9, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x9d, 0x3, 0x2, {0x7, 0x25, 0x1, 0x82, 0xff}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x4, 0x3a, 0x4, 0x40, 0x95}, 0x39, &(0x7f0000000540)={0x5, 0xf, 0x39, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x5, 0xd8, 0x800, 0xf5}, @ss_container_id={0x14, 0x10, 0x4, 0x60, "64a97d2eec2796eea0b300ba2a79aa24"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x3, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x4, 0x5, 0x9, 0xc}]}, 0x7, [{0xc, &(0x7f0000000580)=@string={0xc, 0x3, "64b098a74dea9fa36826"}}, {0xa5, &(0x7f00000005c0)=@string={0xa5, 0x3, "c5374b1e3a33662ff75c4f69901d193b56849a789dd132a7b3bc428c8563a500351accf46516ead8c953599a37a6828aa50f0cf4e6bb74c49b2a5237d92c2b1b2817b2f61ac5afea63a472a27404e35b6da4ce51d86c0195abe62ccf07b28428581b99e30170385ad591f9db51bffb0260536d908b5090da2f914f027040bcb876f0750e189949ed35cf05d1de2ec9dbee85b84afdca1003c08e0cb3f924c11058bb1c"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3009}}, {0xa6, &(0x7f0000000780)=@string={0xa6, 0x3, "6720ea8ecd86691fe5be03b0bf8074260a30171f3d69da67aeb406de6151a0813eae89c46f2a71230a713dc9d401bf4464ce986da1037c5b441f7a02e3feedc87a376e0477ef64614c77df39a3970f20aeb321c2a76ef7f467f74fb44624604f0b2508fbe4b615af47301eb5fcd5c7cdd2197bbb0d06a00708596108ecb3a885e91932d750a528fa6d6993309cd020d42abf05d7b18e7c2296f071b96f91b60b596e1641"}}]}) r6 = socket(0x29, 0x5, 0x2) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x9) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000900)={0x7}, 0x4) syz_usb_connect$cdc_ecm(0x3, 0x12f, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, 'n'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x8, 0x5}, [@mdlm_detail={0x35, 0x24, 0x13, 0x2, "b6e3b81841245b3437d5f8ec9f3f362da0384af6ae3a4b2b3e9d20711cfa44bd4bee4fc41a20e042f3e1c82a106bfc88e1"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xaf}, @mdlm_detail={0x8c, 0x24, 0x13, 0xc, "da253a45cb6294e14e31cda3e50c76de3f0b18bd747ee55a02d788cd0d8ff4e6b313f3f99ed968ccc34260beb9125be742174202f59faffea5e33a58cb58586067969beee4bcb5a95c05cecfa71175f00ff14e0322939050d4bde12d6a59f2c52137931db9b0a96a247f8b4430043ad6b0913a8b66c16af549a0114b7c9c26c59c9dcf568e5f1e74"}, @country_functional={0xa, 0x24, 0x7, 0xdb, 0x0, [0x4, 0xff]}, @country_functional={0x8, 0x24, 0x7, 0x3, 0x40, [0x1000]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x205, 0x1, 0x3, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0xfa, 0xcd}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x3, 0xb}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x310, 0xd, 0x7f, 0x0, 0x40, 0x7}, 0xc6, &(0x7f0000000ac0)={0x5, 0xf, 0xc6, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x8, 0x80, 0x0, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x8, 0x780, 0x4, [0xff0f, 0xc000, 0x9909e2867b4130e7]}, @generic={0x9e, 0x10, 0x3, "e91d01ecc6e661b900e2f6176765a72e033e1697214581861cb1e7a2a4f34f9deb276e1fffc099969679a4cc057a19f5587544d24b351f3fe75083f68014cd026d32163fc160c303233ea2ebf6af84f30a281afda4f4221db2a06bc094366d4a97a0af199ecfe7cfe015a048e81bf776044e8bb6070c1cc53f275b515f268d5ffa051851966e4cd29723b20bb69f9039e3108dd6fec2763cd17970"}]}, 0x3, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x240a}}, {0x9e, &(0x7f0000000c40)=@string={0x9e, 0x3, "76fbf3f912dae2ac3253b3accb7ffe38ebbfb05ea7c67de8c2ae665d3ee9421a9d09aadc966455eb528bf8f02f9f1714d00baf6f445558ba5be2ef7f6d06214934807c7abf2348796ec189aac6b1cb879fbd962e0b245470dcb22592c7d68be87092b2f049849888b5cb1e6faa3ffbe5370cb8a3f34e07e6246815176d86a483d15da890b149a6b31c7a4a40019e24574aab1e302e25d50dd79be1aa"}}]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000d40)={0x0, "63744b5773615a0dae4aed251761e9b8"}) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = socket$netlink(0x10, 0x3, 0x12) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x12, r9, 0x264e4000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d40), 0x2a080, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r8, 0x4068aea3, &(0x7f0000001d80)={0x74, 0x0, 0x45}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000001e00)=0x4, 0x4) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xb3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 740.416838ms ago: executing program 6 (id=1898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x43, 0x0, &(0x7f0000000340)="a89aff6745e3fde648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad46d2e0d78b"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x43, 0x0, &(0x7f0000000340)="a89aff6745e3fde648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad46d2e0d78b"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) r3 = dup3(r2, r1, 0x0) accept4(r3, &(0x7f0000000280)=@hci, &(0x7f00000001c0)=0x80, 0x0) (async) accept4(r3, &(0x7f0000000280)=@hci, &(0x7f00000001c0)=0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000480)={@fda={0x66646185, 0x3, 0x0, 0x23}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2, 0x2, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') setreuid(0xffffffffffffffff, 0xee01) (async) setreuid(0xffffffffffffffff, 0xee01) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x1000000) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) (async) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setregid(0x0, r5) (async) setregid(0x0, r5) setresgid(r5, r4, r5) ioprio_set$pid(0x2, 0x0, 0x2007) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) (async) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000002f40)=""/233, 0xe9}], 0x5}, 0x390}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x12040, 0x0) (async) recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000002f40)=""/233, 0xe9}], 0x5}, 0x390}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x12040, 0x0) io_setup(0x8, &(0x7f0000000000)) (async) io_setup(0x8, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = eventfd(0x6) io_submit(r7, 0x1, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, r8, 0x0, 0x0, 0x1, 0x0, 0x1, r9}]) 669.70226ms ago: executing program 6 (id=1899): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper={0x40086303}], 0x0, 0x1000000000000, 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 669.103079ms ago: executing program 6 (id=1900): socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)='E', 0x1}], 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000680)="9a7f946de5c19921d4d816107e1a09c77f1b25f38f33442bb0be9a3b59cadd4625175323ccaec77e945f19ef660720a611b65af3364b7fc3935a06794c157283484b2843a3d8d1e3d4d8e77b421d96e374f44b480e7629b59cb9bdd43e5984bd24134f12619c1615dd56f765de64b30be8ea43ad07edbcbb60088f7d255a98c7e138c35b309a0aa0e8134b0749d1e84dd3b41e8efbab1c72bf25fa66d632d95246a756583a9ec55b49598e1970bd60f642490e5f30e0687d40c5549bf24c8b48e009605bb5a2f816fbeb4db05dcbf11283eb2f3bec07acff46a25232d2a3f912ce31d592d4556a3396c18a11ac5e1d4a1d52a0", 0xf3}], 0x1) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000680)="9a7f946de5c19921d4d816107e1a09c77f1b25f38f33442bb0be9a3b59cadd4625175323ccaec77e945f19ef660720a611b65af3364b7fc3935a06794c157283484b2843a3d8d1e3d4d8e77b421d96e374f44b480e7629b59cb9bdd43e5984bd24134f12619c1615dd56f765de64b30be8ea43ad07edbcbb60088f7d255a98c7e138c35b309a0aa0e8134b0749d1e84dd3b41e8efbab1c72bf25fa66d632d95246a756583a9ec55b49598e1970bd60f642490e5f30e0687d40c5549bf24c8b48e009605bb5a2f816fbeb4db05dcbf11283eb2f3bec07acff46a25232d2a3f912ce31d592d4556a3396c18a11ac5e1d4a1d52a0", 0xf3}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/243, 0xf3, 0x40000100, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, 0x0) 664.597319ms ago: executing program 6 (id=1901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x104, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000ca", @ANYRES16=r3, @ANYBLOB="200028bd7000fcdbdf254d0000000800030001000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000300030000000f00a8007365636f6e646e616d6500000800030002000000080001007063690011000200303030303a30303a31302e3000000000"], 0x98}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x45809000) close_range(r0, 0xffffffffffffffff, 0x0) 632.66158ms ago: executing program 6 (id=1902): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0xa4000000) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket(0xa, 0x3, 0x3a) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xfc) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x12) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20200) close_range(r0, 0xffffffffffffffff, 0x0) 606.95409ms ago: executing program 6 (id=1903): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010021"], 0x64}}, 0x0) r4 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) 473.670242ms ago: executing program 5 (id=1904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x101, 0x400, 0xe}, {0x6, 0x24, 0x1a, 0x29e4, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0xf4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x90, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xdc, 0x9, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000003280)={0x44, 0x0, 0x0, 0x0, &(0x7f0000003140)={0x20, 0x80, 0x1c, {0x9, 0x7832, 0x3ff, 0xf, 0x82a9, 0x0, 0xafc, 0x2, 0x94a7, 0xfffc, 0x501a, 0x4}}, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 274.909636ms ago: executing program 1 (id=1905): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = timerfd_create(0x1, 0x800) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_delete(r1) (async) timerfd_gettime(r0, &(0x7f0000000540)) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x101, 0x0, 0x0, 0xe4}]}, 0x10) (async) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000480)) (async) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x184) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000780)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x28, 0x0, 0xfec9, {{0x5, 0x80002, 0x1, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fcntl$lock(r7, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x8000000000, 0x100000000007}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='befs\x00', 0x8000, 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="13001a42f3f794db02c81f212b8f3433000065ffff050000000600395032000030"], 0x13) 263.089926ms ago: executing program 1 (id=1906): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0006"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, 0xffffffffffffffff, 0x2b09d000) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x7f, "24432d9ad78c4921ff938b179fc8208415199b35b351d0a1059bf6f1152722bb28c265a7fab9f33ef1f015ce82651bcbc64ef7ebcde143a5c63fef29b71b8fbe9cc13d868952ced66dcbec2f4cef5f09f4ec6d4808400d389964d1e7f41926d43ff7f62a28edd2cad4f241a828b2fea0e4a4f76be2503c4a711055daba1634"}, 0x0}) gettid() gettid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 950.27µs ago: executing program 2 (id=1907): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101241, 0x0) r1 = epoll_create1(0x80000) sendfile(r0, r1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x80000001, @local, 0x1}, 0x1c) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) listen(r2, 0x10001) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, 0x0, 0x4000045) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x50, 0x0, 0x4, {0x7, 0x28, 0xfffffffc, 0x1088010, 0x0, 0x2, 0x2000000, 0x3, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 0s ago: executing program 2 (id=1908): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r2, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0x5, 0x52c, 0x91f9, 0x7ff, 0x51f, 0x3, 0x800, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x4, 0x9, 0x80000000, 0x10001, 0x7fff], 0x3000}) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x994f62ccbea111a5, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xeeef0000, 0xeeef0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="65660fc736b9230200000f320fc5b0040040000f0f10970fe8fa6466baf80cb82cf59b88ef66bafc0cb000eec4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66ba004066ef66b8296c", 0x6a}], 0x1, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x18200, 0x0) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000180)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SIOCSIFMTU(r3, 0x89e1, &(0x7f0000000000)={'veth0_vlan\x00', 0x200}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x50, r1, 0xde8b3000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) kernel console output (not intermixed with test programs): 50.206296][ T453] usb usb1-port1: attempt power cycle [ 50.390556][ T1052] tmpfs: Unknown parameter 'n„' [ 50.414560][ T1052] SELinux: unknown common r [ 50.419465][ T1052] SELinux: failed to load policy [ 50.426315][ T417] usb 3-1: device descriptor read/64, error -71 [ 50.451593][ T1058] overlayfs: missing 'lowerdir' [ 50.471824][ T1063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'. [ 50.536412][ T417] usb usb3-port1: attempt power cycle [ 50.546266][ T453] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 50.568022][ T453] usb 1-1: device descriptor read/8, error -71 [ 50.717314][ T453] usb 1-1: device descriptor read/8, error -71 [ 50.826213][ T401] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 50.876206][ T417] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 50.897341][ T417] usb 3-1: device descriptor read/8, error -71 [ 50.956226][ T453] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 50.977287][ T453] usb 1-1: device descriptor read/8, error -71 [ 50.987359][ T401] usb 4-1: config 0 has no interfaces? [ 50.992867][ T401] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 51.001993][ T401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.010647][ T401] usb 4-1: config 0 descriptor?? [ 51.037311][ T417] usb 3-1: device descriptor read/8, error -71 [ 51.107278][ T453] usb 1-1: device descriptor read/8, error -71 [ 51.216429][ T453] usb usb1-port1: unable to enumerate USB device [ 51.226936][ T453] usb 4-1: USB disconnect, device number 12 [ 51.276266][ T417] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 51.297292][ T417] usb 3-1: device descriptor read/8, error -71 [ 51.348856][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 51.348875][ T36] audit: type=1400 audit(2000000006.000:370): avc: denied { mount } for pid=1089 comm="syz.1.239" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 51.427736][ T417] usb 3-1: device descriptor read/8, error -71 [ 51.438134][ T36] audit: type=1400 audit(2000000006.090:371): avc: denied { name_bind } for pid=1089 comm="syz.1.239" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 51.504762][ T1103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 51.527321][ T36] audit: type=1400 audit(2000000006.180:372): avc: denied { getopt } for pid=1105 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.546927][ T417] usb usb3-port1: unable to enumerate USB device [ 51.656839][ T1119] tmpfs: Unknown parameter 'bHnosw' [ 51.667368][ T401] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 51.817476][ T401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 53, changing to 9 [ 51.828571][ T401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25528, setting to 1024 [ 51.842317][ T401] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 51.848623][ T36] audit: type=1400 audit(2000000006.500:373): avc: denied { accept } for pid=1124 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.856170][ T401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.884552][ T401] usb 4-1: config 0 descriptor?? [ 51.891001][ T36] audit: type=1400 audit(2000000006.540:374): avc: denied { setopt } for pid=1129 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.911478][ T36] audit: type=1400 audit(2000000006.540:375): avc: denied { map } for pid=1129 comm="syz.0.253" path="socket:[9125]" dev="sockfs" ino=9125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.934839][ T1133] binder: Unknown parameter 'æñ.qîÞ"½o@„ëÿ¬' [ 51.935470][ T36] audit: type=1400 audit(2000000006.540:376): avc: denied { setopt } for pid=1129 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.033749][ T1145] binder: Unknown parameter 'defcontext01777777777777777777777' [ 52.073877][ T1150] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 52.126547][ T36] audit: type=1400 audit(2000000006.780:377): avc: denied { ioctl } for pid=1151 comm="syz.0.260" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.151371][ T36] audit: type=1400 audit(2000000006.780:378): avc: denied { create } for pid=1151 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 52.275259][ T1160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 52.284770][ T1160] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.286073][ T36] audit: type=1400 audit(2000000006.940:379): avc: denied { create } for pid=1159 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.318017][ T1161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256 [ 52.399171][ T1170] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.416212][ T1170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.423437][ T1170] IPv6: NLM_F_CREATE should be set when creating new route [ 52.494284][ T401] usbhid 4-1:0.0: can't add hid device: -71 [ 52.505449][ T401] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 52.518035][ T401] usb 4-1: USB disconnect, device number 13 [ 53.696265][ T1202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.696865][ T1202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.704444][ T1202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 53.897344][ T1213] rust_binder: Error while translating object. [ 53.906944][ T1213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.913197][ T1213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 53.928910][ T1216] netlink: 'syz.0.283': attribute type 11 has an invalid length. [ 53.965654][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.987726][ T1228] rust_binder: Write failure EINVAL in pid:241 [ 54.010448][ T1231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 54.014208][ T1233] rust_binder: Write failure EFAULT in pid:273 [ 54.028820][ T1231] bridge_slave_1: left allmulticast mode [ 54.040825][ T1231] bridge_slave_1: left promiscuous mode [ 54.049044][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.057451][ T1231] bridge_slave_0: left allmulticast mode [ 54.063457][ T1231] bridge_slave_0: left promiscuous mode [ 54.077937][ T1239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.078252][ T1239] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 22) [ 54.084077][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.087532][ T1239] rust_binder: Error while translating object. [ 54.104135][ T1239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.110938][ T1239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 54.190366][ T1251] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.208385][ T1252] rust_binder: validate_parent_fixup: new_min_offset=74, sg_entry.length=0 [ 54.218861][ T1252] rust_binder: Error while translating object. [ 54.218916][ T1252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.225278][ T1252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 54.253256][ T1257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.271101][ T1257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.281091][ T1259] wg2: entered promiscuous mode [ 54.286263][ T1259] wg2: entered allmulticast mode [ 54.366230][ T401] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 54.486254][ T417] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 54.517442][ T401] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 54.529836][ T401] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 54.538674][ T401] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 54.551000][ T401] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 54.565368][ T401] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 54.574527][ T401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.582565][ T401] usb 4-1: Product: syz [ 54.586779][ T401] usb 4-1: Manufacturer: syz [ 54.591400][ T401] usb 4-1: SerialNumber: syz [ 54.596878][ T401] usb 4-1: config 0 descriptor?? [ 54.603314][ T401] usb-storage 4-1:0.0: USB Mass Storage device detected [ 54.613473][ T401] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 54.647283][ T417] usb 1-1: config 0 has no interfaces? [ 54.652967][ T417] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 54.662164][ T417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.673571][ T417] usb 1-1: config 0 descriptor?? [ 54.812028][ T1268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.820616][ T1268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.841931][ T1271] SELinux: security_context_str_to_sid () failed with errno=-22 [ 54.885385][ T401] usb 1-1: USB disconnect, device number 10 [ 54.901422][ T1271] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 54.901469][ T1271] rust_binder: Error in use_page_slow: EBUSY [ 54.912375][ T1271] rust_binder: use_range failure EBUSY [ 54.918517][ T1271] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 54.924063][ T1271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 54.931835][ T1271] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 54.941257][ T1271] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:251 [ 54.988145][ T417] usb 4-1: USB disconnect, device number 14 [ 54.992597][ T1277] rust_binder: inc_ref_done called when no active inc_refs [ 55.496532][ T1308] usb usb8: usbfs: process 1308 (syz.2.312) did not claim interface 0 before use [ 55.540035][ T1310] usb usb8: usbfs: process 1310 (syz.2.312) did not claim interface 0 before use [ 56.224285][ T1337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.322'. [ 56.268661][ T305] bridge_slave_1: left allmulticast mode [ 56.274370][ T305] bridge_slave_1: left promiscuous mode [ 56.286342][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.304470][ T305] bridge_slave_0: left allmulticast mode [ 56.310364][ T305] bridge_slave_0: left promiscuous mode [ 56.326307][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.433399][ T1344] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 56.488288][ T305] tipc: Disabling bearer [ 56.493800][ T305] tipc: Left network mode [ 56.499463][ T305] veth1_macvtap: left promiscuous mode [ 56.505065][ T305] veth0_vlan: left promiscuous mode [ 56.536177][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 56.536195][ T36] audit: type=1400 audit(2000000011.180:395): avc: denied { mounton } for pid=1351 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.547519][ T1352] fuse: Unknown parameter '†roup_id' [ 56.574177][ T1352] rust_binder: Error in use_page_slow: ESRCH [ 56.574200][ T1352] rust_binder: use_range failure ESRCH [ 56.580386][ T1352] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 56.585881][ T1352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 56.595149][ T1352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:190 [ 56.605103][ T1352] syz.2.329 (1352): /proc/1350/oom_adj is deprecated, please use /proc/1350/oom_score_adj instead. [ 56.625767][ T1352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.625933][ T1352] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 56.633065][ T1352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 56.641095][ T1352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:190 [ 56.674472][ T36] audit: type=1400 audit(2000000011.320:396): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 56.720050][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.727339][ T1351] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.737532][ T1351] bridge_slave_0: entered allmulticast mode [ 56.746848][ T1351] bridge_slave_0: entered promiscuous mode [ 56.754660][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.767457][ T1351] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.774568][ T1351] bridge_slave_1: entered allmulticast mode [ 56.787568][ T1351] bridge_slave_1: entered promiscuous mode [ 56.858418][ T36] audit: type=1400 audit(2000000011.510:397): avc: denied { search } for pid=1364 comm="syz.0.333" name="/" dev="configfs" ino=2165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.930596][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.937706][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.945032][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.952129][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.993843][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.009501][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.022288][ T1367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.334'. [ 57.034205][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.041315][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.067832][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.074950][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.106534][ T401] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 57.142261][ T1351] veth0_vlan: entered promiscuous mode [ 57.149319][ T1373] binder: Unknown parameter 'staZÂÞlob¦÷5a×YT¿—¬./Xrü%펼T·/>ýš*Ч«ñ׿"såõk‘z¹' [ 57.172171][ T36] audit: type=1400 audit(2000000011.820:398): avc: denied { write } for pid=1372 comm="syz.1.337" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.216468][ T1351] veth1_macvtap: entered promiscuous mode [ 57.239119][ T36] audit: type=1400 audit(2000000011.820:399): avc: denied { open } for pid=1372 comm="syz.1.337" path="/78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.291514][ T401] usb 1-1: device descriptor read/64, error -71 [ 57.303512][ T36] audit: type=1400 audit(2000000011.960:400): avc: denied { mounton } for pid=1351 comm="syz-executor" path="/root/syzkaller.dtVWOl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.361426][ T36] audit: type=1400 audit(2000000012.010:401): avc: denied { mounton } for pid=1381 comm="syz.4.327" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 57.394866][ T1383] tap0: tun_chr_ioctl cmd 1074025678 [ 57.406391][ T1383] tap0: group set to 0 [ 57.412899][ T36] audit: type=1400 audit(2000000012.060:402): avc: denied { create } for pid=1389 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.456175][ T36] audit: type=1400 audit(2000000012.060:403): avc: denied { read } for pid=1389 comm="syz.1.342" path="socket:[11583]" dev="sockfs" ino=11583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.566189][ T401] usb 1-1: device descriptor read/64, error -71 [ 57.609999][ T1414] rust_binder: Got transaction with invalid offset. [ 57.610053][ T1414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.617240][ T1414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 57.746226][ T357] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.816185][ T401] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 57.909453][ T357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.920518][ T357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.936172][ T357] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.949115][ T401] usb 1-1: device descriptor read/64, error -71 [ 57.966190][ T357] usb 5-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 57.975294][ T357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.996464][ T357] usb 5-1: config 0 descriptor?? [ 58.196204][ T401] usb 1-1: device descriptor read/64, error -71 [ 58.203085][ T1402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.212526][ T1402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.220780][ T1402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.229964][ T1402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.239595][ T1402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.249286][ T1402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.258709][ T1402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.268332][ T1402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.277853][ T1402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.286462][ T1402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.300636][ T357] usbhid 5-1:0.0: can't add hid device: -32 [ 58.307629][ T357] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 58.316827][ T401] usb usb1-port1: attempt power cycle [ 58.405689][ T1439] rust_binder: Error while translating object. [ 58.405716][ T1439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 58.412132][ T1439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:209 [ 58.433799][ T1441] exFAT-fs (rnullb0): invalid boot record signature [ 58.449706][ T1441] exFAT-fs (rnullb0): failed to read boot sector [ 58.456056][ T1441] exFAT-fs (rnullb0): failed to recognize exfat type [ 58.475903][ T1443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 58.477543][ T1443] rust_binder: Read failure Err(EFAULT) in pid:213 [ 58.498746][ T1445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=1445 comm=syz.2.364 [ 58.517898][ T1445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=1445 comm=syz.2.364 [ 58.530712][ T1445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=1445 comm=syz.2.364 [ 58.543621][ T1445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=1445 comm=syz.2.364 [ 58.593249][ T1451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.366'. [ 58.593252][ T1452] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 58.602456][ T1452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 58.611053][ T1452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:221 [ 58.637617][ T36] audit: type=1400 audit(2000000013.290:404): avc: denied { mount } for pid=1460 comm="syz.2.370" name="/" dev="ramfs" ino=11086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 58.679751][ T417] usb 5-1: USB disconnect, device number 2 [ 58.682591][ T401] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 58.709713][ T1473] rust_binder: Write failure EINVAL in pid:11 [ 58.727216][ T401] usb 1-1: device descriptor read/8, error -71 [ 58.877226][ T401] usb 1-1: device descriptor read/8, error -71 [ 58.896190][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 59.050433][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 59.061850][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 59.069559][ T9] usb 3-1: can't read configurations, error -71 [ 59.116195][ T401] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 59.154944][ T401] usb 1-1: device descriptor read/8, error -71 [ 59.287285][ T401] usb 1-1: device descriptor read/8, error -71 [ 59.397451][ T401] usb usb1-port1: unable to enumerate USB device [ 59.405229][ T1512] overlayfs: failed to clone upperpath [ 59.535106][ T1535] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.691627][ T1548] /dev/md0: Can't lookup blockdev [ 59.799066][ T1556] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.802742][ T1555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.810562][ T1558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.397'. [ 59.812144][ T1555] rust_binder: Write failure EINVAL in pid:241 [ 59.957598][ T1560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.965767][ T1560] rust_binder: Write failure EINVAL in pid:306 [ 59.972504][ T1560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.979386][ T1560] rust_binder: Error in use_page_slow: ESRCH [ 59.992100][ T1560] rust_binder: use_range failure ESRCH [ 59.998378][ T1560] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 60.008381][ T1560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.020691][ T1560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:306 [ 60.038450][ T1571] netlink: 'syz.1.408': attribute type 4 has an invalid length. [ 60.062941][ T1571] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.408'. [ 60.070232][ T1575] fuse: Bad value for 'group_id' [ 60.084699][ T1575] fuse: Bad value for 'group_id' [ 60.105176][ T1582] fuse: Bad value for 'fd' [ 60.112446][ T1585] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.118597][ T1585] rust_binder: Got transaction with invalid offset. [ 60.126001][ T1585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.138391][ T1585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:310 [ 60.506537][ T1605] rust_binder: Write failure EINVAL in pid:55 [ 60.605700][ T1609] syz.4.423(1609): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 60.787090][ T1613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.787280][ T1613] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.811474][ T1613] rust_binder: Read failure Err(EFAULT) in pid:258 [ 60.875462][ T1627] can: request_module (can-proto-0) failed. [ 60.953078][ T1633] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 60.986245][ T1643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.986275][ T1643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.400623][ T1661] 9pnet_fd: Insufficient options for proto=fd [ 61.567223][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 61.567240][ T36] audit: type=1326 audit(2000000016.220:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1678 comm="syz.0.446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f368658e929 code=0x0 [ 61.618118][ T36] audit: type=1400 audit(2000000016.280:419): avc: denied { read } for pid=1678 comm="syz.0.446" name="/" dev="configfs" ino=2165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.640169][ T36] audit: type=1400 audit(2000000016.280:420): avc: denied { open } for pid=1678 comm="syz.0.446" path="/" dev="configfs" ino=2165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.790148][ T1685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.799160][ T1685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.036187][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 62.056183][ T1689] SELinux: security_context_str_to_sid () failed with errno=-22 [ 62.088469][ T1694] overlayfs: failed to clone upperpath [ 62.196176][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 62.202576][ T9] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.212136][ T36] audit: type=1400 audit(2000000016.850:421): avc: denied { watch_reads } for pid=1702 comm="syz.4.453" path="/26" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.213801][ T9] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has invalid maxpacket 57920, setting to 1024 [ 62.247140][ T9] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 62.257098][ T9] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 62.266915][ T9] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.280023][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 62.288929][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.298160][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.306205][ T9] usb 3-1: SerialNumber: syz [ 62.311834][ T1684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.319178][ T1684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.482509][ T1713] binder: Unknown parameter '0x0000000000000003' [ 62.489800][ T1715] binder: Unknown parameter '0x0000000000000003' [ 62.510044][ T36] audit: type=1400 audit(2000000017.160:422): avc: denied { create } for pid=1716 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.530455][ T36] audit: type=1400 audit(2000000017.160:423): avc: denied { write } for pid=1716 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.551853][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 62.554177][ T36] audit: type=1400 audit(2000000017.160:424): avc: denied { nlmsg_write } for pid=1716 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.570364][ T9] usb 3-1: USB disconnect, device number 14 [ 62.584181][ T36] audit: type=1400 audit(2000000017.160:425): avc: denied { mounton } for pid=1716 comm="syz.0.457" path="/118/file0" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.614353][ T1722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.614650][ T36] audit: type=1400 audit(2000000017.260:426): avc: denied { append } for pid=1721 comm="syz.0.459" name="pfkey" dev="proc" ino=4026532552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 62.679737][ T36] audit: type=1326 audit(2000000017.330:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.0.463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f368658e929 code=0x0 [ 62.824637][ T1739] fuse: Bad value for 'fd' [ 63.016220][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 63.062818][ T1746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.068766][ T1745] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 63.166225][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 63.176767][ T45] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.185163][ T45] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.194176][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.203434][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.213535][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.227475][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.241105][ T45] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.252222][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.261550][ T45] usb 1-1: config 0 descriptor?? [ 63.468348][ T45] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 65.693471][ T9] usb 1-1: USB disconnect, device number 15 [ 65.700850][ T9] usblp0: removed [ 81.736162][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 81.736186][ T36] audit: type=1400 audit(2000000036.380:430): avc: denied { associate } for pid=1774 comm="syz.2.476" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.770309][ T36] audit: type=1400 audit(2000000036.420:431): avc: denied { create } for pid=1778 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 81.785755][ T1782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 81.797463][ T1783] rust_binder: Write failure EFAULT in pid:370 [ 81.814122][ T36] audit: type=1400 audit(2000000036.460:432): avc: denied { lock } for pid=1784 comm="syz.2.481" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.056201][ T1040] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 82.217405][ T1040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.235397][ T1040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.251565][ T1040] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 82.271064][ T1040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.294038][ T1040] usb 1-1: config 0 descriptor?? [ 82.464295][ T1810] overlayfs: failed to clone upperpath [ 82.470954][ T1810] netlink: 168 bytes leftover after parsing attributes in process `syz.4.489'. [ 82.513263][ T1788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.522084][ T1788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.734710][ T1040] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 82.743192][ T1040] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 82.750890][ T1040] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 82.758679][ T1040] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 82.766240][ T1040] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 82.783949][ T1040] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 82.848807][ T1818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=1818 comm=syz.1.491 [ 82.863157][ T1818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=1818 comm=syz.1.491 [ 82.876253][ T1818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=1818 comm=syz.1.491 [ 82.896810][ T1818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=1818 comm=syz.1.491 [ 82.965702][ T1828] overlayfs: failed to clone upperpath [ 83.143491][ T1788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.152160][ T306] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 83.152390][ T1788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.168813][ T1040] playstation 0003:054C:0DF2.0009: Invalid reportID received, expected 32 got 36 [ 83.178013][ T1040] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense firmware info: -22 [ 83.187566][ T1040] playstation 0003:054C:0DF2.0009: Failed to get firmware info from DualSense [ 83.196531][ T1040] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 83.204786][ T1040] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -22 [ 83.307350][ T306] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 83.316803][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.325641][ T306] usb 3-1: config 0 descriptor?? [ 83.371032][ T1788] SELinux: security_context_str_to_sid () failed with errno=-22 [ 83.379346][ T1040] usb 1-1: USB disconnect, device number 16 [ 83.831062][ T36] audit: type=1400 audit(2000000038.480:433): avc: denied { getopt } for pid=1843 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.903369][ T1858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.904266][ T1858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.913356][ T1858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:376 [ 83.933369][ T306] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 83.967088][ T306] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 84.136421][ T306] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 84.147396][ T306] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 84.321000][ T306] asix 3-1:0.0 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 84.330859][ T36] audit: type=1400 audit(2000000038.970:434): avc: denied { ioctl } for pid=1885 comm="syz.0.515" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.334747][ T306] usb 3-1: USB disconnect, device number 15 [ 84.369703][ T1886] FAT-fs (rnullb0): bogus number of reserved sectors [ 84.381125][ T1886] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 84.388287][ T306] asix 3-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 84.398478][ T1887] FAT-fs (rnullb0): bogus number of reserved sectors [ 84.405188][ T1887] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 84.707353][ T1935] fuse: Unknown parameter 'user_id00000000000000000000' [ 84.726825][ T36] audit: type=1400 audit(2000000039.380:435): avc: denied { read } for pid=1936 comm="syz.2.523" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.749381][ T36] audit: type=1400 audit(2000000039.380:436): avc: denied { open } for pid=1936 comm="syz.2.523" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.882458][ T1947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317 [ 84.896716][ T36] audit: type=1400 audit(2000000039.550:437): avc: denied { view } for pid=1952 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 84.958451][ T1962] fuse: Unknown parameter 'user_id00000000000000000000' [ 85.043630][ T1971] rust_binder: Write failure EINVAL in pid:329 [ 85.561201][ T1991] fuse: Unknown parameter 'user_id00000000000000000000' [ 85.959023][ T36] audit: type=1400 audit(2000000040.610:438): avc: denied { create } for pid=1996 comm="syz.4.544" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.995369][ T2012] binder: Unknown parameter '0x0000000000000004' [ 86.035988][ T36] audit: type=1400 audit(2000000040.680:439): avc: denied { setattr } for pid=2013 comm="syz.2.549" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.154254][ T2036] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 86.162947][ T2036] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 86.181570][ T2038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 86.181601][ T2038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:363 [ 86.327183][ T2050] exFAT-fs (rnullb0): invalid boot record signature [ 86.333835][ T2050] exFAT-fs (rnullb0): failed to read boot sector [ 86.340283][ T2050] exFAT-fs (rnullb0): failed to recognize exfat type [ 86.373976][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.382612][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.392380][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.401005][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.606185][ T1040] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 86.766178][ T1040] usb 3-1: Using ep0 maxpacket: 8 [ 86.772336][ T1040] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.782641][ T1040] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.793735][ T1040] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.803674][ T1040] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.816666][ T1040] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.823288][ T1040] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 86.832354][ T1040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.841103][ T1040] usb 3-1: config 0 descriptor?? [ 87.108804][ T1040] usbhid 3-1:0.0: can't add hid device: -71 [ 87.114806][ T1040] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 87.123517][ T1040] usb 3-1: USB disconnect, device number 16 [ 87.584301][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 87.584319][ T36] audit: type=1400 audit(2000000042.230:445): avc: denied { map } for pid=2090 comm="syz.1.574" path="pipe:[15431]" dev="pipefs" ino=15431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 87.623164][ T2093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.628145][ T36] audit: type=1400 audit(2000000042.280:446): avc: denied { mounton } for pid=2094 comm="syz.2.576" path="/133/file0" dev="tmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 87.675157][ T2098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:406 [ 87.745808][ T36] audit: type=1400 audit(2000000042.390:447): avc: denied { setopt } for pid=2101 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.076197][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 88.227525][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.238560][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.248360][ T45] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 88.258185][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.266978][ T45] usb 3-1: config 0 descriptor?? [ 88.490512][ T2128] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.490930][ T2128] rust_binder: Error in use_page_slow: ESRCH [ 88.497497][ T2128] rust_binder: use_range failure ESRCH [ 88.503535][ T2128] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 88.509178][ T2128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 88.517321][ T2128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:411 [ 88.582195][ T36] audit: type=1400 audit(2000000043.230:448): avc: denied { create } for pid=2129 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.629006][ T2134] af_packet: tpacket_rcv: packet too big, clamped from 5 to 4294967272. macoff=96 [ 88.640473][ T36] audit: type=1400 audit(2000000043.300:449): avc: denied { connect } for pid=2132 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.674578][ T45] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 88.682559][ T45] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 88.712333][ T2150] tmpfs: Unknown parameter '' [ 88.873385][ T45] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 88.882296][ T45] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 88.891311][ T45] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -5 [ 89.203155][ T2171] capability: warning: `syz.1.600' uses deprecated v2 capabilities in a way that may be insecure [ 89.339676][ T36] audit: type=1400 audit(2000000000.070:450): avc: denied { getopt } for pid=2179 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.382631][ T36] audit: type=1400 audit(2000000000.110:451): avc: denied { sqpoll } for pid=2183 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.463476][ T36] audit: type=1326 audit(2000000000.190:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368658e929 code=0x7fc00000 [ 89.508774][ T1040] usb 3-1: USB disconnect, device number 17 [ 89.517195][ T36] audit: type=1326 audit(2000000000.190:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f368658e929 code=0x7fc00000 [ 89.541745][ T36] audit: type=1326 audit(2000000000.190:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368658e929 code=0x7fc00000 [ 89.572631][ T2197] fuse: Unknown parameter '0x0000000000000003' [ 89.605127][ T2202] syz.0.610: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 89.608400][ T2201] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 89.643201][ T2202] CPU: 1 UID: 0 PID: 2202 Comm: syz.0.610 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 89.643241][ T2202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.643265][ T2202] Call Trace: [ 89.643272][ T2202] [ 89.643281][ T2202] __dump_stack+0x21/0x30 [ 89.643320][ T2202] dump_stack_lvl+0x10c/0x190 [ 89.643344][ T2202] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.643370][ T2202] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 89.643405][ T2202] dump_stack+0x19/0x20 [ 89.643428][ T2202] warn_alloc+0x1bc/0x2a0 [ 89.643448][ T2202] ? stack_depot_save_flags+0x38/0x800 [ 89.643475][ T2202] ? __cfi_warn_alloc+0x10/0x10 [ 89.643495][ T2202] ? kasan_save_track+0x4f/0x80 [ 89.643522][ T2202] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 89.643550][ T2202] ? xskq_create+0x68/0x2a0 [ 89.643572][ T2202] ? xsk_init_queue+0xb6/0x120 [ 89.643591][ T2202] ? xsk_setsockopt+0x43f/0x6f0 [ 89.643610][ T2202] ? do_sock_setsockopt+0x26a/0x400 [ 89.643630][ T2202] ? __x64_sys_setsockopt+0x1b8/0x250 [ 89.643651][ T2202] ? x64_sys_call+0x2adc/0x2ee0 [ 89.643679][ T2202] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.643702][ T2202] __vmalloc_node_range_noprof+0x135/0x1420 [ 89.643732][ T2202] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 89.643756][ T2202] ? avc_has_perm+0x144/0x220 [ 89.643787][ T2202] ? kasan_save_alloc_info+0x40/0x50 [ 89.643811][ T2202] ? __kasan_kmalloc+0x96/0xb0 [ 89.643843][ T2202] vmalloc_user_noprof+0x77/0x90 [ 89.643867][ T2202] ? xskq_create+0xdb/0x2a0 [ 89.643887][ T2202] xskq_create+0xdb/0x2a0 [ 89.643910][ T2202] xsk_init_queue+0xb6/0x120 [ 89.643931][ T2202] xsk_setsockopt+0x43f/0x6f0 [ 89.643952][ T2202] ? __cfi_xsk_setsockopt+0x10/0x10 [ 89.643973][ T2202] ? do_futex+0x356/0x500 [ 89.644005][ T2202] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 89.644028][ T2202] ? security_socket_setsockopt+0x33/0xd0 [ 89.644056][ T2202] ? __cfi_xsk_setsockopt+0x10/0x10 [ 89.644076][ T2202] do_sock_setsockopt+0x26a/0x400 [ 89.644097][ T2202] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 89.644121][ T2202] __x64_sys_setsockopt+0x1b8/0x250 [ 89.644143][ T2202] x64_sys_call+0x2adc/0x2ee0 [ 89.644171][ T2202] do_syscall_64+0x58/0xf0 [ 89.644201][ T2202] ? clear_bhb_loop+0x50/0xa0 [ 89.644223][ T2202] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.644245][ T2202] RIP: 0033:0x7f368658e929 [ 89.644275][ T2202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.644294][ T2202] RSP: 002b:00007f368735b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.644319][ T2202] RAX: ffffffffffffffda RBX: 00007f36867b5fa0 RCX: 00007f368658e929 [ 89.644334][ T2202] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 89.644347][ T2202] RBP: 00007f3686610b39 R08: 0000000000000004 R09: 0000000000000000 [ 89.644361][ T2202] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 89.644374][ T2202] R13: 0000000000000000 R14: 00007f36867b5fa0 R15: 00007ffd53c5ae58 [ 89.644391][ T2202] [ 89.644489][ T2202] Mem-Info: [ 89.952578][ T2202] active_anon:22974 inactive_anon:3 isolated_anon:0 [ 89.952578][ T2202] active_file:19694 inactive_file:2472 isolated_file:0 [ 89.952578][ T2202] unevictable:0 dirty:123 writeback:0 [ 89.952578][ T2202] slab_reclaimable:6994 slab_unreclaimable:69077 [ 89.952578][ T2202] mapped:32856 shmem:15219 pagetables:1008 [ 89.952578][ T2202] sec_pagetables:0 bounce:0 [ 89.952578][ T2202] kernel_misc_reclaimable:0 [ 89.952578][ T2202] free:1511421 free_pcp:2698 free_cma:0 [ 90.004648][ T2225] SELinux: Context /dev/kvm is not valid (left unmapped). [ 90.013329][ T2202] Node 0 active_anon:96996kB inactive_anon:12kB active_file:78776kB inactive_file:9888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133224kB dirty:492kB writeback:0kB shmem:65676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB writeback_tmp:0kB kernel_stack:4848kB pagetables:4232kB sec_pagetables:0kB all_unreclaimable? no [ 90.055433][ T2202] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:5736kB free_cma:0kB [ 90.093270][ T2202] lowmem_reserve[]: 0 3921 3921 [ 90.100298][ T2202] Normal free:3059164kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:107896kB inactive_anon:12kB active_file:78776kB inactive_file:9888kB unevictable:0kB writepending:492kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:16656kB local_pcp:4212kB free_cma:0kB [ 90.132847][ T2202] lowmem_reserve[]: 0 0 0 [ 90.137582][ T2202] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) [ 90.137916][ T2234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:419 [ 90.150412][ T2202] 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 90.186163][ T2202] Normal: 1687*4kB (U) 1168*8kB (UM) 437*16kB (UME) 135*32kB (UME) 60*64kB (U) 20*128kB (U) 20*256kB (UE) 22*512kB (UME) 13*1024kB (UE) 8*2048kB (UE) 724*4096kB (M) = 3045388kB [ 90.226608][ T2237] bpf: Bad value for 'mode' [ 90.232783][ T2202] 46668 total pagecache pages [ 90.237565][ T2202] 4 pages in swap cache [ 90.241996][ T2202] Free swap = 124428kB [ 90.256250][ T2202] Total swap = 124996kB [ 90.260533][ T2202] 2097051 pages RAM [ 90.274535][ T2202] 0 pages HighMem/MovableOnly [ 90.279362][ T2202] 351517 pages reserved [ 90.283539][ T2202] 0 pages cma reserved [ 90.298594][ T2202] Memory allocations: [ 90.302647][ T2202] 0 B 0 init/main.c:1370 func:do_initcalls [ 90.315092][ T2202] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 90.328611][ T2202] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 90.345112][ T2243] fuse: Unknown parameter '0x0000000000000003' [ 90.356167][ T2202] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 90.366155][ T2202] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 90.374107][ T2202] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 90.399961][ T2202] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 90.413179][ T2202] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 90.423715][ T2202] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 90.431842][ T2202] 0 B 0 init/initramfs.c:101 func:find_link [ 90.786173][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 90.947484][ T45] usb 3-1: config 5 has an invalid interface number: 11 but max is 3 [ 90.955644][ T45] usb 3-1: config 5 has an invalid interface number: 57 but max is 3 [ 90.964216][ T45] usb 3-1: config 5 has an invalid interface number: 77 but max is 3 [ 90.972458][ T45] usb 3-1: config 5 has an invalid interface number: 81 but max is 3 [ 90.980592][ T45] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 90.990879][ T45] usb 3-1: config 5 has no interface number 0 [ 90.997179][ T45] usb 3-1: config 5 has no interface number 1 [ 91.003259][ T45] usb 3-1: config 5 has no interface number 2 [ 91.009373][ T45] usb 3-1: config 5 has no interface number 3 [ 91.015499][ T45] usb 3-1: config 5 interface 11 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 91.026408][ T45] usb 3-1: config 5 interface 11 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 91.036194][ T453] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 91.037065][ T45] usb 3-1: config 5 interface 57 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 91.055595][ T45] usb 3-1: config 5 interface 57 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 91.066597][ T45] usb 3-1: config 5 interface 57 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 91.077341][ T45] usb 3-1: config 5 interface 57 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 91.088074][ T45] usb 3-1: config 5 interface 77 altsetting 73 has a duplicate endpoint with address 0xA, skipping [ 91.098803][ T45] usb 3-1: config 5 interface 77 altsetting 73 has a duplicate endpoint with address 0x6, skipping [ 91.109538][ T45] usb 3-1: config 5 interface 77 altsetting 73 has an invalid descriptor for endpoint zero, skipping [ 91.120654][ T45] usb 3-1: config 5 interface 77 altsetting 73 has a duplicate endpoint with address 0xD, skipping [ 91.131383][ T45] usb 3-1: config 5 interface 77 altsetting 73 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 91.144579][ T45] usb 3-1: too many endpoints for config 5 interface 81 altsetting 239: 134, using maximum allowed: 30 [ 91.155687][ T45] usb 3-1: config 5 interface 81 altsetting 239 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 91.166766][ T45] usb 3-1: config 5 interface 81 altsetting 239 has a duplicate endpoint with address 0x1, skipping [ 91.177597][ T45] usb 3-1: config 5 interface 81 altsetting 239 has a duplicate endpoint with address 0x5, skipping [ 91.189959][ T45] usb 3-1: config 5 interface 81 altsetting 239 has a duplicate endpoint with address 0xD, skipping [ 91.200810][ T45] usb 3-1: config 5 interface 81 altsetting 239 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 91.207546][ T453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.211989][ T45] usb 3-1: config 5 interface 81 altsetting 239 bulk endpoint 0xF has invalid maxpacket 8 [ 91.223372][ T453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.234729][ T45] usb 3-1: config 5 interface 81 altsetting 239 has a duplicate endpoint with address 0xD, skipping [ 91.244707][ T453] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 91.253884][ T45] usb 3-1: config 5 interface 81 altsetting 239 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 91.263610][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.282852][ T453] usb 1-1: config 0 descriptor?? [ 91.290427][ T45] usb 3-1: config 5 interface 81 altsetting 239 has a duplicate endpoint with address 0xA, skipping [ 91.301399][ T45] usb 3-1: config 5 interface 81 altsetting 239 has a duplicate endpoint with address 0xE, skipping [ 91.312368][ T45] usb 3-1: config 5 interface 81 altsetting 239 has 10 endpoint descriptors, different from the interface descriptor's value: 134 [ 91.332276][ T45] usb 3-1: config 5 interface 11 has no altsetting 0 [ 91.344210][ T45] usb 3-1: config 5 interface 57 has no altsetting 0 [ 91.351259][ T45] usb 3-1: config 5 interface 77 has no altsetting 0 [ 91.358463][ T45] usb 3-1: config 5 interface 81 has no altsetting 0 [ 91.367524][ T45] usb 3-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=ad.ca [ 91.376778][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.384996][ T45] usb 3-1: Product: æºŸà´Šã ¶â½ƒí’»áœæ¿‚孎츫ã©í›”໘賡抂䷞闗祠ꪯꢘ㗢䮰¹ [ 91.397690][ T45] usb 3-1: Manufacturer: Њ [ 91.403056][ T45] usb 3-1: SerialNumber: syz [ 91.496211][ T453] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 91.514037][ T453] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 91.528489][ T453] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 91.530880][ T2276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.537623][ T453] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 91.539733][ T2276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.544956][ T453] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 91.576488][ T453] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 91.648615][ T453] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 9: -71 [ 91.658924][ T453] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -71 [ 91.673337][ T453] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 91.692087][ T453] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 91.703395][ T453] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -71 [ 91.711300][ T45] usb 3-1: USB disconnect, device number 18 [ 91.719727][ T453] usb 1-1: USB disconnect, device number 17 [ 91.807349][ T2308] fuse: Unknown parameter '0x0000000000000003' [ 92.211248][ T2331] fuse: Unknown parameter '0x0000000000000003' [ 92.278008][ T2344] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19395 sclass=netlink_xfrm_socket pid=2344 comm=syz.4.655 [ 92.302913][ T2348] syz.4.656 uses obsolete (PF_INET,SOCK_PACKET) [ 92.310724][ T2348] overlayfs: failed to clone lowerpath [ 92.359449][ T2355] fuse: Unknown parameter 'fd0x0000000000000003' [ 92.485299][ T2368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.639183][ T2377] fuse: Unknown parameter 'fd0x0000000000000003' [ 92.719505][ T2383] netlink: 'syz.1.672': attribute type 6 has an invalid length. [ 93.246046][ T2403] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 93.272827][ T2406] fuse: Unknown parameter 'fd0x0000000000000003' [ 93.309784][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 93.309803][ T36] audit: type=1326 audit(2000000005.041:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2407 comm="syz.2.681" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6492f8e929 code=0x0 [ 93.737645][ T36] audit: type=1400 audit(2000000005.471:480): avc: denied { mount } for pid=2413 comm="syz.1.683" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 94.578376][ T36] audit: type=1400 audit(2000000006.311:481): avc: denied { create } for pid=2446 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.504400][ T2454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.697'. [ 96.299673][ T36] audit: type=1400 audit(2000000008.031:482): avc: denied { read } for pid=2500 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.359238][ T36] audit: type=1400 audit(2000000008.051:483): avc: denied { shutdown } for pid=2500 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.436977][ T36] audit: type=1400 audit(2000000008.121:484): avc: denied { map } for pid=2504 comm="syz.4.713" path="socket:[15260]" dev="sockfs" ino=15260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.932691][ T2524] overlayfs: failed to clone upperpath [ 96.939468][ T36] audit: type=1400 audit(2000000008.671:485): avc: denied { getopt } for pid=2523 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.328478][ T2534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=2534 comm=syz.4.725 [ 97.341933][ T2534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=2534 comm=syz.4.725 [ 97.354847][ T2534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=2534 comm=syz.4.725 [ 97.367782][ T2534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=2534 comm=syz.4.725 [ 97.500780][ T2543] bpf: Bad value for 'mode' [ 98.029545][ T36] audit: type=1400 audit(2000000009.761:486): avc: denied { create } for pid=2565 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.525133][ T2593] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.534116][ T2593] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.589523][ T2601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 98.877206][ T36] audit: type=1400 audit(2000000010.611:487): avc: denied { map } for pid=2623 comm="syz.1.760" path="socket:[16414]" dev="sockfs" ino=16414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 99.270731][ T36] audit: type=1400 audit(2000000011.001:488): avc: denied { bind } for pid=2633 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.837312][ T36] audit: type=1400 audit(2000000011.571:489): avc: denied { ioctl } for pid=2646 comm="syz.4.768" path="socket:[17487]" dev="sockfs" ino=17487 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 100.085054][ T2651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 100.108501][ T2654] fuse: Unknown parameter '0x00000000000000030x0000000000000004ÿÿÿÿ0x0000000000000004' [ 100.288579][ T2677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'. [ 100.301389][ T2677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=2677 comm=syz.1.777 [ 100.320642][ T2677] netlink: 176 bytes leftover after parsing attributes in process `syz.1.777'. [ 101.145783][ T2697] mmap: syz.4.785 (2697) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.275800][ T2703] overlay: ./file0 is not a directory [ 102.051123][ T2729] netlink: 80 bytes leftover after parsing attributes in process `syz.2.797'. [ 102.060852][ T36] audit: type=1400 audit(2000000013.791:490): avc: denied { bind } for pid=2730 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.655676][ T305] tipc: Subscription rejected, illegal request [ 103.683061][ T2774] fuse: Bad value for 'user_id' [ 103.688051][ T2774] fuse: Bad value for 'user_id' [ 103.709355][ T2776] overlayfs: failed to clone upperpath [ 104.007271][ T2793] overlayfs: failed to resolve '/ÿÿÿÿÿ': -2 [ 104.351273][ T2800] netlink: 'syz.2.825': attribute type 15 has an invalid length. [ 104.364046][ T2800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 104.419497][ T36] audit: type=1400 audit(2000000016.151:491): avc: denied { wake_alarm } for pid=2812 comm="syz.4.829" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.673523][ T2829] overlayfs: failed to clone upperpath [ 104.681011][ T2842] netlink: 32 bytes leftover after parsing attributes in process `syz.4.838'. [ 104.804052][ T2862] cgroup: Bad value for 'name' [ 105.970685][ T2894] vlan0: mtu greater than device maximum [ 106.303003][ T2902] netlink: 'syz.4.858': attribute type 10 has an invalid length. [ 106.344766][ T2907] fuse: Bad value for 'rootmode' [ 106.934530][ T36] audit: type=1400 audit(2000000018.661:492): avc: denied { read } for pid=2921 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.304597][ T36] audit: type=1400 audit(2000000019.031:493): avc: denied { ioctl } for pid=2938 comm="syz.4.871" path="socket:[17922]" dev="sockfs" ino=17922 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.697221][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.704427][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.711735][ T2961] bridge_slave_0: entered allmulticast mode [ 107.718048][ T2961] bridge_slave_0: entered promiscuous mode [ 107.724515][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.731631][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.738747][ T2961] bridge_slave_1: entered allmulticast mode [ 107.745048][ T2961] bridge_slave_1: entered promiscuous mode [ 107.813157][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.820302][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.827650][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.834804][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.861261][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.868833][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.881812][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.888932][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.898613][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.905676][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.935570][ T2961] veth0_vlan: entered promiscuous mode [ 107.951458][ T2961] veth1_macvtap: entered promiscuous mode [ 108.020226][ T2995] fuse: Bad value for 'user_id' [ 108.025144][ T2995] fuse: Bad value for 'user_id' [ 108.236189][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 108.387358][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.398519][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.408358][ T45] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 108.417577][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.426637][ T45] usb 6-1: config 0 descriptor?? [ 108.545540][ T36] audit: type=1400 audit(2000000020.271:494): avc: denied { mounton } for pid=2996 comm="syz.2.892" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 108.545598][ T2997] overlay: filesystem on ./bus is read-only [ 108.694345][ T36] audit: type=1400 audit(2000000020.421:495): avc: denied { map } for pid=3006 comm="syz.2.896" path="socket:[17009]" dev="sockfs" ino=17009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.736856][ T3013] >: renamed from veth0_vlan (while UP) [ 108.759925][ T36] audit: type=1400 audit(2000000020.491:496): avc: denied { accept } for pid=3020 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.760628][ T3021] /dev/nbd4: Can't lookup blockdev [ 108.835689][ T45] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 108.843231][ T45] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 108.850834][ T45] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 108.858340][ T45] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 108.865760][ T45] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 108.874502][ T45] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 109.234598][ T45] playstation 0003:054C:0DF2.000C: Invalid reportID received, expected 32 got 36 [ 109.244129][ T45] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense firmware info: -22 [ 109.253708][ T45] playstation 0003:054C:0DF2.000C: Failed to get firmware info from DualSense [ 109.262646][ T45] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 109.270805][ T45] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 109.437559][ T2993] SELinux: security_context_str_to_sid () failed with errno=-22 [ 109.445769][ T417] usb 6-1: USB disconnect, device number 2 [ 109.687865][ T3041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3041 comm=syz.4.906 [ 109.719477][ T3044] raw_sendmsg: syz.4.907 forgot to set AF_INET. Fix it! [ 109.728661][ T3044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3044 comm=syz.4.907 [ 109.859023][ T36] audit: type=1400 audit(2000000021.591:497): avc: denied { bind } for pid=3061 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.896243][ T36] audit: type=1400 audit(2000000021.621:498): avc: denied { execute_no_trans } for pid=3061 comm="syz.4.915" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.201430][ T3113] overlayfs: failed to clone upperpath [ 110.301146][ T3127] usb usb8: usbfs: process 3127 (syz.5.935) did not claim interface 0 before use [ 110.410736][ T36] audit: type=1400 audit(2000000022.141:499): avc: denied { nlmsg_tty_audit } for pid=3143 comm="syz.5.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 110.558092][ T3162] can: request_module (can-proto-0) failed. [ 110.648830][ T36] audit: type=1400 audit(2000000022.381:500): avc: denied { link } for pid=3168 comm="syz.2.948" name="file1" dev="tmpfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.738155][ T3179] =: renamed from lo (while UP) [ 110.791044][ T3185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 110.880394][ T3199] fuse: Unknown parameter '(<0x0000000000000003' [ 110.909783][ T3207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=3207 comm=syz.4.963 [ 110.923095][ T3207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 111.019572][ T36] audit: type=1400 audit(2000000022.751:501): avc: denied { accept } for pid=3214 comm="syz.4.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.536335][ T36] audit: type=1400 audit(2000000023.271:502): avc: denied { accept } for pid=3237 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 111.949775][ T3246] overlayfs: failed to clone lowerpath [ 111.957052][ T3246] overlayfs: failed to resolve './file1': -2 [ 112.779537][ T3279] /dev/rnullb0: Can't lookup blockdev [ 112.805018][ T3281] /dev/rnullb0: Can't lookup blockdev [ 112.868129][ T3292] overlayfs: missing 'workdir' [ 112.912980][ T36] audit: type=1400 audit(2000000024.641:503): avc: denied { getopt } for pid=3300 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.483293][ T36] audit: type=1400 audit(2000000025.211:505): avc: denied { create } for pid=3331 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.518351][ T36] audit: type=1400 audit(2000000025.211:504): avc: denied { create } for pid=3331 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.557981][ T36] audit: type=1400 audit(2000000025.291:506): avc: denied { write } for pid=3336 comm="syz.1.1009" path="socket:[19459]" dev="sockfs" ino=19459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.211265][ T3362] fuse: Unknown parameter 'roe' [ 114.498608][ T3376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.498729][ T3376] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 114.544047][ T3382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.706404][ T3400] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 114.706431][ T3400] rust_binder: Error while translating object. [ 114.729498][ T3400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.739566][ T3400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 114.764796][ T3403] SELinux: security_context_str_to_sid () failed with errno=-22 [ 114.930684][ T3411] can: request_module (can-proto-0) failed. [ 115.412866][ T3451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.654950][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 115.654970][ T36] audit: type=1400 audit(2000000027.381:510): avc: denied { map } for pid=3479 comm="syz.5.1059" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.926209][ T306] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 116.041574][ T3497] overlayfs: failed to clone upperpath [ 116.057276][ T306] usb 6-1: device descriptor read/64, error -71 [ 116.296187][ T306] usb 6-1: device descriptor read/64, error -71 [ 116.536177][ T306] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 116.666228][ T306] usb 6-1: device descriptor read/64, error -71 [ 116.906170][ T306] usb 6-1: device descriptor read/64, error -71 [ 117.016295][ T306] usb usb6-port1: attempt power cycle [ 117.356193][ T306] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 117.377170][ T306] usb 6-1: device descriptor read/8, error -71 [ 117.507218][ T306] usb 6-1: device descriptor read/8, error -71 [ 117.746187][ T306] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 117.767276][ T306] usb 6-1: device descriptor read/8, error -71 [ 117.897230][ T306] usb 6-1: device descriptor read/8, error -71 [ 118.006283][ T306] usb usb6-port1: unable to enumerate USB device [ 118.362524][ T36] audit: type=1400 audit(2000000030.091:511): avc: denied { shutdown } for pid=3556 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.086168][ T417] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 119.145138][ T3588] bpf: Bad value for 'mode' [ 119.238012][ T417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.249019][ T417] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.258258][ T417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.269208][ T36] audit: type=1400 audit(2000000031.001:512): avc: denied { watch watch_reads } for pid=3590 comm="syz.4.1096" path="/210/file0" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 119.294709][ T417] usb 6-1: config 0 descriptor?? [ 119.361621][ T3603] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1101'. [ 119.532377][ T417] usbhid 6-1:0.0: can't add hid device: -71 [ 119.540136][ T417] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 119.552564][ T417] usb 6-1: USB disconnect, device number 7 [ 119.886172][ T417] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 120.035132][ T3659] 9pnet_fd: Insufficient options for proto=fd [ 120.047220][ T417] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 120.056353][ T417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.066651][ T417] usb 6-1: config 0 descriptor?? [ 120.688322][ T417] usb 6-1: Cannot set autoneg [ 120.711218][ T417] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 120.737523][ T417] usb 6-1: USB disconnect, device number 8 [ 120.792780][ T3714] overlayfs: failed to clone upperpath [ 121.206156][ T417] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 121.336153][ T417] usb 6-1: device descriptor read/64, error -71 [ 121.576191][ T417] usb 6-1: device descriptor read/64, error -71 [ 121.816179][ T417] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 121.956750][ T417] usb 6-1: device descriptor read/64, error -71 [ 122.226216][ T417] usb 6-1: device descriptor read/64, error -71 [ 122.346278][ T417] usb usb6-port1: attempt power cycle [ 122.527680][ T3831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=3831 comm=syz.1.1172 [ 122.540381][ T3831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3831 comm=syz.1.1172 [ 122.553501][ T3831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=3831 comm=syz.1.1172 [ 122.566322][ T3831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=3831 comm=syz.1.1172 [ 122.696168][ T417] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 122.717322][ T417] usb 6-1: device descriptor read/8, error -71 [ 122.847289][ T417] usb 6-1: device descriptor read/8, error -71 [ 123.086194][ T417] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 123.107290][ T417] usb 6-1: device descriptor read/8, error -71 [ 123.237385][ T417] usb 6-1: device descriptor read/8, error -71 [ 123.346246][ T417] usb usb6-port1: unable to enumerate USB device [ 123.524434][ T3854] /dev/rnullb0: Can't lookup blockdev [ 123.897708][ T3880] netlink: 57 bytes leftover after parsing attributes in process `syz.5.1190'. [ 123.907147][ T3880] rust_binder: Write failure EINVAL in pid:94 [ 123.939114][ T36] audit: type=1400 audit(2000000035.671:513): avc: denied { append } for pid=3883 comm="syz.5.1191" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 123.940735][ T3884] fuse: Unknown parameter '00000035184372744192ÿÿÿÿ' [ 123.976579][ T3884] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 123.976600][ T3884] rust_binder: Error while translating object. [ 123.987400][ T3884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 123.993716][ T3884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 124.232328][ T3896] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3896 comm=syz.1.1196 [ 124.571455][ T3914] can: request_module (can-proto-0) failed. [ 124.616196][ T45] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 124.689632][ T3921] fuse: Bad value for 'group_id' [ 124.694665][ T3921] fuse: Bad value for 'group_id' [ 124.767345][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.777919][ T45] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.787867][ T45] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 124.797257][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.806366][ T45] usb 6-1: config 0 descriptor?? [ 125.360311][ T36] audit: type=1326 audit(2000000037.091:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6492f8e929 code=0x7ffc0000 [ 125.383841][ T36] audit: type=1326 audit(2000000037.091:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6492f8e929 code=0x7ffc0000 [ 125.407451][ T36] audit: type=1326 audit(2000000037.091:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6492f8e929 code=0x7ffc0000 [ 125.431163][ T36] audit: type=1326 audit(2000000037.091:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6492f8e929 code=0x7ffc0000 [ 125.454790][ T36] audit: type=1326 audit(2000000037.091:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6492f8e929 code=0x7ffc0000 [ 125.478206][ T36] audit: type=1326 audit(2000000037.091:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6492f8e929 code=0x7ffc0000 [ 125.501738][ T36] audit: type=1326 audit(2000000037.091:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6492f8e929 code=0x7ffc0000 [ 125.525058][ T36] audit: type=1326 audit(2000000037.091:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6492f8e929 code=0x7ffc0000 [ 125.548451][ T36] audit: type=1326 audit(2000000037.091:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6492f8e929 code=0x7ffc0000 [ 126.446508][ T4003] SELinux: security_context_str_to_sid () failed with errno=-22 [ 126.970839][ T4051] overlayfs: failed to resolve './file1': -2 [ 127.124802][ T4072] cgroup: fork rejected by pids controller in /syz2 [ 127.450521][ T4208] overlayfs: failed to resolve './file0': -2 [ 127.555232][ T417] usb 6-1: USB disconnect, device number 13 [ 128.043232][ T417] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 128.204732][ T417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.215788][ T417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.225579][ T417] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 128.234925][ T417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.243824][ T417] usb 6-1: config 0 descriptor?? [ 128.678987][ T417] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 128.688855][ T417] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 128.820498][ T4301] overlayfs: failed to clone upperpath [ 128.892066][ T417] cp2112 0003:10C4:EA90.000D: Part Number: 0x82 Device Version: 0xFE [ 129.360634][ T4328] process '/newroot/276/file0' started with executable stack [ 129.502882][ T4355] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1310'. [ 129.513860][ T4355] overlayfs: failed to clone upperpath [ 129.751766][ T4254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 129.806570][ T4357] rust_binder: Write failure EINVAL in pid:127 [ 130.031682][ T417] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 131.163130][ T4388] rust_binder: Error while translating object. [ 131.163162][ T4388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 131.169620][ T4388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:139 [ 131.201158][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 131.201179][ T36] audit: type=1400 audit(2000000042.600:567): avc: denied { sys_nice } for pid=4391 comm="syz.5.1325" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 131.288100][ T4400] overlayfs: conflicting options: userxattr,verity=on [ 131.540312][ T36] audit: type=1400 audit(2000000042.918:568): avc: denied { setopt } for pid=4410 comm="syz.1.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.763972][ T453] usb 6-1: USB disconnect, device number 14 [ 131.957846][ T4421] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1338'. [ 132.362264][ T453] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 132.523996][ T453] usb 6-1: unable to get BOS descriptor or descriptor too short [ 132.532551][ T453] usb 6-1: config 3 has an invalid interface number: 24 but max is 0 [ 132.540754][ T453] usb 6-1: config 3 has no interface number 0 [ 132.547131][ T453] usb 6-1: config 3 interface 24 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 132.549469][ T4432] can: request_module (can-proto-0) failed. [ 132.569541][ T453] usb 6-1: config 3 interface 24 has no altsetting 0 [ 132.578082][ T453] usb 6-1: New USB device found, idVendor=0b57, idProduct=b2eb, bcdDevice=36.b7 [ 132.592077][ T453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.600439][ T453] usb 6-1: Product: syz [ 132.604648][ T453] usb 6-1: Manufacturer: syz [ 132.609297][ T453] usb 6-1: SerialNumber: syz [ 132.727746][ T36] audit: type=1400 audit(2000000044.031:569): avc: denied { ioctl } for pid=4437 comm="syz.1.1345" path="socket:[21998]" dev="sockfs" ino=21998 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.168329][ T4453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1350'. [ 133.730032][ T36] audit: type=1400 audit(2000000044.957:570): avc: denied { getopt } for pid=4463 comm="syz.2.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.783239][ T4470] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 133.807414][ T36] audit: type=1400 audit(2000000045.041:571): avc: denied { associate } for pid=4473 comm="syz.2.1358" name="blkio.bfq.io_service_time_recursive" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 134.609425][ T4555] netlink: 'syz.4.1384': attribute type 2 has an invalid length. [ 134.690897][ T4559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 134.904970][ T4564] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 135.447079][ T453] usbhid 6-1:3.24: couldn't find an input interrupt endpoint [ 135.456152][ T453] usb 6-1: USB disconnect, device number 15 [ 135.772532][ T453] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 135.933984][ T453] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.944252][ T453] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.957197][ T453] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 135.966294][ T453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.975555][ T453] usb 6-1: config 0 descriptor?? [ 135.981534][ T453] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 137.146528][ T4609] fuse: Unknown parameter 'fdºFHÃëèkÿø' [ 137.703705][ T4613] SELinux: security_context_str_to_sid () failed with errno=-22 [ 137.717767][ T4614] mmap: syz.1.1407 (4614): VmData 29339648 exceed data ulimit 498. Update limits or use boot option ignore_rlimit_data. [ 137.766217][ T36] audit: type=1400 audit(2000000048.741:572): avc: denied { map } for pid=4622 comm="syz.1.1410" path="socket:[21417]" dev="sockfs" ino=21417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.789311][ T36] audit: type=1400 audit(2000000048.741:573): avc: denied { read } for pid=4622 comm="syz.1.1410" path="socket:[21417]" dev="sockfs" ino=21417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.941381][ T4631] overlayfs: failed to clone upperpath [ 138.327130][ T4661] overlayfs: failed to clone upperpath [ 138.804327][ T417] usb 6-1: USB disconnect, device number 16 [ 138.821068][ T4681] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 138.821095][ T4681] rust_binder: Error while translating object. [ 138.843141][ T4681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 138.849718][ T4681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 138.860386][ T4681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.876671][ T4685] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 138.876698][ T4685] rust_binder: Error while translating object. [ 138.887633][ T4685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 138.894125][ T4685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 138.972122][ T4695] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 139.202070][ T4714] 9pnet_fd: p9_fd_create_unix (4714): problem connecting socket: ./file0: -111 [ 139.300439][ T417] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 139.461980][ T417] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.472306][ T417] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.485376][ T417] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 139.494485][ T417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.503176][ T417] usb 6-1: config 0 descriptor?? [ 139.509139][ T417] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 139.920160][ T36] audit: type=1400 audit(2000000050.743:574): avc: denied { mount } for pid=4725 comm="syz.1.1448" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 140.018345][ T36] audit: type=1326 audit(2000000050.846:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm="syz.1.1454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34f278e929 code=0x0 [ 140.320027][ T4347] tipc: Subscription rejected, illegal request [ 141.227389][ T4807] SELinux: security_context_str_to_sid () failed with errno=-22 [ 141.695328][ T36] audit: type=1326 audit(2000000052.417:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.1481" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34f278e929 code=0x0 [ 141.847628][ T36] audit: type=1400 audit(2000000052.557:577): avc: denied { remount } for pid=4823 comm="syz.2.1484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.904556][ T4834] fuse: Unknown parameter 'fl' [ 142.327472][ T45] usb 6-1: USB disconnect, device number 17 [ 142.539987][ T4849] kvm: user requested TSC rate below hardware speed [ 142.746243][ T4878] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 142.746264][ T4878] rust_binder: Error while translating object. [ 142.756886][ T4878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.763170][ T4878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 143.042154][ T417] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 143.199608][ T4888] binder: Unknown parameter 'sta„‡' [ 143.213585][ T417] usb 6-1: too many configurations: 118, using maximum allowed: 8 [ 143.224594][ T417] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 143.232371][ T417] usb 6-1: can't read configurations, error -61 [ 143.373626][ T417] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 143.534362][ T417] usb 6-1: too many configurations: 118, using maximum allowed: 8 [ 143.543431][ T417] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 143.551096][ T417] usb 6-1: can't read configurations, error -61 [ 143.557549][ T417] usb usb6-port1: attempt power cycle [ 143.918823][ T417] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 143.941118][ T417] usb 6-1: too many configurations: 118, using maximum allowed: 8 [ 143.950512][ T417] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 143.958442][ T417] usb 6-1: can't read configurations, error -61 [ 144.100590][ T417] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 144.123719][ T417] usb 6-1: too many configurations: 118, using maximum allowed: 8 [ 144.132764][ T417] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 144.140375][ T417] usb 6-1: can't read configurations, error -61 [ 144.147045][ T417] usb usb6-port1: unable to enumerate USB device [ 144.204380][ T4914] netlink: 'syz.2.1513': attribute type 4 has an invalid length. [ 144.213376][ T4914] netlink: 'syz.2.1513': attribute type 4 has an invalid length. [ 144.224809][ T4914] lo: entered promiscuous mode [ 144.230155][ T4913] lo: left promiscuous mode [ 144.246806][ T4916] netlink: 'syz.2.1514': attribute type 15 has an invalid length. [ 144.254754][ T4916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1514'. [ 144.327993][ T36] audit: type=1326 audit(2000000054.877:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.2.1519" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f6492f8e929 code=0x0 [ 145.881697][ T4953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1525'. [ 146.039445][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 146.452474][ T357] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 146.579239][ T4984] fuse: Bad value for 'fd' [ 146.624691][ T357] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.637926][ T357] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 146.647270][ T357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.656038][ T357] usb 6-1: config 0 descriptor?? [ 146.662266][ T357] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 146.910085][ T5001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5001 comm=syz.2.1544 [ 146.922863][ T5001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=5001 comm=syz.2.1544 [ 146.935803][ T5001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=5001 comm=syz.2.1544 [ 148.351744][ T36] audit: type=1400 audit(2000000058.637:579): avc: denied { audit_read } for pid=5031 comm="syz.2.1556" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.380443][ T5033] SELinux: security_context_str_to_sid () failed with errno=-22 [ 148.707562][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 149.267843][ T5059] netlink: 'syz.2.1567': attribute type 12 has an invalid length. [ 149.310420][ T5066] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1570'. [ 149.477677][ T1040] usb 6-1: USB disconnect, device number 22 [ 149.592100][ T5076] binder: Unknown parameter 'defcontext01777777777777777777777' [ 149.690927][ T5081] can: request_module (can-proto-0) failed. [ 149.730450][ T5090] binder: Unknown parameter 'stats ' [ 149.750849][ T36] audit: type=1326 audit(2000000059.947:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.5.1580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f234178e929 code=0x0 [ 149.773748][ T36] audit: type=1326 audit(2000000059.947:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.5.1580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f234178e929 code=0x0 [ 149.831441][ T5096] fuse: Unknown parameter 'group_id-00000000000000000000' [ 149.909881][ T5109] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 149.918139][ T5109] rust_binder: Write failure EINVAL in pid:224 [ 149.932041][ T5113] rust_binder: Write failure EFAULT in pid:226 [ 151.188470][ T401] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 151.359472][ T401] usb 6-1: Using ep0 maxpacket: 8 [ 151.365825][ T401] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.377839][ T401] usb 6-1: config 179 has no interface number 0 [ 151.387510][ T401] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 151.398880][ T401] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 151.410334][ T401] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.421955][ T401] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 151.434024][ T401] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.447935][ T401] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.457341][ T401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.467035][ T5143] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 151.709046][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.716188][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.723373][ T5171] bridge_slave_0: entered allmulticast mode [ 151.729737][ T5171] bridge_slave_0: entered promiscuous mode [ 151.736339][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.743435][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.750767][ T5171] bridge_slave_1: entered allmulticast mode [ 151.757240][ T5171] bridge_slave_1: entered promiscuous mode [ 151.821134][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.828241][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.835609][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.842694][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.868507][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.876193][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.886854][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.893953][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.903740][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.910878][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.942267][ T5171] veth0_vlan: entered promiscuous mode [ 151.957591][ T5171] veth1_macvtap: entered promiscuous mode [ 152.268182][ T1040] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 152.428496][ T1040] usb 7-1: Using ep0 maxpacket: 8 [ 152.434702][ T1040] usb 7-1: config 127 has an invalid interface number: 116 but max is 0 [ 152.443223][ T1040] usb 7-1: config 127 has an invalid descriptor of length 136, skipping remainder of the config [ 152.453715][ T1040] usb 7-1: config 127 has no interface number 0 [ 152.460047][ T1040] usb 7-1: config 127 interface 116 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 152.473376][ T1040] usb 7-1: config 127 interface 116 has no altsetting 0 [ 152.481981][ T1040] usb 7-1: New USB device found, idVendor=0403, idProduct=d38f, bcdDevice=c2.bf [ 152.491064][ T1040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.499170][ T1040] usb 7-1: Product: syz [ 152.503421][ T1040] usb 7-1: Manufacturer: 땚ቛ㩪 [ 152.508565][ T1040] usb 7-1: SerialNumber: syz [ 152.654153][ T5219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5219 comm=syz.2.1626 [ 152.689334][ T36] audit: type=1400 audit(2000000062.697:582): avc: denied { write } for pid=5222 comm="syz.2.1627" name="/" dev="configfs" ino=2165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.712048][ T36] audit: type=1400 audit(2000000062.697:583): avc: denied { add_name } for pid=5222 comm="syz.2.1627" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.733181][ T36] audit: type=1400 audit(2000000062.697:584): avc: denied { create } for pid=5222 comm="syz.2.1627" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 152.742525][ T5184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.759574][ T5184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 152.784046][ T1040] ftdi_sio 7-1:127.116: FTDI USB Serial Device converter detected [ 152.804561][ T1040] ftdi_sio ttyUSB0: unknown device type: 0xc2bf [ 152.813703][ T1040] usb 7-1: USB disconnect, device number 2 [ 152.827708][ T1040] ftdi_sio 7-1:127.116: device disconnected [ 152.901522][ T5245] fuse: Bad value for 'fd' [ 153.396297][ T5254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1639'. [ 154.145280][ T1040] usb 6-1: USB disconnect, device number 23 [ 154.145294][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 154.168664][ T5285] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 154.180639][ T5287] rust_binder: Error while translating object. [ 154.188937][ T5287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.195264][ T5287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 154.221439][ T36] audit: type=1400 audit(2000000064.128:585): avc: denied { read write } for pid=5291 comm="syz.5.1651" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.258594][ T36] audit: type=1400 audit(2000000064.128:586): avc: denied { open } for pid=5291 comm="syz.5.1651" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.441571][ T5311] Invalid logical block size (68) [ 154.457538][ T5311] kvm: pic: non byte write [ 154.463555][ T5311] random: crng reseeded on system resumption [ 154.577352][ T417] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 154.738881][ T417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.750132][ T417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.760216][ T417] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 154.769482][ T417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.779505][ T417] usb 7-1: config 0 descriptor?? [ 154.893212][ T5314] fuse: Unknown parameter 'rootmodm' [ 154.917197][ T5316] can: request_module (can-proto-0) failed. [ 155.018283][ T36] audit: type=1400 audit(2000000064.877:587): avc: denied { sys_module } for pid=5329 comm="syz.1.1664" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 155.046759][ T5334] binder: Unknown parameter 'sal' [ 155.049907][ T5335] rust_binder: inc_ref_done called when no active inc_refs [ 155.051886][ T5335] rust_binder: Write failure EINVAL in pid:255 [ 155.054294][ T36] audit: type=1400 audit(2000000064.905:588): avc: denied { execute } for pid=5331 comm="syz.1.1665" name="file0" dev="ramfs" ino=24580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 155.083222][ T5338] overlay: Unknown parameter 'fowner>00000000000000000000' [ 155.087279][ T36] audit: type=1400 audit(2000000064.905:589): avc: denied { execute_no_trans } for pid=5331 comm="syz.1.1665" path="/file0" dev="ramfs" ino=24580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 155.216222][ T5304] SELinux: security_context_str_to_sid () failed with errno=-22 [ 155.224448][ T417] usbhid 7-1:0.0: can't add hid device: -71 [ 155.230728][ T417] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 155.239541][ T417] usb 7-1: USB disconnect, device number 3 [ 155.368463][ T357] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 155.528791][ T357] usb 6-1: Using ep0 maxpacket: 16 [ 155.534412][ T357] usb 6-1: too many configurations: 11, using maximum allowed: 8 [ 155.543424][ T357] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 155.551088][ T357] usb 6-1: can't read configurations, error -61 [ 155.689145][ T357] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 155.842235][ T36] audit: type=1400 audit(2000000065.644:590): avc: denied { append } for pid=5353 comm="syz.6.1672" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.866235][ T36] audit: type=1400 audit(2000000065.644:591): avc: denied { ioctl } for pid=5353 comm="syz.6.1672" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.870900][ T357] usb 6-1: Using ep0 maxpacket: 16 [ 155.902515][ T357] usb 6-1: too many configurations: 11, using maximum allowed: 8 [ 155.913150][ T357] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 155.918798][ T36] audit: type=1400 audit(2000000065.718:592): avc: denied { map } for pid=5358 comm="syz.6.1674" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.927023][ T357] usb 6-1: can't read configurations, error -61 [ 155.950500][ T357] usb usb6-port1: attempt power cycle [ 156.060071][ T36] audit: type=1400 audit(2000000065.849:593): avc: denied { setattr } for pid=5379 comm="syz.1.1680" name="/" dev="configfs" ino=2165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.266487][ T401] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 156.309209][ T357] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 156.330928][ T357] usb 6-1: Using ep0 maxpacket: 16 [ 156.336499][ T357] usb 6-1: too many configurations: 11, using maximum allowed: 8 [ 156.345489][ T357] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 156.353120][ T357] usb 6-1: can't read configurations, error -61 [ 156.428088][ T401] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.439144][ T401] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.448924][ T401] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 156.457981][ T401] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.466668][ T401] usb 7-1: config 0 descriptor?? [ 156.490963][ T357] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 156.512986][ T357] usb 6-1: Using ep0 maxpacket: 16 [ 156.518545][ T357] usb 6-1: too many configurations: 11, using maximum allowed: 8 [ 156.527366][ T357] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 156.535000][ T357] usb 6-1: can't read configurations, error -61 [ 156.541434][ T357] usb usb6-port1: unable to enumerate USB device [ 156.902124][ T5375] SELinux: security_context_str_to_sid () failed with errno=-22 [ 156.910245][ T401] usbhid 7-1:0.0: can't add hid device: -71 [ 156.916307][ T401] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 156.925047][ T401] usb 7-1: USB disconnect, device number 4 [ 157.500516][ T5419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 158.309236][ T5441] netlink: 'syz.5.1698': attribute type 2 has an invalid length. [ 158.481015][ T5450] /dev/rnullb0: Can't open blockdev [ 158.520093][ T36] audit: type=1326 audit(2000000068.151:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.1.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f278e929 code=0x7fc00000 [ 158.540202][ T5456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 158.700903][ T5479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1710'. [ 159.174259][ T36] audit: type=1400 audit(2000000068.759:595): avc: denied { map } for pid=5495 comm="syz.2.1716" path="socket:[24888]" dev="sockfs" ino=24888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 159.197909][ T36] audit: type=1400 audit(2000000068.759:596): avc: denied { accept } for pid=5495 comm="syz.2.1716" path="socket:[24888]" dev="sockfs" ino=24888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 159.320116][ T5512] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 159.347254][ T5517] devtmpfs: Unknown parameter '^ *([%Ž' [ 159.445646][ T5540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1732'. [ 159.681726][ T4346] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.688285][ T4346] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.698099][ T5556] rust_binder: Error while translating object. [ 159.698136][ T5556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 159.704405][ T5556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:83 [ 159.776423][ T5559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.785523][ T357] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 159.793853][ T5559] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1740'. [ 159.809635][ T5559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.810443][ T5559] rust_binder: Error while translating object. [ 159.817200][ T5559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.823401][ T5559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 159.862424][ T5566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.875174][ T5566] rust_binder: Write failure EINVAL in pid:93 [ 159.952883][ T5570] netlink: 'syz.1.1744': attribute type 30 has an invalid length. [ 159.966664][ T5572] SELinux: security_context_str_to_sid () failed with errno=-22 [ 159.977172][ T357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.992649][ T357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.003091][ T357] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 160.012354][ T357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.025612][ T357] usb 6-1: config 0 descriptor?? [ 160.308699][ T5603] overlayfs: failed to clone upperpath [ 160.364579][ T5603] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1757'. [ 160.382790][ T5603] fuse: Unknown parameter '_él' [ 160.543147][ T36] audit: type=1326 audit(2000000070.049:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.2.1761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6492f8e929 code=0x0 [ 160.553382][ T417] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 160.693186][ T5548] SELinux: security_context_str_to_sid () failed with errno=-22 [ 160.714216][ T357] usbhid 6-1:0.0: can't add hid device: -71 [ 160.724674][ T357] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 160.735124][ T417] usb 7-1: Using ep0 maxpacket: 8 [ 160.744382][ T357] usb 6-1: USB disconnect, device number 28 [ 160.744448][ T417] usb 7-1: config 0 has an invalid interface number: 57 but max is 1 [ 160.771744][ T417] usb 7-1: config 0 has an invalid interface number: 90 but max is 1 [ 160.788833][ T417] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.808699][ T417] usb 7-1: config 0 has no interface number 0 [ 160.819386][ T417] usb 7-1: config 0 has no interface number 1 [ 160.831353][ T417] usb 7-1: config 0 interface 57 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 160.852712][ T417] usb 7-1: config 0 interface 57 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 160.866944][ T417] usb 7-1: config 0 interface 57 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 8 [ 160.884787][ T417] usb 7-1: config 0 interface 57 altsetting 5 endpoint 0x4 has an invalid bInterval 189, changing to 7 [ 160.906181][ T417] usb 7-1: config 0 interface 57 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 160.920436][ T417] usb 7-1: config 0 interface 90 altsetting 248 has a duplicate endpoint with address 0x2, skipping [ 160.938021][ T417] usb 7-1: config 0 interface 57 has no altsetting 0 [ 160.946104][ T417] usb 7-1: config 0 interface 90 has no altsetting 0 [ 160.962574][ T417] usb 7-1: New USB device found, idVendor=12b8, idProduct=ec62, bcdDevice=9f.2e [ 160.971770][ T417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.982031][ T417] usb 7-1: Product: syz [ 160.988519][ T417] usb 7-1: Manufacturer: syz [ 160.997669][ T417] usb 7-1: SerialNumber: syz [ 161.005860][ T417] usb 7-1: config 0 descriptor?? [ 161.013463][ T5601] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 161.287495][ T36] audit: type=1400 audit(2000000070.732:598): avc: denied { append } for pid=5617 comm="syz.5.1762" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 161.335436][ T5620] SELinux: security_context_str_to_sid () failed with errno=-22 [ 161.392218][ T5623] binder: Bad value for 'max' [ 161.500787][ T5626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5626 comm=syz.5.1766 [ 161.547577][ T5626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5626 comm=syz.5.1766 [ 161.579911][ T5626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=5626 comm=syz.5.1766 [ 161.611773][ T5626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=5626 comm=syz.5.1766 [ 161.633639][ T5629] macsec0: mtu less than device minimum [ 161.670657][ T401] usb 7-1: USB disconnect, device number 5 [ 161.704223][ T5639] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.900403][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.900781][ T535] Bluetooth: hci0: command 0x1003 tx timeout [ 162.146287][ T401] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 162.181773][ T36] audit: type=1326 audit(2000000071.574:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5664 comm="syz.1.1778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34f278e929 code=0x0 [ 162.307794][ T401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.318850][ T401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.328936][ T401] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 162.338023][ T401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.346839][ T401] usb 6-1: config 0 descriptor?? [ 162.787442][ T5676] /dev/rnullb0: Can't lookup blockdev [ 162.996665][ T5645] SELinux: security_context_str_to_sid () failed with errno=-22 [ 163.005111][ T401] usbhid 6-1:0.0: can't add hid device: -71 [ 163.011305][ T401] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 163.020052][ T401] usb 6-1: USB disconnect, device number 29 [ 163.099518][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 163.151676][ T5730] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5730 comm=syz.2.1800 [ 163.765628][ T5758] overlay: Unknown parameter 'smackfsfloor' [ 163.794300][ T36] audit: type=1326 audit(2000000073.089:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.1.1812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34f278e929 code=0x0 [ 164.380619][ T535] Bluetooth: hci0: command 0x1003 tx timeout [ 164.380619][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.492499][ T5768] bridge0: port 3(veth0_vlan) entered blocking state [ 164.499320][ T5768] bridge0: port 3(veth0_vlan) entered disabled state [ 164.506140][ T5768] veth0_vlan: entered allmulticast mode [ 164.512381][ T5768] bridge0: port 3(veth0_vlan) entered blocking state [ 164.519128][ T5768] bridge0: port 3(veth0_vlan) entered forwarding state [ 164.520954][ T36] audit: type=1400 audit(2000000073.763:601): avc: denied { unmount } for pid=2961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 164.557749][ T5776] netlink: 'syz.5.1815': attribute type 5 has an invalid length. [ 164.622299][ T5776] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 164.622340][ T5776] rust_binder: Error in use_page_slow: EBUSY [ 164.633082][ T5776] rust_binder: use_range failure EBUSY [ 164.639458][ T5776] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 164.645101][ T5776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 164.653100][ T5776] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 164.662826][ T5776] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:303 [ 164.702699][ T5781] rust_binder: Write failure EINVAL in pid:306 [ 164.762178][ T36] audit: type=1400 audit(2000000073.986:602): avc: denied { read } for pid=5786 comm="syz.1.1821" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.839440][ T453] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 167.022257][ T453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.053268][ T453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.074648][ T453] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 167.096004][ T453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.118213][ T453] usb 6-1: config 0 descriptor?? [ 167.770705][ T5884] SELinux: security_context_str_to_sid () failed with errno=-22 [ 167.778942][ T453] usbhid 6-1:0.0: can't add hid device: -71 [ 167.786877][ T453] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 167.798798][ T453] usb 6-1: USB disconnect, device number 30 [ 168.207050][ T5907] overlay: Unknown parameter 'euid>00000000000000000000' [ 168.533430][ T5938] fuse: Bad value for 'user_id' [ 168.552032][ T5938] fuse: Bad value for 'user_id' [ 168.557549][ T5937] 9pnet_fd: Insufficient options for proto=fd [ 168.568661][ T5938] 9pnet_fd: Insufficient options for proto=fd [ 168.591199][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.604145][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.619316][ T5934] bridge_slave_0: entered allmulticast mode [ 168.630511][ T5934] bridge_slave_0: entered promiscuous mode [ 168.637703][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.651146][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.658802][ T5934] bridge_slave_1: entered allmulticast mode [ 168.665243][ T5934] bridge_slave_1: entered promiscuous mode [ 168.674117][ T4346] veth0_vlan: left allmulticast mode [ 168.688972][ T4346] bridge0: port 3(veth0_vlan) entered disabled state [ 168.700109][ T4346] bridge_slave_1: left allmulticast mode [ 168.705909][ T4346] bridge_slave_1: left promiscuous mode [ 168.712394][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.720219][ T4346] bridge_slave_0: left allmulticast mode [ 168.725956][ T4346] bridge_slave_0: left promiscuous mode [ 168.731612][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.763761][ T31] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 168.880815][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.887934][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.895253][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.902321][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.915223][ T4346] veth1_macvtap: left promiscuous mode [ 168.935062][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 168.941360][ T31] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 168.952024][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.967656][ T31] usb 6-1: config 0 descriptor?? [ 168.986733][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.994194][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.004576][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.011694][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.022035][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.029222][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.062586][ T5934] veth0_vlan: entered promiscuous mode [ 169.075128][ T5934] veth1_macvtap: entered promiscuous mode [ 169.105865][ T1040] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 169.130064][ T5967] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 169.139309][ T5967] overlayfs: missing 'lowerdir' [ 169.193658][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.202136][ T36] audit: type=1400 audit(2000000078.139:603): avc: denied { nlmsg_read } for pid=5982 comm="syz.1.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 169.214108][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.234194][ T31] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 169.244293][ T31] asix 6-1:0.0: probe with driver asix failed with error -32 [ 169.256188][ T5987] overlayfs: missing 'lowerdir' [ 169.278003][ T1040] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.289443][ T1040] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.299359][ T1040] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 169.308501][ T1040] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.319438][ T1040] usb 7-1: config 0 descriptor?? [ 169.391221][ T36] audit: type=1400 audit(2000000078.316:604): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 169.408309][ T5990] binder: Unknown parameter 'dSrsync' [ 169.797148][ T31] usb 6-1: USB disconnect, device number 31 [ 169.832847][ T453] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 169.846929][ T5997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:326 [ 169.969961][ T5962] SELinux: security_context_str_to_sid () failed with errno=-22 [ 169.995681][ T1040] usbhid 7-1:0.0: can't add hid device: -71 [ 170.004965][ T453] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 170.017086][ T453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.028959][ T1040] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 170.042417][ T1040] usb 7-1: USB disconnect, device number 6 [ 170.048536][ T453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.060201][ T453] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 170.073378][ T453] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 170.082476][ T453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.091344][ T453] usb 3-1: config 0 descriptor?? [ 170.246227][ T6023] overlayfs: failed to clone upperpath [ 170.525023][ T36] audit: type=1400 audit(2000000079.373:605): avc: denied { shutdown } for pid=6036 comm="syz.1.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.549902][ T36] audit: type=1400 audit(2000000079.402:606): avc: denied { create } for pid=6036 comm="syz.1.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 170.552627][ T453] wacom 0003:056A:0325.000E: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.2-1/input0 [ 170.635582][ T6043] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.769373][ T453] usb 3-1: USB disconnect, device number 19 [ 170.784345][ T4348] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.944349][ T6060] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1903'. [ 171.211928][ T401] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 171.373428][ T401] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 171.383445][ T401] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 171.385185][ T6074] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 171.385185][ T6074] attempt to add with overflow [ 171.395350][ T401] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.411818][ T6074] ------------[ cut here ]------------ [ 171.419018][ T36] audit: type=1400 audit(2000000080.215:607): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 171.424448][ T6074] kernel BUG at rust/helpers/bug.c:7! [ 171.446215][ T401] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.452578][ T6074] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 171.459841][ T36] audit: type=1400 audit(2000000080.215:608): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.466643][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.2.1908 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 171.488288][ T401] usb 6-1: Product: syz [ 171.501363][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.501384][ T6074] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 171.501415][ T6074] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 2f 32 dd 7c 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 65 f6 94 f0 90 90 90 90 90 90 90 90 90 [ 171.505968][ T401] usb 6-1: Manufacturer: syz [ 171.515629][ T6074] RSP: 0018:ffffc9000d99f3f0 EFLAGS: 00010246 [ 171.515657][ T6074] RAX: 000000000000008c RBX: 1ffff92001b33e80 RCX: 3e0e2446bad3df00 [ 171.515674][ T6074] RDX: ffffc90016565000 RSI: 000000000001be50 RDI: 000000000001be51 [ 171.521415][ T401] usb 6-1: SerialNumber: syz [ 171.540656][ T6074] RBP: ffffc9000d99f3f0 R08: ffffc9000d99f0e7 R09: 1ffff92001b33e1c [ 171.540685][ T6074] R10: dffffc0000000000 R11: fffff52001b33e1d R12: 0000000000000000 [ 171.540700][ T6074] R13: dffffc0000000000 R14: ffffc9000d99f420 R15: ffffc9000d99f450 [ 171.540718][ T6074] FS: 00007fe8ac98d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 171.545529][ T36] audit: type=1400 audit(2000000080.215:609): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.551374][ T6074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.560069][ T36] audit: type=1400 audit(2000000080.215:610): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.567313][ T6074] CR2: 0000000000000000 CR3: 000000012fde4000 CR4: 00000000003526b0 [ 171.567335][ T6074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.567349][ T6074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.572284][ T36] audit: type=1400 audit(2000000080.215:611): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.579915][ T6074] Call Trace: [ 171.579925][ T6074] [ 171.579934][ T6074] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 171.588836][ T36] audit: type=1400 audit(2000000080.215:612): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.595938][ T6074] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 171.742460][ T6074] ? kernel_text_address+0xa9/0xe0 [ 171.747617][ T6074] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 171.761289][ T6074] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 171.767484][ T6074] ? arch_stack_walk+0x10b/0x170 [ 171.772453][ T6074] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 171.779759][ T6074] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 171.787701][ T6074] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 171.797621][ T6074] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 171.808749][ T6074] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 171.821021][ T6074] ? mas_wr_store_type+0x8eb/0x1ad0 [ 171.826255][ T6074] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 171.839135][ T6074] ? mas_preallocate+0x56e/0xc60 [ 171.844178][ T6074] ? __cfi_mas_preallocate+0x10/0x10 [ 171.849478][ T6074] ? kasan_save_alloc_info+0x40/0x50 [ 171.854787][ T6074] ? __asan_memset+0x39/0x50 [ 171.859411][ T6074] mmap_region+0x136b/0x1bc0 [ 171.864031][ T6074] ? __cfi_mmap_region+0x10/0x10 [ 171.868992][ T6074] ? __futex_queue+0x19a/0x340 [ 171.873778][ T6074] ? __kasan_check_read+0x15/0x20 [ 171.878829][ T6074] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 171.885120][ T6074] ? file_mmap_ok+0x147/0x1a0 [ 171.889840][ T6074] do_mmap+0xb6d/0x13c0 [ 171.894039][ T6074] ? __cfi_do_mmap+0x10/0x10 [ 171.898652][ T6074] ? down_write_killable+0xe9/0x2d0 [ 171.903895][ T6074] ? __cfi_down_write_killable+0x10/0x10 [ 171.909556][ T6074] vm_mmap_pgoff+0x38f/0x4e0 [ 171.914180][ T6074] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 171.919314][ T6074] ? __fget_files+0x2c5/0x340 [ 171.924087][ T6074] ksys_mmap_pgoff+0x166/0x1e0 [ 171.928876][ T6074] __x64_sys_mmap+0x121/0x140 [ 171.933584][ T6074] x64_sys_call+0x13bf/0x2ee0 [ 171.938302][ T6074] do_syscall_64+0x58/0xf0 [ 171.942798][ T6074] ? clear_bhb_loop+0x50/0xa0 [ 171.947513][ T6074] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 171.953442][ T6074] RIP: 0033:0x7fe8abb8e929 [ 171.957937][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.977571][ T6074] RSP: 002b:00007fe8ac98d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 171.986095][ T6074] RAX: ffffffffffffffda RBX: 00007fe8abdb5fa0 RCX: 00007fe8abb8e929 [ 171.994096][ T6074] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000200000fff000 [ 172.002089][ T6074] RBP: 00007fe8abc10b39 R08: 0000000000000003 R09: 000000004d75d000 [ 172.010129][ T6074] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 172.018121][ T6074] R13: 0000000000000000 R14: 00007fe8abdb5fa0 R15: 00007ffefbdd4568 [ 172.026123][ T6074] [ 172.029147][ T6074] Modules linked in: [ 172.033377][ T6074] ---[ end trace 0000000000000000 ]--- [ 172.038218][ T6062] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 172.046299][ T6074] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 172.046911][ T6062] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 172.051792][ T6074] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 2f 32 dd 7c 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 65 f6 94 f0 90 90 90 90 90 90 90 90 90 [ 172.078546][ T6074] RSP: 0018:ffffc9000d99f3f0 EFLAGS: 00010246 [ 172.084653][ T6074] RAX: 000000000000008c RBX: 1ffff92001b33e80 RCX: 3e0e2446bad3df00 [ 172.092814][ T6074] RDX: ffffc90016565000 RSI: 000000000001be50 RDI: 000000000001be51 [ 172.100885][ T6074] RBP: ffffc9000d99f3f0 R08: ffffc9000d99f0e7 R09: 1ffff92001b33e1c [ 172.108908][ T6074] R10: dffffc0000000000 R11: fffff52001b33e1d R12: 0000000000000000 [ 172.116945][ T6074] R13: dffffc0000000000 R14: ffffc9000d99f420 R15: ffffc9000d99f450 [ 172.124967][ T6074] FS: 00007fe8ac98d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 172.133940][ T6074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.140551][ T6074] CR2: 000055556dd524a8 CR3: 000000012fde4000 CR4: 00000000003526b0 [ 172.148671][ T6074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.156719][ T6074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.164836][ T6074] Kernel panic - not syncing: Fatal exception [ 172.171255][ T6074] Kernel Offset: disabled [ 172.175588][ T6074] Rebooting in 86400 seconds..