last executing test programs: 20.487575824s ago: executing program 2 (id=2188): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x248a00, 0x0) flock(r0, 0x6) ioctl$BLKRRPART(r1, 0x125f, 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) 20.475471635s ago: executing program 2 (id=2189): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000100)='./cgroup\x00', 0x2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r2 = gettid() syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x90, &(0x7f0000000100)={[{@size={'size', 0x3d, [0x6d]}}]}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r3) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000e", 0x19) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) chdir(&(0x7f0000000280)='./file0\x00') unshare(0x62040200) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0xfffd, @remote}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fsync(r8) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000280)=ANY=[], 0x0) 19.884781173s ago: executing program 2 (id=2195): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)=ANY=[]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r1, r0, 0x0, 0x80000000) 19.877119063s ago: executing program 2 (id=2196): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffd) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r0, 0x0) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000740)='\\\x00') mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x5cc4, &(0x7f0000000180)={0x0, 0x2, 0x2000, 0x3, 0x21f}, &(0x7f0000000280), &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000700)={0xc4, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x3, &(0x7f0000000ac0)=""/28, 0x1c, 0x1, 0x15}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x400}, @clear_death, @clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x4, 0xfffffffffffffffe, 0x3c}, @fda={0x66646185, 0x8, 0x0, 0x32}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000340)={0x0, 0x20, 0x40}}}, @acquire_done], 0xe1, 0x0, &(0x7f0000000600)="2fce593d54f6a3a5a0b3cbe031db5d5cba344e4664496aadec5c62e41bdc370fdfe74a98f8ec340e6267bfd6f5ece7938522b9729cad24f90c5e73250434fcc601dab0000e8748fb7edcea9bb4c8ca8d94553c5a8aa02b9aee7909651e1a0cb6760f5c866e5ac246f6ca5c569fa0b686e93e007296eaf5856ded981e832b41be771a82927e1b57b9e3f8d8c72533bdab8f870bd508f39ab3e658b8bcb34f16c23bb2f6ca6db6f75b723b69b0cd21aad1d21ffc3d3fd4b59610b0c21f1fda2cb123ed3683376c9ad0b74e74f8ac3b85c8f398ea313125ea444ba2da8dc0c45d54b5"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) preadv(r3, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/65, 0x41}, {&(0x7f0000000800)=""/232, 0xe8}, {&(0x7f0000000900)=""/26, 0x1a}, {&(0x7f0000000940)=""/88, 0x58}, {&(0x7f00000009c0)=""/100, 0x64}], 0x5, 0x10001, 0x8001) r6 = dup(r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x121402, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000074000040"]) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.769279572s ago: executing program 2 (id=2197): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000003200e7ef007b00000000000000a1", 0x12, 0x20080000, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="dae0bc", 0x3, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x101b) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x100) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x41) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x80000, 0x0) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000180)) renameat2(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x2) 19.745459834s ago: executing program 2 (id=2199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x80003, 0x0, [0xb4a, 0x3, 0x3, 0x100000001, 0xa15, 0x6, 0x100001ff]}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000300)="b889008ee8f2a70f22e76766c74424000001c0fe6766c7442402730000006766c744240600000000670f011c24b835018ed866b9c90800000f32f30f2d1e00800f01c4baf80c66b8351d368066efbafc0cec6766c7442400000000006766c7442402000001006766c744240600000000670f011424", 0x75}], 0x1, 0x2, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @fda={0x66646185, 0x6, 0x1, 0x21}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 19.700613988s ago: executing program 32 (id=2199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x80003, 0x0, [0xb4a, 0x3, 0x3, 0x100000001, 0xa15, 0x6, 0x100001ff]}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000300)="b889008ee8f2a70f22e76766c74424000001c0fe6766c7442402730000006766c744240600000000670f011c24b835018ed866b9c90800000f32f30f2d1e00800f01c4baf80c66b8351d368066efbafc0cec6766c7442400000000006766c7442402000001006766c744240600000000670f011424", 0x75}], 0x1, 0x2, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @fda={0x66646185, 0x6, 0x1, 0x21}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 5.303119754s ago: executing program 4 (id=2419): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000001180)={0x7, 'vlan1\x00', {0x20}, 0x9}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd97000) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000020c0)=0x9, 0x4) (async) futex(0x0, 0x10b, 0x3, 0x0, &(0x7f0000048000), 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.23713332s ago: executing program 4 (id=2420): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000004340)=0x2, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) gettid() (async) r2 = gettid() eventfd2(0x6, 0x80800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="0100"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x12580, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'netpci0\x00', 0x4000}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'netpci0\x00', 0x4000}) r7 = socket$can_raw(0x1d, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000001240)='cgroup.kill\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(r8, &(0x7f0000001240)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) r10 = dup(r7) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r7, @ANYRES8=r4]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r12 = userfaultfd(0x80801) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r12, 0xc020aa08, 0x0) fadvise64(r1, 0xf, 0x3, 0x1) sendfile(r1, r1, 0x0, 0x7ffff000) 5.23671696s ago: executing program 0 (id=2421): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) (async) open(0x0, 0x80ff, 0x36) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0]) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') (async, rerun: 32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x8001, 0x400, 0x10c, 0x3, 0xd, 0x4, 0x0, 0x0, 0x86, 0x9}}, 0x50) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async, rerun: 64) r3 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) (async) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x1589, {{0xa, 0x4e24, 0x3, @mcast2, 0x7}}, {{0xa, 0x4e22, 0x400, @empty, 0x81}}}, 0x108) r4 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) io_setup(0x5, &(0x7f0000000480)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x4040, r8, &(0x7f00000004c0)='2o', 0x2, 0x0, 0x0, 0x2}]) io_destroy(r7) (async) io_setup(0x5bf, &(0x7f0000000340)) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x40d00, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 5.167771555s ago: executing program 0 (id=2422): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x6, 0x2, 0x4, 0x8}, {0x8000, 0x7, 0x2, 0x5}, {0x0, 0x5, 0xa, 0x9}, {0x5, 0x40, 0x3, 0x9}, {0x401, 0xf9, 0xd, 0x1000}]}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 5.167304635s ago: executing program 4 (id=2424): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x8, 0x4) pread64(r0, &(0x7f0000000080)=""/96, 0x60, 0xfffffffffffffff6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x281, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x9) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x9, 0x80000000, 0x100000000, 0x2, 0x1], 0x1, &(0x7f00000001c0)=[{}, {}], 0x0, [{}]}, 0x88) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80100) write$P9_RFSYNC(r4, &(0x7f0000000300)={0x7, 0x33, 0x2}, 0x7) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) r6 = fcntl$dupfd(r5, 0x406, r4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0xa, 0x10, 0x2, 0x80000000}, {0x1, 0x9, 0x8, 0x9}, {0x81, 0xf, 0x1, 0x9}]}, 0x10) getdents64(r6, &(0x7f00000003c0)=""/139, 0x8b) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000500)={0x1, 0x5, 0x6a, &(0x7f0000000480)=""/106}) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000540)) r7 = add_key(&(0x7f0000000580)='id_legacy\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)="41ac98e3aa6c28b37247159d41d6c3b8776dd945d512039cff2df8cfc6545649c77f5eb233ac205bad6f850cc835faf300b80afa51777c45cdf1cbc1a959ed56b4b07b10cc3ebb4cd5d1127faa1687bd22d99c3ffb05260b2390da0f860daf16a9f4d7f24985323e9605fd4e54fefb1c245b0da2ff", 0x75, 0x0) r8 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r7, r8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000700)) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x80, 0x0, 0xffff}, 0xc) socketpair(0x5, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f00000007c0)=0x1, 0x4) read$snapshot(r6, &(0x7f0000000800)=""/196, 0xc4) openat$random(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000a40)={0x1, 0x7, 0xe1, &(0x7f0000000940)=""/225}) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 5.078677302s ago: executing program 4 (id=2425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1000004000003a) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000000}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x36}}}}], 0x28}}], 0x1, 0x4008000) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0xaaaadee, 0x37, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4.900186577s ago: executing program 4 (id=2426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x4008040}, 0x448d5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000040)={0x3, r5}) r6 = eventfd(0xfffffc71) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000000)={0x3, r6}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_control_io(r7, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b3a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) inotify_init() r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}}, 0x4000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f0000000700)=0x4, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$P9_RLCREATE(r10, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x20, 0x4, 0x6}, 0x685}}, 0x18) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) userfaultfd(0x0) 4.791775636s ago: executing program 0 (id=2423): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x202402) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0x6fd, 0x1, 0x0, 0x5, 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (rerun: 64) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) close_range(r0, r0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ioprio_set$pid(0x0, r5, 0x2007) 4.777968677s ago: executing program 0 (id=2427): getrandom(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2b106b47", 0x4}], 0x1}}], 0x1, 0x4040840) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x800000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r7, r2, 0x0, 0x80000000) 4.149183457s ago: executing program 0 (id=2434): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x406000, 0x8) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0x8000, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="0209000902"], 0x10}, 0x1, 0x300000000000000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001140)=[{{&(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6f, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x2, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f00000002c0)=r5) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x0) ioctl$EVIOCRMFF(r4, 0x40085507, &(0x7f0000000080)=0x100) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_FREEZE(r6, 0x400c620e, &(0x7f0000001400)={0x0, 0x0, 0xfc000000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa0300, 0x0) 2.826686253s ago: executing program 3 (id=2441): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f00000005c0)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r3, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006680)="8e503ba12553ae35664093744598ff2ed98313cfeff69bbb1f3ba451bc98d27cf439225d75522ac543a153ac5284bf131a87e53d0b20f8dddcb2af841def3e560070344be18fcee4983553ba856738012b512e3dc760fb581a17e5622e0e22e22546476d6cc6d6d94d828a2fa22ec77a1cf082f5ca88f1f8976e8b6c3a7a537f8f50b432bf4df69c912bfcc539a65851f86b23f24e714e0643429ec1198ea1647316538a3ce23fad21e19e087c0dedc7aa6d5e4b0dcbfcbe22c857f5a848aef15126b9ecc810249cbbc82c8b6ba49e46b71cb79f6ef9449d0838b9130946398941a4c64f6e2d84118b60ed4ccfed8a26446032fecf87434e71b7989253f64feb6d2e1013673a9600b1915174e55ad78d1d666fb75c24142e44ceca89a18ca66b4b5e66ba953ca42fb6a36d4a3612a2948393f67a7d1d0957a8553c73855fd007abbb6c3d4bbc943f3b102bb2ea6f40e714516a3de91acc6e1468e9e7b66ee57815da23054153d9d5fca6bdb26ed8f7754d88154d46df2f2e4964ee5d7f47e9218d6877c3b232c945cddeef70b24e5c6c434fa30fd0a2ad1c348c3658494f7cfdfb6bb56b43f1d9b2d049c1166161c3232ada01f3c789b2d6958cdd9f044a654f8397d64cb928f4d57f0c4e9739afbf3afbf0e9f84d56a1aba6db7538d98404b7cdfa97f8770a6df4a13145c1d0cfb7ec0349b5639d9180eada54b2f8c12472fb379901e6d514fbfd6d41d2dd77eb42608a784fc016ae48fb126776b10be5c03f62ec90987e766d20d821a17c03e0d867f4aa3f4902fb803e8261833aa9397e107e6c100daa3d8b792bf4b5081ef56670762b5ae3f528836029ca332f44fcc5cf3750f39091985032afa8dd2e80b69cbffc29aa13fcdc0ff811a108794b4154ecaf70e58a9f70a573cf9d1040e23f5a04a873a583e4ab0fa5f77d620c60f0a45cdc789b849e9e8746528846bbbf8251a84f2aa97ccc3e49f4c9b6abf0248344e86a71486eba9e62ff5920bb80ceccc5813f068da0d5aa208c440b7889118d2f4e8baf22a84544f232d6a3a1aedf31d5fc22f0ece56ac611b1363ff35e5071342a0257d3f146dc3ea1cc795d2f06afeb1d6995e50eb2d2d21dc6c4377a2626dd9486446517d03a4a03c43ef2e255a92b775c198bfe92c21375599235aac33c69190bbbfaad76860d0c9e70ad53273460c370b06bdf94ee8bfc31c48609ff6de0d39f873ec11e8c2835f17b3f18891c8ae335a7074fb5a5c794007a327fbb2622e71d62e43f50a00cc59b7eeb3f8ceed5d87fa5eb62a7a8c74ec90b1096a0b24606bf14b1f13f78ea4ab522304c7ca1d7b8ae47b5859f6a0d9baf3b6ffd29a4fb6782732febcfa51446aa87691ac81bf891717fbf8e4deaccac63477d3bc7b8ed52e9b6ca3fd39eefee6a337c2ad76df9739e2fbff34bf36027be0cfbebfe5b2fd168d75b2fd64479e2faf85654c013955e04044a9b7bf8b3d42da91962796bfe6eb53fe29e36a7a7512a155c712ae561d885703cb26d72e6f1df3976cc665960f871f3110309ffb6b5a79e54057a7a286c62c11e973ef671e86051686f77992f985d729740f38fecf83e03a1fef542cd6b4cee48546f67873a9c682c4afe4a5beccfc64085c622c5a0b5a1f6355f938d16925cabe61426a837c48fd6ad790afe54448fb296a03322f3427e132e8c0623bd311af8a619c2d91415e851744941700f09a2d8471def9dbc448c6aefb4c664f8902c872cc7de9d26e8b300b55b1d08a80257095efef35d9b497487607a22bc95c68f39aeeae243e76ccd40dd1b7ccad6eb39b35d91d239b2b005c8bb6e50037ffb1253276e20384398a5e97ad705fcffd04c720539ddf80cf4e929e82e3fec3d7542e0b7495733eb5da29f6dff5a34ec88a71881f660a5bc9481e755fd3c5683e95ed97cc91ab0edf49afda477aea42bc436b364747d973d61be806e1e63b6982e42814a13c5adb3bd767ec724d2d654afb106198fba6b4c798f4b82f329c2b8055ac4d247da971e32eb4cb971c9ac99d18c0a216d48dd7dffd372e0cad9ce6f05b06e47842c2f53b7c987139c6ddac3446fdb163342f8ca8f5401db91d324a6b710f28dece5839d37760c2515d6ad815a746cd7ccd3a438a5d3f28ca331f6874dedbab107c64127a7590a2813c1287ca977807827d52df80a9c19bc7ef335791da1be53c89f6de8ee1f02f26069b786f22bfd23cd8366e3ca02c0b296d0966d7f8fdbc0ef06895c547224f1a01c92d5f43f81b35539469d1fd9cd76dbf8cdd21b479a6474578863c9906ce6b12d0dbf5a458dafc042fcabe64aeebeb70c0da9300ed22e5d2851c5e77b20f9da1cd26cd810e0b8f1ba17d7c819e8a8ad86aa5bc4eb64748b75ab4a85f05bb1dc542234ac175eced1fe8f3fbd86f1c7349a360f5af0244818df303dce6842ea7afa722be19cf162d671256e5659c77c5569d827b28dc44b7dbb7d9433bc9eff26edbff36cf796b8afb285393f2dab6bb9a3ed40dd065ba8a8ab62cb575e696b97a2853b1700835ae429b983a5bb88972e367f5996a21e9a3b00e943e15c1163fdee023e1cf6e8dc42655cb175590fb6b8c46148b37957c5026aa94e96cbb71bcf9e7899c489edd9b34ca2d3d0dbd29f135cb158652ded6c959820b26a5fb6e8f3a6cfb80bcfa52c36ae0a3868914bda36b5ac09d2ae6cfccff9859550cfc5c6c3b30cddf6a2130c0c563445ae10634f38c65a47aeb8c72a0f25a6747a6787e703e1723303dd6d5bd4303240cb6d4659ee32d80b92859327e882ec84d9bb2a6976d9c6fa450d5598c6af1c92fc4ed7614e3192a06e62e704278424e2e5d521ec4f2cbd87d9b8a65405e807f6247e3f9228e8a5c44e31c9de9247d1b8248ce71d34663cbfcce728c9f08628629fca3f334566118aeb86470886147d714d2dce240408fac3c971b851dd33cb7997e238a2362195ba4f0e83d5c1c5039328817f258d6645bcbc20512398a7a34e2288585b4dc626c6867f3af5a0f573492cdb04e5613bd95bcfe6a61541c3912b4e841b34db2820ed5aca226dcba496f9586b83ab44ed3b9f34cfd2397f36dc4f9811815b975a208b6cd163031296b289b7d202036bca9c4e862f6b1d6356c3c54d47de63e0d0b38e7b9e41e1b25d94fbd03853f786fcf2325020355469e52dd2cfc879e2758382f609173cb2c01775030d1d536af97f5bd0a4b71ad9bf3e5becfccd7dce72fa8882733d2c32cab1338ce67f301be74b1c51dbacff9bdc22868f3f16531cb86b7597aff03040a821c4f7cae2b5b92db792f327dce81e79ac83d4ca15aa248ddc2fad518ebd360c5ac8ff3636e15e8ff61501b1e5c6338847ff43c0d3ed38c87aa623c318c8facffb72fbad8bf4effdd2013dc60ad91f1f5a791905b572321ce0956ffded80e2152b0672875fe71923de673ce343a665d327560c5267223b6fa636ef188b94d4a42884721b4f2d51f90ff3e5145aab164fb56982648a7215601d23017b749c01b684082e250330d109af89bf5d20ca788fbd95fd8d1c128aad3306c4e1bd1c054def7b7ea1948e3c95826078991d234808f55c2314706c8177d7674b2378792afe66b2d65484b481b0e52d8b60e0980163fcf2fffa2cd81f4dbf57afd76fd4e71ec8a6604a697fcaf57e65bba50489f6f0c5b4c046a14303eac05700550ee10fa29d8f68a9eb02fa504b640865f7e2c21f1451ed7d75c90a4734ba64327bc3597b5aff23d0a8f1229f0539720bece2b980f85e11c5ecbf3a560e5dedc40e1260349ccbc647d4d9763b17a45fe1b63e5d16e1a49d55c0011e3ab898b64a6618682bd7bb7e8ed18dafa1b462f20f6aaf2d7c4777a6fb73aa7a1720d67a644f4f4b0bc3ff965e696fd3513979f2e72289dec447af56b240380cfa2a9ce38a808e961d26b6ee6810c75778e9d23a93b3f79b3b293f138f23ef2596b60ecd4afc2036debb7e14f61774d84c1325ee7b8f95dc80c12b001e32e894516473a82aa2c24b5ff7f8c3374e245f1b3ff2a8cf0cc33ecd4b9b7528c34cf54d77756ed3e1b74a0e66c9c1dd8e53c123872c084f70e8a04efe8a8c3527ba75f4d9ced8469229ad7453a1376cae90b155638696103216a07b02e93e3924c4a98d159ce8633b2c8bda44ef28f37ba5edf1e80184c9ac2c8b0db77096dbf2f866536ac4f5ee9eed4bb8dfe0dad4361e901450ba499c119aa1af2a1a7c527b09562a47d8260bd7647e29ee422432f063a84d195e9c843e6f6fa684dd044bd09b8cb3e7a976df68049f09caba37b69a595cea61667f2631e561be743309568b4c37fdaed8ebc628889bc3bf9c5a63bc74e9358a9c2228f51370eb483ee39e682cd4f56f15a16217904c6189ef50044e04f244da23d1c9f41a5209f4f485df4ad8d1922203d365eb11102d48c93c09b700e177aef00f8bf729c0406b89de32490fca998bd34f80c99be60601d4de10e9a86a5a22652eb9df948daa66529b6445cdde70ad125d06e41a3469216233a8b9eeb928f2d041eded321d518f0435ca377e90ae49e95793aabccf299c1f1a82ddec49b2b8732aecd1610d5f09cc5e509d4065c5cfb4edc55f6a15fbaf4dea24439ea95b63bae312ed90e47787000810f22ab9b6aa0622ab969fa30b724b24d82447d6a357468b2d1ec61a80ae680ff7b8b894158218b0e63f99103879f3c1dae33aedec60a1e755755604e33a6698cd0e378b0a0b04017278411f33eade9c4c0e3b7d0d6e62fdc3ebf5559310e0a2913d5aff1ce1bead51578b3879c0e25d96a7a150ba655c97875d864c3a6d5b595ff9dd9698857b3b0bab2d087bbf7f80f5a7225cdebf794ede16a61ca73201f311f87ef9cececb8fd07b2bf384a22a8ae988a5e91e6355e26ac923e78004968bf7f4ae3b319e61a422a43841831a51e2c41df8a118da5239c87b4b0aceb32854413d53e0228090babc167ed6600041390ce04e96c94c65c51fdc00e617e4ed870fe9ed2bbef84c1e1f3f796b2867b0f383b6e01ba2b82ecfced722ac5a7c092716d18b9b41674c342a1a6a7ef961893d451648cce5d0ccb4c180e0493a53f5453de43a6535c486acbfb9f480f3255f998831b684a468a88840e1e7e8a310ef296ce89bef65b7e54265c88bff204e48963cea9945608260e5de37b949acacc938e8e2de9fff925022c010f94a0cd6c7bf16d4e3132034a8a3301f1c1950b9a31ee8227b17cbf460db666f6207a59783064115eac2d4f29f9483ebcd34e8792809d5c25a380b2137bbcd7cda502f4a41a043f7d626e922adec9b4c6478ac0df9842bd4e8912deb2ad2026461510ca392383ee9a7ad0388ae499951a4283db39ca57ed9bebf43dcaa6caa391169077a189641fda3151d8e3a3a0b525dcafa2d9d7b2a01468e658c10c27a8ba74b487a968b05031a3d53b59139068b28ca87c5bfd9db867c0e9b9abd91142c96dbf8883e1a89db8d96c9f0a8999a4f9d6b07f32d6f8bb2ea6d2eaa8a531edf85f25aef35c84eb4bf3f46ab4213602be20cad885d404ef47fafc7793247247848f1c3a06ea31c23d0cbffa07aa5981714dc85736e95cd4d60ed1f25351b1c723e4f042f55f02d24a089862df124c75cc4f618853914439c1406a393a0f1ec0f2346f4cbd6beb17713149d67b9bf1854c814bd8ba3a199218e6eac655db998c955df382c8dee2b4d30c750a63a08e9a88009840e96a331bde3767bce177fc5c44528cb673e862e24c2dc2399be1435cd20916e9e060f8bef39d4b47f335dde4493e0e44b0f619822a35e69b7c5d93dc69575ff71ced7c858e43dbee46f4e50846288cbc8fecbb9291d455a015fdd6e1412aec0e6104d0377074b8e160ec7d813bbc6d3b8e6b0256bce8d255d7a592b408cdf6e63164c99d94f00a693e06c2ecba9dc6d36c6a35697c1647f942df4c805c18344b8e5ac885689068f864c395e8c970702e40cf6c683d10455c7ad75fc035ae260f359c2d8c91305406c6f56ec535be445601c75ffdde1758904787f29a558d0f3bd04bfa08f1612a7ee8a7acf129ed5eb854bba757d34afa354098ed8b4e3a599db4b7611a665fcbbb182a0774cb026a00714d8b91c7fb8691b629b6a93f92da2f3701348885dcefe5a548c90101e50dbaf3f4907611623f7616bcea943bd3feedecf3b3681b4d04a938ac83d9f18a21991a90dc17005e7c56d2e09a0f4ad9f3c676e7da478e96122046d0a167f7e1a28d97d514aa68d24dac8501a1a35ddb6f3703311b26bfa3319361ff5e4d38cd55a04ef1b4fb417a3b638cde7f8569531a22c0fa12ad3a55dfe3c2642205fe1ba0c82d36f8815ec52f6381fe789fcf89efb305498a9b1f0ffafe01bcc5581f5b5d195bba77797085ab1837fd081cf5f086da2a16b6a7f8ca9efbc4c9cf771961b70626120e3715b16b222932291e4ee2449591b1807d56a53d4d86f25011704e7d5efcb799ab130ec2aacd54afd3c43c8acda1c5874ce23234b090c4eaa8ddaedf979b1218a5b9dfb36b8196ce05924dcdc7f50d96b95d0c288551a0498ff23f56c7ccdfb8966480477849c7471bea99cb0af35dbcaa5e781b5ddecf3cde51d78067aed9ca267550dfae119a3d83710ecb92fe80841837b41a40d262f5fad16c20203d1cc3455ca63ebdf0f5dbb7a498b4629dcb87333f2d58726871e6b5adf60faa0f8c9cb4718005e5e199457330da1a11cd0d7e78f617b6805fff8fa45c2cb56e1e17904773e165d2a39470ce1616418e7e15481c798afed92efad9c2babcc3e3346f8022ce30b3e1db015a2b9f5dbd4560ee9776c77eb9cff5cf2af28ebf1085650e29bd8dac01b814e6c285bf964da2eb1a442aeb671589a02c29d58208829c9501c355644ac28c38835f4025dcdabfd3852b1a16e45e9c032e97f7f2f0f612739c6569f44731692e3f3b97ba5bcd0b7f2dea1ee6303b5f92514c022e54aa4c587eff74a5d509c17785686c613bf6b778e3624ff3653674e6daab3f788ec9cf879f06957a673a20fdccf721ced05a0d23e074de82614f775a84dfcd31c621cf0369e28791ab742b62f271218fa1bc8681e9d41b4a93b05cc693013d54d367b1e6e1a7e74b43b44b920192ed8fbb63b89f393e5ffab584d7c201d1b99b7bc6907033109986a4fe7bb79e803315c4df94ed471cba889e148645fd1748374015ea8c696ff64bf6d23bce7e5efa7c7e6215ceefa938cd88aa0374da4ee1e10cbfa96d5283b4a0867f4d76b8492fc618e2bca34ba9bc2ff3368756080a78a1ece2f0d1d1cc30cb721677de3c4cd6da378697c40419bc1f2184b86b8e40abd627aab9c308d8fd2db8daf8b43225003ea9124c11dfcbd1b6ea959a86623e360b40c381d991892c1fa6c0c81bb4d03d8d3656cedd1e48539192fc8bd1474ce961159816dcdc76e95ed9d9893e91a0ca670cd1152cb014310facf952fa9fd0d30900196b604c10596c1a31c1e70416824c207656426b09ef9b558496ae87fc7449bfdba0d5628e9af6397385ddadc986424fde545c07664fb6ef2756ed9e443e39257eef2179fb9e4a9e84062f9b6048125151e2e7fad2560df277323b5e22ab2731dc802d6f372d2a335b5da7e5a86508329b3dceb56f0d4f9f6f9e48507af3ec99fc172c237e67ece3d51198a033a9c66f3243ef694893af85421ff6f93ecb95eacceba5fdc1a76810e999a40733b46433328b24ee17b718b135b74dd535202c7966de2de5a26412e600971704bb90007e42d3e6a3acd33e7358da6b32883c9ad30c2abb1cdef7452e211734c6fb6d199a397bea8aa3cf1f014929941c34ba06096e70d852fc420effc7924ec29c03bea29f289c82338f0115e00de549007456d5867253a5b9bb4493bcff815a3100fc45a0de0aad7b0b5c641ed1be3e8f07fb3b1a8a496ecfd3dff5abf0d8f5854621faeb4a9920d8c52b7a0338d49fd21d99c24e1943de3ba2668aea7bc95bcf21e2bf0b2d5f899f33d0cec31b60df4ef5a23e1b173cc89390c8bc3ee96e38de06f6016a2b0eafe86af9dc59bead4f5f948a81b1008a95e3ab39f8009bdb4f268f3002245e73ee2ff50cf1cd37e867cbe44ad370b9336e0dddcffb6dd8f2f79155235300bce6385e544105e6d278d345870216e61100337a871ab51b2cde74fe976e1f8b77a90bb8b51eefe7e4201db41915f482edbe1f8ae268314d5af95ffdeb94aba3f4e316990792d281a123d7febbba7f6abaed7ccfc0c567d4bd1c2d9ca217535167c9a09f1ad0ecaa99cc08338fead5deef7fab77d2082d893b91c27f8ea4e48e052a2a31c8e3f9510c4ce94ef16053bcc25eafa324e5a1d045a3de8f7d731e58ec9130427552323bcfde47f6b55b5634e8cb190fe183af132f12d72ef5e4d98508b57106ccb647ab505369c728958a0789c67ee80acc4bbf41b97fa56d8701c3ec5ead411aed16882dfb026c50c28b5fcc442c432837a82f8bfd47650b83aa71b909be61ea77cc029a0c615f8e390874995d19e224c38349c64bc166f50c54332d1a3eff0071d7a0b11a901c56a847b93ab5bd0bfad8f965cbfb53c2184c588fb7dbc5c693a3ade89b303e801a650b79c1ea957aabed937998b5df77ff29fd43515e8a5ffe441e323fefa45a2775237e1c749897d448f1f3ef60c7755d1a1441b96a136a86d341471d57c68c859813656658266c40b8bb8bafded8ed0d940f8c5954923eb43ad5afb58eb452d6430990bc924afb97191f31cd1a1f58e30b0c243f9636245c459280d16da1df1a30ff63de677554d6b252487455e8aff91370c4a0ba9f341384cf8483d18b9d3f2fc51b07ba8a5fa795d7925189ca344f0fddb8bf55e35013f6fab3806b3c4d17499ec1ae819d4f3aa6b6a570c2ea68558fa33373394584dbf11d41f7059b55f186bd54bdc30dea390872737bf0312f4c68dc963d28d5b218eca6314e23b7381cfbcd01c325d9a3869f1176eb82c183b37d65c8500a48e9bbb1c465e27bfb668a16100e5384d9116aa35f3b00b4ee3bc84700ab17283d4db6b420e6140d14d09b51ad020fc8e505d2c820ac307d45b211213c18487ce12dff233a5caf87cd94a77d0eba69d61452f41c1f82cbe32b567a39a4615a6d2155cc73c3b90dc55daf33c8d9eba3eb0e182c79dede1293dd30840ebf048df8a93e38d0136e856d94ea105cd04323406dc429b5551538625109105d88b1ac480d0fb1e9d1977099707f9f9534b683d855c4d3c30a29c6678a3221e0dea7772f8859f572420708da9a030ddf973cf9f221404117b05efb76bb08ecf34aa9b36b0418c74f90a07e8e5c91e1d7c8a8ea596c0de9b10c222e9588c2bbc77d860b7197b42b42a1ab834ce24fccbbe20f2579ec6dbd4efb9aa1a3d2e062de594d289273e98342440045a0c134e400003b50d4243826b029ecd177cf3d2cf3d164ddc58f88a970a0bbdc7f0d60271cab0df2dde79d1b929cd3028effccbe94c05008f4261297024e4f72604d52db9da7b0e5f2f4f59ebe77b319c54aaab9581a8355b75594eb6dc0fc25e91052c89764256ca464f9f6e45bc34d6e5aa28e1fd93997b58f21feff551aa3ecb5375c19ee4543f7339418c11b9ea18fe2637a9bc9744cc9fcb21a7643eb87683694732154bd1eec746f1c57bac65cf18a83267ea437f7993644c510ac44307703ea28b20e52644dbaabbe9ee1e23a38b29b91cf9077fecdb98ff4e4749c9d6ad2901c5a891c07a8b0c26ad1f8126e6db537df7fff65486afeb85eda80e2a04d09d46720330700267cbcf205b5c00076c01d9db0a64d5426864d14cce1781098afdc28f9f5948ab7791627baf78c3e9df2c0ed9ce50b083bc7a34ee0087f4efde579e2dea313e4e20580c5e63d5ef4509c05a9dc38ced91340bbb9cf948bb03ea5e60c666a1a5c4acd385d0c1a01797b9b3183f4afbc925dd2641d21410b4b1af2f21f8cca330fbc08834e1e8210fdcf332f70f08b48a2655cf017ec8a19640f2f263c54876d6f4ad2193be944667f6498baa32225d2b5b82abd3f2fc64033f1db9adff6b1c788555d5ffa1a35d4a691802447b163ba9a615d6c958036528bbab84230d676145054828d530f0e3af417ad0480eaf2004b9002b644bcd8f0ecf860c31766ace95769ab4fd01f297c595b45e6c7b1c9f662044f43fc82b6244e5d08b1e556599096c034600e20ff000d996b6ba3a6700116127b9468c9567ad920ddcf7ccf9c0a74f49984e24a7aaa2321ee58583c1bdba668cb98c319f682ffc5957015ba1799930d4b676bd3bc76037f6bc2d9ddcb47efebd366a90dc7e67076ebc25e2ef2929a89faee06aa04538a3ae7b196dfecd33725ce9f859c5df4713b220ecd18b1613ba76aebbe8f9f93eeaea9e88e46e7ed24c4efbd86fcd57a4f9fc76152175782871ab211a18ae303be8e9459aab930597d17875c5f5f24d9b16bd8dc4e25f6a7a1de05763da11ee7e26e1e32ee0a5ab2de5d069d03a6ea95a33abc1025d59800fccfff1f0e0f7335e2778b8731cbae94828dbe70507c5369f36d457e98d6042e342cbffde2ee74e05cf0f8aa7185de485e5050294472cd8c7ae03977b62cb287a9d6e4d66650dbc4d89e58ad4f7c24d46573acf85f633d1af73cf655788b431bf22315bdae78d9f6f9cfe32330cbf77bb0195a60244d4bcd0ea35b94bcdf7255ff58f1fb11a09a06747337c95f332a0ade622d49ce0f2943517fb4da8049f3c1b53cb68475c2eb52551d40cbeaf5e79a748c5314bb531b4fc28494b65ee8513427e1fd3cc990fe4ef5ead14b65f1c3e9e0598edf42e2862e2eb180b3e674fc3005859ac56ad17022a8f48b49dcc97e991cfece1d52b7ca82e711944a877567ca0da0663276480d69fa4be56f425bb84dc9177d3e3ed45fb737ce026b8df38336f9efedb89a8650f9fb73918d300c909e9f9189458e1930f09b05433980e79a2eacd0dda32852bdb1a417e4ba62b83d0e17ac8d39834f41c8cd49517013ec658c4e10b38d0788df96764d13ce074271b51041671240549d18540271c8898a5c9e4be4895881235d59666a1f0f3b3cd098786afd6ab4781b73275232b488fb3d9eff77e71f8448a95c653fc80d069c15aa2a80d5799e6c45eb27ea8d6675f28f7aa7cfe3cef877c91ecf3e576e942a20312ffb48a64a91876ec5d1ad2f6a68946e73db4785894736106906731793c3482365d4151051c8d5f16dcb0348628e3aba4087ea8c9ce24bb93190fa12916f529c8eed6dfd3f5bc24d09b1ad377699de3f687b392ec921d81e35dc27bd14be4d004e713c3d07cf600255d45fdfb326b4327c9507c6f69d01236eb9383133dbaa787ba37de14a12e850ec60381a9ffab939ce16cb9b490685343048c0933bc280e809fc8114096ae2d303bbcbbc941b70b5d1d03f59f0b534fa195cbcf34e57d2aaee9c1dcddb5eafd8399fd1d53bfdb48a6f6d3153bb903ce411800f7220bdcfa312ac603672c163a0896b85409859b817cd304e73f278634fab0b1dbe226d7e4f93f220180c3434c7c22ac3143e06702f9a21e66a46d4980bd20d9b0c62846362d0a1151584a28a87902dd0f35187850d501c68900", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x0, 0x1, 0xfffffffffffffff3, 0xfffffffffffffffd, 0x9, 0x0, {0x2, 0x80000808000080, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x7ffdffff, 0x4, 0x6, 0x6000, 0x7fffffff, r2, r3, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64=0x0, @ANYBLOB="020000000000000000000000000000005d000000000000000180000000000000f0090000ad0000000300000000000000090000000000000004000000000000000500000000000000ffffffffffffff7f217f000000000000040000008d0000000400000000400000e60b0000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0f000000a70000000000000005000000000000000700000000000000030000002e00"/44], 0xb0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) io_setup(0x1, &(0x7f00000004c0)=0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000140)='i', 0x1, 0xfffffffe}]) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r8 = dup2(r7, r7) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r10) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000b08be4637c6b979a74c99d2d7e4cd2570a8c9818b5a07b1038ba77bff3def89053087d", @ANYRES16=r11, @ANYBLOB="010026bd7000fbdbdf251b00000008009a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r8, @ANYBLOB="200029bd7002fbdbdf253200000008080300", @ANYRES32=r12, @ANYRES64=r10], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40040804) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOWNER(r13, 0x400454cc, 0x0) (async) close_range(r9, 0xffffffffffffffff, 0x0) 2.74985914s ago: executing program 3 (id=2442): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="000000ffdbff2504000000"], 0x14}], 0x1}, 0x800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r4 = open$dir(&(0x7f0000000b40)='./file0\x00', 0x2000, 0x10) fcntl$setownex(r4, 0xf, &(0x7f0000000900)) (async) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) (async) syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="440004000000dbc9fb21f7f7698dff3604a915b2c9db57c77c26a5264f885c5182e727b51ca2affa3f1e99c6d3ec30ff551fb0198b10a2968fc963d2c6"], 0x0, 0x0}) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)=ANY=[@ANYBLOB="66063d", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) sendmmsg$inet6(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) (async) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async) sendfile(r5, r0, 0x0, 0x80000000) 2.289640356s ago: executing program 1 (id=2447): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="0000000000002000ff"], 0x54}}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYRES16=r0]) 2.288977636s ago: executing program 1 (id=2448): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x600580, 0xa4) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x3, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0xfff, 0x80, "c42bacc6b225b34e"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x40, 0x7, "e1dd43ee"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0xf8, 0x5, "a46bb85a08"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x1, 0x7, {0x7, 0x25, 0x1, 0x82, 0x9, 0xfff7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x28, 0x6, "88"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2b, 0x1, 0x8, 0x4, "ccdd"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x2, 0xf, {0x7, 0x25, 0x1, 0x0, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x1, 0x81, 0x8, 0x9}, 0xfe, &(0x7f0000000480)={0x5, 0xf, 0xfe, 0x6, [@ptm_cap={0x3}, @generic={0xad, 0x10, 0xb, "7cd4864096649814ccba3ff5208c15630a01cfdc654f89520a0f425fc5c13a756a55f6c76824a22ee679b550934897270c068f3fe46bf0a389eed7806cfa77109be0d691b973d2e3391b310ac0a6bdfbbae06a152104fe06e34ba5a31f84b5f0129312794245a4a644e8c6df3ff927b9297714dec27800345ea5f5a183503efe3f66e4097cbe22ac4e65c970aa92ae7a912ffdc786a0d05d5cfd8b7f80c40b7f39b3b404fcdef1cdc494"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0xc, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x3, 0xf000, 0x100, [0x3f00, 0x3fc0, 0xf]}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x9, 0xf000, 0xc8bb, [0x0, 0x18f, 0x3fc0, 0xc03f, 0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x7, 0x3ff}]}, 0xa, [{0xc2, &(0x7f0000000580)=@string={0xc2, 0x3, "df7b9d4305ea732151e323db04fc17757211fc335165dd2e9c8232d9076dbc7dbf6bd05feed171146edc63edb6feb3b13be07ea9e2a635665463cd183ae2fa73f3216284dddc886cf3a275cf72301e74df9da59d7abf83916f2eea5e9610f5f9d52ce210dc7fefdb32fedfe2a3c7bcd6bf64c5a063e2bcedbb0fadf8732684114ae8d257e4f61eab91b30a04885eff1e313fb89eb82c2119dadd59520841b9d56b05d5b633e880867e8b97525addc9d618f48a67ec194da7a9f7ee7602b05dcd"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x8e, &(0x7f0000000780)=@string={0x8e, 0x3, "d2cf4692921b2d85c8307ae34e5c857dbcf90891fd2dc0d7a666e2535a0935065213031ecb297ea0c4b49a7a4be80b8b575add01a0bc3f3c5d9a96f94274e8434e36333eb4990a037bd414995fa79768c8d340de858d2d4cd886d818bd2acdf474b538c608c8c6a268abecc92ef8ea45fd37589ddafb20b42514c06de89dfdf5ff75944e8f5e41485f86c4ac"}}, {0x38, &(0x7f0000000840)=@string={0x38, 0x3, "5d603522fc606e3c6e7f1a2d3227da880e28d9a01c78d960877dea208a77be8fb309524c5d22e6fb704feec1070dd3f08e5851123cf8"}}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000340)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x6000, 0x3, 0x0, 0x3c, 0x9, 0x7f, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0xeeef0000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x10000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0xfe, 0x0, 0xf5, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x83, 0xb1, 0x8, 0x4, 0xac, 0x80, 0xc, 0x5, 0x3}, {0x1000, 0x11d004, 0xc, 0x7, 0x7, 0x5, 0x1, 0x3, 0x1, 0x80, 0x3, 0x4}, {0x100000, 0x3000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x7, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0x11, 0x0, 0x3000, [0x3, 0xfffffffffffffffc, 0x3, 0x2]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x600580, 0xa4) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x3, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0xfff, 0x80, "c42bacc6b225b34e"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x40, 0x7, "e1dd43ee"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0xf8, 0x5, "a46bb85a08"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x1, 0x7, {0x7, 0x25, 0x1, 0x82, 0x9, 0xfff7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x28, 0x6, "88"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2b, 0x1, 0x8, 0x4, "ccdd"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x2, 0xf, {0x7, 0x25, 0x1, 0x0, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x1, 0x81, 0x8, 0x9}, 0xfe, &(0x7f0000000480)={0x5, 0xf, 0xfe, 0x6, [@ptm_cap={0x3}, @generic={0xad, 0x10, 0xb, "7cd4864096649814ccba3ff5208c15630a01cfdc654f89520a0f425fc5c13a756a55f6c76824a22ee679b550934897270c068f3fe46bf0a389eed7806cfa77109be0d691b973d2e3391b310ac0a6bdfbbae06a152104fe06e34ba5a31f84b5f0129312794245a4a644e8c6df3ff927b9297714dec27800345ea5f5a183503efe3f66e4097cbe22ac4e65c970aa92ae7a912ffdc786a0d05d5cfd8b7f80c40b7f39b3b404fcdef1cdc494"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0xc, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x3, 0xf000, 0x100, [0x3f00, 0x3fc0, 0xf]}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x9, 0xf000, 0xc8bb, [0x0, 0x18f, 0x3fc0, 0xc03f, 0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x7, 0x3ff}]}, 0xa, [{0xc2, &(0x7f0000000580)=@string={0xc2, 0x3, "df7b9d4305ea732151e323db04fc17757211fc335165dd2e9c8232d9076dbc7dbf6bd05feed171146edc63edb6feb3b13be07ea9e2a635665463cd183ae2fa73f3216284dddc886cf3a275cf72301e74df9da59d7abf83916f2eea5e9610f5f9d52ce210dc7fefdb32fedfe2a3c7bcd6bf64c5a063e2bcedbb0fadf8732684114ae8d257e4f61eab91b30a04885eff1e313fb89eb82c2119dadd59520841b9d56b05d5b633e880867e8b97525addc9d618f48a67ec194da7a9f7ee7602b05dcd"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x8e, &(0x7f0000000780)=@string={0x8e, 0x3, "d2cf4692921b2d85c8307ae34e5c857dbcf90891fd2dc0d7a666e2535a0935065213031ecb297ea0c4b49a7a4be80b8b575add01a0bc3f3c5d9a96f94274e8434e36333eb4990a037bd414995fa79768c8d340de858d2d4cd886d818bd2acdf474b538c608c8c6a268abecc92ef8ea45fd37589ddafb20b42514c06de89dfdf5ff75944e8f5e41485f86c4ac"}}, {0x38, &(0x7f0000000840)=@string={0x38, 0x3, "5d603522fc606e3c6e7f1a2d3227da880e28d9a01c78d960877dea208a77be8fb309524c5d22e6fb704feec1070dd3f08e5851123cf8"}}]}) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000340)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x6000, 0x3, 0x0, 0x3c, 0x9, 0x7f, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0xeeef0000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x10000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0xfe, 0x0, 0xf5, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x83, 0xb1, 0x8, 0x4, 0xac, 0x80, 0xc, 0x5, 0x3}, {0x1000, 0x11d004, 0xc, 0x7, 0x7, 0x5, 0x1, 0x3, 0x1, 0x80, 0x3, 0x4}, {0x100000, 0x3000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x7, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0x11, 0x0, 0x3000, [0x3, 0xfffffffffffffffc, 0x3, 0x2]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.739808971s ago: executing program 4 (id=2449): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x83, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5") r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 1.433765216s ago: executing program 1 (id=2450): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast2}, 0x4}}, 0x2e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.317372264s ago: executing program 1 (id=2451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffd) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) 1.306732215s ago: executing program 1 (id=2452): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2c480, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000040)={@broadcast, @local, @broadcast}, 0xc) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b35, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000b7, 0x0, 0x1}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.298825266s ago: executing program 1 (id=2453): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x11, 0xa, 0xffffffd) r3 = fcntl$dupfd(r2, 0x406, r2) getpeername$packet(r3, 0x0, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @private=0xa010101}, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12015002c77c6640388ed6746cd601020301030212000107f1408108fc2bd90008015002"], &(0x7f0000000e80)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x800, {0x3, 0x10001, 0x5, 0x4, 0x3, 0xfff}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x0, &(0x7f0000001200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d00000008000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000001040)=""/133, 0x85}], 0x2}}], 0x1, 0x40000000, 0x0) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r10 = syz_io_uring_setup(0x3a6c, &(0x7f0000000340)={0x0, 0x2904, 0x2, 0x0, 0xb3}, &(0x7f0000000240), &(0x7f0000000140)) syz_io_uring_setup(0x4208, &(0x7f0000000080)={0x0, 0xff7ffffd, 0x100, 0x1, 0x8000000, 0x0, r10}, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r9, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r11, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) 969.465213ms ago: executing program 3 (id=2454): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="736592e46162656c2c00"]) 968.997913ms ago: executing program 3 (id=2455): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@verity_on}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)='\t', 0x1) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 965.330823ms ago: executing program 3 (id=2456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000c00", @ANYRES32], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 911.208827ms ago: executing program 0 (id=2457): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe80"], 0x58}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000e", 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 0s ago: executing program 3 (id=2458): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107}) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3b) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3b) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x4, 0xdddd0000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x3000, 0xd, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2, 0xe, 0xfc, 0x3, 0x52, 0x2, 0xd, 0x46, 0x3, 0xff, 0x1}, {0x100000, 0x0, 0x9, 0x3, 0x6, 0x1, 0x1, 0x5, 0x5, 0x1, 0xe, 0x4b}, {0x2, 0x1000, 0x0, 0x7, 0x3, 0x6c, 0x11, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x80a0000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x17, 0x1, 0x3, 0xff, 0x8, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x8080000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0x401]}) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x1}) (async) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x1}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000015c0)={"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"}) (async) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000015c0)={"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"}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') kernel console output (not intermixed with test programs): 957][ T1622] 9pnet_fd: Insufficient options for proto=fd [ 67.586952][ T1624] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 67.594117][ T1624] rust_binder: Write failure EINVAL in pid:243 [ 68.095670][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.128174][ T1632] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 68.191575][ T1640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.199608][ T1640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:330 [ 68.297276][ T1647] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 68.313513][ T1647] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 68.313894][ T1647] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 68.399433][ T1649] rust_binder: Write failure EFAULT in pid:357 [ 68.655991][ T389] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 68.667463][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 68.667482][ T36] audit: type=1400 audit(1756097360.138:568): avc: denied { read } for pid=1658 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.815813][ T389] usb 4-1: Using ep0 maxpacket: 32 [ 68.822307][ T389] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.831115][ T389] usb 4-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 68.841130][ T389] usb 4-1: config 1 interface 0 has no altsetting 0 [ 68.849045][ T389] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 68.858150][ T389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.866150][ T389] usb 4-1: Product: syz [ 68.870314][ T389] usb 4-1: Manufacturer: syz [ 68.874926][ T389] usb 4-1: SerialNumber: syz [ 68.880554][ T1651] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.089088][ T1651] /dev/rnullb0: Can't open blockdev [ 69.102081][ T1665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.105221][ T1665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.112112][ T1665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:342 [ 69.117290][ T389] usb 4-1: USB disconnect, device number 9 [ 69.119017][ T1665] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 69.140831][ T1665] rust_binder: Write failure EINVAL in pid:342 [ 69.142960][ T1665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342 [ 69.170290][ T36] audit: type=1400 audit(1756097360.648:569): avc: denied { lock } for pid=1666 comm="syz.2.397" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.174560][ T1667] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 69.211390][ T1667] rust_binder: Write failure EINVAL in pid:344 [ 69.385350][ T389] usb 2-1: USB disconnect, device number 31 [ 69.439202][ T1690] random: crng reseeded on system resumption [ 69.444824][ T36] audit: type=1400 audit(1756097360.918:570): avc: denied { read } for pid=1691 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.467690][ T1692] input: syz1 as /devices/virtual/input/input17 [ 69.577613][ T36] audit: type=1400 audit(1756097361.058:571): avc: denied { ioctl } for pid=1700 comm="syz.0.408" path="socket:[15454]" dev="sockfs" ino=15454 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.602739][ T36] audit: type=1400 audit(1756097361.058:572): avc: denied { mount } for pid=1695 comm="syz.1.407" name="/" dev="ramfs" ino=15455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 69.625014][ T36] audit: type=1400 audit(1756097361.058:573): avc: denied { write } for pid=1700 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.647212][ T36] audit: type=1400 audit(1756097361.058:574): avc: denied { read } for pid=1700 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.682580][ T36] audit: type=1400 audit(1756097361.128:575): avc: denied { append } for pid=1700 comm="syz.0.408" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.695933][ T1705] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 69.809641][ T1705] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 69.837311][ T36] audit: type=1326 audit(1756097361.318:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70d4f8ebe9 code=0x0 [ 69.921803][ T36] audit: type=1400 audit(1756097361.368:577): avc: denied { create } for pid=1723 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.948562][ T1731] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.949958][ T1731] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 70.165659][ T45] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 70.316728][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.339584][ T45] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 70.364212][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.390303][ T45] usb 2-1: Product: syz [ 70.403228][ T45] usb 2-1: Manufacturer: syz [ 70.426858][ T45] usb 2-1: SerialNumber: syz [ 70.526162][ T45] usb 2-1: config 0 descriptor?? [ 70.735244][ T1729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.766165][ T1729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.784495][ T1729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.799050][ T1729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.822471][ T45] usb 2-1: bad CDC descriptors [ 70.835814][ T45] usb 2-1: unsupported MDLM descriptors [ 70.845446][ T45] usb 2-1: USB disconnect, device number 32 [ 70.859856][ T1764] input: syz1 as /devices/virtual/input/input18 [ 71.115698][ T372] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 71.135668][ T333] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 71.266699][ T372] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.276955][ T372] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.286876][ T372] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 71.296769][ T333] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.299854][ T372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 71.310374][ T333] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.316626][ T372] usb 1-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 71.326510][ T333] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 71.334491][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.352903][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.357703][ T372] usb 1-1: config 0 descriptor?? [ 71.361212][ T333] usb 4-1: SerialNumber: syz [ 71.575238][ T333] usb 4-1: 0:2 : does not exist [ 71.582355][ T333] usb 4-1: unit 14 not found! [ 71.590004][ T333] usb 4-1: USB disconnect, device number 10 [ 71.600771][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.665674][ T45] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 71.774059][ T372] wacom 0003:056A:00CE.0011: hidraw0: USB HID v0.00 Device [HID 056a:00ce] on usb-dummy_hcd.0-1/input0 [ 71.815663][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 71.821775][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.831873][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 71.842088][ T45] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 71.851156][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.859158][ T45] usb 2-1: Product: syz [ 71.863295][ T45] usb 2-1: Manufacturer: syz [ 71.867894][ T45] usb 2-1: SerialNumber: syz [ 71.872961][ T45] usb 2-1: config 0 descriptor?? [ 71.978934][ T333] usb 1-1: USB disconnect, device number 24 [ 72.280517][ T45] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 72.290628][ T45] asix 2-1:0.0: probe with driver asix failed with error -71 [ 72.299730][ T45] usb 2-1: USB disconnect, device number 33 [ 72.445655][ T372] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 72.505841][ T1787] SELinux: failed to load policy [ 72.511086][ T1787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:279 [ 72.572212][ T1789] rust_binder: Error while translating object. [ 72.581478][ T1789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 72.587756][ T1789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:281 [ 72.597105][ T372] usb 4-1: Using ep0 maxpacket: 8 [ 72.616585][ T372] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.624937][ T372] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 72.633120][ T372] usb 4-1: config 0 has no interface number 0 [ 72.639269][ T372] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 72.650274][ T372] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024 [ 72.661502][ T372] usb 4-1: config 0 interface 88 has no altsetting 0 [ 72.670142][ T372] usb 4-1: string descriptor 0 read error: -22 [ 72.676373][ T372] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 72.685386][ T372] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 72.694049][ T372] usb 4-1: config 0 descriptor?? [ 72.700537][ T372] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input22 [ 72.845725][ T373] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 72.904190][ T45] usb 4-1: USB disconnect, device number 11 [ 72.996666][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.007618][ T373] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.016668][ T373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.025224][ T373] usb 1-1: config 0 descriptor?? [ 73.045676][ T372] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 73.195654][ T372] usb 2-1: Using ep0 maxpacket: 16 [ 73.201908][ T372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.212828][ T372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.222616][ T372] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 73.231678][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.240326][ T372] usb 2-1: config 0 descriptor?? [ 73.433313][ T373] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 73.443102][ T373] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0012/input/input23 [ 73.465080][ T372] usbhid 2-1:0.0: can't add hid device: -71 [ 73.479420][ T372] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 73.481855][ T1801] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.490897][ T372] usb 2-1: USB disconnect, device number 34 [ 73.519632][ T373] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 73.608610][ T1817] 9pnet_fd: Insufficient options for proto=fd [ 73.707953][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 73.707971][ T36] audit: type=1400 audit(1756097365.188:583): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 73.841081][ T1792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.849694][ T1792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.858654][ T373] usb 1-1: USB disconnect, device number 25 [ 73.885666][ T389] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 74.036950][ T389] usb 4-1: not running at top speed; connect to a high speed hub [ 74.045486][ T389] usb 4-1: config 99 has an invalid interface number: 231 but max is 2 [ 74.053773][ T389] usb 4-1: config 99 has an invalid interface number: 173 but max is 2 [ 74.062052][ T389] usb 4-1: config 99 contains an unexpected descriptor of type 0x2, skipping [ 74.070841][ T389] usb 4-1: config 99 has an invalid interface number: 20 but max is 2 [ 74.079014][ T389] usb 4-1: config 99 has an invalid interface number: 35 but max is 2 [ 74.087192][ T389] usb 4-1: config 99 has 4 interfaces, different from the descriptor's value: 3 [ 74.096261][ T389] usb 4-1: config 99 has no interface number 0 [ 74.102400][ T389] usb 4-1: config 99 has no interface number 1 [ 74.108621][ T389] usb 4-1: config 99 has no interface number 2 [ 74.114814][ T389] usb 4-1: config 99 has no interface number 3 [ 74.121043][ T389] usb 4-1: config 99 interface 231 altsetting 255 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 74.132279][ T389] usb 4-1: config 99 interface 173 altsetting 74 endpoint 0xD has invalid maxpacket 1592, setting to 64 [ 74.143415][ T389] usb 4-1: config 99 interface 173 altsetting 74 has an invalid descriptor for endpoint zero, skipping [ 74.154451][ T389] usb 4-1: config 99 interface 173 altsetting 74 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 74.167717][ T389] usb 4-1: config 99 interface 20 altsetting 114 endpoint 0x4 has invalid wMaxPacketSize 0 [ 74.177773][ T389] usb 4-1: config 99 interface 20 altsetting 114 has a duplicate endpoint with address 0x7, skipping [ 74.188642][ T389] usb 4-1: config 99 interface 20 altsetting 114 has a duplicate endpoint with address 0x7, skipping [ 74.199516][ T389] usb 4-1: config 99 interface 20 altsetting 114 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 74.210647][ T389] usb 4-1: config 99 interface 20 altsetting 114 has a duplicate endpoint with address 0xD, skipping [ 74.221538][ T389] usb 4-1: config 99 interface 20 altsetting 114 has 7 endpoint descriptors, different from the interface descriptor's value: 27 [ 74.234889][ T389] usb 4-1: config 99 interface 35 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 74.245772][ T389] usb 4-1: config 99 interface 35 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 74.255664][ T333] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 74.256731][ T389] usb 4-1: config 99 interface 35 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 74.275498][ T389] usb 4-1: config 99 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 74.286268][ T389] usb 4-1: config 99 interface 35 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 74.297154][ T389] usb 4-1: config 99 interface 35 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 74.308063][ T389] usb 4-1: config 99 interface 35 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 74.320770][ T389] usb 4-1: config 99 interface 35 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 74.331532][ T389] usb 4-1: config 99 interface 35 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 74.342270][ T389] usb 4-1: config 99 interface 35 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 74.353010][ T389] usb 4-1: config 99 interface 35 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 74.363739][ T389] usb 4-1: config 99 interface 35 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 74.374488][ T389] usb 4-1: config 99 interface 231 has no altsetting 0 [ 74.387186][ T389] usb 4-1: config 99 interface 173 has no altsetting 0 [ 74.389156][ T1845] netlink: 'syz.0.456': attribute type 1 has an invalid length. [ 74.394117][ T389] usb 4-1: config 99 interface 20 has no altsetting 0 [ 74.408679][ T389] usb 4-1: config 99 interface 35 has no altsetting 0 [ 74.422744][ T333] usb 3-1: config 153 has an invalid interface number: 23 but max is 0 [ 74.432022][ T333] usb 3-1: config 153 has no interface number 0 [ 74.432131][ T389] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0103, bcdDevice=14.a4 [ 74.438712][ T333] usb 3-1: config 153 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 74.458034][ T333] usb 3-1: config 153 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 74.463861][ T389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.481694][ T333] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 74.485653][ T389] usb 4-1: Product: 첢䲜ㅳ绡￭럇ᓘꞭã¾äž¡â•šå¡‘æ½å¥—ä—²è™ìœá©î¯…ᯫ扉å¢ï•¦æ­žå„¢é¢‰á–¡é®æ®˜é³“èšê¦ìã‚┊ṛ椱넓æ”霑 [ 74.494262][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.513332][ T389] usb 4-1: Manufacturer: Л [ 74.517892][ T389] usb 4-1: SerialNumber: syz [ 74.519209][ T333] usb 3-1: Product: syz [ 74.531192][ T333] usb 3-1: Manufacturer: syz [ 74.535983][ T333] usb 3-1: SerialNumber: syz [ 74.542029][ T1837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.549580][ T1837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.564110][ T36] audit: type=1400 audit(1756097366.038:584): avc: denied { mount } for pid=1849 comm="syz.0.457" name="/" dev="configfs" ino=2428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.586941][ T36] audit: type=1400 audit(1756097366.048:585): avc: denied { search } for pid=1849 comm="syz.0.457" name="/" dev="configfs" ino=2428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.609312][ T36] audit: type=1400 audit(1756097366.048:586): avc: denied { read } for pid=1849 comm="syz.0.457" name="/" dev="configfs" ino=2428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.631234][ T36] audit: type=1400 audit(1756097366.048:587): avc: denied { open } for pid=1849 comm="syz.0.457" path="/" dev="configfs" ino=2428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.747892][ T389] ftdi_sio 4-1:99.231: FTDI USB Serial Device converter detected [ 74.759033][ T1837] rust_binder: Error while translating object. [ 74.759078][ T1837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 74.760563][ T1858] SELinux: security_context_str_to_sid (sytem_uÝGй0000000000000000000000000000000000000003ÿ00000000000000000000) failed with errno=-22 [ 74.765269][ T1837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:389 [ 74.789074][ T389] ftdi_sio ttyUSB0: unknown device type: 0x14a4 [ 74.795452][ T333] ums-usbat 3-1:153.23: USB Mass Storage device detected [ 74.808782][ T389] ftdi_sio 4-1:99.173: FTDI USB Serial Device converter detected [ 74.820426][ T389] ftdi_sio ttyUSB1: unknown device type: 0x14a4 [ 74.829278][ T389] ftdi_sio 4-1:99.20: FTDI USB Serial Device converter detected [ 74.837735][ T389] ftdi_sio ttyUSB2: unknown device type: 0x14a4 [ 74.847731][ T389] ftdi_sio 4-1:99.35: FTDI USB Serial Device converter detected [ 74.858052][ T389] ftdi_sio ttyUSB3: unknown device type: 0x14a4 [ 74.868223][ T389] usb 4-1: USB disconnect, device number 12 [ 74.874706][ T389] ftdi_sio 4-1:99.231: device disconnected [ 74.877623][ T1867] block device autoloading is deprecated and will be removed. [ 74.881355][ T389] ftdi_sio 4-1:99.173: device disconnected [ 74.894914][ T333] ums-usbat 3-1:153.23: probe with driver ums-usbat failed with error -5 [ 74.896856][ T389] ftdi_sio 4-1:99.20: device disconnected [ 74.909292][ T333] usb 3-1: USB disconnect, device number 23 [ 74.936866][ T389] ftdi_sio 4-1:99.35: device disconnected [ 74.952878][ T1868] input: syz1 as /devices/virtual/input/input24 [ 74.959951][ T1868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.959981][ T1868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 75.105700][ T45] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 75.224963][ T36] audit: type=1400 audit(1756097366.698:588): avc: denied { bind } for pid=1894 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.250571][ T36] audit: type=1400 audit(1756097366.728:589): avc: denied { accept } for pid=1896 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.285658][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 75.291995][ T45] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 75.300353][ T45] usb 1-1: config 0 has no interface number 0 [ 75.306534][ T45] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 75.322063][ T45] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 75.332153][ T45] usb 1-1: config 0 interface 41 has no altsetting 0 [ 75.342443][ T45] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 75.351857][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.360633][ T1908] binder: Unknown parameter 'defcontext01777777777777777777777' [ 75.366198][ T45] usb 1-1: Product: syz [ 75.372461][ T45] usb 1-1: Manufacturer: syz [ 75.386409][ T45] usb 1-1: SerialNumber: syz [ 75.397310][ T45] usb 1-1: config 0 descriptor?? [ 75.402596][ T1865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.409812][ T1865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.515872][ T389] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 75.605651][ T333] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 75.617706][ T1865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.624870][ T1865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.645665][ T372] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 75.666732][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.677744][ T389] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 75.686812][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.695465][ T389] usb 2-1: config 0 descriptor?? [ 75.755690][ T333] usb 3-1: Using ep0 maxpacket: 32 [ 75.761872][ T333] usb 3-1: config 0 interface 0 has no altsetting 0 [ 75.770000][ T333] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 75.779108][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.787171][ T333] usb 3-1: Product: syz [ 75.791349][ T333] usb 3-1: Manufacturer: syz [ 75.795979][ T333] usb 3-1: SerialNumber: syz [ 75.801292][ T333] usb 3-1: config 0 descriptor?? [ 75.818093][ T372] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 75.827199][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.835219][ T372] usb 4-1: Product: syz [ 75.839420][ T372] usb 4-1: Manufacturer: syz [ 75.844031][ T372] usb 4-1: SerialNumber: syz [ 76.007445][ T1911] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 76.016912][ T1911] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 76.017525][ T1912] rust_binder: Write failure EFAULT in pid:393 [ 76.027532][ T333] usb 3-1: USB disconnect, device number 24 [ 76.070195][ T372] rtl8150 4-1:1.0: couldn't reset the device [ 76.076346][ T372] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 76.085548][ T372] usb 4-1: USB disconnect, device number 13 [ 76.103141][ T389] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 76.112891][ T389] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0013/input/input25 [ 76.182273][ T389] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 76.291826][ T45] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 76.511204][ T9] usb 2-1: USB disconnect, device number 35 [ 76.555663][ T372] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 76.710080][ T1924] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 76.710239][ T372] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 76.727275][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.735311][ T372] usb 4-1: Product: syz [ 76.739526][ T372] usb 4-1: Manufacturer: syz [ 76.744117][ T372] usb 4-1: SerialNumber: syz [ 76.813984][ T36] audit: type=1400 audit(1756097368.288:590): avc: denied { write } for pid=1937 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.021815][ T36] audit: type=1400 audit(1756097368.498:591): avc: denied { connect } for pid=1949 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.022015][ T1950] 9pnet_fd: Insufficient options for proto=fd [ 77.105665][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 77.256893][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.267872][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.277743][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 77.286816][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.295432][ T9] usb 3-1: config 0 descriptor?? [ 77.435681][ T333] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 77.585642][ T333] usb 2-1: Using ep0 maxpacket: 32 [ 77.591861][ T333] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.602795][ T333] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.613617][ T333] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 77.622733][ T333] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 77.632496][ T333] usb 2-1: Product: syz [ 77.636740][ T333] usb 2-1: Manufacturer: syz [ 77.644271][ T333] hub 2-1:4.0: USB hub found [ 77.747008][ T1919] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 77.747031][ T1919] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 77.755130][ T1919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:297 [ 77.843861][ T333] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 77.844253][ T36] audit: type=1400 audit(1756097369.318:592): avc: denied { map } for pid=1954 comm="syz.1.489" path="socket:[17522]" dev="sockfs" ino=17522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.926277][ T9] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 77.933168][ T9] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 77.940089][ T9] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 77.946921][ T9] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 77.953711][ T9] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 77.960544][ T9] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 77.967445][ T9] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 77.975109][ T9] arvo 0003:1E7D:30D4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 78.127868][ T9] arvo 0003:1E7D:30D4.0014: couldn't init struct arvo_device [ 78.136785][ T9] arvo 0003:1E7D:30D4.0014: couldn't install keyboard [ 78.144340][ T9] arvo 0003:1E7D:30D4.0014: probe with driver arvo failed with error -71 [ 78.154728][ T9] usb 3-1: USB disconnect, device number 25 [ 78.433786][ T372] rtl8150 4-1:1.0: couldn't reset the device [ 78.439900][ T372] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 78.562785][ T372] usb 4-1: USB disconnect, device number 14 [ 78.779173][ T45] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 78.793746][ T1975] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 78.805473][ T45] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 78.825749][ T45] usb 1-1: USB disconnect, device number 26 [ 78.882511][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.883024][ T1981] rust_binder: Failed copying into alloc: EFAULT [ 78.889673][ T1981] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 78.896143][ T1981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 78.904562][ T1981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:308 [ 79.295670][ T372] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 79.443712][ T1995] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=1995 comm=syz.3.500 [ 79.457268][ T372] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 79.466557][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.478209][ T372] usb 1-1: config 0 descriptor?? [ 79.616588][ T2006] /dev/rnullb0: Can't open blockdev [ 79.871087][ T2013] futex_wake_op: syz.2.506 tries to shift op by -1; fix this program [ 79.879894][ T2013] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 79.925764][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 80.075653][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 80.081790][ T45] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 80.090093][ T45] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 80.098199][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 80.107089][ T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 80.117881][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 80.129285][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 239, changing to 11 [ 80.140373][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 34725, setting to 1024 [ 80.151438][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 80.165836][ T45] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 80.174904][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.182976][ T45] usb 4-1: Product: syz [ 80.187298][ T45] usb 4-1: Manufacturer: syz [ 80.191486][ T372] usb 1-1: Cannot read MAC address [ 80.191890][ T45] usb 4-1: SerialNumber: syz [ 80.196268][ T45] usb 4-1: config 0 descriptor?? [ 80.209482][ T372] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 80.220989][ T2010] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.234577][ T372] usb 1-1: USB disconnect, device number 27 [ 80.236855][ T45] hub 4-1:0.0: bad descriptor, ignoring hub [ 80.247229][ T45] hub 4-1:0.0: probe with driver hub failed with error -5 [ 80.258374][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.298571][ T2027] netlink: 240 bytes leftover after parsing attributes in process `syz.1.510'. [ 80.308550][ T36] audit: type=1400 audit(1756097371.788:593): avc: denied { setattr } for pid=2026 comm="syz.1.510" name="file0" dev="incremental-fs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.335753][ T333] usb 2-1: USB disconnect, device number 36 [ 80.406522][ T36] audit: type=1400 audit(1756097371.888:594): avc: denied { shutdown } for pid=2041 comm="syz.1.515" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.485439][ T2049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 80.495176][ T36] audit: type=1400 audit(1756097371.968:595): avc: denied { write } for pid=2048 comm="syz.3.517" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 80.495661][ T2051] 9pnet_fd: Insufficient options for proto=fd [ 80.545762][ T333] usb 4-1: USB disconnect, device number 15 [ 80.648569][ T2056] netlink: 'syz.3.519': attribute type 4 has an invalid length. [ 80.667229][ T36] audit: type=1326 audit(1756097372.148:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.3.520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd9238ebe9 code=0x0 [ 80.690005][ T36] audit: type=1326 audit(1756097372.148:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.3.520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd9238ebe9 code=0x0 [ 80.760116][ T2065] fuse: Bad value for 'user_id' [ 80.764994][ T2065] fuse: Bad value for 'user_id' [ 80.778917][ T2068] netlink: 'syz.2.522': attribute type 15 has an invalid length. [ 80.859893][ T36] audit: type=1400 audit(1756097372.338:598): avc: denied { mount } for pid=2080 comm="syz.2.525" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.883773][ T36] audit: type=1400 audit(1756097372.368:599): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.956690][ T2092] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 80.965639][ T2092] netlink: 17 bytes leftover after parsing attributes in process `syz.1.529'. [ 80.976732][ T36] audit: type=1400 audit(1756097372.448:600): avc: denied { watch } for pid=2082 comm="syz.2.526" path="/148/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 80.978211][ T2092] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 81.006460][ T2092] netlink: 'syz.1.529': attribute type 2 has an invalid length. [ 81.213980][ T2113] rust_binder: Error while translating object. [ 81.214014][ T2113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.221436][ T2113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:470 [ 81.308320][ T2117] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 81.482865][ T2131] fuse: Unknown parameter '0xffffffffffffffff' [ 81.526564][ T2147] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 81.535183][ T2147] rust_binder: Error while translating object. [ 81.535208][ T2147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 81.541745][ T2147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:466 [ 81.565635][ T36] audit: type=1400 audit(1756097373.038:601): avc: denied { relabelfrom } for pid=2130 comm="syz.1.538" name="NETLINK" dev="sockfs" ino=18183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 81.588370][ T2131] cgroup: fork rejected by pids controller in [ 81.600807][ T36] audit: type=1401 audit(1756097373.038:602): op=setxattr invalid_context="system_u:object_r:checkpolicy_exec_t:s0" [ 81.606801][ T2131] /syz1 [ 81.765891][ T2178] fuse: Bad value for 'fd' [ 81.785160][ T2179] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 81.839081][ T372] rust_binder: 2173: removing orphan mapping 0:112 [ 81.846799][ T2181] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 81.850653][ T372] rust_binder: 0: removing orphan mapping 112:1048 [ 81.854217][ T2181] rust_binder: Write failure EINVAL in pid:477 [ 82.048553][ T2192] /dev/loop0: Can't lookup blockdev [ 82.105704][ T333] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 82.179062][ T2213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 82.179099][ T2213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:477 [ 82.204942][ T2217] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 82.255644][ T333] usb 3-1: Using ep0 maxpacket: 32 [ 82.261809][ T333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.273572][ T333] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 82.282736][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.290767][ T333] usb 3-1: Product: syz [ 82.294942][ T333] usb 3-1: Manufacturer: syz [ 82.299568][ T333] usb 3-1: SerialNumber: syz [ 82.304958][ T333] usb 3-1: config 0 descriptor?? [ 82.310755][ T333] usb 3-1: bad CDC descriptors [ 82.315760][ T333] usb 3-1: unsupported MDLM descriptors [ 82.335674][ T1561] Bluetooth: hci0: command 0x1003 tx timeout [ 82.335692][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.537339][ T333] usb 3-1: USB disconnect, device number 26 [ 82.570435][ T2225] /dev/rnullb0: Can't open blockdev [ 83.033896][ T1529] Bluetooth: hci1: Frame reassembly failed (-84) [ 83.221750][ T2019] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 84.070612][ T2267] tipc: Started in network mode [ 84.075554][ T2267] tipc: Node identity 4, cluster identity 4711 [ 84.081986][ T2267] tipc: Node number set to 4 [ 84.710520][ T2312] overlayfs: failed to clone upperpath [ 84.716398][ T2312] netlink: 44 bytes leftover after parsing attributes in process `syz.3.587'. [ 84.725324][ T2312] netlink: 'syz.3.587': attribute type 6 has an invalid length. [ 84.733056][ T2312] netlink: 'syz.3.587': attribute type 5 has an invalid length. [ 84.740889][ T2312] netlink: 'syz.3.587': attribute type 4 has an invalid length. [ 85.055701][ T1561] Bluetooth: hci1: command 0x1003 tx timeout [ 85.055718][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 85.081417][ T2347] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 85.472670][ T2386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2386 comm=syz.1.614 [ 85.581802][ T2404] Unsupported ieee802154 address type: 0 [ 85.595774][ T389] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 85.691251][ T2412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.624'. [ 85.755763][ T389] usb 3-1: Using ep0 maxpacket: 16 [ 85.761963][ T389] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 85.770838][ T389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.781097][ T389] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.791319][ T389] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.800384][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.808403][ T389] usb 3-1: Product: syz [ 85.812547][ T389] usb 3-1: Manufacturer: syz [ 85.817148][ T389] usb 3-1: SerialNumber: syz [ 85.896318][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 85.896335][ T36] audit: type=1400 audit(1756097377.378:611): avc: denied { execute } for pid=2421 comm="syz.3.628" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.223858][ T389] usb 3-1: 0:2 : does not exist [ 86.237163][ T2430] netlink: 'syz.0.631': attribute type 4 has an invalid length. [ 86.303763][ T36] audit: type=1326 audit(1756097377.778:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2431 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 86.327037][ T36] audit: type=1326 audit(1756097377.778:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2431 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 86.350269][ T36] audit: type=1326 audit(1756097377.788:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2431 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa5098d550 code=0x7ffc0000 [ 86.373548][ T36] audit: type=1326 audit(1756097377.788:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2431 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa5098d550 code=0x7ffc0000 [ 86.396780][ T36] audit: type=1326 audit(1756097377.788:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2431 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 86.420064][ T36] audit: type=1326 audit(1756097377.788:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2431 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 86.443321][ T36] audit: type=1326 audit(1756097377.788:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2431 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 86.466637][ T36] audit: type=1326 audit(1756097377.788:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2431 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 86.491536][ T36] audit: type=1326 audit(1756097377.788:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2431 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 88.317930][ T389] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 88.331657][ T389] usb 3-1: USB disconnect, device number 27 [ 88.406583][ T2562] netlink: 316 bytes leftover after parsing attributes in process `syz.2.673'. [ 88.416074][ T2562] netlink: 316 bytes leftover after parsing attributes in process `syz.2.673'. [ 88.974943][ T2586] 9pnet_fd: Insufficient options for proto=fd [ 89.078274][ T2604] netlink: 100 bytes leftover after parsing attributes in process `syz.1.686'. [ 89.257013][ T2626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:532 [ 89.871273][ T2695] overlayfs: failed to clone upperpath [ 89.911816][ T2704] netlink: 'syz.1.718': attribute type 16 has an invalid length. [ 89.919629][ T2704] netlink: 'syz.1.718': attribute type 2 has an invalid length. [ 89.927361][ T2704] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.718'. [ 90.060901][ T2736] overlay: filesystem on ./bus not supported as upperdir [ 90.312774][ T2759] vlan0: entered promiscuous mode [ 90.317940][ T2759] vlan0: entered allmulticast mode [ 90.323140][ T2759] veth0_vlan: entered allmulticast mode [ 91.339841][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 91.339858][ T36] audit: type=1400 audit(1756097382.818:636): avc: denied { mounton } for pid=2793 comm="syz.3.746" path="/212/file0" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.339880][ T2794] 9pnet_fd: Insufficient options for proto=fd [ 91.765466][ T2798] overlayfs: failed to clone upperpath [ 91.886527][ T36] audit: type=1400 audit(1756097383.368:637): avc: denied { create } for pid=2809 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.907012][ T36] audit: type=1400 audit(1756097383.368:638): avc: denied { write } for pid=2809 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.927242][ T36] audit: type=1400 audit(1756097383.368:639): avc: denied { nlmsg_write } for pid=2809 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.948066][ T36] audit: type=1400 audit(1756097383.398:640): avc: denied { create } for pid=2815 comm="syz.3.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 92.028327][ T36] audit: type=1400 audit(1756097383.508:641): avc: denied { write } for pid=2837 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.725777][ T2882] overlayfs: missing 'lowerdir' [ 92.804629][ T36] audit: type=1400 audit(2000000000.150:642): avc: denied { map } for pid=2897 comm="syz.1.780" path="socket:[20763]" dev="sockfs" ino=20763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 93.243064][ T2904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:542 [ 93.247089][ T45] rust_binder: 2902: removing orphan mapping 0:24 [ 93.314508][ T2911] overlayfs: failed to clone upperpath [ 93.337284][ T36] audit: type=1400 audit(2000000000.690:643): avc: denied { wake_alarm } for pid=2914 comm="syz.1.785" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.574016][ T2934] overlayfs: failed to clone upperpath [ 93.602017][ T2945] tmpfs: Unknown parameter 'no' [ 93.648037][ T2955] netlink: 188 bytes leftover after parsing attributes in process `syz.0.799'. [ 93.788591][ T2957] netlink: 'syz.0.799': attribute type 4 has an invalid length. [ 93.796292][ T2957] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.799'. [ 93.880740][ T2964] netlink: 'syz.1.801': attribute type 4 has an invalid length. [ 93.888474][ T2964] netlink: 'syz.1.801': attribute type 6 has an invalid length. [ 93.896164][ T2964] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.801'. [ 93.937245][ T2980] 9pnet_fd: Insufficient options for proto=fd [ 94.104006][ T2984] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 94.486122][ T36] audit: type=1400 audit(2000000001.840:644): avc: denied { create } for pid=3014 comm="syz.1.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.520569][ T3015] tipc: Started in network mode [ 94.532343][ T3015] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 94.541523][ T3015] tipc: Enabled bearer , priority 10 [ 94.897833][ T36] audit: type=1400 audit(2000000002.250:645): avc: denied { bind } for pid=3035 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.343427][ T3068] fuse: Bad value for 'fd' [ 95.356941][ T3070] EXT4-fs: dax option not supported [ 95.370771][ T3072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 95.550961][ T3111] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 95.665642][ T9] tipc: Node number set to 4269801488 [ 96.219265][ T3170] 9pnet_fd: Insufficient options for proto=fd [ 97.248399][ T3195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 97.258203][ T3195] overlayfs: failed to clone upperpath [ 97.283215][ T3201] overlayfs: failed to clone upperpath [ 97.395695][ T3241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 98.126031][ T3287] overlayfs: failed to clone upperpath [ 98.199403][ T3302] incfs: Backing dir is not set, filesystem can't be mounted. [ 98.211165][ T3302] incfs: mount failed -2 [ 98.231871][ T3308] overlayfs: failed to clone upperpath [ 98.237970][ T3308] incfs: Options parsing error. -22 [ 98.243455][ T3308] incfs: mount failed -22 [ 98.248140][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 98.248156][ T36] audit: type=1400 audit(2000000005.590:652): avc: denied { ioctl } for pid=3309 comm="syz.0.919" path="socket:[21858]" dev="sockfs" ino=21858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.346906][ T36] audit: type=1326 audit(2000000005.700:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3318 comm="syz.2.922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70d4f8ebe9 code=0x0 [ 98.886640][ T3364] 9pnet_fd: Insufficient options for proto=fd [ 98.982458][ T36] audit: type=1400 audit(2000000006.330:654): avc: denied { setattr } for pid=3370 comm="syz.0.940" name="RAW" dev="sockfs" ino=21948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.144094][ T3389] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 99.304419][ T3408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3408 comm=syz.3.955 [ 99.316866][ T3408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=3408 comm=syz.3.955 [ 99.329808][ T36] audit: type=1400 audit(2000000006.680:655): avc: denied { lock } for pid=3407 comm="syz.3.955" path="socket:[21487]" dev="sockfs" ino=21487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 99.393717][ T3424] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.960'. [ 99.633976][ T3477] 9pnet_fd: Insufficient options for proto=fd [ 100.135049][ T3496] overlayfs: failed to clone upperpath [ 100.195549][ T3499] overlayfs: failed to clone upperpath [ 100.654984][ T36] audit: type=1400 audit(2000000008.000:656): avc: denied { getopt } for pid=3515 comm="filter" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.285045][ T3573] 9pnet_fd: Insufficient options for proto=fd [ 101.934851][ T3625] new mount options do not match the existing superblock, will be ignored [ 102.504834][ T3631] /dev/loop0: Can't lookup blockdev [ 102.510425][ T3631] /dev/loop0: Can't lookup blockdev [ 103.155133][ T3648] overlayfs: failed to clone upperpath [ 103.263709][ T3662] tipc: Trying to set illegal importance in message [ 103.797330][ T3679] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 103.850988][ T3694] overlayfs: failed to clone upperpath [ 103.874262][ T3705] x_tables: duplicate underflow at hook 1 [ 104.690048][ T36] audit: type=1400 audit(2000000012.040:657): avc: denied { getopt } for pid=3792 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.697999][ T3793] overlayfs: failed to clone upperpath [ 105.294080][ T3821] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000005' [ 105.316925][ T3827] overlayfs: failed to clone lowerpath [ 105.317634][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 105.855360][ T36] audit: type=1400 audit(2000000013.200:658): avc: denied { mount } for pid=3845 comm="syz.2.1116" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 105.914924][ T3868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1121'. [ 106.023785][ T36] audit: type=1400 audit(2000000013.370:659): avc: denied { getopt } for pid=3909 comm="syz.2.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.523535][ T3928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1141'. [ 106.821367][ T36] audit: type=1400 audit(2000000014.170:660): avc: denied { map } for pid=3945 comm="syz.1.1147" path="socket:[23756]" dev="sockfs" ino=23756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.844381][ T36] audit: type=1400 audit(2000000014.170:661): avc: denied { read accept } for pid=3945 comm="syz.1.1147" path="socket:[23756]" dev="sockfs" ino=23756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.039867][ T3977] 9pnet_fd: p9_fd_create_unix (3977): problem connecting socket: ./file0: -111 [ 107.049846][ T3977] fuse: Unknown parameter 'dd' [ 107.068139][ T3983] fuse: Bad value for 'user_id' [ 107.073133][ T3983] fuse: Bad value for 'user_id' [ 107.074269][ T3985] /dev/loop0: Can't lookup blockdev [ 107.279521][ T4022] 9pnet_fd: Insufficient options for proto=fd [ 107.315103][ T4033] overlayfs: failed to clone lowerpath [ 107.337277][ T36] audit: type=1326 audit(2000000014.690:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.1.1179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e4fb8ebe9 code=0x30000000 [ 107.727738][ T4071] overlayfs: failed to resolve './file0': -2 [ 107.777469][ T4078] netlink: 'syz.0.1191': attribute type 16 has an invalid length. [ 107.785304][ T4078] netlink: 'syz.0.1191': attribute type 3 has an invalid length. [ 107.793095][ T4078] netlink: 'syz.0.1191': attribute type 1 has an invalid length. [ 107.800898][ T4078] netlink: 64030 bytes leftover after parsing attributes in process `syz.0.1191'. [ 108.005231][ T4104] overlayfs: failed to clone upperpath [ 108.104226][ T4113] overlayfs: failed to clone upperpath [ 108.110889][ T4114] overlayfs: failed to clone upperpath [ 108.260122][ T36] audit: type=1400 audit(2000000015.610:663): avc: denied { create } for pid=4137 comm="syz.2.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.285176][ T4142] 9pnet_fd: Insufficient options for proto=fd [ 108.664082][ T36] audit: type=1400 audit(2000000016.010:664): avc: denied { read } for pid=4156 comm="syz.3.1217" path="socket:[23991]" dev="sockfs" ino=23991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.265007][ T4187] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1229'. [ 109.343719][ T4201] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 109.352146][ T4201] overlayfs: missing 'lowerdir' [ 109.367866][ T4204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 109.377324][ T4204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1236'. [ 109.512584][ T4226] 9pnet_fd: Insufficient options for proto=fd [ 109.614603][ T4240] overlayfs: failed to clone upperpath [ 109.624938][ T4243] overlayfs: failed to clone upperpath [ 109.647172][ T4247] overlayfs: failed to clone upperpath [ 110.782491][ T4298] 9pnet_fd: Insufficient options for proto=fd [ 110.799475][ T4303] overlay: ./file0 is not a directory [ 110.823202][ T4307] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1275'. [ 110.833226][ T4307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=4307 comm=syz.3.1275 [ 111.483446][ T4341] overlayfs: failed to clone lowerpath [ 112.187101][ T4359] overlayfs: failed to clone upperpath [ 112.748630][ T4409] raw_sendmsg: syz.0.1312 forgot to set AF_INET. Fix it! [ 112.769098][ T36] audit: type=1400 audit(2000000020.120:665): avc: denied { watch watch_reads } for pid=4417 comm="syz.3.1315" path="/397/file0" dev="tmpfs" ino=2176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.797915][ T4418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1315'. [ 113.025253][ T4462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 113.030062][ T36] audit: type=1400 audit(2000000020.370:666): avc: denied { nlmsg_read } for pid=4460 comm="syz.2.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.531532][ T36] audit: type=1400 audit(2000000020.880:667): avc: denied { write } for pid=4532 comm="syz.1.1355" name="file2" dev="tmpfs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.590849][ T36] audit: type=1326 audit(2000000020.940:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4543 comm="syz.1.1359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e4fb8ebe9 code=0x0 [ 113.650442][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.773568][ T4562] batadv_slave_1: entered promiscuous mode [ 115.429037][ T4607] netlink: 'syz.1.1378': attribute type 4 has an invalid length. [ 115.438628][ T4607] netlink: 'syz.1.1378': attribute type 17 has an invalid length. [ 115.448051][ T36] audit: type=1400 audit(2000000022.800:669): avc: denied { create } for pid=4606 comm="syz.1.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 115.468620][ T36] audit: type=1400 audit(2000000022.810:670): avc: denied { listen } for pid=4609 comm="syz.1.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.575916][ T4640] cannot load conntrack support for proto=3 [ 115.609774][ T4650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=4650 comm=syz.3.1391 [ 116.075320][ T4671] overlayfs: failed to clone upperpath [ 116.090129][ T4674] tipc: Enabling of bearer rejected, failed to enable media [ 116.201324][ T4687] netlink: 'syz.2.1404': attribute type 2 has an invalid length. [ 116.217764][ T4689] overlay: Unknown parameter 'pcr' [ 116.378199][ T4697] overlayfs: failed to clone upperpath [ 116.384709][ T4697] overlayfs: missing 'lowerdir' [ 116.685250][ T4562] batadv_slave_1: left promiscuous mode [ 116.777149][ T4728] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1419'. [ 116.901316][ T36] audit: type=1400 audit(2000000024.250:671): avc: denied { bind } for pid=4735 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.528391][ T4778] overlayfs: failed to clone lowerpath [ 117.565165][ T36] audit: type=1400 audit(2000000024.910:672): avc: denied { accept } for pid=4779 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 118.116836][ T4804] tmpfs: Unknown parameter './binderfs/binder1' [ 118.373960][ T36] audit: type=1400 audit(2000000025.720:673): avc: denied { sys_nice } for pid=4825 comm="syz.3.1453" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 118.434357][ T4832] incfs: Options parsing error. -22 [ 118.439851][ T4832] incfs: mount failed -22 [ 118.987866][ T4854] fuse: Bad value for 'group_id' [ 118.992917][ T4854] fuse: Bad value for 'group_id' [ 119.047270][ T36] audit: type=1400 audit(2000000026.400:674): avc: denied { listen } for pid=4860 comm="syz.3.1468" path=2F3434382FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 119.076160][ T4850] fuse: Bad value for 'user_id' [ 119.081124][ T4850] fuse: Bad value for 'user_id' [ 119.113020][ T4865] netlink: 'syz.1.1470': attribute type 27 has an invalid length. [ 119.126727][ T4865] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.133876][ T4865] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.477637][ T4885] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1476'. [ 119.554328][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1478'. [ 119.734264][ T4913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1486'. [ 119.743304][ T4913] tipc: Invalid UDP bearer configuration [ 119.743329][ T4913] tipc: Enabling of bearer rejected, failed to enable media [ 119.982601][ T4936] overlayfs: missing 'lowerdir' [ 120.440021][ T36] audit: type=1400 audit(2000000027.790:675): avc: denied { module_load } for pid=4952 comm="syz.3.1501" path="/451/bus" dev="tmpfs" ino=2459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 120.440083][ T4953] Invalid ELF header magic: != ELF [ 120.725702][ T4973] 9pnet_fd: Insufficient options for proto=fd [ 120.736687][ T4973] 9pnet_fd: Insufficient options for proto=fd [ 120.811861][ T36] audit: type=1400 audit(2000000028.160:676): avc: denied { create } for pid=4982 comm="syz.0.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.256824][ T5000] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 121.266734][ T36] audit: type=1400 audit(2000000028.610:677): avc: denied { mounton } for pid=4999 comm="syz.3.1520" path="/file0" dev="ramfs" ino=25579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 121.934909][ T5028] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1529'. [ 121.955612][ T5028] netlink: 'syz.0.1529': attribute type 6 has an invalid length. [ 121.968921][ T5028] netlink: 'syz.0.1529': attribute type 5 has an invalid length. [ 121.984359][ T5028] netlink: 'syz.0.1529': attribute type 4 has an invalid length. [ 122.178403][ T5044] SELinux: Context system_u:object_r:tty_device_t:s0 is not valid (left unmapped). [ 122.201403][ T36] audit: type=1400 audit(2000000029.550:678): avc: denied { relabelto } for pid=5043 comm="syz.0.1535" name="file0" dev="tmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:tty_device_t:s0" [ 122.235134][ T5046] overlayfs: failed to clone upperpath [ 122.244262][ T36] audit: type=1400 audit(2000000029.550:679): avc: denied { associate } for pid=5043 comm="syz.0.1535" name="file0" dev="tmpfs" ino=1965 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tty_device_t:s0" [ 122.272723][ T36] audit: type=1400 audit(2000000029.590:680): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:tty_device_t:s0" [ 122.315432][ T36] audit: type=1400 audit(2000000029.660:681): avc: denied { getopt } for pid=5049 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.335565][ T5051] fuse: Bad value for 'fd' [ 122.407522][ T5055] /dev/rnullb0: Can't lookup blockdev [ 122.822151][ T5068] futex_wake_op: syz.3.1544 tries to shift op by -1; fix this program [ 123.437493][ T36] audit: type=1400 audit(2000000030.790:682): avc: denied { ioctl } for pid=5100 comm="syz.3.1557" path="socket:[26754]" dev="sockfs" ino=26754 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.463978][ T36] audit: type=1400 audit(2000000030.820:683): avc: denied { map } for pid=5100 comm="syz.3.1557" path="socket:[26755]" dev="sockfs" ino=26755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 123.516018][ T5106] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 124.064141][ T5129] fuse: Unknown parameter '0x0000000000000004' [ 124.615128][ T5149] fuseblk: Unknown parameter 'ƒê‡Ç_x¹$x$þyu¢?Àsš' [ 124.856709][ T5181] No source specified [ 125.304522][ T5208] overlayfs: failed to clone upperpath [ 125.336063][ T5215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1596'. [ 125.414413][ T5235] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1603'. [ 125.449756][ T5246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1606'. [ 125.586861][ T36] audit: type=1326 audit(2000000000.720:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5258 comm="syz.1.1611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e4fb8ebe9 code=0x0 [ 125.760606][ T5274] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1616'. [ 126.225166][ T5288] 9pnet_fd: Insufficient options for proto=fd [ 126.255634][ T5301] netlink: 'syz.2.1624': attribute type 4 has an invalid length. [ 126.263451][ T5301] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1624'. [ 126.751014][ T5348] 9pnet_fd: Insufficient options for proto=fd [ 127.128412][ T5403] overlayfs: failed to clone upperpath [ 127.231223][ T5403] 9pnet_fd: Insufficient options for proto=fd [ 127.271930][ T5418] netlink: 'syz.2.1668': attribute type 3 has an invalid length. [ 127.387291][ T36] audit: type=1400 audit(2000000002.520:685): avc: denied { setopt } for pid=5452 comm="syz.3.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.407485][ T36] audit: type=1400 audit(2000000002.520:686): avc: denied { read } for pid=5452 comm="syz.3.1681" path="socket:[27317]" dev="sockfs" ino=27317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.089624][ T5464] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 128.995636][ T5499] netlink: 'syz.2.1696': attribute type 4 has an invalid length. [ 129.352614][ T5523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4132 sclass=netlink_route_socket pid=5523 comm=syz.2.1698 [ 129.942606][ T36] audit: type=1400 audit(2000000005.065:687): avc: denied { mounton } for pid=5555 comm="syz.2.1713" path="/399/file0" dev="tmpfs" ino=2235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.965654][ T36] audit: type=1400 audit(2000000005.065:688): avc: denied { read write } for pid=5555 comm="syz.2.1713" name="file0" dev="tmpfs" ino=2235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.989244][ T36] audit: type=1400 audit(2000000005.065:689): avc: denied { open } for pid=5555 comm="syz.2.1713" path="/399/file0" dev="tmpfs" ino=2235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 130.012272][ T36] audit: type=1400 audit(2000000005.065:690): avc: denied { ioctl } for pid=5555 comm="syz.2.1713" path="/399/file0" dev="tmpfs" ino=2235 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 130.272572][ T5568] overlayfs: failed to clone upperpath [ 130.278293][ T5579] 9pnet_fd: Insufficient options for proto=fd [ 130.288742][ T5568] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 130.290985][ T36] audit: type=1400 audit(2000000005.415:691): avc: denied { create } for pid=5580 comm="syz.0.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.329517][ T36] audit: type=1400 audit(2000000005.435:692): avc: denied { accept } for pid=5567 comm="syz.3.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 130.360008][ T5599] overlayfs: failed to clone lowerpath [ 130.599557][ T5614] fuse: Bad value for 'fd' [ 130.908681][ T5639] overlayfs: failed to clone upperpath [ 131.098871][ T5657] overlayfs: failed to clone upperpath [ 131.428538][ T5698] x_tables: unsorted underflow at hook 3 [ 131.447847][ T36] audit: type=1326 audit(2000000006.575:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.1765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70d4f8ebe9 code=0x0 [ 131.864255][ T5756] 9pnet_fd: Insufficient options for proto=fd [ 132.047226][ T5769] fuseblk: Bad value for 'fd' [ 132.200608][ T5788] /dev/loop0: Can't lookup blockdev [ 132.218516][ T5790] 9pnet_fd: Insufficient options for proto=fd [ 132.334101][ T5804] fuseblk: Bad value for 'group_id' [ 132.339505][ T5804] fuseblk: Bad value for 'group_id' [ 132.455474][ T36] audit: type=1326 audit(2000000007.576:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.1.1803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e4fb8ebe9 code=0x0 [ 133.354062][ T36] audit: type=1400 audit(2000000008.417:695): avc: denied { getattr } for pid=5846 comm="syz.1.1809" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=28768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.427031][ T5854] overlayfs: failed to clone upperpath [ 133.450502][ T5860] overlayfs: failed to clone upperpath [ 133.464696][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 133.487910][ T5867] netlink: 'syz.0.1816': attribute type 11 has an invalid length. [ 133.502194][ T5867] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1816'. [ 134.395985][ T5927] 9pnet_fd: Insufficient options for proto=fd [ 134.434085][ T5938] netlink: 'syz.3.1839': attribute type 1 has an invalid length. [ 135.014095][ T5969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2561 sclass=netlink_tcpdiag_socket pid=5969 comm=syz.3.1849 [ 135.027703][ T36] audit: type=1400 audit(2000000009.988:696): avc: denied { create } for pid=5968 comm="syz.3.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 135.044923][ T5969] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1849'. [ 135.599702][ T6018] overlayfs: failed to resolve './file0': -2 [ 135.931485][ T6020] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1864'. [ 135.949577][ T6022] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1865'. [ 135.959460][ T6022] 9pnet_fd: Insufficient options for proto=fd [ 136.159017][ T6034] fuse: Unknown parameter '' [ 136.182501][ T36] audit: type=1400 audit(2000000011.073:697): avc: denied { mounton } for pid=6037 comm="syz.3.1871" path="/558/file0" dev="tmpfs" ino=3034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.741329][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1875'. [ 136.760512][ T6052] 9pnet_fd: Insufficient options for proto=fd [ 137.558905][ T6082] overlayfs: failed to clone upperpath [ 138.577132][ T6105] sit0: entered promiscuous mode [ 138.582914][ T6105] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 138.590732][ T6105] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1898'. [ 138.755164][ T6113] netlink: 'syz.3.1901': attribute type 27 has an invalid length. [ 138.763109][ T6113] lo: entered promiscuous mode [ 138.767988][ T6113] lo: entered allmulticast mode [ 138.773494][ T6113] tunl0: entered promiscuous mode [ 138.778564][ T6113] tunl0: entered allmulticast mode [ 138.784122][ T6113] gre0: entered promiscuous mode [ 138.789145][ T6113] gre0: entered allmulticast mode [ 138.794829][ T6113] gretap0: entered promiscuous mode [ 138.800058][ T6113] gretap0: entered allmulticast mode [ 138.805368][ T6113] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.211010][ T6130] tipc: Trying to set illegal importance in message [ 139.819605][ T36] audit: type=1326 audit(2000000014.467:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e4fb8ebe9 code=0x7ffc0000 [ 139.845986][ T36] audit: type=1326 audit(2000000014.467:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e4fb8ebe9 code=0x7ffc0000 [ 139.869397][ T36] audit: type=1326 audit(2000000014.467:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e4fb8ebe9 code=0x7ffc0000 [ 139.892732][ T36] audit: type=1326 audit(2000000014.467:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e4fb8ebe9 code=0x7ffc0000 [ 139.916339][ T36] audit: type=1326 audit(2000000014.467:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e4fb8ebe9 code=0x7ffc0000 [ 139.939866][ T36] audit: type=1326 audit(2000000014.467:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e4fb8ebe9 code=0x7ffc0000 [ 139.968774][ T36] audit: type=1326 audit(2000000014.467:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e4fb8ebe9 code=0x7ffc0000 [ 139.993082][ T36] audit: type=1326 audit(2000000014.467:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e4fb8ebe9 code=0x7ffc0000 [ 140.016677][ T36] audit: type=1326 audit(2000000014.467:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.1.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e4fb8ebe9 code=0x7ffc0000 [ 140.112362][ T6182] overlayfs: failed to clone upperpath [ 140.127816][ T6184] overlayfs: failed to clone upperpath [ 140.597579][ T6201] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1929'. [ 140.863460][ T6210] netlink: 'syz.0.1933': attribute type 4 has an invalid length. [ 140.897687][ T6210] netlink: 'syz.0.1933': attribute type 4 has an invalid length. [ 141.637401][ T6275] netlink: 'syz.2.1956': attribute type 16 has an invalid length. [ 141.645361][ T6275] netlink: 'syz.2.1956': attribute type 3 has an invalid length. [ 141.653120][ T6275] netlink: 64058 bytes leftover after parsing attributes in process `syz.2.1956'. [ 141.818576][ T6312] overlayfs: failed to clone upperpath [ 141.824915][ T6312] fuse: Bad value for 'fd' [ 142.070405][ T6319] fuse: Unknown parameter 'ÿÿ' [ 142.183354][ T6330] netlink: 'syz.1.1974': attribute type 15 has an invalid length. [ 142.191239][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1974'. [ 142.226656][ T6338] netlink: 'syz.1.1977': attribute type 11 has an invalid length. [ 142.456744][ T6353] overlayfs: missing 'lowerdir' [ 142.492392][ T6360] 9pnet_fd: Insufficient options for proto=fd [ 143.338591][ T6423] overlayfs: failed to clone upperpath [ 143.982323][ T6448] devpts: called with bogus options [ 143.988019][ T6448] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 145.209744][ T6494] overlayfs: failed to clone upperpath [ 145.280259][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 145.280280][ T36] audit: type=1400 audit(2000000019.573:765): avc: denied { mounton } for pid=6506 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 145.314402][ T6511] overlayfs: failed to resolve './file1': -2 [ 145.332796][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 145.355130][ T6506] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.362248][ T6506] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.371225][ T6506] bridge_slave_0: entered allmulticast mode [ 145.378334][ T6506] bridge_slave_0: entered promiscuous mode [ 145.385123][ T6506] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.393030][ T6506] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.400572][ T6506] bridge_slave_1: entered allmulticast mode [ 145.407237][ T6506] bridge_slave_1: entered promiscuous mode [ 145.472577][ T6506] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.479661][ T6506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.487065][ T6506] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.494131][ T6506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.513508][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.520870][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.530908][ T1529] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.537984][ T1529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.547471][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.554543][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.578700][ T6506] veth0_vlan: entered promiscuous mode [ 145.589693][ T6506] veth1_macvtap: entered promiscuous mode [ 145.608095][ T36] audit: type=1400 audit(2000000019.882:766): avc: denied { mounton } for pid=6506 comm="syz-executor" path="/root/syzkaller.AC2prx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 145.874494][ T6564] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 146.039460][ T36] audit: type=1400 audit(2000000020.293:767): avc: denied { create } for pid=6569 comm="syz.1.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 146.040399][ T6572] 9pnet_fd: Insufficient options for proto=fd [ 146.564973][ T6601] binder: Unknown parameter 'fscontext?}K' [ 146.813186][ T6613] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 147.482968][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.497251][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.503550][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.509877][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.516144][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.522335][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.528752][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.534958][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.541127][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.547326][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.553465][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.559687][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.565872][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.572082][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.578364][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.584673][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.591168][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.597444][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.603731][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.609971][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.616179][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.622380][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.628589][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.634802][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.640975][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.647305][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.653675][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.659862][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.666136][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.672300][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.678593][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.684804][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.690961][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.697172][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.703318][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.709655][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.715882][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.722184][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.728722][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.734900][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.741123][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.747692][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.753891][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.760129][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.766288][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.772498][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.778663][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.784894][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.791052][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.797384][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.803767][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.810741][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.817145][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.823323][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.829577][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.835843][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.842199][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.848630][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.854989][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.861421][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.867726][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.873928][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.876846][ T6643] rust_binder: Error while translating object. [ 147.880212][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.880371][ T6643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.886621][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.892874][ T6643] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 147.902159][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 147.908735][ T6643] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:27 [ 147.936318][ T373] rust_binder: 6642: removing orphan mapping 0:24 [ 148.003387][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 148.009129][ T36] audit: type=1400 audit(2000000022.117:768): avc: denied { read write } for pid=6658 comm="syz.3.2085" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.036795][ T36] audit: type=1400 audit(2000000022.117:769): avc: denied { open } for pid=6658 comm="syz.3.2085" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.061330][ T36] audit: type=1400 audit(2000000022.117:770): avc: denied { ioctl } for pid=6658 comm="syz.3.2085" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.129452][ T6673] 9pnet_fd: Insufficient options for proto=fd [ 148.154128][ T6677] overlayfs: failed to clone upperpath [ 148.326372][ T372] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 148.497285][ T372] usb 4-1: Using ep0 maxpacket: 8 [ 148.503408][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.514480][ T372] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 148.523554][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.532488][ T372] usb 4-1: config 0 descriptor?? [ 148.967977][ T372] belkin 0003:050D:3201.0015: unknown main item tag 0x3 [ 148.975086][ T372] belkin 0003:050D:3201.0015: unknown global tag 0xe [ 148.981819][ T372] belkin 0003:050D:3201.0015: item 0 0 1 14 parsing failed [ 148.989178][ T372] belkin 0003:050D:3201.0015: parse failed [ 148.995003][ T372] belkin 0003:050D:3201.0015: probe with driver belkin failed with error -22 [ 149.182444][ T372] usb 4-1: USB disconnect, device number 16 [ 149.919622][ T36] audit: type=1326 audit(2000000023.912:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.1.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4fb8ebe9 code=0x7fc00000 [ 149.954670][ T6746] fuse: Unknown parameter '000000000000000000050x0000000000000008' [ 149.963937][ T6742] can: request_module (can-proto-6) failed. [ 150.078038][ T6781] netlink: 'syz.2.2128': attribute type 4 has an invalid length. [ 150.127088][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 150.215717][ T6822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.219173][ T6821] rust_binder: 48: no such ref 1 [ 150.233504][ T6821] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 150.242013][ T6821] rust_binder: Error while translating object. [ 150.242044][ T6821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 150.248315][ T6821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:48 [ 150.346578][ T6847] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=86 sclass=netlink_tcpdiag_socket pid=6847 comm=syz.2.2150 [ 150.375937][ T6850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=6850 comm=syz.2.2151 [ 150.515787][ T6892] 9pnet: Could not find request transport:  [ 150.566251][ T6902] overlayfs: failed to clone upperpath [ 150.668117][ T372] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 150.829765][ T372] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 150.840803][ T372] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 150.849904][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.861542][ T6858] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.088105][ T372] hid-generic 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 151.300662][ T456] usb 4-1: USB disconnect, device number 17 [ 151.344594][ T6954] /dev/sr0: Can't lookup blockdev [ 151.501836][ T6982] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 151.576141][ T6985] rust_binder: Error in use_page_slow: ESRCH [ 151.576152][ T6985] rust_binder: use_range failure ESRCH [ 151.582494][ T6985] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 151.588102][ T6985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 151.595961][ T6985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:86 [ 152.261956][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.278118][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.285271][ T6999] bridge_slave_0: entered allmulticast mode [ 152.291460][ T6999] bridge_slave_0: entered promiscuous mode [ 152.298085][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.305267][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.312375][ T6999] bridge_slave_1: entered allmulticast mode [ 152.318941][ T6999] bridge_slave_1: entered promiscuous mode [ 152.325050][ T13] bridge_slave_1: left allmulticast mode [ 152.330802][ T13] bridge_slave_1: left promiscuous mode [ 152.336604][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.343684][ T7006] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 152.352138][ T7006] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 152.352323][ T13] bridge_slave_0: left allmulticast mode [ 152.366183][ T13] bridge_slave_0: left promiscuous mode [ 152.371868][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.413054][ T36] audit: type=1400 audit(2000000026.250:772): avc: denied { lock } for pid=7014 comm="syz.3.2206" path="socket:[32308]" dev="sockfs" ino=32308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 152.447077][ T7017] netlink: 'syz.1.2205': attribute type 16 has an invalid length. [ 152.459808][ T7017] netlink: 'syz.1.2205': attribute type 2 has an invalid length. [ 152.467600][ T7017] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.2205'. [ 152.656141][ T13] tipc: Left network mode [ 152.662521][ T13] veth1_macvtap: left promiscuous mode [ 152.665342][ T7030] overlayfs: failed to clone upperpath [ 152.668186][ T13] veth0_vlan: left promiscuous mode [ 152.721215][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2211'. [ 152.730213][ T7032] erspan0: default FDB implementation only supports local addresses [ 152.742045][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.749170][ T6999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.756484][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.763528][ T6999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.796223][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.803626][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.813253][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.820358][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.828302][ T373] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 152.830180][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.842907][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.866383][ T6999] veth0_vlan: entered promiscuous mode [ 152.876858][ T6999] veth1_macvtap: entered promiscuous mode [ 153.010102][ T373] usb 4-1: Using ep0 maxpacket: 16 [ 153.016420][ T373] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 153.024676][ T373] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.035001][ T373] usb 4-1: config 0 has no interface number 0 [ 153.042762][ T373] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 153.051799][ T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.059854][ T373] usb 4-1: Product: syz [ 153.064037][ T373] usb 4-1: Manufacturer: syz [ 153.068619][ T373] usb 4-1: SerialNumber: syz [ 153.073783][ T373] usb 4-1: config 0 descriptor?? [ 153.266724][ T372] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.293964][ T7020] /dev/rnullb0: Can't open blockdev [ 153.300264][ T373] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 153.306706][ T373] usb 4-1: No valid video chain found. [ 153.316810][ T373] usb 4-1: USB disconnect, device number 18 [ 153.429989][ T372] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 153.440561][ T372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.449926][ T372] usb 5-1: Product: syz [ 153.454172][ T372] usb 5-1: Manufacturer: syz [ 153.458810][ T372] usb 5-1: SerialNumber: syz [ 153.470113][ T372] usb 5-1: config 0 descriptor?? [ 153.725200][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2224'. [ 153.772261][ T7085] overlayfs: failed to clone upperpath [ 153.795563][ T7092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58450 sclass=netlink_route_socket pid=7092 comm=syz.0.2228 [ 153.964804][ T7109] rust_binder: Write failure EFAULT in pid:103 [ 153.980352][ T7112] /dev/rnullb0: Can't open blockdev [ 154.080959][ T7117] 9pnet_fd: Insufficient options for proto=fd [ 154.282637][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 154.443013][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 154.450729][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 154.459924][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.468052][ T9] usb 4-1: Product: syz [ 154.472212][ T9] usb 4-1: Manufacturer: syz [ 154.476836][ T9] usb 4-1: SerialNumber: syz [ 154.483295][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 154.489732][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 154.928571][ T373] r8152-cfgselector 4-1: USB disconnect, device number 19 [ 155.015320][ T7141] fuse: Bad value for 'user_id' [ 155.015522][ T7142] fuse: Bad value for 'user_id' [ 155.020305][ T7141] fuse: Bad value for 'user_id' [ 155.025417][ T7142] fuse: Bad value for 'user_id' [ 155.035514][ T36] audit: type=1326 audit(2000000028.700:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.1.2245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e4fb8ebe9 code=0x0 [ 155.657214][ T36] audit: type=1400 audit(2000000029.280:774): avc: denied { map } for pid=7155 comm="syz.3.2249" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.680233][ T36] audit: type=1400 audit(2000000029.280:775): avc: denied { execute } for pid=7155 comm="syz.3.2249" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.863258][ T9] rust_binder: 7166: removing orphan mapping 0:24 [ 155.919581][ T7179] netlink: 'syz.1.2257': attribute type 30 has an invalid length. [ 156.123340][ T372] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 156.134307][ T372] asix 5-1:0.0: probe with driver asix failed with error -71 [ 156.143528][ T9] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 156.151135][ T372] usb 5-1: USB disconnect, device number 2 [ 156.154053][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2262'. [ 156.315445][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 156.324550][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.333227][ T9] usb 4-1: config 0 descriptor?? [ 156.483880][ T36] audit: type=1400 audit(2000000030.047:776): avc: denied { lock } for pid=7191 comm="syz.1.2263" path="socket:[33816]" dev="sockfs" ino=33816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 156.507004][ T372] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.523178][ T36] audit: type=1400 audit(2000000030.093:777): avc: denied { create } for pid=7195 comm="syz.1.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 156.667346][ T372] usb 5-1: Using ep0 maxpacket: 32 [ 156.675984][ T372] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 156.684237][ T372] usb 5-1: config 0 has no interface number 0 [ 156.691904][ T372] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 156.701500][ T372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.709669][ T372] usb 5-1: Product: syz [ 156.714326][ T372] usb 5-1: Manufacturer: syz [ 156.718957][ T372] usb 5-1: SerialNumber: syz [ 156.725813][ T372] usb 5-1: config 0 descriptor?? [ 156.735873][ T372] smsc95xx v2.0.0 [ 156.768180][ T7217] 8021q: VLANs not supported on lo [ 156.793207][ T7219] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 156.815671][ T7221] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2275'. [ 156.836419][ T7223] /dev/rnullb0: Can't lookup blockdev [ 156.861470][ T36] audit: type=1326 audit(2000000030.411:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 156.862304][ T7228] netlink: 'syz.0.2278': attribute type 16 has an invalid length. [ 156.884991][ T36] audit: type=1326 audit(2000000030.411:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 156.892946][ T7228] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2278'. [ 156.916877][ T36] audit: type=1326 audit(2000000030.411:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 156.950380][ T36] audit: type=1326 audit(2000000030.411:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5098ebe9 code=0x7ffc0000 [ 157.121567][ T7238] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 157.378917][ T7190] tipc: MTU too low for tipc bearer [ 157.384778][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.393321][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.445571][ T372] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 157.456541][ T372] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 157.466009][ T372] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 157.476881][ T372] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 157.487907][ T372] usb 5-1: USB disconnect, device number 3 [ 158.625487][ T7290] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.634352][ T7291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.643358][ T7290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 158.643388][ T7290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:11 [ 158.704082][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.721978][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.731001][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 158.741379][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 158.749570][ T9] usb 4-1: USB disconnect, device number 20 [ 158.977235][ T355] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 159.139015][ T355] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.147036][ T355] usb 5-1: not running at top speed; connect to a high speed hub [ 159.155534][ T355] usb 5-1: config 12 has an invalid interface number: 173 but max is 1 [ 159.163857][ T355] usb 5-1: config 12 has an invalid interface number: 173 but max is 1 [ 159.172131][ T355] usb 5-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 159.181109][ T355] usb 5-1: config 12 has no interface number 0 [ 159.187277][ T355] usb 5-1: config 12 interface 173 has no altsetting 0 [ 159.194148][ T355] usb 5-1: config 12 interface 173 has no altsetting 1 [ 159.202593][ T355] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 159.211652][ T355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.219681][ T355] usb 5-1: Product: syz [ 159.222979][ T7300] fuse: Unknown parameter '01777777777777777777777' [ 159.223873][ T355] usb 5-1: Manufacturer: syz [ 159.223891][ T355] usb 5-1: SerialNumber: syz [ 159.278237][ T7308] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 159.473462][ T355] usb 5-1: USB disconnect, device number 4 [ 159.668403][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 159.668421][ T36] audit: type=1400 audit(2000000033.030:829): avc: denied { mount } for pid=7358 comm="syz.4.2316" name="/" dev="pstore" ino=2613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 159.724588][ T7365] 9pnet: Could not find request transport: fdÅß( Üa0xffffffffffffffff [ 159.767043][ T36] audit: type=1400 audit(2000000033.123:830): avc: denied { nlmsg_write } for pid=7368 comm="syz.0.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 159.812018][ T7381] overlayfs: missing 'workdir' [ 159.834489][ T7387] overlayfs: failed to resolve './file0': -2 [ 160.025212][ T373] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.185634][ T373] usb 5-1: Using ep0 maxpacket: 32 [ 160.191805][ T373] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.206907][ T373] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.208856][ T7404] input: syz1 as /devices/virtual/input/input26 [ 160.216877][ T373] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.231389][ T373] usb 5-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 160.234324][ T7404] rust_binder: 135: no such ref 2 [ 160.240649][ T373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.245682][ T7404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135 [ 160.254727][ T373] usb 5-1: config 0 descriptor?? [ 160.260979][ T7404] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 160.290128][ T36] audit: type=1400 audit(2000000040.606:831): avc: denied { bind } for pid=7405 comm="syz.3.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.290738][ T7406] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 160.317232][ T7406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 160.338960][ T7415] usb usb8: usbfs: process 7415 (syz.3.2335) did not claim interface 0 before use [ 160.613499][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 160.696177][ T373] wacom 0003:056A:0057.0017: hidraw0: USB HID vb.27 Device [HID 056a:0057] on usb-dummy_hcd.4-1/input0 [ 160.775019][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.786112][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.795238][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.804077][ T9] usb 4-1: config 0 descriptor?? [ 160.914015][ T373] usb 5-1: USB disconnect, device number 5 [ 161.238647][ T9] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 161.248116][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0018/input/input31 [ 161.322969][ T9] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 161.655794][ T7481] veth1: entered allmulticast mode [ 161.662104][ T7480] veth1: left allmulticast mode [ 161.675080][ T45] usb 4-1: USB disconnect, device number 21 [ 161.723481][ T373] rust_binder: 0: removing orphan mapping 0:8 [ 161.807263][ T1529] bridge_slave_1: left allmulticast mode [ 161.812995][ T1529] bridge_slave_1: left promiscuous mode [ 161.818649][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.826263][ T1529] bridge_slave_0: left allmulticast mode [ 161.832001][ T1529] bridge_slave_0: left promiscuous mode [ 161.837758][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.888357][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.895396][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.902554][ T7485] bridge_slave_0: entered allmulticast mode [ 161.908974][ T7485] bridge_slave_0: entered promiscuous mode [ 161.915153][ T1529] tipc: Disabling bearer [ 161.920229][ T1529] tipc: Left network mode [ 161.920315][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.931635][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.938695][ T7485] bridge_slave_1: entered allmulticast mode [ 161.945101][ T7485] bridge_slave_1: entered promiscuous mode [ 162.005817][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.012910][ T7485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.020241][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.027309][ T7485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.046968][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.054251][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.063420][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.070492][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.080082][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.087153][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.109598][ T7485] veth0_vlan: entered promiscuous mode [ 162.120575][ T7485] veth1_macvtap: entered promiscuous mode [ 162.275331][ T36] audit: type=1400 audit(2000000042.467:832): avc: denied { lock } for pid=7504 comm="syz.3.2359" path="socket:[33391]" dev="sockfs" ino=33391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.713797][ T36] audit: type=1400 audit(2000000042.879:833): avc: denied { execute } for pid=7529 comm="syz.1.2368" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.741834][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 162.805987][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.912910][ T9] usb 4-1: device descriptor read/64, error -71 [ 162.978166][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.989728][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.000649][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.010399][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.023345][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.032405][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.040867][ T45] usb 5-1: config 0 descriptor?? [ 163.169712][ T9] usb 4-1: device descriptor read/64, error -71 [ 163.386543][ T7545] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 163.386707][ T7545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.426837][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 163.457974][ T7547] rust_binder: 27: no such ref 2 [ 163.463016][ T7547] rust_binder: 27: no such ref 3 [ 163.467975][ T7547] rust_binder: Write failure EINVAL in pid:27 [ 163.475922][ T45] plantronics 0003:047F:FFFF.0019: ignoring exceeding usage max [ 163.493868][ T45] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 163.521308][ T45] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 163.576039][ T9] usb 4-1: device descriptor read/64, error -71 [ 163.747641][ T7521] tipc: Can't bind to reserved service type 0 [ 163.779841][ T7585] overlayfs: failed to clone lowerpath [ 163.832786][ T9] usb 4-1: device descriptor read/64, error -71 [ 163.950436][ T9] usb usb4-port1: attempt power cycle [ 164.058837][ T7599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 164.058879][ T7599] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 164.068334][ T7599] rust_binder: Read failure Err(EFAULT) in pid:33 [ 164.085890][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.092555][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.098971][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.105570][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.111941][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.118504][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.125005][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.131564][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.138152][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.144559][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.151174][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.169494][ T7606] bpf: Bad value for 'gid' [ 164.313979][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 164.336306][ T9] usb 4-1: device descriptor read/8, error -71 [ 164.431640][ T355] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 164.475428][ T9] usb 4-1: device descriptor read/8, error -71 [ 164.594183][ T355] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 164.602503][ T355] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 164.612820][ T355] usb 2-1: config 220 has no interface number 2 [ 164.619116][ T355] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 164.632257][ T355] usb 2-1: config 220 interface 0 has no altsetting 0 [ 164.639072][ T355] usb 2-1: config 220 interface 76 has no altsetting 0 [ 164.645951][ T355] usb 2-1: config 220 interface 1 has no altsetting 0 [ 164.654320][ T355] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 164.663402][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.671496][ T355] usb 2-1: Product: syz [ 164.675666][ T355] usb 2-1: Manufacturer: syz [ 164.680430][ T355] usb 2-1: SerialNumber: syz [ 164.741814][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 164.764214][ T9] usb 4-1: device descriptor read/8, error -71 [ 164.903380][ T9] usb 4-1: device descriptor read/8, error -71 [ 165.019938][ T9] usb usb4-port1: unable to enumerate USB device [ 165.071435][ T355] usb 2-1: selecting invalid altsetting 0 [ 165.077382][ T355] usb 2-1: selecting invalid altsetting 0 [ 165.083162][ T355] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 165.089570][ T355] usb 2-1: No valid video chain found. [ 165.097216][ T355] usb 2-1: USB disconnect, device number 37 [ 165.137143][ T7612] 9pnet_fd: Insufficient options for proto=fd [ 165.541976][ T7645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:66 [ 165.560576][ T7650] rust_binder: 57: no such ref 2 [ 165.577813][ T36] audit: type=1400 audit(2000000045.562:834): avc: denied { module_load } for pid=7649 comm="syz.1.2408" path="/sys/power/wakeup_count" dev="sysfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 165.683197][ T389] usb 5-1: USB disconnect, device number 6 [ 166.067991][ T333] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 166.207410][ T333] usb 4-1: device descriptor read/64, error -71 [ 166.463860][ T333] usb 4-1: device descriptor read/64, error -71 [ 166.485183][ T7671] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 166.485250][ T7671] rust_binder: Error in use_page_slow: EFAULT [ 166.496026][ T7671] rust_binder: use_range failure EFAULT [ 166.502163][ T7671] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 166.507849][ T7671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 166.518201][ T7671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:60 [ 166.573772][ T7678] rust_binder: 7677 RLIMIT_NICE not set [ 166.586307][ T372] rust_binder: 7676: removing orphan mapping 0:4248 [ 166.640120][ T7689] @: renamed from vlan0 (while UP) [ 166.812423][ T333] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 166.871406][ T7697] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.878466][ T7697] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.885695][ T7697] bridge_slave_0: entered allmulticast mode [ 166.892299][ T7697] bridge_slave_0: entered promiscuous mode [ 166.898578][ T7697] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.905633][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.912720][ T7697] bridge_slave_1: entered allmulticast mode [ 166.919003][ T7697] bridge_slave_1: entered promiscuous mode [ 166.966425][ T333] usb 4-1: device descriptor read/64, error -71 [ 166.971417][ T7697] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.979748][ T7697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.987025][ T7697] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.994070][ T7697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.012686][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.020202][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.029684][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.036762][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.045702][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.052785][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.077345][ T7697] veth0_vlan: entered promiscuous mode [ 167.088280][ T7697] veth1_macvtap: entered promiscuous mode [ 167.133496][ T36] audit: type=1400 audit(2000000047.011:835): avc: denied { mounton } for pid=7719 comm="syz.0.2427" path="/1/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 167.201689][ T389] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.223070][ T333] usb 4-1: device descriptor read/64, error -71 [ 167.340865][ T333] usb usb4-port1: attempt power cycle [ 167.351446][ T389] usb 5-1: device descriptor read/64, error -71 [ 167.392033][ T372] rust_binder: 7679: removing orphan mapping 0:24 [ 167.399689][ T7722] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 167.469877][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'. [ 167.479287][ T7725] rust_binder: 69: no such ref 0 [ 167.562820][ T7727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 167.562849][ T7727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:72 [ 167.590586][ T7734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 167.599733][ T7734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:79 [ 167.618815][ T389] usb 5-1: device descriptor read/64, error -71 [ 167.715046][ T333] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 167.737389][ T333] usb 4-1: device descriptor read/8, error -71 [ 167.752555][ T36] audit: type=1400 audit(2000000047.591:836): avc: denied { unmount } for pid=7697 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 167.876540][ T333] usb 4-1: device descriptor read/8, error -71 [ 167.886202][ T389] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 168.025257][ T389] usb 5-1: device descriptor read/64, error -71 [ 168.132270][ T333] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 168.154541][ T333] usb 4-1: device descriptor read/8, error -71 [ 168.239192][ T456] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 168.281918][ T389] usb 5-1: device descriptor read/64, error -71 [ 168.293661][ T333] usb 4-1: device descriptor read/8, error -71 [ 168.378151][ T456] usb 1-1: device descriptor read/64, error -71 [ 168.399608][ T389] usb usb5-port1: attempt power cycle [ 168.410430][ T333] usb usb4-port1: unable to enumerate USB device [ 168.519137][ T36] audit: type=1400 audit(2000000048.311:837): avc: denied { map } for pid=7740 comm="syz.1.2435" path="socket:[36272]" dev="sockfs" ino=36272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.634837][ T456] usb 1-1: device descriptor read/64, error -71 [ 168.763179][ T389] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.785506][ T389] usb 5-1: device descriptor read/8, error -71 [ 168.891528][ T456] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 168.924841][ T389] usb 5-1: device descriptor read/8, error -71 [ 168.963684][ T7746] SELinux: failed to load policy [ 169.012534][ T7753] rust_binder: Write failure EINVAL in pid:169 [ 169.012567][ T7755] rust_binder: Write failure EINVAL in pid:169 [ 169.041254][ T456] usb 1-1: device descriptor read/64, error -71 [ 169.163585][ T7768] SELinux: ebitmap: empty map [ 169.168885][ T7768] SELinux: failed to load policy [ 169.180415][ T389] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.202970][ T389] usb 5-1: device descriptor read/8, error -71 [ 169.308661][ T456] usb 1-1: device descriptor read/64, error -71 [ 169.341710][ T389] usb 5-1: device descriptor read/8, error -71 [ 169.415585][ T372] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 169.426476][ T456] usb usb1-port1: attempt power cycle [ 169.458721][ T389] usb usb5-port1: unable to enumerate USB device [ 169.526616][ T7785] overlayfs: missing 'lowerdir' [ 169.531886][ T36] audit: type=1400 audit(2000000049.246:838): avc: denied { map } for pid=7784 comm="syz.1.2446" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 169.564961][ T7787] binder: Unknown parameter '' [ 169.597395][ T372] usb 4-1: Using ep0 maxpacket: 32 [ 169.603597][ T372] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 169.611996][ T372] usb 4-1: config 0 has no interface number 0 [ 169.618212][ T372] usb 4-1: config 0 interface 184 has no altsetting 0 [ 169.626382][ T372] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 169.635631][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.643677][ T372] usb 4-1: Product: syz [ 169.647874][ T372] usb 4-1: Manufacturer: syz [ 169.652501][ T372] usb 4-1: SerialNumber: syz [ 169.657657][ T372] usb 4-1: config 0 descriptor?? [ 169.663353][ T372] smsc75xx v1.0.0 [ 169.789930][ T456] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 169.812337][ T456] usb 1-1: device descriptor read/8, error -71 [ 169.832686][ T389] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 169.951362][ T456] usb 1-1: device descriptor read/8, error -71 [ 170.003829][ T389] usb 2-1: Using ep0 maxpacket: 8 [ 170.010203][ T389] usb 2-1: unable to get BOS descriptor or descriptor too short [ 170.018557][ T389] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 170.026688][ T389] usb 2-1: config 0 has no interface number 0 [ 170.032783][ T389] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 170.043770][ T389] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 170.053609][ T389] usb 2-1: config 0 interface 88 has no altsetting 0 [ 170.062296][ T389] usb 2-1: string descriptor 0 read error: -22 [ 170.068538][ T389] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 170.077568][ T389] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 170.086431][ T389] usb 2-1: config 0 descriptor?? [ 170.092311][ T372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 170.103721][ T389] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input33 [ 170.115513][ T372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 170.132480][ T6400] udevd[6400]: Error opening device "/dev/input/event3": Input/output error [ 170.141200][ T6400] udevd[6400]: Unable to EVIOCGABS device "/dev/input/event3" [ 170.148797][ T6400] udevd[6400]: Unable to EVIOCGABS device "/dev/input/event3" [ 170.217749][ T456] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 170.240147][ T456] usb 1-1: device descriptor read/8, error -71 [ 170.306442][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.315387][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.339522][ T7767] fuseblk: Unknown parameter 'f' [ 170.345966][ T372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 170.357408][ T372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 170.367005][ T372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 170.376547][ T372] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 170.386109][ T372] usb 4-1: USB disconnect, device number 30 [ 170.390161][ T333] usb 2-1: USB disconnect, device number 38 [ 170.402681][ T456] usb 1-1: device descriptor read/8, error -71 [ 170.517328][ T456] usb usb1-port1: unable to enumerate USB device [ 170.581377][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.742819][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.753779][ T45] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 170.762800][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.771373][ T45] usb 5-1: config 0 descriptor?? [ 170.859425][ T333] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 170.895177][ T7807] binder: Unknown parameter 'se’äabel' [ 170.911924][ T7809] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 170.920740][ T7809] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.999071][ T36] audit: type=1400 audit(2000000050.630:839): avc: denied { mounton } for pid=7810 comm="syz.3.2456" path="/61/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 170.999721][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 171.036074][ T333] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 171.044731][ T333] usb 2-1: can't read configurations, error -22 [ 171.190969][ T333] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 171.210427][ T45] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 171.219825][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001A/input/input34 [ 171.290323][ T45] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 171.363824][ T333] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 171.372387][ T333] usb 2-1: can't read configurations, error -22 [ 171.378840][ T333] usb usb2-port1: attempt power cycle [ 171.415593][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 171.577069][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.587240][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.596843][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 171.606001][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.614178][ T9] usb 1-1: SerialNumber: syz [ 171.645639][ T456] usb 5-1: USB disconnect, device number 11 [ 171.747155][ T333] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 171.771341][ T333] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 171.779876][ T333] usb 2-1: can't read configurations, error -22 [ 171.837613][ T9] usb 1-1: 0:2 : does not exist [ 171.844675][ T9] usb 1-1: unit 14 not found! [ 171.852544][ T9] usb 1-1: USB disconnect, device number 32 [ 171.862269][ T36] audit: type=1400 audit(2000000051.434:840): avc: denied { append } for pid=7816 comm="syz.3.2458" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.866654][ T6859] udevd[6859]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.918273][ T333] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 171.942969][ T333] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 171.942985][ T7818] ------------[ cut here ]------------ [ 171.943002][ T333] usb 2-1: can't read configurations, error -22 [ 171.951500][ T7818] WARNING: CPU: 0 PID: 7818 at arch/x86/kvm/x86.c:11569 kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 171.957102][ T333] usb usb2-port1: unable to enumerate USB device [ 171.963176][ T7818] Modules linked in: [ 171.983715][ T7818] CPU: 0 UID: 0 PID: 7818 Comm: syz.3.2458 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 171.995397][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.005496][ T7818] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 172.012382][ T7818] Code: 7e 3b e8 44 0c 6a 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 4c 8b 64 24 40 48 8b 5c 24 28 e9 26 fd ff ff e8 21 0c 6a 00 <0f> 0b e9 e4 fc ff ff e8 15 0c 6a 00 0f 0b e9 0e fd ff ff e8 09 0c [ 172.032042][ T7818] RSP: 0018:ffffc900011df9c0 EFLAGS: 00010293 [ 172.038141][ T7818] RAX: ffffffff811bd81f RBX: ffff888102fb4300 RCX: ffff888116afdf00 [ 172.046145][ T7818] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 172.054309][ T7818] RBP: ffffc900011dfc70 R08: ffff888116afdf07 R09: 1ffff11022d5fbe0 [ 172.062320][ T7818] R10: dffffc0000000000 R11: ffffed1022d5fbe1 R12: ffff88813ed66000 [ 172.070319][ T7818] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888102fb4378 [ 172.078301][ T7818] FS: 00007fbd7144f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 172.087253][ T7818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.093864][ T7818] CR2: 0000200000ff0000 CR3: 000000011b85e000 CR4: 00000000003526b0 [ 172.101907][ T7818] Call Trace: [ 172.105186][ T7818] [ 172.108106][ T7818] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 172.114123][ T7818] ? futex_unqueue+0x136/0x160 [ 172.118907][ T7818] ? __futex_wait+0x218/0x2a0 [ 172.123624][ T7818] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 172.128940][ T7818] ? ioctl_has_perm+0x1aa/0x4d0 [ 172.133812][ T7818] ? __cfi_autoremove_wake_function+0x10/0x10 [ 172.139880][ T7818] ? ioctl_has_perm+0x3e0/0x4d0 [ 172.144762][ T7818] ? has_cap_mac_admin+0xd0/0xd0 [ 172.149704][ T7818] ? synchronize_rcu+0x77/0x2e0 [ 172.154602][ T7818] ? __cfi_synchronize_rcu+0x10/0x10 [ 172.159897][ T7818] ? futex_wait+0x29a/0x7a0 [ 172.164441][ T7818] ? __kasan_check_write+0x18/0x20 [ 172.169558][ T7818] kvm_vcpu_ioctl+0x96f/0xee0 [ 172.174235][ T7818] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 172.179462][ T7818] ? do_futex+0x309/0x500 [ 172.183795][ T7818] ? __cfi_do_futex+0x10/0x10 [ 172.188507][ T7818] ? __fget_files+0x2c5/0x340 [ 172.193190][ T7818] ? bpf_lsm_file_ioctl+0xd/0x20 [ 172.198199][ T7818] ? security_file_ioctl+0x34/0xd0 [ 172.203316][ T7818] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 172.208539][ T7818] __se_sys_ioctl+0x132/0x1b0 [ 172.213224][ T7818] __x64_sys_ioctl+0x7f/0xa0 [ 172.217854][ T7818] x64_sys_call+0x1878/0x2ee0 [ 172.222724][ T7818] do_syscall_64+0x58/0xf0 [ 172.227151][ T7818] ? clear_bhb_loop+0x50/0xa0 [ 172.231865][ T7818] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 172.237771][ T7818] RIP: 0033:0x7fbd7058ebe9 [ 172.242220][ T7818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.261870][ T7818] RSP: 002b:00007fbd7144f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.270288][ T7818] RAX: ffffffffffffffda RBX: 00007fbd707b6090 RCX: 00007fbd7058ebe9 [ 172.278277][ T7818] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 172.286306][ T7818] RBP: 00007fbd70611e19 R08: 0000000000000000 R09: 0000000000000000 [ 172.294308][ T7818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.302282][ T7818] R13: 00007fbd707b6128 R14: 00007fbd707b6090 R15: 00007fffc4b6c108 [ 172.310402][ T7818] [ 172.313423][ T7818] ---[ end trace 0000000000000000 ]---