last executing test programs: 3m2.637704089s ago: executing program 2 (id=620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84020d24}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@delqdisc={0x160, 0x25, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0x1}, {0x4, 0xffff}, {0xfff3, 0xd1e558b8c998c3b7}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x12e9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xac3f}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa0}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x67}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0xc1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000400)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffc, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0xa0}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) (async) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x5, 0x231, 0x7, {}, {0x0, 0xea60}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 3m2.57846596s ago: executing program 2 (id=622): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000004340)=""/49, 0x31}, {&(0x7f0000001680)=""/47, 0x2f}], 0x2}, 0x40}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 3m2.53169374s ago: executing program 2 (id=623): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x44) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x20, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) 3m1.974513749s ago: executing program 2 (id=625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 3m1.972435809s ago: executing program 2 (id=626): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0) 3m1.956366009s ago: executing program 2 (id=627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0x10001) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x1, 0x0, 0x2000}) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)={[&(0x7f0000000300)='-\x00', &(0x7f0000000480)='/dev/udmabuf\x00', &(0x7f00000004c0)='./binderfs/binder1\x00', &(0x7f0000000500)='./binderfs/binder1\x00', &(0x7f0000000540)='./binderfs/binder1\x00', &(0x7f0000000580)='/dev/net/tun\x00', &(0x7f00000005c0)='!\x00', &(0x7f0000000600)='/dev/udmabuf\x00']}, &(0x7f0000000780)={[&(0x7f0000000640)='/dev/udmabuf\x00', &(0x7f0000000740)='/dev/net/tun\x00']}, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0xd) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 2m46.622003772s ago: executing program 32 (id=627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0x10001) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x1, 0x0, 0x2000}) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)={[&(0x7f0000000300)='-\x00', &(0x7f0000000480)='/dev/udmabuf\x00', &(0x7f00000004c0)='./binderfs/binder1\x00', &(0x7f0000000500)='./binderfs/binder1\x00', &(0x7f0000000540)='./binderfs/binder1\x00', &(0x7f0000000580)='/dev/net/tun\x00', &(0x7f00000005c0)='!\x00', &(0x7f0000000600)='/dev/udmabuf\x00']}, &(0x7f0000000780)={[&(0x7f0000000640)='/dev/udmabuf\x00', &(0x7f0000000740)='/dev/net/tun\x00']}, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0xd) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 2m42.029982091s ago: executing program 4 (id=787): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (fail_nth: 19) 2m41.566415469s ago: executing program 4 (id=788): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e41, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f626174616476006c00038068000380600001805c000200005107933aae57150df02ff70f377bca71bd681a9c1e8a4974d4"], 0x98}}, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) (async) r4 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="280000000000000000000000070000000718"], 0x28}}], 0x1, 0x40) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12000000, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) (async) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0x4}, {0x0}], 0x2) 2m41.556401389s ago: executing program 4 (id=789): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x381202, 0x0) listen(0xffffffffffffffff, 0x7) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'vlan0\x00', &(0x7f0000000340)=@ethtool_coalesce={0xf, 0x7fff, 0x5, 0x7, 0x6c000000, 0x7ff, 0x10001, 0x9b6f, 0x1, 0xa73d, 0x9, 0x6, 0x6, 0x5, 0xf, 0x1, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x7, 0x81}}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000582000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 2m41.374550951s ago: executing program 4 (id=791): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x60503, 0x126) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1420dd89f05ae40d}, 0x4004000) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/26, 0x1a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x3437, 0x200001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40600, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x8001) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x4, 0xeeee8000, 0x4, r5, 0x5}) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r7, r7, 0x0) r8 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r9, 0x8, r8) sendmsg$inet(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) brk(0x689d80000000) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000100)=0x9) 2m37.703736477s ago: executing program 4 (id=825): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x12, 0xffffffffffffffff, 0x99b33000) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000)=0xf62, 0x4) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/187, 0xbb, 0x400000000000ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28300, 0x0) 2m37.615797829s ago: executing program 4 (id=827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x19, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1f4}}, 0x0) 2m37.548404899s ago: executing program 33 (id=827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x19, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1f4}}, 0x0) 1m36.613363854s ago: executing program 5 (id=1438): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000003400)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x80c1}, 0x48010) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="724fc938"]) 1m36.537321875s ago: executing program 5 (id=1440): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) 1m36.136437181s ago: executing program 5 (id=1446): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x10a, 0x2}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x12, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x80fe56492b58452a, "c9a449c7"}, @global=@item_012={0x1, 0x1, 0x2, 'O'}]}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f0000000440)={0x40, 0xa, 0x8e, {0x8e, 0x9, "a744df1c7db09da02bb6be9fb69c72787a9711a6c8c26f4ff64b648fa18032a66e3e212539ad1850110eedfceb6ad2fa9ce0a1512702302fa2d1e2cb508e01d16c2f6ccbebfdbb00ee2a1bb73e6f8c0d5324aa0deb402e3685c9cb845757dcf103710cbc7224aa36c495d3ff81cb1aae1d747a84080e418f58833aef4dab9845591b3e9437b0955a4193971e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, &(0x7f0000000180)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0x9, "23276398"}, @global=@item_4={0x3, 0x1, 0x8, "250fafa5"}, @local=@item_012={0x1, 0x2, 0x5, '9'}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x245}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x20, 0xb, 0x16, "991880f1903156a4c5eb3f7f17486751e5eb0cbc732c"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x1, 0x76, "5a631fa1a7719ec29479a739a2235ec8738a7a977a09fabd5ef6fa7fcd06089d7e6e0d0a4593910a736f19035ddad2098ed256ac23db433f34188ce8cd1f811f6fe9aec3b0f082ad072a27d2d472eccaea28e0bc7bf1ca43aa928ef902d5922352851b689727ccac07d2631d8b9178ad55a1a31c88e7"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x4}}) 1m36.006423493s ago: executing program 5 (id=1448): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x80) fremovexattr(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='us']) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f0000000c00)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setuid(r3) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)=ANY=[@ANYBLOB="43298435796e632c00"]) 1m35.933062405s ago: executing program 5 (id=1449): socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0) 1m35.621504619s ago: executing program 5 (id=1456): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = fcntl$getown(r0, 0x9) syz_open_procfs$pagemap(r1, &(0x7f0000000000)) 1m35.482233091s ago: executing program 34 (id=1456): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = fcntl$getown(r0, 0x9) syz_open_procfs$pagemap(r1, &(0x7f0000000000)) 4.310183245s ago: executing program 6 (id=2540): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) (async) r2 = eventfd(0x6) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x8, r2, 0x0, 0x0, 0x2a}]) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async) recvmmsg(r3, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000001880)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r7, 0x2000) (async) fsmount(0xffffffffffffffff, 0x0, 0x1f54220a580ca10) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r9, &(0x7f00000063c0)=""/1024, 0x400) (async) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) mkdirat(r5, &(0x7f0000000e00)='./file0\x00', 0x1) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r11, 0x19650000) futex_waitv(&(0x7f00000011c0)=[{0x4, &(0x7f0000001940)=0x400000000, 0x82}, {0x0, &(0x7f0000000100)=0xffffffffffffffff, 0x82}, {0xa3f2, &(0x7f0000000140)=0xfe1, 0x2}, {0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x2}, {0xde, &(0x7f0000000200)=0x9, 0x82}, {0x0, &(0x7f0000000240)=0x157, 0x82}, {0xffffffffffffffff, &(0x7f0000000280)=0x100000000, 0x82}, {0x1, &(0x7f00000002c0)=0x8001, 0x2}, {0x6, &(0x7f0000000300)=0x2efd30b7, 0x82}, {0x7, &(0x7f0000000340)=0xffff, 0x2}, {0x5e0, &(0x7f0000000380)=0x7, 0x82}, {0x7, &(0x7f00000003c0)=0x6, 0x82}, {0xf40a, &(0x7f0000000400), 0x2}, {0xf42, &(0x7f0000000440)=0xabf, 0x2}, {0x4, &(0x7f0000000480)=0x1000, 0x2}, {0xfb, &(0x7f00000004c0)=0x5, 0x82}, {0x8000000000000001, &(0x7f0000000500)=0x80000000, 0x2}, {0xffff, &(0x7f0000000540)=0xfffffffffffffff0, 0x2}, {0x101, &(0x7f0000000580)=0x7ff, 0x82}, {0x2, &(0x7f00000005c0)=0xe8, 0x2}, {0xfffffffffffffff8, &(0x7f0000000600)=0x8, 0x82}, {0x6, &(0x7f0000000640)=0x7, 0x2}, {0x8, &(0x7f0000000680)=0x3, 0x80}, {0x9, &(0x7f0000001980)=0xe8e8, 0x2}, {0x6, &(0x7f0000000700)=0x9, 0x2}, {0x9, &(0x7f0000000740)=0x100000001, 0x82}, {0x10001, &(0x7f0000000780)=0x4, 0x2}, {0x7, &(0x7f00000007c0), 0x82}, {0xfffffffffffffff7, &(0x7f0000000800)=0x9, 0x82}, {0x8, &(0x7f0000000840)=0x40, 0x82}, {0xffffffffffffffff, &(0x7f0000000880)=0x3, 0x82}, {0x1, &(0x7f00000008c0)=0xf, 0x82}, {0xffffffff7fffffff, &(0x7f0000000900)=0x100000001, 0x82}, {0xc, &(0x7f0000000940)=0x1b3d, 0x82}, {0x3, &(0x7f0000000980)=0x2, 0x2}, {0x7fffffff, &(0x7f00000009c0)=0x200, 0x82}, {0x8, &(0x7f0000000a00)=0x1, 0x82}, {0x8000000000000001, &(0x7f0000000a40)=0x81, 0x2}, {0xffff, &(0x7f0000000a80)=0x2, 0x80}, {0x2, &(0x7f0000000ac0)=0x5, 0x82}, {0x1, &(0x7f0000000b00)=0x7, 0x82}, {0xffffffffffffffc0, &(0x7f0000000b40)=0xffffffff99b20101, 0x2}, {0x101, &(0x7f0000000b80)=0x4, 0x82}, {0x1, &(0x7f0000000bc0)=0x8, 0x2}, {0x5, &(0x7f0000000c00)=0x3, 0x2}, {0x1, &(0x7f0000000c40)=0x4, 0x82}, {0x5, &(0x7f0000000c80)=0x401, 0x2}, {0x1, &(0x7f0000000cc0)=0xfff, 0x82}, {0xb, &(0x7f0000000d00)=0x2, 0x82}, {0x3, &(0x7f0000000d40)=0xfffffffffffffff6, 0x82}, {0x2, &(0x7f0000000d80)=0x9, 0x2}, {0xfffffffffffffff8, &(0x7f0000000dc0)=0x3, 0x2}, {0x8, &(0x7f0000001840)=0x2, 0x82}, {0x4, &(0x7f0000000e40)=0x800000, 0x82}, {0x271e, &(0x7f0000000e80)=0x402baf68, 0x2}, {0x8000, &(0x7f0000000ec0)=0x800, 0xee19953b22c076d8}, {0x8dd, &(0x7f0000000f00)=0xdbf, 0x82}, {0x81, &(0x7f0000000f40)=0x10, 0x82}, {0x6, &(0x7f0000000f80)=0x5800000000000000, 0x2}, {0x2c04, &(0x7f0000000fc0)=0xe51f, 0x82}, {0x1, &(0x7f0000001000)=0x6134, 0x82}, {0x4, &(0x7f0000001040), 0x82}, {0xfffffffffffffe00, &(0x7f0000001080)=0xa, 0x2}, {0x3, &(0x7f00000010c0)=0x889, 0x82}, {0x0, &(0x7f0000001100)=0x1, 0x2}, {0xa8, &(0x7f0000001180)=0x9, 0x82}], 0x42, 0x0, &(0x7f0000001800), 0x0) clock_gettime(0x0, &(0x7f00000035c0)) 4.270626985s ago: executing program 6 (id=2541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) flock(r0, 0x6) flock(r0, 0xa) flock(r0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x1ff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) flock(r1, 0x1) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)=0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r3, 0x9, 0x1, r3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200001, 0x0) close(r5) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x3ff, 0x0, 0x4, 0xe}, {0xe, 0x7, 0x4}]}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={r3, 0x3f, 0x3, r3}) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x80010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f00008eb000/0x1000)=nil, 0x1000, 0x5, 0x1010, r3, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f0000b05000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x8001, &(0x7f00000001c0)=[{0x3, 0x1, 0x65}, {0xfffffffffffffffb, 0x5, 0x4}, {0xc7f, 0x81, 0xee8}], 0x3, 0x9, 0x4, 0x4, 0x40}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000002c0)={0xb, 0x1958, 0x0, 0x7}, 0x10) r6 = geteuid() quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, r6, &(0x7f0000000300)={0xfffffffffffffffe, 0x5, 0x5, 0x2, 0x459, 0xffffffff, 0x7fff, 0x83, 0x7}) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000800)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0x8000000000000000}, @cpuid={0x2, 0x18, {0x82, 0x6}}, @cpuid={0x2, 0x18, {0x5, 0xa8}}, @uexit={0x0, 0x18, 0x16c000}, @cpuid={0x2, 0x18, {0x7ff}}, @code={0x1, 0x61, {"430f0966baf80cb88ae9af83ef66bafc0c66b83d6666efc482a99e9202000000c402b1bceac4a20d38b21b120000a73e660f388249c666baf80cb808f5cd81ef66bafc0c66ed66b860008ed00f002c03"}}, @code={0x1, 0x4b, {"c74424000d010000c744240200000000ff2c24660f7f173edea82600000066b891008ed8450fbfdd66bad104ed66bad104ed0f320f32360f01df"}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0xcef, 0x9}}, @uexit={0x0, 0x18, 0x100000000}, @code={0x1, 0x68, {"67400f01cb2e40dc4b0026f30f5e58f14c0fae880e000000c481fd7fdbc744240000000000c744240200880000c7442406000000000f011424c744240003000000c74424028fe186ffff1c248654dd01470f06470f01dd"}}, @code={0x1, 0x60, {"3e660fc7b3efa500000ff3916375f234410f38098d5b590000b8010000000f01d9c74424001d000000c744240200000000ff1c2445de15044f000040d30ec462652c420bc422a5933cc0400f38c807"}}, @code={0x1, 0x56, {"c744240022000000c7442402a6dd0000ff2c24c4427d242ab9890400000f32440fc77d0f0f35b9800000c00f3235008000000f30650fc71f66baa000ecc4017e5bd30f01c4"}}, @cpuid={0x2, 0x18, {0x2, 0x9}}, @uexit={0x0, 0x18, 0xf}, @code={0x1, 0x7c, {"2e656766f3410f0966b800010f00d8f3400fbd0554000000b805000000b9004000000f01c148b8bc000000000000000f23d80f21f835400000600f23f8b99f000040b800000080ba000000000f30400f09652e450f07b9240a0000b86e000000ba000000000f30f30faec7"}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x3ad6}}, @code={0x1, 0x50, {"0f01c2c4228bf5076465440fd7ff66b819008ec8c462b12b35f30000006726f30f09d95880b9800000c00f3235000100000f30c483e96f8b2ed74734d845f4"}}, @uexit={0x0, 0x18, 0x400}, @cpuid={0x2, 0x18, {0x1f0, 0xe1}}, @cpuid={0x2, 0x18, {0x100, 0x6}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x6, 0x9}}, @uexit={0x0, 0x18, 0xdef}, @uexit={0x0, 0x18, 0x3ff}], 0x45e}) ioctl$KVM_GET_TSC_KHZ(r7, 0xaea3) open(&(0x7f0000000840)='./file0\x00', 0x121000, 0x1a9) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 4.245361815s ago: executing program 6 (id=2542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x1, 0x3, 0x0, 0x400, 0x5}, 0x20) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000e80)={'syz0\x00', {0x3f, 0x9, 0x8, 0xe}, 0x200012, [0x3, 0x8, 0x76f, 0x3, 0x8001, 0x5, 0x63e, 0xfffffffd, 0x3, 0xc, 0x9, 0x1, 0x3, 0x9, 0x9, 0xb0c, 0x8, 0xa3d0, 0x0, 0x7b, 0x5, 0xbc2f, 0x4, 0x80000001, 0xfffffffe, 0x3, 0xa, 0xf, 0x8, 0xd2f1, 0x7, 0xffffffff, 0x3, 0xe, 0x3, 0x0, 0x1ff, 0x47f2, 0x80000000, 0x4, 0x0, 0x7, 0x5, 0x29e, 0x2, 0x2, 0x9, 0xdf26, 0x1, 0x40, 0x4, 0x8, 0x80, 0x3, 0x9, 0x1a, 0x3, 0x5, 0x5, 0x9, 0x8000, 0x80000000, 0xcd, 0xfff], [0x6, 0x227, 0x9, 0x7, 0x8, 0x5, 0x81, 0x45, 0xc322, 0x6000, 0x7, 0x2, 0xf0, 0x1, 0x90000, 0x798, 0x7ff, 0x7, 0xa, 0xb, 0x9e, 0xd1a, 0x0, 0x1, 0x2, 0xa, 0x0, 0x5, 0x2, 0x101, 0xfff, 0xfff, 0x1, 0x401, 0x5, 0x0, 0x1000, 0x5, 0x10, 0x4, 0x7fffffff, 0x3ea1, 0xfffffffa, 0x2, 0xfffffff9, 0x1, 0x6, 0x400, 0x2243ccfc, 0x8455, 0x0, 0xb, 0xffffffa8, 0xdc9b, 0x0, 0x4, 0xff, 0x5, 0x1, 0x4, 0x2, 0xd5c, 0x6, 0x6], [0x1, 0x7fff, 0x1, 0x6b, 0x9, 0x3, 0x8, 0x80000000, 0x2, 0x5, 0x6, 0x0, 0x4, 0x40, 0x7, 0x2, 0x6, 0x8, 0xe2, 0x80000001, 0x7fffffff, 0x8, 0x401, 0x4, 0xc7, 0x4, 0x2, 0x6, 0x2, 0x648, 0x1, 0x10001, 0x4f68, 0x5, 0x40, 0x1, 0xc, 0x3, 0xffff, 0x7, 0x9, 0x1, 0xc0c, 0xcd, 0x9, 0x2, 0x401, 0x0, 0xd, 0x9, 0x0, 0x10, 0x7ff, 0x0, 0x7, 0x8a, 0x5, 0x2, 0x3, 0x2, 0x5, 0x0, 0x3, 0x3], [0xc51, 0x2, 0x8, 0x1, 0x9, 0x3, 0x7fff, 0x10000, 0x1, 0x6, 0x200, 0x7, 0x5, 0x0, 0x9, 0x8, 0x3, 0x10, 0x6, 0xd2, 0x8, 0x1ff, 0x400, 0x4, 0xb, 0x9, 0xfbd, 0x9, 0x0, 0x2, 0x1, 0xed, 0x6, 0x2, 0x5, 0xfff, 0xe79, 0x20c, 0xe0, 0x2, 0x3ff, 0xfffffffe, 0x9, 0xa, 0x100, 0x9, 0x3ff, 0x8e6, 0x3, 0x200, 0x9, 0x2, 0x3, 0x0, 0xb7, 0xc, 0x0, 0x9, 0x4, 0x4, 0x3, 0xcd87, 0x8001, 0x9]}, 0x45c) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newsa={0x158, 0x10, 0x633, 0x0, 0x0, {{@in6=@remote, @in=@rand_addr=0x64010102, 0x0, 0x7ff, 0x0, 0x0, 0x2}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xfffffffffffffffc, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0xc}, {0x0, 0x7fff, 0x0, 0x8000000000000000}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x2, 0x4, 0x0, 0xb0}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2c, 0x70bd27, 0x70bd29, 0x70bd25, 0x5, [0x80]}}]}, 0x158}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r7 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, 0x0) 2.64569501s ago: executing program 0 (id=2565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) (async, rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) signalfd(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x6]}, 0x8) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) (async) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$RTC_AIE_ON(r1, 0x7001) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.597590071s ago: executing program 6 (id=2567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r3, 0x0) r7 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) setpgid(r7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) read(r2, &(0x7f0000000080)=""/93, 0xffffff6c) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r8 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)={0x1, r8}) socket$inet6(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000100)={0x80000000, 0x10000, 0x6, 0x0, 0x3e}) 2.538011242s ago: executing program 0 (id=2569): r0 = syz_open_dev$rtc(&(0x7f0000001480), 0x0, 0x101000) ioctl$RTC_AIE_ON(r0, 0x7001) (async) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000001500)={0x28, 0x38, 0x12, 0x13, 0x2, 0x100, 0x4, 0xe1, 0x1}) (async) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000400)=0x14) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000140001002cbd7000fedbdd2528010000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) (async, rerun: 64) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) (rerun: 64) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setreuid(r1, r5) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) (async) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40) (async) unshare(0xc000600) (async) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x2) fcntl$notify(r7, 0x402, 0x100000000) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async, rerun: 64) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) 2.338261835s ago: executing program 6 (id=2570): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) preadv2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/220, 0xdc}], 0x1, 0xfffffffe, 0x6, 0x15) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000001200)) fallocate(r0, 0x22, 0xa77, 0x10001) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140), 0x3000011, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[], 0x5c}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) prlimit64(r6, 0x2, 0xffffffffffffffff, &(0x7f0000000200)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000e9ffff4f000000000000000f080f0866ba2100b0db000000ef450f22c2"], 0x296}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) 2.086488978s ago: executing program 0 (id=2573): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.253624741s ago: executing program 0 (id=2578): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c0002800500010000000000140001"], 0xe4}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e297", 0x3, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r0, 0x2b09d000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008aec1, &(0x7f0000000500)=""/233) r4 = mmap$binder(&(0x7f0000268000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sockstat6\x00') read$FUSE(r5, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000100)={0x19980330, r6}, &(0x7f0000004340)={0x8a, 0xfffffff7, 0x6, 0x9, 0x10001, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 1.165739432s ago: executing program 3 (id=2579): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffffa}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x9, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x8901) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_settime(r5, 0x1, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.054272664s ago: executing program 3 (id=2580): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) (async, rerun: 64) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) (rerun: 64) sendfile(r6, r5, &(0x7f0000002700)=0x23, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) (async) sendto$inet6(r4, &(0x7f00000001c0)="a6e2", 0x2, 0x840, 0x0, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, 0x0) (async, rerun: 64) socket(0x28, 0x5, 0x1) (async, rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) r11 = getpid() fcntl$setown(r1, 0x8, r11) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003c80)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.040530744s ago: executing program 3 (id=2581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) socket$inet6(0xa, 0x3, 0x84) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 988.304825ms ago: executing program 3 (id=2582): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/221, 0xdd, 0x1, 0x1c}, @fda={0x66646185, 0xa, 0x1, 0x8}, @fda={0x66646185, 0x7, 0x2, 0x39}}, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x8001) (async) r5 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32) io_setup(0x4, &(0x7f00000014c0)=0x0) (async, rerun: 32) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r6, 0x1, &(0x7f0000000680)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6020, r7, 0x0, 0x0, 0x3, 0x0, 0x2}]) (async) io_getevents(r6, 0x3, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000480)) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000d00)=0x4002, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) (async) syz_usb_control_io$hid(r10, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) (async) syz_usb_disconnect(r10) (async) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r9, 0x1, 0x20, 0x6, @local}, 0x14) sendmmsg(r5, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="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", 0xfe}, {&(0x7f0000000300)="8121b95fb6c40f1a91a2b89303328e5544551fbf1c3ca3ce4d67faec6ecca0740fca38a7156109a430e39ea2b25bdef98c8b569509de435696cb28db0a3772f0b23a5c9dabe3858760824d7e22c9dd24f4b389902a3138490ac4209db1ba", 0x5e}, {&(0x7f0000000bc0)="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", 0x1000}], 0x3, &(0x7f0000001bc0)=[{0x40, 0x111, 0x9, "d01ed29a0497a51d1f92bd3e8fee96f89b70753d5d1214a91f6f5387603bf05199018346c31b177b7b5f80db928d80"}, {0x60, 0x119, 0x5d7b8df2, "ad641f390dc34883578b063b94c3acccdfb45da4effdd5651ad30cbac15618ecc24d64564b886aa9ac6646c5e48a38e3befbf15aa982e817dd1eafd1a0c73c2167a9f0ffbb8be93cb8b5fe05e13a0e74"}, {0x48, 0x10d, 0x85f3, "7ec096c37f8f49576407e2796f1c0756c246373f5288e68ebc4304083f98bc3f5e72b86d417d58d03d6dae62c42be0846686"}, {0xf8, 0x10f, 0x9, "7b1fb156eae93b32239c3002b3ead353fb1784028fdac58bd753c440c5c019bd957b70bf517da9d9e4478325843cdad82a3230910658ea30fee517ee7bd678c142dabd5bb3ecb319e8eb0fe4eec2f41f3f995cf477c273dfe774d1d123d6c6f559eede96776e3b0a5670e63d29dabe0a5335cbfd4a821402773320217e92f0d05cfc432601ce0f649e592e548b259b0deccfabfdce3edee3825129c289d1c8ead21a8273f2b37ac035e2b02f614d99a469f0775bf5a0f860ad523ee5fd1a22ee5ad170c7773ba45eda9845a009d624114f96dd143e761901ef60ebfcbcf0af742aca2d62"}, {0xa8, 0x101, 0x7, "95b9045cec0ff8067bc0e1946956a50361281d3ace1bcd205edbeceb5c712596619a8be34bca67b242dd70cd61a66d7df18dd85dcd05916269be13f1fc42909f76f8cdfbc131f66fda23a0a3a91155e8516b7c3a5761e20ebbc514edcd49adf09dcb9d42bc8f6e94a7be422459199c1d20b6f92850cddbf57c5b85116cd01c688ebc62b0d4b8df501502dea4483e9cc35b43d39506ba2616"}, {0xe0, 0x29, 0xffffffac, "6bb29d39442c5b22325d0a2f307c83d47085a4e84466329b5d068033600d4068cfeefb5f68108c6e2faca205179aba16876954a5282aee941c9357f00202c9961a0623aa30cb10edf60001c47d573ae956a56956f5390f556546e11cb4d2fa8a4fc74e655d2b71035d012d4285b9bfe8d64bb0bb7ac5c2cf78cb8510c30367981fd0eca86f53031ddb31bb59e12ad43aafd14a2bb2f9772423eca4bd4316beec8948966ba956cf305bb4480cb87526cbfe9ea5d29f4f80270f9891b7b934a6734e9931f336e4c644b733e922c067"}, {0x38, 0x109, 0x2, "e8f362a8f70abd68168df5b311d7f6d0bd4dc6417304e5d559f5ba283f350f354e9687f35929ea"}, {0x60, 0x29, 0xffffff7a, "f210f2bd2ea7bd79de895099f5d1e916a44e55f8464c9a423344c912cc428b8ad0f37d91aaad05b29ddb89b8b2c0a47c4bbadb941a5a2502246d1495eba3bc8f5b311e223fa13096ff760ebc35"}], 0x400}}, {{&(0x7f0000000680)=@can={0x1d, r9}, 0x80, &(0x7f0000000480)=[{&(0x7f00000008c0)="2e2491db897a3273c7860aba72db3ca9078ef659c0a24dc833785659099425d62e37b9f43f79a2cc6a8944a0ca0f93143830f8739b0ae631ed6e9e983418a42b6865427aca44850811f4adcd16559c6cdc07235a0949a6fa44fc0a8be2f9890c2854f2348b0ebc0e4868572f25964c04a006322a942c7a6fe9bad9fdf63e5581fabf87fdaaab4fce4c55b117c3c43a25d6c64bcddaa4f53482540925196c66dfab1f504bc5c23f5fcd5bc0eefa91237a6c118f625b607fea6680b88979613896ba744d8f0495a2bb2bd4a2b62e8dbde34ff8f5975440558031764300000000", 0xdf}, {&(0x7f0000000a80)="8a0eb6b34aeded90b66d91eeb767da273ee2d4a69700e0883b28d7d27d31d929b79fa5328178967dff8efa8f7f7b906ba526b898b4125399d9f0b2229980686cc4e05ef95c558bf75a399c3af8c1d6f42318409b34e338c06f8d4d1d2abd2c03314e30938649cc296c6e4d3782c03417b313f53d44ae1ab61b48c6ce250c87f5ae13e6c86fa60deaf49c9d8948aaaa4ef6d59e95f6ef8b6679a605", 0x9b}, {&(0x7f0000001fc0)="bcc09b0252d3a9afe24b13e540e2c33e301d9f029fd052dd8c2b43a83fcdcf2ed9f78c1a5e83e9b6d1bffc26fb40a332a4b78d05f8ad2c38583e65622c1b4dbf8779ac026031ffdca1b6d8c992a2681b681b70740fb764751b58b5a41ae0950d0104536b5ce2e928a9808dceec5fdb3dd70cf9ca85313598deb0b5eb52a29d5d2db7caa5f26648df8d7d1b250c13b08f6ce9d0ba8463a31814f356d76cd70d36e7bfafb7b875f565a2f396e530b72bc7d904fd3626", 0xb5}, {&(0x7f00000009c0)="d1ac6471f85456e86f3cb2d6f80ea43009246b76ec7b9dd11ca8ca7a9418c2abdba7b3e6a1c0ff08caee8a8ea9da5b48cefa2f3aa202782d9b7d4e6fb63490a21e6444fe31c25f77e16442354e41626179cf0643b5993a53da39a7d4334b4745b9c97d0054de", 0x66}], 0x4, &(0x7f0000002080)=[{0xb0, 0x11, 0xa, "ed9ae6837663403a81ddf3ff77b9412205cb852c2dc3b65aebe1b847144caecb844b7255d37d4c09925b93081b25c2846c9f5e5abe9d6b3396b50f216b26fcf9ccf759d13c2a2931a8b0c4cd9eb41023f685f5a93deba5e9d67dfa5a1d108246139198ef513136b781c9a43f0c6781a6c5bd29f0a47f8a2fd1f3a7aeb7ae81ab0e8d3cc4a4a3feafad0d09a5f874c85b741ef2626313b4ea7090e8f787"}, {0x58, 0x214, 0x7, "4c43486aad76fad44870ad16915829db35ae75203c8f746f1442275decaee2a7ebe15d3c83e0995f5ead6813891c9a799de1382984356c057d83d183249b22e95c5361e056"}, {0xe8, 0x110, 0x1d7400, "9eaf0f0be83e46ad9065d33d5afa23c3fa21db32894a09aa27ebdef41357ca6baf75d42202624c51db6c1fc0ba52d425390832f1d6d020b2413edf1c0166a447abd07cfac03d3b8674423b651366c9c8fad1505e5688ac1b5f8183cac4af50c72829ac3743e452160fd638c0803d9e94d218119b549168b65e6a5a18d5fa240fe0264561198f4293470f00645bc861411c8f411710ffe198d6b68a33c7602837b1f6fe5c2d98e51f096e99ac736c99fe0de9e8da5311eec46f9c03d46b5856f9f91960ca8fccd4502fa64b7fb2a2868357244e2327cd"}, {0x70, 0x7346b21c67a2abd0, 0xfe3, "e59796844f64795ac9feeb96358e12f3721edb759176b32ebf8d5f49cfffb1720f21861df02a6570ba230cd98b37df699e9a9a9118a1f55e600278fdfd9bf0959f2aa13f7e9a4c464f23f2451a29e391d9165851a3aeb2543c260470"}, {0x18, 0x10a, 0x152, "5d1c5645203f02"}], 0x278}}, {{&(0x7f0000002300)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x7f, 0x7b, "4cc1e90628ec8fe75d23c349678680da5966c46d3be4e2cc4d25f7a2697a26605594599aeecb6c4141a8915da4543f43eb56ad2c5b34ea01176e6319648ba9", 0x29}, 0x80, &(0x7f0000000580)=[{&(0x7f0000002380)="b768afa86a56121d1323eabee055be9ec8f8dd5df9005eb014c01bc9f122d67bc52669871641e890b87b67c0f84b81f5e04d71e2e3f44c46f1bf21a190a65705a0fc6c730bd0a8b37c76ac475891333481828f4bf0d182f9c7c653d9b3dcc1ef054fd8054be4d53a807c8af5fed80a5207b6e7c0ed042b6e9e5f4f96579a29d5c849d43e987a66504175d01fcab22ec3b07b68", 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002440)="4f0d8d0449d6afeb76d3af69dd744e868bb1d1fea73a3276ed520c94d5526591217759d239eeaaa1ee17a5d74372faf2391ac35f08106502298388e77fa11194ea36a52008d39939dece8e8d2a1e8f2aeb4c22f4ee5d0712e06f19ef94b27fd6d99277ce542d7d3952240ce6cd4e5243a8978eab79c1f222c3c77e657a21fe3a684bd76f9752e5d7f942b9c2629fcda30133d9f1036f517bb19c4f76691f41ae79c3ee9031a0ff4ee61d56508d4b53daa7fcf4a2951c753cff41de6327a1ad96d677d62466846327ce0ffe92580551eb", 0xd0}, {&(0x7f0000000600)}, {&(0x7f0000000700)}, {&(0x7f0000002540)="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", 0x1000}], 0x4, &(0x7f0000003540)=[{0xf0, 0x1, 0x6, "ea472eb3d368f4636fcba183d294403df604ff710ac8c1ebfd4dcae9f55c63632856617f1275cd14b5398df9896419963f8a40740d4690b0b4e5831d425b238a058ad991bb92bd0e97e3f6ab4b910a83af961cfb0f903ba9751e4fa55f13b71bfe5f434911e3fccce83f1f65eb9e0ca8990ac8f89931fd09be4fe7d4c9d524f36562c634ebad86657be5f929fc8df2385ce762cc3c24400c810fc0cee4ea2b47d1ace3d138d973de876edda26e3618f329e6bf4ea7c6c960219b49680955348122af569baecf3b568beeb4aed200790b0986ddebe35a3fb1389b"}, {0xd0, 0x10e, 0x200, "32fff1776ba40ecfb55ed71dd33025a5b0b69700e960d7484c251372497c23086f46682ad083ec7e32292e25b012319a5df26347040d372a51d148c6f964bccbf4c9e0b357a175ac33e8883608e829e5176db6f4cb2eff85e0f150efa65c0e12e23c750ae6c9b2a6a250db24fdcc20aa80d50de1c4a1cda2b1ab129f391ec9ea4673a0c27c249a5cbab3c03954dfb98ddce79e94658f254ba9920c5ad0bfc1ec01bcb935c77b2bdc58cee2e58ccd9c76dc5c01d3ced6cd1493175d1457"}, {0xa0, 0x84, 0x8, "e5b10a4b08b4d164c4fc29f899aec469684c6b8811d1a0c1c49e7868fc747a21882fd7ba3790cd638b968eb72e95ad32b024fca429471741c4559e6af5fdb504ca115a8e7c4befb9caca843e8e2a678faac7bbd38bedab1070499aacb5a55dcf56813cdf16bf60738b18e9af2f60f8dcfa10894191742489503205f5d5db3928ba48b35b573e23ee02c5c8333761"}, {0xb8, 0x117, 0x4, "a4c435ef91dc340832c4a9a1805912c672c96ba6e1e4c0b3f9d456234419613bec4b04a8a2220297d1a222b6db61241b17b43069fd25e04df0be3ac635066894f31ad67102adfbceb08b1d9f52ea8173a6701fff14595280b5b6ea8a75a29b65806d87a792de528663318f26ee50008670a9458bae459472ed29fb1c2e0581b9a3e3621497a5565d73304504ba0eda5f11ab73413e2068df834f63c368bdf5484984c0"}, {0x68, 0x10b, 0x7067, "85248354204487b1ade29267ef297728a86cf274a61e91766a16639a554dcdacbab2a401e9267f7fad1debaf5116ec6140c7bcb0a86c0162d8fc6d9bd0265d25b8851a1c84727af85d501813846ae12102"}, {0x60, 0x118, 0x7, "88fcb7fa535b5b35d9f2b37d5557d81beafd7d1b35b931967665d13fe523037bd4564bfb99deaf4cacb05a2ce9a3eae8b03f1ef00fe095e4c19f9b8d80d94671cf1d304eac60d1ca3c30ac"}, {0x68, 0x110, 0x4, "e2e529e5de0bf92306920f8741c345e6557a696c33acf5370f432e5f0c19eacde4490808d2dff12ca1e934710dbe0f968b81f67927cba107063ca0d479cfc760ce64a809b94c443851324850355a6c24a58694591ced"}, {0x30, 0x1, 0x2000000, "b2fbc8ae2938bcf8eb473953ed7451a106a0380f86dee1f327343b17116b2423"}], 0x478}}], 0x4, 0x2000c884) (async) sendmmsg$inet6(r5, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="0f1ae0a565d76fe383cf54def7248c5302738c39c84950efffe1489233042f8359df9ac4dc64aadfc096a100231f2061fcfcc09cb47a5dc57ed1f13abc2f9fd584b7c492fab45cc6dd96cad36d3dab7b8bedf456b4f417fff11d31e6c9dac4298be35ac660eb31e9be475edf7c7ec8317d6873886e8e6027403e8af3b972b0c8ff3262d040ee3b5aae8dcf43e764c7d5a45ed7fb3357e56701fa1efcf713dbb95a928144ad1d3470b4", 0xa9}, {0x0}, {&(0x7f0000002380)}], 0x3}}, {{&(0x7f0000000640)={0xa, 0x4e21, 0x8, @mcast2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000740)="84acd778dffc50b2e94a366ff9659a060dc19084f26096a0dfbc0a0d9726efb77c8c8ff6e514e60316b2cddb2cfc8ec1cd103efac26a06cee8e82b902152a5751d19a2867f16d8e5696a58720a", 0x4d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1, &(0x7f0000003dc0)=ANY=[@ANYBLOB="140000000000000029000000080000004000000000000000580000000000000029000000390000003508010000000000fe8000000000000000000000000000aa00000000000000000000fe07e8358c54000000000000fe8000000000000000000000000000aaff010000000000000000000000000001300000000000000029000000040000003302000000000000000100", @ANYRES32=0x0, @ANYBLOB="00000000380000000000000029000000360000007303000000000000c910fe8000000000000000000000000000bb040181c2040000e409000000000000010000000000002900000036000000331c00000000000007480000000310040500800600000000000008000000000000005508000000000000000001000000000061000000000000000c0000000000000007000000000000008a00000000000000010700000000000000c204000000040a8755731c387a9c2099d34ae2ea6060fb652db7a2409297146d9be5c0e0e978"], 0x228}}, {{0x0, 0x0, &(0x7f0000000880)}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40c0044) splice(r8, 0x0, r3, 0x0, 0x12, 0x6) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r11, r12, 0x0) 878.419617ms ago: executing program 0 (id=2583): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x4, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES8=r0], 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0xb) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) 870.127107ms ago: executing program 1 (id=2586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) fstat(0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 858.639867ms ago: executing program 3 (id=2587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x10000000000000, 0x1000, 0x0, 0x3}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = inotify_init() ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000900)="b3ccf1a66a6c3c3315195c0a58f54ce5be15fd0ad870d973b350f017cc6e05014c069d156b0e9c4c21878026fb3da13ed87a905296ff78e857c57e7545f64714e4387c79ec99c081ed1a331187292c4c14e490a86ef8a26ad2acb18bef0ef5d44c84a80aa07b8fea20bc589b35e3c20596a880ff822fbafb15"}, {&(0x7f00000004c0)="b0946cce65acdb39634b6d0c2c4e7c662edd844e42d437296af32098ad10aba2b7b0521d2855fa9461105fee25ea1c50011289c8f894efcc905ee7b9f244682fc6298409ca1e6cb1e6ce7edd510e9ac97beeda51076a2b786c16f08fa66b8e218930ce35f3185b4df0f65b45e3ef4cc7918891d72033dab6e6399dc0d2e7fa20d003554f04cd4c71d257575178329c86646081adbd09527482716b228e232661797768053609506e48ad9c0c398b9b2684291121ff5622"}, {&(0x7f0000000580)="7bf5c0f70b448704fc2a62be6fc49eeec286b9d81cabdb3e7acb6f3fc92d81ec2ee835597ef3f1c6d066fd2eb421570aff8b57d1d4c36bbe9118acc503f362509f285751e577a4d66477a6b0c751c3a855cc459f5cb3d6e10a8cd04cf718cccf11476fc504753fcf1a4ad74dd999f1d057c96894aee779d9a2a7e2127a9a6b90319e7fcd"}, {&(0x7f0000000640)="b27bf96ad65cf90e5a18d1206f629e8820d172349481c5723208fbe5e1d947ecf2228dc1b1caa797447d2bca043b887652d194a320dfca46eb829ba4c886d08537082c675c05d823113f39240601f0274ee6495ae7cac6001ef9968477e494045da98064123ac26f2d4d2dbf7774ff00d5685b78e13a4eb15d00493527231dec8681b06b56f89d85c05c53b584bebeb5270e1a8d66769ae8103efbb72e9860e63399be2043019264d6e83dab8e7cfa398c92307db3dc48e9a03270c0dd1f4ada6f01ff9dc0b0d877e0b446156b5c36035e513b90ac91"}, {&(0x7f0000000740)="a91ef6efc44cc6e4b28c51fe62a3d68c9e6c1b2e2e68f64791933a2a761a209df66fadee2c8b1d1a15fb7b515ad768b21f9eb811a2eab0a775ec393a2566b1bfee84a0861c3ed8ec6c3e7f61e2fe2ba10f8d4a28b5117056e543256ec276494ef5d048f35a361dd8623082c80afb1b47fd0c649d5c769d1595efe559a16d08ea3ac343ef256da20e1c6526acf664907c0cd3e88be20f0d7073990f0a7dc9e3f85e"}], 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f00000008c0)={0x0, 0x4, 0x8, {0x8, 0x6, "a7ea3163fd3b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x45809000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x1000, r6, 'id1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x4, 0xffffffee, 0x32, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x40, 0x6, 0x32}}) sendmsg$can_bcm(r9, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r10}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x3, 0x1, 0x7, {}, {}, {0x4, 0x1, 0x1, 0x1}, 0x1, @canfd={{}, 0x34, 0x3, 0x0, 0x0, "ec84f970613217aa1eb26bc6b612141dd89850d5e9efeb0df744424e3d835345b816dba00dd4d98eaca5546cee8e43568583db07fee55a0d0d046f1e72b9504b"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 790.423138ms ago: executing program 1 (id=2588): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x3) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000000)=0x1) 787.544128ms ago: executing program 1 (id=2589): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) pselect6(0x40, &(0x7f00000000c0)={0xb6d1, 0x0, 0x5, 0xd6, 0xf, 0x8, 0xf, 0xca}, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 653.9961ms ago: executing program 1 (id=2590): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100)) getgroups(0x2, &(0x7f0000000200)=[r2, r3]) (async) listen(r1, 0x0) (async) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) (async) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000d40), 0x4) (async) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) write$selinux_load(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75785778771ecce03c003e6ed9cd68d32d3bd1d52dcfd36f45e1627c42b37d1b69f6cfd2434ab8645d876e9e3701427ac746fb6b665cb8f1884aa82e5cb0fe5a6305488505189ea648d45a0f560d259d504ff4c1be85f2de73376900f0288ade50ef7043b94a87"], 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r7, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x9, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f00000000c0)={0x2}) 653.68489ms ago: executing program 1 (id=2591): ioprio_set$pid(0x1, 0x0, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) gettid() (async) r0 = gettid() getpgrp(r0) (async) getpgrp(r0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x149) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, 0x0, 0x0) r4 = inotify_add_watch(r3, &(0x7f0000000100)='./file0\x00', 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) inotify_rm_watch(r3, r4) (async) inotify_rm_watch(r3, r4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9400f6ff1100110e00000000000000bd3900000097"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$BLKRRPART(r1, 0x125f, 0x0) 651.98654ms ago: executing program 1 (id=2592): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3, 0x1, 0x81, 0x4, 0x7, r1}) sendfile(r0, r0, &(0x7f0000000100)=0xff, 0xa114) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4001) fallocate(r0, 0xc, 0x0, 0x9) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000240)={{r0}, "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"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r0) r2 = syz_usb_connect$cdc_ecm(0x4, 0x6f, &(0x7f0000001280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x1, 0x10, 0xb, [{{0x9, 0x4, 0x0, 0xe3, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "e0c9"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x577b286a, 0x2, 0x8001, 0x63}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x4, 0x7, 0x9}, @acm={0x4, 0x24, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x5, 0x1e}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0xf8, 0x1}}}}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x110, 0x2, 0xd8, 0x9, 0x8, 0x1}, 0xa4, &(0x7f0000001340)={0x5, 0xf, 0xa4, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x400, 0xf00, 0x1, [0x0, 0xffc000, 0x3f30, 0x0, 0x0, 0x0]}, @generic={0x52, 0x10, 0xc, "e2bc364995199edc0e9f044aee9b8a88c313df121905ed6efbf722556bf36909711ef79251943e1a1d9393be29ca6e44972eb9406e15a894c8abafe53ad8e3dd9dceff56a419e7519570610e8c3f67"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xb0, 0xa, 0x80, 0x2, 0x17}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "e7b417ae5dd7317a3d86b4e8f5741546"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x84, 0x40, 0x3}]}, 0x2, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x809}}, {0x80, &(0x7f0000001440)=@string={0x80, 0x3, "93f9b7f2a5df45cc6b561816a531faff7ca30090d2f87f730306339ce4282b3472171bca7b0f67a8fb08762a1d100245445683877bb4e3a12e5a736067b8d084081278780938315a41e40becad8f2db4302be527f64442020b694923e4f653e816fe5c30ac404a6bcab589d9975d6cb993db17aff48f6ecb5b5748ab9517"}}]}) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001580)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={0xfffffffffffffffe}}, 0x20000) syz_usb_connect$cdc_ecm(0x4, 0x64, &(0x7f00000015c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0xf7, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x2f, {{0xb, 0x24, 0x6, 0x0, 0x0, "f645f3de2d75"}, {0x5, 0x24, 0x0, 0x50a2}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x278d, 0x1, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x2, 0x40, 0x10, 0x9, 0xf}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x3, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x2}}}}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x250, 0x5, 0x1, 0xff, 0xff, 0x5}, 0x38, &(0x7f0000001680)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8a, "f49c64dbc0e0d234a298785d1ea3e96f"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x9, 0xf00f, 0x6, [0x0, 0xffff00, 0xff00c0, 0xeabd5d570ef8a034]}]}, 0x6, [{0xfc, &(0x7f00000016c0)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x2c, &(0x7f0000001800)=@string={0x2c, 0x3, "30e2aa976eb11cc2c30941e8bbfca29a92da53029f845e2d4b5a48fa9369b0031c0c0a4d1bca2aae4c8d"}}, {0x71, &(0x7f0000001840)=@string={0x71, 0x3, "8ad49b05c053d0e62778be5ea7ea43047b760e59b2261003b7b40a13c171b175a691c7d65bfbea4c9b34b35711420380141cd6a530a700a912908bcab213767cba4aadfe4a6f4eb0cf7f0ed45ba7b0d96361bede15b5f85ce35cbe5a977aee2ba8d55c3de6dc87dac0623f7e618db4"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x403}}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000019c0)=0x12) write(r0, &(0x7f0000001a00)="8c83d4e69b7b78a3ce0ebcc87e042f450674cd317db4f4d8b04b1737a5d75341735c28cb1018232093087db675b372fa0e2cd014d413cfb91b0bd9e604cd4f43bc6d32c1095d2f43b2765ab4b77fd3cb1987ed2332a97e4113691396cf155d5ee7d43214d12e993e25f3aa111a0263b0f857d351c4e8f46b1cf93e15687f", 0x7e) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000001a80)) r3 = syz_usb_connect$uac1(0x0, 0xf5, &(0x7f0000001ac0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x40, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x1, 0x3, 0x2, [0x8, 0x0], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x1, 0xff, 0x4, "9620a6", "50ea2c"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x0, 0x1, "c4f8116561"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x3, 0x0, 0x0, "833d9c", "d77cb8"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x1002}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xcf, 0x2, 0x9, 0x3, "2402", "5af5af"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x81, 0xe, "8e714b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0xf, 0x0, {0x7, 0x25, 0x1, 0x80, 0xc8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x3, 0x4, "bd6b3c9d679c6c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xa0, 0x3, 0x2, 0x1, "24fd94", 'u'}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0xda, 0x4, "02df", "01ebf7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x4, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x200}}}}}}}]}}, &(0x7f0000001d80)={0xa, &(0x7f0000001bc0)={0xa, 0x6, 0x310, 0x4, 0x1, 0x4, 0x40, 0x2d}, 0x25, &(0x7f0000001c00)={0x5, 0xf, 0x25, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0xe, 0x2605, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x25, 0x8, 0x1, 0x2, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0xf, 0xe000}]}, 0x5, [{0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x5ec19838369d274d}}, {0x35, &(0x7f0000001cc0)=@string={0x35, 0x3, "ac55f5e6ec97fa6aa8448b97c5a2df04e1ea613641283adeb92bbfb0f9acb0e9fed7a434d4893870239571b3e1c30912d97efe"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000001fc0)={0x14, &(0x7f0000001e00)={0x0, 0xd, 0x59, {0x59, 0x8, "90d05825ac6e740828e3f0d300bf0cf830a16dd3e4eb829d98041dda5019c3105dc8738c471d56c14e842927eca4f23c790070054a828ffad602d811745fd42b382e8b4c631ab68fd2e8d64aff57e74253430d0bbcba1b"}}, &(0x7f0000001e80)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f0000002240)={0x44, &(0x7f0000002000)={0x20, 0x10, 0x75, "c3327981dfb490fcbc3c1cfc8d27f1e49c8dd4e139a99275f7ca1f3f7299191ba9b5bb17d7f2177fb5e06e4e864b07da45f616b8f270caddedaf800bd8544c893f987c0f76179ada077bfafeed9ff944157494074eb6f721a5210bdae7fec5dccbb8a571b7d2a671b7e97631d815f3fe810ac4667c"}, &(0x7f0000002080)={0x0, 0xa, 0x1, 0x90}, &(0x7f00000020c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002100)={0x20, 0x81, 0x3, 'Irl'}, &(0x7f0000002140)={0x20, 0x82, 0x3, "afe550"}, &(0x7f0000002180)={0x20, 0x83, 0x1, 'Z'}, &(0x7f00000021c0)={0x20, 0x84, 0x2, "9296"}, &(0x7f0000002200)={0x20, 0x85, 0x3, "5f05f8"}}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f00000022c0)=0x72) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004340)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000004440)=0xe8) fstat(r0, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000004500)={0xa0, 0xfffffffffffffffe, r5, {{0x6, 0x0, 0xfffffffffffffff7, 0x3, 0xffffffff, 0x5, {0x2, 0x6, 0x7, 0x706, 0x6, 0x60b, 0x2, 0x9, 0x4, 0x6000, 0x401, r6, r7, 0x1, 0xfec83637}}, {0x0, 0x8}}}, 0xa0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000045c0)={0x7, {{0xa, 0x4e21, 0x4, @local, 0xa}}}, 0x88) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000047c0)={0x14, &(0x7f0000004680)={0x0, 0x5, 0xf8, {0xf8, 0x23, "8e54bd2c2f73a054f0b014abbb566f772b2b3225018e15178fc891f25e97766eb1a169952d67117bc4e03eba8c386a5eeb283c57cfdeae9b8ee2d5040f5ad4eb433fbfbffe88b677dbaadde93a095e1373c265cebb97e815fa1ba09f11a25985b488dd78cfc6f18f0dd74c54ac815a9fd46eb201da2ec0000e696a202596474dc0fc0a868334f5fde890dbd527f39c34704af1fdc07f0d945205d5381f75c0446796abd217ff433b0a20ba9b94d2b6ff06efcad857c66756cb180fbf7c8da41bc2b1bf7151fe3400a80be02015fa30a0268ca66b7ee56e02a415f4f86a65b620f3a283d9d0a30e4b7f8b8b52d0a2104bd58a26efeb13"}}, &(0x7f0000004780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000048c0)={0x1c, &(0x7f0000004800)={0x0, 0x16, 0x32, "149f21857f82ffe9fc37c1caac107daec53e82374845e3f9e68baf5ec09d97f27ac52dc4fde0aea4dc26f20394540bfb2b3f"}, &(0x7f0000004840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000004880)={0x0, 0x8, 0x1, 0x8}}) ioctl$int_out(r4, 0x5460, &(0x7f0000004900)) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x24000894) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000004a40)) write$UHID_CREATE(r0, &(0x7f0000004bc0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000004ac0)=""/217, 0xd9, 0x82, 0x3, 0x1, 0x3, 0x22}}, 0x120) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) 377.835094ms ago: executing program 0 (id=2593): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0, 0x240}], 0x1, 0x6) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$binder(&(0x7f000024a000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x1000000000) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000270001000000000006000000ac1e01", @ANYRES32=0x0, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000000)={0x0}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000), 0x8) listen(r2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) syz_open_procfs(r3, &(0x7f0000000280)='net/if_inet6\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000000)=0x1) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) inotify_init1(0x800) 262.226406ms ago: executing program 3 (id=2595): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) prctl$PR_SET_MM_EXE_FILE(0x38, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x13, r0, 0x7dfff000) 0s ago: executing program 6 (id=2596): userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x3) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x28482, 0x0) r2 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x0, 0x160) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="31fe4452", @ANYRES16=r3, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) flock(r1, 0x1) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2d54ddd768743dd3, 0x20012, r7, 0xebd3000) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100007dcddb3f002900"/24]) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000b700000000000000000000000000000000c116ad67360100000001"], 0x110) getpeername(r4, &(0x7f0000000200)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0x80) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000680)={{{@in=@dev={0xac, 0x14, 0x14, 0xe}, @in=@broadcast, 0x4e23, 0x591, 0x4e22, 0x2, 0xa, 0x80, 0x0, 0x5c}, {0x0, 0x1, 0x8aa0, 0x2, 0x0, 0x5, 0x1, 0x7}, {0x0, 0x3e77, 0x322, 0x4}, 0x9, 0x6e6bb1, 0x1, 0x1, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x7f, 0x2b}, 0x2, @in6=@remote, 0x0, 0x1, 0x3, 0x1, 0x7, 0x1, 0x5}}, 0xe8) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): avc: denied { watch_reads } for pid=5168 comm="syz.1.1547" path="/492/file0" dev="tmpfs" ino=2692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 176.389367][ T362] usb 7-1: device descriptor read/64, error -71 [ 176.639330][ T362] usb 7-1: device descriptor read/64, error -71 [ 176.786805][ T5188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65363 sclass=netlink_audit_socket pid=5188 comm=syz.1.1551 [ 176.889635][ T362] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 176.932403][ T5190] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1552'. [ 177.041235][ T5194] fuse: Bad value for 'fd' [ 177.049511][ T362] usb 7-1: device descriptor read/64, error -71 [ 177.253425][ T5200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 177.253467][ T5200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:996 [ 177.299380][ T362] usb 7-1: device descriptor read/64, error -71 [ 177.459439][ T362] usb usb7-port1: attempt power cycle [ 177.819331][ T362] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 177.850763][ T362] usb 7-1: device descriptor read/8, error -71 [ 178.021577][ T362] usb 7-1: device descriptor read/8, error -71 [ 178.192751][ T5237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.214484][ T5237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.232083][ T5237] overlayfs: failed to resolve '/ ': -2 [ 178.259645][ T362] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 178.272143][ T5239] 9pnet_fd: Insufficient options for proto=fd [ 178.279295][ C0] net_ratelimit: 27560 callbacks suppressed [ 178.279318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.297463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 178.309678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.312312][ T5239] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1565'. [ 178.321843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.342613][ T362] usb 7-1: device descriptor read/8, error -71 [ 178.342944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.361143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.373365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 178.385896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.398551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.410799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 178.470353][ T362] usb 7-1: device descriptor read/8, error -71 [ 178.485263][ T36] audit: type=1326 audit(2000000077.314:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.3.1567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718418e929 code=0x0 [ 178.580222][ T362] usb usb7-port1: unable to enumerate USB device [ 178.587432][ T618] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 178.613324][ T618] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffff92 [ 178.637860][ T618] asix 1-1:0.0: probe with driver asix failed with error -110 [ 179.324947][ T36] audit: type=1326 audit(2000000078.154:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff452d8e929 code=0x7fc00000 [ 179.379816][ T36] audit: type=1326 audit(2000000078.184:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff452d8e929 code=0x7fc00000 [ 179.404566][ T36] audit: type=1326 audit(2000000078.184:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff452d8e929 code=0x7fc00000 [ 179.429628][ T36] audit: type=1326 audit(2000000078.184:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff452d8e929 code=0x7fc00000 [ 179.459407][ T36] audit: type=1326 audit(2000000078.184:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff452d8e929 code=0x7fc00000 [ 179.484011][ T36] audit: type=1326 audit(2000000078.184:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff452d8e929 code=0x7fc00000 [ 179.515061][ T36] audit: type=1326 audit(2000000078.184:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff452d8e929 code=0x7fc00000 [ 179.546402][ T36] audit: type=1326 audit(2000000078.184:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff452d8e929 code=0x7fc00000 [ 180.229326][ T362] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 180.369335][ T362] usb 7-1: device descriptor read/64, error -71 [ 180.609318][ T362] usb 7-1: device descriptor read/64, error -71 [ 180.849316][ T362] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 180.857712][ T5324] incfs: Error accessing: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.858036][ T5324] incfs: mount failed -36 [ 181.041736][ T5334] tmpfs: Bad value for 'uid' [ 181.046546][ T5334] tmpfs: Bad value for 'uid' [ 181.079335][ T362] usb 7-1: device descriptor read/64, error -71 [ 181.155153][ T5347] overlay: Unknown parameter 'smackfsfloor' [ 181.241728][ T5351] fuse: Unknown parameter '01777777777777777777777' [ 181.274773][ T5357] binder: Unknown parameter 'uid' [ 181.314218][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 181.324601][ T362] usb 7-1: device descriptor read/64, error -71 [ 181.455344][ T362] usb usb7-port1: attempt power cycle [ 181.839318][ T362] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 181.870455][ T362] usb 7-1: device descriptor read/8, error -71 [ 182.001582][ T362] usb 7-1: device descriptor read/8, error -71 [ 182.239326][ T362] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 182.271204][ T362] usb 7-1: device descriptor read/8, error -71 [ 182.405394][ T362] usb 7-1: device descriptor read/8, error -71 [ 182.520668][ T362] usb usb7-port1: unable to enumerate USB device [ 182.675182][ T5407] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 182.885205][ T5430] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1633'. [ 183.036985][ T5439] netlink: 'syz.1.1637': attribute type 64 has an invalid length. [ 183.055068][ T5439] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1637'. [ 183.289364][ C0] net_ratelimit: 31962 callbacks suppressed [ 183.289389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.307462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.319688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 183.332197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.344696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.357031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 183.369244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.381495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.393633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.405876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.409320][ T362] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 183.589331][ T362] usb 7-1: device descriptor read/64, error -71 [ 183.606809][ T5449] rust_binder: Error in use_page_slow: ESRCH [ 183.606834][ T5449] rust_binder: use_range failure ESRCH [ 183.622596][ T5449] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 183.635863][ T5449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 183.658493][ T5449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1029 [ 183.781732][ T5452] rust_binder: Error while translating object. [ 183.791143][ T5452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.797609][ T5452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1033 [ 183.816972][ T5456] cgroup: Unknown subsys name 'smackfstransmute' [ 183.832756][ T362] usb 7-1: device descriptor read/64, error -71 [ 183.850265][ T5456] overlayfs: failed to clone upperpath [ 183.858123][ T36] kauditd_printk_skb: 878 callbacks suppressed [ 183.858143][ T36] audit: type=1400 audit(2000000082.684:1430): avc: denied { map } for pid=5457 comm="syz.0.1644" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 184.069340][ T362] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 184.209361][ T362] usb 7-1: device descriptor read/64, error -71 [ 184.469334][ T362] usb 7-1: device descriptor read/64, error -71 [ 184.519766][ T36] audit: type=1400 audit(2000000083.354:1431): avc: denied { shutdown } for pid=5478 comm="syz.1.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.599458][ T362] usb usb7-port1: attempt power cycle [ 184.616125][ T5487] bpf: Bad value for 'mode' [ 184.959323][ T362] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 185.000721][ T362] usb 7-1: device descriptor read/8, error -71 [ 185.153530][ T362] usb 7-1: device descriptor read/8, error -71 [ 185.399345][ T362] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 185.420485][ T362] usb 7-1: device descriptor read/8, error -71 [ 185.550330][ T5517] overlayfs: failed to resolve '/bÅì [ 185.550330][ T5517] tbÿªF?!Ÿ é4eUzSÉ0¹voI¥/´§@¡BÂ@_bšë./file0': -2 [ 185.565009][ T362] usb 7-1: device descriptor read/8, error -71 [ 185.625537][ T5523] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 185.679435][ T362] usb usb7-port1: unable to enumerate USB device [ 186.040409][ T5531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.699304][ T1573] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 187.310294][ T1573] usb 7-1: device descriptor read/64, error -71 [ 187.339607][ T5568] 9p: Unknown Cache mode or invalid value 딊 [ 187.529726][ T5579] tmpfs: Unknown parameter 'ÌoGd°4ˆíÚ' [ 187.559329][ T1573] usb 7-1: device descriptor read/64, error -71 [ 187.590933][ T5584] overlayfs: failed to clone upperpath [ 187.594185][ T5580] /dev/rnullb0: Can't open blockdev [ 187.640017][ T5584] 9pnet_fd: Insufficient options for proto=fd [ 187.799337][ T1573] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 187.971119][ T1573] usb 7-1: device descriptor read/64, error -71 [ 188.019746][ T5617] binder: Unknown parameter 'contextÀ’' [ 188.218958][ T1573] usb 7-1: device descriptor read/64, error -71 [ 188.299573][ C0] net_ratelimit: 26665 callbacks suppressed [ 188.299599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.319494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.331775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 188.339509][ T1573] usb usb7-port1: attempt power cycle [ 188.344049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.361371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.373558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.385961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.398142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 188.410644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.423183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.441503][ T5625] /dev/loop0: Can't lookup blockdev [ 188.508911][ T5633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5633 comm=syz.1.1701 [ 188.557502][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 188.620872][ T5649] /dev/rnullb0: Can't open blockdev [ 188.662339][ T5657] 9pnet_fd: Insufficient options for proto=fd [ 188.689357][ T1573] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 188.730348][ T1573] usb 7-1: device descriptor read/8, error -71 [ 188.744883][ T5662] tipc: Enabling of bearer rejected, media not registered [ 188.862823][ T5670] rust_binder: Error while translating object. [ 188.862855][ T5670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 188.869175][ T5670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1103 [ 188.880554][ T1573] usb 7-1: device descriptor read/8, error -71 [ 188.901024][ T5670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.058982][ T5687] tmpfs: Unknown parameter 'd' [ 189.139305][ T1573] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 189.171113][ T1573] usb 7-1: device descriptor read/8, error -71 [ 189.281252][ T5707] rust_binder: Error while translating object. [ 189.281315][ T5707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.287759][ T5707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 189.299815][ T1573] usb 7-1: device descriptor read/8, error -71 [ 189.439429][ T1573] usb usb7-port1: unable to enumerate USB device [ 189.646275][ T5724] /dev/rnullb0: Can't open blockdev [ 189.695031][ T5730] netlink: 'syz.0.1733': attribute type 4 has an invalid length. [ 189.739349][ T1573] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 189.890012][ T1573] usb 7-1: device descriptor read/64, error -71 [ 190.011438][ T5763] fuse: Bad value for 'fd' [ 190.030803][ T5763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5763 comm=syz.0.1740 [ 190.159314][ T1573] usb 7-1: device descriptor read/64, error -71 [ 190.409343][ T1573] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 190.559305][ T1573] usb 7-1: device descriptor read/64, error -71 [ 190.588816][ T5772] cgroup: Invalid name [ 190.649488][ T36] audit: type=1400 audit(2000000089.474:1432): avc: denied { create } for pid=5775 comm="syz.3.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 190.733768][ T5781] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1750'. [ 190.819300][ T1573] usb 7-1: device descriptor read/64, error -71 [ 190.931797][ T1573] usb usb7-port1: attempt power cycle [ 191.014963][ T5801] tipc: Can't bind to reserved service type 2 [ 191.194667][ T5808] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1757'. [ 191.227043][ T5808] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 191.244390][ T5808] overlayfs: failed to set xattr on upper [ 191.261269][ T5808] overlayfs: ...falling back to redirect_dir=nofollow. [ 191.299326][ T1573] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 191.330309][ T1573] usb 7-1: device descriptor read/8, error -71 [ 191.368346][ T36] audit: type=1400 audit(2000000090.194:1433): avc: denied { connect } for pid=5827 comm="syz.0.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.433833][ T5834] 9pnet_fd: Insufficient options for proto=fd [ 191.470372][ T1573] usb 7-1: device descriptor read/8, error -71 [ 191.709404][ T1573] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 191.730638][ T1573] usb 7-1: device descriptor read/8, error -71 [ 191.844114][ T5851] overlay: Unknown parameter 'appraise' [ 191.861589][ T1573] usb 7-1: device descriptor read/8, error -71 [ 191.882050][ T36] audit: type=1400 audit(2000000090.714:1434): avc: denied { setopt } for pid=5853 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.904350][ T5854] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1773'. [ 191.913566][ T5854] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1773'. [ 191.972792][ T1573] usb usb7-port1: unable to enumerate USB device [ 192.086126][ T5866] kernel profiling enabled (shift: 63) [ 192.091868][ T5866] profiling shift: 63 too large [ 192.165443][ T5876] __vm_enough_memory: pid: 5876, comm: syz.0.1780, bytes: 1125899906846720 not enough memory for the allocation [ 192.324110][ T5887] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 192.346675][ T5889] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 192.711523][ T5907] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1791'. [ 193.309401][ C0] net_ratelimit: 28291 callbacks suppressed [ 193.309427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.327590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.339807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 193.352408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.365022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.377409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 193.389693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.402734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.414959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.427192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.762356][ T5918] fuse: Unknown parameter 'groupâû'B00000000000000000000' [ 193.795565][ T5918] 9pnet_fd: Insufficient options for proto=fd [ 193.840583][ T5924] mmap: syz.0.1798 (5924): VmData 29069312 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 194.069309][ T1573] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 194.083848][ T5928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1213 [ 194.229352][ T1573] usb 7-1: Using ep0 maxpacket: 32 [ 194.248381][ T1573] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 194.258000][ T1573] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 194.278276][ T1573] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 194.296848][ T1573] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.306903][ T1573] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.327354][ T1573] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 194.350462][ T1573] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 194.369287][ T1573] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.398569][ T1573] usb 7-1: config 0 descriptor?? [ 194.469465][ T36] audit: type=1400 audit(2000000093.304:1435): avc: denied { create } for pid=5932 comm="syz.0.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.525020][ T5935] binder: Unknown parameter 'permit_directio' [ 194.616732][ T1573] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 194.791335][ T36] audit: type=1400 audit(2000000093.624:1436): avc: denied { read } for pid=5949 comm="syz.0.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 194.837707][ T31] usb 7-1: USB disconnect, device number 24 [ 194.855980][ T31] usblp0: removed [ 195.107985][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.249108][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.393469][ T36] audit: type=1400 audit(2000000094.224:1437): avc: denied { mount } for pid=5957 comm="syz.1.1812" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 195.449435][ T5959] rust_binder: Write failure EINVAL in pid:94 [ 195.642494][ T5968] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 195.652229][ T5968] rust_binder: Error while translating object. [ 195.719744][ T5968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.725988][ T5968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 195.870498][ T36] audit: type=1400 audit(2000000094.694:1438): avc: denied { lock } for pid=5977 comm="syz.6.1819" path="socket:[42357]" dev="sockfs" ino=42357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.059558][ T36] audit: type=1400 audit(2000000094.894:1439): avc: denied { write } for pid=5979 comm="syz.0.1820" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 196.100946][ T36] audit: type=1400 audit(2000000094.934:1440): avc: denied { getopt } for pid=5981 comm="syz.6.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.133518][ T5987] netlink: 'syz.3.1823': attribute type 64 has an invalid length. [ 196.150391][ T5987] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1823'. [ 196.191279][ T46] bridge_slave_1: left allmulticast mode [ 196.197782][ T46] bridge_slave_1: left promiscuous mode [ 196.204309][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.212924][ T46] bridge_slave_0: left allmulticast mode [ 196.236035][ T46] bridge_slave_0: left promiscuous mode [ 196.246759][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.395614][ T46] tipc: Left network mode [ 196.433541][ T46] veth1_macvtap: left promiscuous mode [ 196.443906][ T46] veth0_vlan: left promiscuous mode [ 196.666731][ T31] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 196.678300][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.687040][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.694474][ T5985] bridge_slave_0: entered allmulticast mode [ 196.701465][ T5985] bridge_slave_0: entered promiscuous mode [ 196.711373][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.718687][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.727224][ T5985] bridge_slave_1: entered allmulticast mode [ 196.734204][ T5985] bridge_slave_1: entered promiscuous mode [ 196.841107][ T31] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.869309][ T31] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 196.900617][ T31] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 196.914297][ T6029] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 196.923234][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 196.932590][ T31] usb 7-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 196.951396][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.972346][ T31] usb 7-1: config 0 descriptor?? [ 196.986224][ T5998] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 196.994149][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.001290][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.008602][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.015703][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.083166][ T2248] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.092450][ T2248] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.120717][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.127869][ T2248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.168745][ T6043] /dev/rnullb0: Can't open blockdev [ 197.177113][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.184246][ T2248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.274346][ T5985] veth0_vlan: entered promiscuous mode [ 197.294520][ T5985] veth1_macvtap: entered promiscuous mode [ 197.345745][ T6051] SELinux: security_context_str_to_sid () failed with errno=-22 [ 197.355804][ T6051] SELinux: security_context_str_to_sid () failed with errno=-22 [ 197.393404][ T6054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 197.393445][ T6054] rust_binder: Read failure Err(EFAULT) in pid:2 [ 197.427369][ T31] input: HID 28bd:1903 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:1903.001B/input/input21 [ 197.479458][ T31] uclogic 0003:28BD:1903.001B: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.6-1/input0 [ 197.600193][ T6067] rust_binder: Write failure EFAULT in pid:1258 [ 197.637195][ T6070] random: crng reseeded on system resumption [ 197.654252][ T31] usb 7-1: USB disconnect, device number 25 [ 197.721673][ T6072] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1847'. [ 197.747786][ T6073] binder: Bad value for 'stats' [ 197.753004][ T36] audit: type=1400 audit(2000000096.584:1441): avc: denied { ioctl } for pid=6069 comm="syz.0.1846" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 197.789784][ T6070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.820842][ T6070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.058611][ T6082] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 198.058640][ T6082] rust_binder: Read failure Err(EFAULT) in pid:11 [ 198.319340][ C0] net_ratelimit: 32913 callbacks suppressed [ 198.319367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.340768][ T6089] SELinux: policydb magic number 0x72666c65 does not match expected magic number 0xf97cff8c [ 198.344220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.366191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 198.378431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.380017][ T1573] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 198.390638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.406255][ T6089] SELinux: failed to load policy [ 198.410167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.427066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.439188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 198.451587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.464084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.571328][ T1573] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.608157][ T1573] usb 2-1: config 1 interface 0 has no altsetting 0 [ 198.632688][ T1573] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 198.651043][ T6101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 198.656814][ T1573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.695571][ T1573] usb 2-1: Product: syz [ 198.703724][ T1573] usb 2-1: Manufacturer: 䡢斠谦垽먂ៃå€ì–®ï¸…êœïŒ‹ê‘‚™Ѽナ쟼₤ﭱ뤉淤蘴 à¯ê§¦ã­Ÿë¡’ï¥ä¬±å©Ÿå”‹á¶»ëšïª‘涸♺â‘﹚ﶷ蠈礧瓶롆ë¸ç”—蟋仆旄⊧頾넂﯅춳監欃䜕쯎⅔è¡ä¼›ê¾»à¦‰í†…䀜⃧毥䗱æ»äŒœæŽï”¦è¡‘賖⮯肆Ȇ鸜ూ攮걎저 [ 198.748027][ T1573] usb 2-1: SerialNumber: syz [ 198.967210][ T6106] 9pnet_fd: Insufficient options for proto=fd [ 198.979419][ T1573] usb 2-1: USB disconnect, device number 33 [ 199.069325][ T618] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 199.097829][ T6116] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 199.105795][ T6116] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1860'. [ 199.133646][ T6118] overlayfs: failed to resolve './file0': -2 [ 199.207720][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 199.220653][ T618] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.239301][ T618] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 199.257273][ T618] usb 7-1: config 0 interface 0 has no altsetting 0 [ 199.264331][ T618] usb 7-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 199.273751][ T618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.289017][ T618] usb 7-1: config 0 descriptor?? [ 199.295893][ T6102] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 199.559724][ T6136] netlink: 'syz.1.1868': attribute type 19 has an invalid length. [ 200.234518][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.244141][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.909330][ T618] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 201.049563][ T618] usb 2-1: device descriptor read/64, error -71 [ 201.184456][ T6162] tipc: Enabled bearer , priority 8 [ 201.209481][ T485] Bluetooth: hci0: command 0x1003 tx timeout [ 201.215645][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.260709][ T36] audit: type=1400 audit(2000000100.094:1442): avc: denied { validate_trans } for pid=6169 comm="syz.0.1879" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 201.290170][ T618] usb 2-1: device descriptor read/64, error -71 [ 201.529358][ T618] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 201.600681][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.612163][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.632905][ T1573] usb 7-1: USB disconnect, device number 26 [ 201.639486][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.666363][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.674868][ T618] usb 2-1: device descriptor read/64, error -71 [ 201.680574][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.690426][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.701530][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.711312][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.755104][ T6185] /dev/rnullb0: Can't lookup blockdev [ 201.919307][ T618] usb 2-1: device descriptor read/64, error -71 [ 201.989342][ T1573] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 202.040459][ T618] usb usb2-port1: attempt power cycle [ 202.129298][ T1573] usb 7-1: device descriptor read/64, error -71 [ 202.195482][ T6208] 8021q: VLANs not supported on lo [ 202.259637][ T36] audit: type=1400 audit(2000000101.094:1443): avc: denied { accept } for pid=6209 comm="syz.0.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 202.309712][ T31] tipc: Node number set to 3585356124 [ 202.389312][ T1573] usb 7-1: device descriptor read/64, error -71 [ 202.395841][ T618] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 202.420424][ T618] usb 2-1: device descriptor read/8, error -71 [ 202.552029][ T618] usb 2-1: device descriptor read/8, error -71 [ 202.649839][ T1573] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 202.789311][ T1573] usb 7-1: device descriptor read/64, error -71 [ 202.800055][ T618] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 202.831457][ T618] usb 2-1: device descriptor read/8, error -71 [ 202.962396][ T618] usb 2-1: device descriptor read/8, error -71 [ 203.029312][ T1573] usb 7-1: device descriptor read/64, error -71 [ 203.041134][ T6219] overlayfs: failed to clone upperpath [ 203.069891][ T618] usb usb2-port1: unable to enumerate USB device [ 203.098001][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.108428][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.140176][ T1573] usb usb7-port1: attempt power cycle [ 203.329355][ C0] net_ratelimit: 42278 callbacks suppressed [ 203.329372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.347612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.359826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 203.372012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.384045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.396092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.408134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.420223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 203.432467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.444894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.479380][ T1573] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 203.501373][ T1573] usb 7-1: device descriptor read/8, error -71 [ 203.568036][ T6223] batadv_slave_1: entered promiscuous mode [ 203.582661][ T6223] batadv_slave_1: left promiscuous mode [ 203.630294][ T1573] usb 7-1: device descriptor read/8, error -71 [ 203.856556][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.866541][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.889923][ T1573] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 203.899744][ T6253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1912'. [ 203.931367][ T1573] usb 7-1: device descriptor read/8, error -71 [ 204.065878][ T1573] usb 7-1: device descriptor read/8, error -71 [ 204.179408][ T1573] usb usb7-port1: unable to enumerate USB device [ 204.204443][ T6265] rust_binder: Write failure EINVAL in pid:52 [ 204.204546][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:52 [ 204.459386][ T1573] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 204.609587][ T6276] /dev/rnullb0: Can't open blockdev [ 204.619296][ T1573] usb 2-1: Using ep0 maxpacket: 32 [ 204.631684][ T1573] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 204.644339][ T1573] usb 2-1: config 0 has no interface number 0 [ 204.650861][ T1573] usb 2-1: config 0 interface 184 has no altsetting 0 [ 204.659374][ T1573] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 204.674995][ T1573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.692557][ T1573] usb 2-1: Product: syz [ 204.701138][ T1573] usb 2-1: Manufacturer: syz [ 204.706993][ T1573] usb 2-1: SerialNumber: syz [ 204.716995][ T1573] usb 2-1: config 0 descriptor?? [ 204.729226][ T1573] smsc75xx v1.0.0 [ 204.776426][ T36] audit: type=1400 audit(2000000103.604:1444): avc: denied { execute } for pid=6283 comm="syz.6.1923" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.847118][ T6292] fuse: Unknown parameter '' [ 204.854020][ T6292] overlay: Unknown parameter 'smackfstransmute' [ 204.865341][ T6292] fuse: Unknown parameter '€' [ 205.039908][ T6313] overlayfs: failed to clone upperpath [ 205.133836][ T1573] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 205.160631][ T1573] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 205.173692][ T1573] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 205.194195][ T1573] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 205.204497][ T1573] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 205.222400][ T36] audit: type=1400 audit(2000000104.044:1445): avc: granted { setsecparam } for pid=6321 comm="syz.1.1937" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 205.244794][ T1573] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 205.263523][ T1573] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 205.282722][ T36] audit: type=1400 audit(2000000104.044:1446): avc: granted { setsecparam } for pid=6321 comm="syz.1.1937" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 205.305492][ T1573] usb 2-1: USB disconnect, device number 38 [ 205.337262][ T6329] syzkaller0: entered promiscuous mode [ 205.350843][ T6329] netlink: 'syz.1.1938': attribute type 4 has an invalid length. [ 205.358764][ T6329] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1938'. [ 205.399538][ T31] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 205.582807][ T31] usb 7-1: config 1 interface 0 altsetting 42 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 205.604990][ T31] usb 7-1: config 1 interface 0 altsetting 42 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.624958][ T31] usb 7-1: config 1 interface 0 has no altsetting 0 [ 205.820605][ T64] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 205.835872][ T64] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.874396][ T6344] fido_id[6344]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.060098][ T6362] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.070617][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.089861][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.253136][ T6369] overlayfs: failed to clone upperpath [ 206.314506][ T36] audit: type=1400 audit(2000000105.144:1447): avc: denied { write } for pid=6374 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 206.425980][ T6386] SELinux: security_context_str_to_sid () failed with errno=-22 [ 207.342044][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'. [ 207.576209][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.609492][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.630271][ T36] audit: type=1326 audit(2000000106.464:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.3.1970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718418e929 code=0x0 [ 208.109292][ T31] usb 7-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.40 [ 208.143767][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.162006][ T31] usb 7-1: Product: ÐŒ [ 208.171490][ T31] usb 7-1: Manufacturer: Ð [ 208.187806][ T31] usb 7-1: can't set config #1, error -71 [ 208.205373][ T31] usb 7-1: USB disconnect, device number 31 [ 208.339465][ C0] net_ratelimit: 40326 callbacks suppressed [ 208.339488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.357831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.370235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 208.382456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.394539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.406644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.418742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.430850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 208.443220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.455621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.599412][ T6437] input: syz1 as /devices/virtual/input/input22 [ 208.629043][ T6437] input: failed to attach handler leds to device input22, error: -6 [ 208.819070][ T6448] fuseblk: Unknown parameter '' [ 208.901851][ T6453] cgroup: Unknown subsys name 'fsname' [ 208.934530][ T6453] overlayfs: failed to clone upperpath [ 208.966331][ T36] audit: type=1400 audit(2000000107.787:1449): avc: denied { map } for pid=6460 comm="syz.6.1986" path="/dev/hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 209.059328][ T36] audit: type=1400 audit(2000000107.827:1450): avc: denied { write } for pid=6460 comm="syz.6.1986" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 209.299319][ T618] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 209.459416][ T618] usb 7-1: Using ep0 maxpacket: 8 [ 209.470207][ T618] usb 7-1: config 1 interface 0 has no altsetting 0 [ 209.480503][ T618] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 209.498653][ T618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.517648][ T618] usb 7-1: Product: Ж [ 209.525273][ T618] usb 7-1: Manufacturer:  [ 209.534543][ T618] usb 7-1: SerialNumber: á…懼鉳俛蓧襤ç´ã¶³ãž ë‰â©šë¢·ä‹¥ã¿•à£’䖜녬⃟贆䈠⸸帪승î¤î’¬à±‘徬 [ 209.642905][ T36] audit: type=1400 audit(2000000108.474:1451): avc: denied { mounton } for pid=6489 comm="syz.1.1997" path="/29/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 209.780715][ T618] usb 7-1: USB disconnect, device number 32 [ 209.959298][ T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 210.130815][ T31] usb 2-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 210.148227][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 10 [ 210.171631][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 24947, setting to 1024 [ 210.195021][ T31] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.222695][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.234270][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.251297][ T31] usb 2-1: Product: syz [ 210.261774][ T31] usb 2-1: Manufacturer: syz [ 210.270851][ T31] usb 2-1: SerialNumber: syz [ 211.269594][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.296304][ T31] cdc_ncm 2-1:1.0: bind() failure [ 211.305161][ T31] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 211.310494][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.323150][ T31] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 211.345541][ T31] usb 2-1: USB disconnect, device number 39 [ 211.362719][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.412536][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.845937][ T6536] netlink: 'syz.1.2010': attribute type 3 has an invalid length. [ 211.865213][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 212.039897][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 212.173699][ T6544] netlink: 'syz.6.2012': attribute type 4 has an invalid length. [ 212.209346][ T6544] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2012'. [ 212.507244][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2013'. [ 212.700966][ T36] audit: type=1400 audit(2000000111.534:1452): avc: denied { create } for pid=6554 comm="syz.3.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 212.757200][ T6559] cgroup: Invalid name [ 212.899322][ T64] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 212.923379][ T36] audit: type=1400 audit(2000000111.754:1453): avc: denied { nosuid_transition } for pid=6558 comm="syz.1.2019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 212.948317][ T36] audit: type=1400 audit(2000000111.754:1454): avc: denied { transition } for pid=6558 comm="syz.1.2019" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 213.000082][ T36] audit: type=1400 audit(2000000111.754:1455): avc: denied { entrypoint } for pid=6558 comm="syz.1.2019" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1229 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 213.039462][ T36] audit: type=1400 audit(2000000111.754:1456): avc: denied { noatsecure } for pid=6558 comm="syz.1.2019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 213.061781][ T36] audit: type=1326 audit(2000000111.824:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.2019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0849f8e929 code=0x0 [ 213.086881][ T64] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.104651][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.115703][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.125597][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.145677][ T64] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.157792][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.170260][ T64] usb 7-1: config 0 descriptor?? [ 213.349430][ C0] net_ratelimit: 38294 callbacks suppressed [ 213.349454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.367737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.378116][ T6552] fuse: Bad value for 'fd' [ 213.379994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 213.396347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.408437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.420511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.432606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.444688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 213.457037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.469383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.593632][ T64] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 213.603755][ T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.611665][ T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.619194][ T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.627899][ T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.635578][ T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.643551][ T64] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 213.658079][ T64] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 213.863216][ T6552] binder: Bad value for 'stats' [ 213.872039][ T64] usb 7-1: USB disconnect, device number 33 [ 214.672456][ T36] audit: type=1400 audit(2000000113.504:1458): avc: denied { execmod } for pid=6604 comm="syz.6.2034" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.945039][ T6612] batadv_slave_0: entered promiscuous mode [ 214.975870][ T6611] batadv_slave_0: left promiscuous mode [ 215.152952][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 215.165345][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 215.175830][ T2252] Bluetooth: hci1: Frame reassembly failed (-84) [ 215.666787][ T2252] tipc: Subscription rejected, illegal request [ 216.182906][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.215030][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.375285][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.393054][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.837316][ T6661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.837357][ T6661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 216.909720][ T6664] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2057'. [ 217.219330][ T485] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 217.225688][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 217.231891][ T1298] Bluetooth: hci1: command 0x1003 tx timeout [ 217.556541][ T6668] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2059' sets config #236 [ 217.730070][ T6674] bpf: Bad value for 'mode' [ 217.940757][ T6684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6684 comm=syz.6.2065 [ 217.991899][ T6684] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2065'. [ 218.144420][ T6689] fuse: Bad value for 'fd' [ 218.309316][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.321172][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.331476][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.359296][ C0] net_ratelimit: 35007 callbacks suppressed [ 218.359316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.360884][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.365444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 218.397356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.409505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.421616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.433712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.445866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 218.458347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.459287][ T64] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 218.470810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.490174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 218.629292][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 218.639049][ T64] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 218.658336][ T64] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 218.669276][ T64] usb 7-1: can't read configurations, error -61 [ 218.809311][ T64] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 218.964473][ T36] audit: type=1400 audit(2000000117.794:1459): avc: denied { getopt } for pid=6697 comm="syz.0.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 218.991066][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 219.006636][ T64] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 219.017018][ T64] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 219.047495][ T64] usb 7-1: can't read configurations, error -61 [ 219.067806][ T64] usb usb7-port1: attempt power cycle [ 219.429304][ T64] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 219.479955][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 219.489666][ T64] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 219.514108][ T64] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 219.523531][ T64] usb 7-1: can't read configurations, error -61 [ 219.671525][ T64] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 219.725312][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 219.742120][ T64] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 219.771083][ T64] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 219.778708][ T64] usb 7-1: can't read configurations, error -61 [ 219.801287][ T64] usb usb7-port1: unable to enumerate USB device [ 219.909626][ T6726] fuse: Bad value for 'user_id' [ 219.924739][ T6726] fuse: Bad value for 'user_id' [ 220.413307][ T36] audit: type=1400 audit(2000000119.234:1460): avc: denied { read } for pid=6723 comm="syz.0.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 220.709821][ T6744] binder: Unknown parameter 'ma' [ 221.130099][ T6746] /dev/rnullb0: Can't open blockdev [ 221.387616][ T6752] fuse: Unknown parameter 'grpup_id' [ 221.408165][ T36] audit: type=1400 audit(2000000120.234:1461): avc: denied { remount } for pid=6751 comm="syz.0.2088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 221.430267][ T6752] netlink: 'syz.0.2088': attribute type 4 has an invalid length. [ 221.458289][ T6752] netlink: 'syz.0.2088': attribute type 27 has an invalid length. [ 221.478392][ T6752] netlink: 3609 bytes leftover after parsing attributes in process `syz.0.2088'. [ 221.568679][ T36] audit: type=1326 audit(2000000120.394:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4f98e929 code=0x7fc00000 [ 221.669292][ T618] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 221.713869][ T6759] cannot load conntrack support for proto=3 [ 221.820353][ T618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.831483][ T618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.842977][ T618] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.856661][ T618] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.866357][ T618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.876721][ T618] usb 7-1: config 0 descriptor?? [ 222.064958][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'. [ 222.088017][ T618] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 222.101354][ T618] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 222.117484][ T618] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 222.583022][ T6785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 222.583063][ T6785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:138 [ 222.592919][ T6785] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 222.604183][ T6785] rust_binder: Read failure Err(EFAULT) in pid:138 [ 222.837586][ T6794] /dev/rnullb0: Can't open blockdev [ 222.868575][ T36] audit: type=1400 audit(2000000121.694:1463): avc: denied { listen } for pid=6796 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.910223][ T6802] netlink: 'syz.1.2104': attribute type 16 has an invalid length. [ 222.918299][ T6802] netlink: 'syz.1.2104': attribute type 1 has an invalid length. [ 222.927037][ T6802] netlink: 'syz.1.2104': attribute type 1 has an invalid length. [ 222.935217][ T6802] netlink: 'syz.1.2104': attribute type 2 has an invalid length. [ 222.943519][ T6802] netlink: 64006 bytes leftover after parsing attributes in process `syz.1.2104'. [ 223.116047][ T36] audit: type=1326 audit(2000000121.944:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.1.2107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0849f8e929 code=0x0 [ 223.369392][ C0] net_ratelimit: 40981 callbacks suppressed [ 223.369409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.387614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.399805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 223.411971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.424108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.436172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.448218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.460299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 223.472652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.485003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.570358][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 223.732417][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 223.759059][ T9] usb 2-1: config 0 has no interfaces? [ 223.795506][ T6827] 9pnet: Could not find request transport: un0x [ 223.810107][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.819210][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.847787][ T9] usb 2-1: Product: syz [ 223.870144][ T9] usb 2-1: Manufacturer: syz [ 223.874810][ T9] usb 2-1: SerialNumber: syz [ 223.892791][ T9] usb 2-1: config 0 descriptor?? [ 224.291934][ T618] usb 7-1: USB disconnect, device number 38 [ 224.429330][ T618] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 224.591197][ T618] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.602526][ T618] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 224.613980][ T618] usb 7-1: config 0 interface 0 has no altsetting 0 [ 224.626660][ T618] usb 7-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 224.643736][ T618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.654551][ T618] usb 7-1: config 0 descriptor?? [ 224.664440][ T6832] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 224.878393][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.889174][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.107082][ T618] logitech 0003:046D:C286.001F: unknown main item tag 0x6 [ 225.116897][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.127557][ T618] logitech 0003:046D:C286.001F: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.6-1/input0 [ 225.147714][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.165816][ T618] logitech 0003:046D:C286.001F: no inputs found [ 225.312187][ T1573] usb 7-1: USB disconnect, device number 39 [ 226.129056][ T1573] usb 2-1: USB disconnect, device number 40 [ 226.160541][ T6878] futex_wake_op: syz.1.2130 tries to shift op by 144; fix this program [ 226.186789][ T36] audit: type=1400 audit(2000000125.014:1465): avc: denied { attach_queue } for pid=6877 comm="syz.1.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 226.527092][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 227.329643][ T46] bridge_slave_1: left allmulticast mode [ 227.349273][ T46] bridge_slave_1: left promiscuous mode [ 227.361415][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.391373][ T46] bridge_slave_0: left allmulticast mode [ 227.408521][ T46] bridge_slave_0: left promiscuous mode [ 227.418641][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.441922][ T46] tipc: Resetting bearer [ 227.543416][ T46] tipc: Disabling bearer [ 228.319852][ T6916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.319888][ T6916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.379527][ C0] net_ratelimit: 42735 callbacks suppressed [ 228.379557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.404166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 228.416372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.428484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.440604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.452745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.464958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 228.477394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.489778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.501999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 228.555828][ T36] audit: type=1400 audit(2000000127.384:1466): avc: denied { sys_admin } for pid=6921 comm="syz.1.2145" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 228.579484][ T1297] Bluetooth: hci0: command 0x1003 tx timeout [ 228.586101][ T485] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.727882][ T46] tipc: Left network mode [ 228.794445][ T46] veth1_macvtap: left promiscuous mode [ 228.812640][ T46] veth0_vlan: left promiscuous mode [ 228.927064][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.941365][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.964978][ T6902] bridge_slave_0: entered allmulticast mode [ 228.979993][ T6902] bridge_slave_0: entered promiscuous mode [ 229.001002][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.028405][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.056457][ T6902] bridge_slave_1: entered allmulticast mode [ 229.083481][ T6902] bridge_slave_1: entered promiscuous mode [ 229.154439][ T6941] 9pnet_fd: Insufficient options for proto=fd [ 229.226697][ T6945] overlayfs: failed to resolve './file1': -2 [ 229.398446][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.405589][ T6902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.412936][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.420013][ T6902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.590707][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.612010][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.644312][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.651483][ T2248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.690275][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.697372][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.758505][ T6966] rust_binder: Write failure EINVAL in pid:197 [ 229.792357][ T36] audit: type=1400 audit(2000000128.614:1467): avc: denied { relabelfrom } for pid=6963 comm="syz.6.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 229.824117][ T36] audit: type=1400 audit(2000000128.614:1468): avc: denied { relabelto } for pid=6963 comm="syz.6.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 229.845889][ T6953] fuseblk: Bad value for 'user_id' [ 229.864674][ T6953] fuseblk: Bad value for 'user_id' [ 229.887864][ T6902] veth0_vlan: entered promiscuous mode [ 229.944391][ T6902] veth1_macvtap: entered promiscuous mode [ 230.033178][ T6976] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 230.033225][ T6976] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 230.053784][ T6976] rust_binder: Read failure Err(EFAULT) in pid:255 [ 230.379320][ T1573] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 230.549331][ T1573] usb 2-1: device descriptor read/64, error -71 [ 230.789281][ T1573] usb 2-1: device descriptor read/64, error -71 [ 230.817594][ T7010] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 230.825369][ T7010] rust_binder: Write failure EINVAL in pid:16 [ 231.043606][ T1573] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 231.054759][ T7018] rust_binder: Error in use_page_slow: ESRCH [ 231.054786][ T7018] rust_binder: use_range failure ESRCH [ 231.062563][ T7018] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 231.068184][ T7018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 231.076904][ T7018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:264 [ 231.139355][ T618] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 231.209440][ T1573] usb 2-1: device descriptor read/64, error -71 [ 231.289400][ T618] usb 4-1: device descriptor read/64, error -71 [ 231.420890][ T7048] incfs: Error accessing: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 231.421213][ T7048] incfs: mount failed -36 [ 231.517793][ T1573] usb 2-1: device descriptor read/64, error -71 [ 231.579289][ T618] usb 4-1: device descriptor read/64, error -71 [ 231.629367][ T1573] usb usb2-port1: attempt power cycle [ 231.670467][ T7055] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 231.690234][ T7055] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 231.720218][ T36] audit: type=1326 audit(2000000130.554:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.0.2189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f4f98e929 code=0x0 [ 231.819326][ T618] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 231.959308][ T618] usb 4-1: device descriptor read/64, error -71 [ 231.970141][ T1573] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 232.001352][ T1573] usb 2-1: device descriptor read/8, error -71 [ 232.131347][ T1573] usb 2-1: device descriptor read/8, error -71 [ 232.199306][ T618] usb 4-1: device descriptor read/64, error -71 [ 232.323093][ T618] usb usb4-port1: attempt power cycle [ 232.379361][ T1573] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 232.411205][ T1573] usb 2-1: device descriptor read/8, error -71 [ 232.543248][ T1573] usb 2-1: device descriptor read/8, error -71 [ 232.661162][ T618] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 232.672274][ T1573] usb usb2-port1: unable to enumerate USB device [ 232.700317][ T618] usb 4-1: device descriptor read/8, error -71 [ 232.851812][ T618] usb 4-1: device descriptor read/8, error -71 [ 233.089299][ T618] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 233.120432][ T618] usb 4-1: device descriptor read/8, error -71 [ 233.229349][ T1573] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 233.260344][ T618] usb 4-1: device descriptor read/8, error -71 [ 233.369644][ T618] usb usb4-port1: unable to enumerate USB device [ 233.389512][ C0] net_ratelimit: 42093 callbacks suppressed [ 233.389534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.407963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.420171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 233.429277][ T1573] usb 7-1: Using ep0 maxpacket: 8 [ 233.432344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.444015][ T1573] usb 7-1: unable to get BOS descriptor or descriptor too short [ 233.449369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.462634][ T1573] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 233.468977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.492389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.496540][ T1573] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 233.504534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 233.527645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.540034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.547594][ T1573] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.579278][ T1573] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 233.589130][ T1573] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 233.609459][ T1573] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 28265, setting to 1024 [ 233.629343][ T1573] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 233.651679][ T1573] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 233.661152][ T1573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.672382][ T1573] usb 7-1: Product: syz [ 233.680999][ T1573] usb 7-1: Manufacturer: syz [ 233.693161][ T1573] usb 7-1: SerialNumber: syz [ 233.713731][ T1573] usb 7-1: config 0 descriptor?? [ 233.726365][ T7074] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 233.733997][ T7074] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 233.759286][ T618] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 233.889284][ T618] usb 2-1: device descriptor read/64, error -71 [ 233.944407][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.955414][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.969510][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.993676][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.039774][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.063020][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.089854][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.110644][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.142498][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.151028][ T618] usb 2-1: device descriptor read/64, error -71 [ 234.182139][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.242760][ T9] usb 7-1: USB disconnect, device number 40 [ 234.399304][ T618] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 234.539282][ T618] usb 2-1: device descriptor read/64, error -71 [ 234.799674][ T618] usb 2-1: device descriptor read/64, error -71 [ 234.910050][ T618] usb usb2-port1: attempt power cycle [ 235.249089][ T7102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.249123][ T7102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.269329][ T618] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 235.360347][ T618] usb 2-1: device descriptor read/8, error -71 [ 235.501313][ T618] usb 2-1: device descriptor read/8, error -71 [ 235.759301][ T618] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 235.800272][ T618] usb 2-1: device descriptor read/8, error -71 [ 235.941729][ T618] usb 2-1: device descriptor read/8, error -71 [ 236.070367][ T618] usb usb2-port1: unable to enumerate USB device [ 236.254691][ T7069] bpf: Bad value for 'uid' [ 236.289281][ T1573] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 236.449307][ T1573] usb 7-1: device descriptor read/64, error -71 [ 236.709294][ T1573] usb 7-1: device descriptor read/64, error -71 [ 236.949573][ T1573] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 236.970764][ T7160] rust_binder: Failed copying remainder into alloc: EFAULT [ 236.970794][ T7160] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 236.978362][ T7160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 236.987843][ T7160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1543 [ 237.053169][ T7167] netlink: 'syz.1.2224': attribute type 58 has an invalid length. [ 237.109510][ T1573] usb 7-1: device descriptor read/64, error -71 [ 237.185621][ T7177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1545 [ 237.227411][ T7183] fuse: Unknown parameter 'fÇ|K'¬¹' [ 237.261425][ T7186] rust_binder: Write failure EINVAL in pid:245 [ 237.261522][ T7186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 237.353892][ T1573] usb 7-1: device descriptor read/64, error -71 [ 237.485222][ T1573] usb usb7-port1: attempt power cycle [ 237.560303][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.571276][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.839315][ T1573] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 237.871072][ T1573] usb 7-1: device descriptor read/8, error -71 [ 238.011237][ T1573] usb 7-1: device descriptor read/8, error -71 [ 238.095171][ T36] audit: type=1400 audit(2000000136.924:1470): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 238.142568][ T7209] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 238.152647][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2240'. [ 238.259501][ T1573] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 238.290381][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.301894][ T1573] usb 7-1: device descriptor read/8, error -71 [ 238.317880][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.337884][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.358978][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.399277][ C0] net_ratelimit: 38941 callbacks suppressed [ 238.399303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 238.417603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.430114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.440485][ T1573] usb 7-1: device descriptor read/8, error -71 [ 238.442382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 238.460441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.472657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.484770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.496879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.508992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 238.521380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.559854][ T1573] usb usb7-port1: unable to enumerate USB device [ 238.863930][ T7218] netlink: 'syz.3.2242': attribute type 28 has an invalid length. [ 238.952059][ T7226] binder: Unknown parameter 'nî0ùe¼K& ' [ 238.971029][ T36] audit: type=1400 audit(2000000137.784:1471): avc: denied { listen } for pid=7222 comm="syz.0.2244" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 239.254737][ T7247] bpf: Bad value for 'uid' [ 239.418226][ T7254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.489887][ T7259] rust_binder: Write failure EFAULT in pid:330 [ 239.498881][ T36] audit: type=1400 audit(2000000138.324:1472): avc: denied { read } for pid=7261 comm="syz.1.2258" name="/" dev="configfs" ino=2486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.539621][ T36] audit: type=1400 audit(2000000138.354:1473): avc: denied { open } for pid=7261 comm="syz.1.2258" path="/" dev="configfs" ino=2486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.000304][ T64] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 240.069806][ T7277] rust_binder: Failed copying remainder into alloc: EFAULT [ 240.069837][ T7277] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 240.077662][ T7277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 240.086269][ T7277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:334 [ 240.132503][ T7279] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 240.156930][ T7279] rust_binder: Write failure EINVAL in pid:336 [ 240.173157][ T64] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.195455][ T64] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.210041][ T64] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 240.228366][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.248697][ T7281] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 240.248724][ T7281] rust_binder: Error while translating object. [ 240.260719][ T64] usb 2-1: config 0 descriptor?? [ 240.279071][ T7281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.279114][ T7281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 240.296955][ T7285] IPv6: NLM_F_CREATE should be specified when creating new route [ 240.496863][ T7272] netlink: 'syz.1.2261': attribute type 3 has an invalid length. [ 240.506790][ T7300] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 240.526375][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2261'. [ 240.553005][ T7300] kvm: pic: non byte write [ 240.973090][ T64] usbhid 2-1:0.0: can't add hid device: -71 [ 240.992136][ T64] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 241.004430][ T64] usb 2-1: USB disconnect, device number 49 [ 241.562748][ T36] audit: type=1326 audit(2000000140.394:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.0.2291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f4f98e929 code=0x0 [ 241.644122][ T7355] overlayfs: failed to clone upperpath [ 241.735347][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.760563][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.823913][ T7379] sock: sock_timestamping_bind_phc: sock not bind to device [ 241.886539][ T7382] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 242.313526][ T7386] netlink: 'syz.0.2299': attribute type 40 has an invalid length. [ 242.404660][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.414433][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.426091][ T7391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.426126][ T7391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.821030][ T7409] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.835686][ T7409] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 242.845613][ T7409] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.853913][ T7409] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 242.863305][ T7409] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.873247][ T7409] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 242.882015][ T7409] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.891074][ T7409] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 243.067940][ T36] audit: type=1400 audit(2000000141.894:1475): avc: denied { relabelfrom } for pid=7419 comm="syz.6.2308" name="UNIX" dev="sockfs" ino=52489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 243.104737][ T36] audit: type=1401 audit(2000000141.924:1476): op=setxattr invalid_context="" [ 243.195086][ T7430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7430 comm=syz.6.2311 [ 243.237359][ T7435] netlink: 'syz.3.2312': attribute type 9 has an invalid length. [ 243.351172][ T7445] rust_binder: Write failure EFAULT in pid:1613 [ 243.351212][ T7445] rust_binder: Write failure EFAULT in pid:1613 [ 243.409273][ C0] net_ratelimit: 40282 callbacks suppressed [ 243.409298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.427820][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.433725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.454250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.458649][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.467904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.487512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 243.500097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.512620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.524892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 243.537121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.538368][ T7453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.549337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.674742][ T36] audit: type=1400 audit(2000000142.494:1477): avc: denied { mounton } for pid=7460 comm="syz.6.2319" path="/125/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 243.939284][ T31] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 244.002474][ T36] audit: type=1400 audit(2000000142.834:1478): avc: denied { create } for pid=7474 comm="syz.3.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 244.099352][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 244.122175][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.134588][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.145165][ T7478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34744 sclass=netlink_route_socket pid=7478 comm=syz.3.2323 [ 244.158056][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 244.180787][ T31] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 244.192493][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.219463][ T31] usb 7-1: config 0 descriptor?? [ 244.372374][ T7497] overlayfs: failed to clone upperpath [ 244.386073][ T36] audit: type=1400 audit(2000000143.214:1479): avc: denied { create } for pid=7499 comm="syz.1.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 244.630722][ T31] hid (null): invalid report_size 24935 [ 244.659294][ T31] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0020/input/input25 [ 244.701261][ T31] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0020/input/input26 [ 244.740872][ T31] kye 0003:0458:5011.0020: input,hiddev96,hidraw0: USB HID v9.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 244.841684][ T31] usb 7-1: USB disconnect, device number 45 [ 244.954072][ T7522] rust_binder: Error while translating object. [ 244.954121][ T7522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 244.980422][ T7522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1634 [ 245.364384][ T36] audit: type=1400 audit(2000000144.194:1480): avc: denied { unmount } for pid=4903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 245.699635][ T7551] overlay: ./file0 is not a directory [ 245.779294][ T64] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 245.839367][ T7554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.847935][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.867235][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.939346][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 245.950284][ T64] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.957029][ T64] usb 7-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 245.968090][ T7559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2348'. [ 245.977241][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.986844][ T64] usb 7-1: config 0 descriptor?? [ 246.001473][ T7559] FAT-fs (rnullb0): bogus number of reserved sectors [ 246.008671][ T7559] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 246.399537][ T7579] binder: Unknown parameter 'fscontext?}' [ 246.436679][ T64] wacom 0003:056A:0094.0021: unknown main item tag 0x0 [ 246.448161][ T64] wacom 0003:056A:0094.0021: unknown main item tag 0x0 [ 246.461781][ T64] wacom 0003:056A:0094.0021: unknown main item tag 0x0 [ 246.471428][ T64] wacom 0003:056A:0094.0021: Using device in hidraw-only mode [ 246.484277][ T64] wacom 0003:056A:0094.0021: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.6-1/input0 [ 247.414285][ T7604] tipc: Enabling of bearer rejected, failed to enable media [ 247.432676][ T7604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.495643][ T7616] netlink: 57 bytes leftover after parsing attributes in process `syz.3.2367'. [ 247.518979][ T7619] SELinux: Context system_u:object_r:power_device_t:s0 is not valid (left unmapped). [ 247.535671][ T36] audit: type=1400 audit(2000000146.364:1481): avc: denied { relabelto } for pid=7615 comm="syz.0.2368" name="file0" dev="tmpfs" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:power_device_t:s0" [ 247.565332][ T7619] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 247.574737][ T2252] Bluetooth: hci0: Frame reassembly failed (-84) [ 247.585159][ T36] audit: type=1400 audit(2000000146.394:1482): avc: denied { associate } for pid=7615 comm="syz.0.2368" name="file0" dev="tmpfs" ino=2999 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:power_device_t:s0" [ 247.629111][ T36] audit: type=1326 audit(2000000146.414:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7617 comm="syz.1.2369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0849f8e929 code=0x0 [ 247.710592][ T7622] kvm: kvm [7617]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 247.801922][ T36] audit: type=1400 audit(2000000146.634:1484): avc: denied { lock } for pid=7633 comm="syz.3.2376" path="socket:[53714]" dev="sockfs" ino=53714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 247.904517][ T7650] /dev/rnullb0: Can't lookup blockdev [ 247.959289][ T64] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 248.048678][ T7663] overlayfs: failed to clone upperpath [ 248.109279][ T64] usb 2-1: Invalid ep0 maxpacket: 32 [ 248.239302][ T64] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 248.399283][ T64] usb 2-1: Invalid ep0 maxpacket: 32 [ 248.405221][ T64] usb usb2-port1: attempt power cycle [ 248.419327][ C0] net_ratelimit: 42425 callbacks suppressed [ 248.419344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.437349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 248.448877][ T31] usb 7-1: USB disconnect, device number 46 [ 248.449794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.467689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.479889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 248.492069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.504305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.516428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.528615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.540751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 248.749327][ T64] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 248.779679][ T64] usb 2-1: Invalid ep0 maxpacket: 32 [ 248.911947][ T64] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 248.941177][ T64] usb 2-1: Invalid ep0 maxpacket: 32 [ 248.954193][ T64] usb usb2-port1: unable to enumerate USB device [ 248.988503][ T36] audit: type=1400 audit(2000000147.814:1485): avc: denied { mount } for pid=7689 comm="syz.6.2395" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 249.096329][ T7697] rust_binder: Error while translating object. [ 249.096360][ T7697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 249.103234][ T7697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:393 [ 249.119406][ T7698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.304404][ T7708] rust_binder: Error while translating object. [ 249.318571][ T7708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 249.332415][ T7708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:404 [ 249.479703][ T7714] tmpfs: Unknown parameter 'usrquota' [ 249.509693][ T7716] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 249.609276][ T485] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 249.623476][ T1297] Bluetooth: hci0: command 0x1003 tx timeout [ 249.659342][ T36] audit: type=1400 audit(2000000148.484:1486): avc: denied { write } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:power_device_t:s0" [ 249.687632][ T36] audit: type=1400 audit(2000000148.484:1487): avc: denied { remove_name } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=3006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:power_device_t:s0" [ 249.721511][ T36] audit: type=1400 audit(2000000148.484:1488): avc: denied { rmdir } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:power_device_t:s0" [ 250.089304][ T31] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 250.299796][ T31] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 250.328298][ T31] usb 7-1: config 0 has no interface number 0 [ 250.338395][ T31] usb 7-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.389322][ T31] usb 7-1: config 0 interface 41 has no altsetting 0 [ 250.417439][ T31] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 250.446897][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.479275][ T31] usb 7-1: Product: syz [ 250.490395][ T31] usb 7-1: Manufacturer: syz [ 250.495042][ T31] usb 7-1: SerialNumber: syz [ 250.537033][ T31] usb 7-1: config 0 descriptor?? [ 250.553825][ T31] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 250.812072][ T305] usb 7-1: USB disconnect, device number 47 [ 252.133113][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 252.419315][ T31] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 252.423078][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 252.560441][ T31] usb 7-1: device descriptor read/64, error -71 [ 252.593408][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.620332][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.641580][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 252.717935][ T7781] overlayfs: failed to clone upperpath [ 252.730192][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 252.736864][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 252.760324][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.782978][ T9] usb 2-1: config 0 descriptor?? [ 252.829307][ T31] usb 7-1: device descriptor read/64, error -71 [ 252.855929][ T7787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.857711][ T7788] rust_binder: Error in use_page_slow: ESRCH [ 252.865542][ T7788] rust_binder: use_range failure ESRCH [ 252.871813][ T7788] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 252.877408][ T7788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 252.885757][ T7788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1674 [ 252.928656][ T7792] SELinux: security_context_str_to_sid () failed with errno=-22 [ 253.034499][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 253.051695][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 253.069281][ T31] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 253.121871][ T36] audit: type=1326 audit(2000000151.954:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.1.2432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0849f8e929 code=0x0 [ 253.140444][ T9] usb 2-1: USB disconnect, device number 54 [ 253.219280][ T31] usb 7-1: device descriptor read/64, error -71 [ 253.378217][ T7812] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 253.390075][ T7812] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 253.407047][ T7812] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 253.422913][ T7812] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 253.429328][ C0] net_ratelimit: 32657 callbacks suppressed [ 253.429355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.449471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 253.461608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.473695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.485846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.489299][ T31] usb 7-1: device descriptor read/64, error -71 [ 253.497991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.516179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 253.528565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.540942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.553166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 253.624953][ T31] usb usb7-port1: attempt power cycle [ 253.645992][ T7832] fuse: Unknown parameter '"' [ 253.653911][ T36] audit: type=1400 audit(2000000152.484:1490): avc: denied { mounton } for pid=7831 comm="syz.0.2440" path="/proc/1693/cgroup" dev="proc" ino=54574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 253.725154][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.735452][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.979320][ T31] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 254.010782][ T31] usb 7-1: device descriptor read/8, error -71 [ 254.144663][ T31] usb 7-1: device descriptor read/8, error -71 [ 254.389315][ T31] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 254.411201][ T31] usb 7-1: device descriptor read/8, error -71 [ 254.499290][ T1573] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 254.542191][ T31] usb 7-1: device descriptor read/8, error -71 [ 254.649435][ T31] usb usb7-port1: unable to enumerate USB device [ 254.660604][ T1573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.671733][ T1573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.682568][ T1573] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.696801][ T1573] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.706236][ T1573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.717722][ T1573] usb 2-1: config 0 descriptor?? [ 255.140344][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.164786][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.175695][ T7860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 255.176126][ T7860] rust_binder: Error while translating object. [ 255.198230][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.214007][ T7860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 255.214045][ T7860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1703 [ 255.234804][ T7860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 255.248735][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.271029][ T7860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1703 [ 255.277997][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.301729][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.309459][ T7867] fuse: Unknown parameter '½ ê0x0000000000000004' [ 255.318377][ T7870] fuse: Unknown parameter '½ ê0x0000000000000004' [ 255.325234][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.336882][ T7839] binder: Unknown parameter 'contextÀfs/binder0' [ 255.347072][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.350624][ T36] audit: type=1400 audit(2000000154.164:1491): avc: denied { remount } for pid=7838 comm="syz.1.2443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 255.355449][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.383644][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.391283][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.427489][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.435846][ T36] audit: type=1326 audit(2000000154.264:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.0.2455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f4f98e929 code=0x0 [ 255.445203][ T1573] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 255.486051][ T1573] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 255.512026][ T1573] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 255.545329][ T1573] usb 2-1: USB disconnect, device number 55 [ 255.578485][ T7876] fido_id[7876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 255.770816][ T7894] overlayfs: failed to clone upperpath [ 255.829269][ T31] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 255.856425][ T36] audit: type=1400 audit(2000000154.684:1493): avc: denied { nlmsg_tty_audit } for pid=7900 comm="syz.3.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 255.929414][ T7901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7901 comm=syz.3.2464 [ 255.959329][ T31] usb 7-1: device descriptor read/64, error -71 [ 256.145972][ T36] audit: type=1400 audit(2000000154.974:1494): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 256.224168][ T7910] binder: Unknown parameter './file1' [ 256.229702][ T31] usb 7-1: device descriptor read/64, error -71 [ 256.246126][ T7910] binder: Unknown parameter './file1' [ 256.469322][ T31] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 256.630379][ T31] usb 7-1: device descriptor read/64, error -71 [ 256.736019][ T7929] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2471'. [ 256.832896][ T7937] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2473'. [ 256.879289][ T31] usb 7-1: device descriptor read/64, error -71 [ 257.005279][ T31] usb usb7-port1: attempt power cycle [ 257.053816][ T7945] binder: Binderfs stats mode cannot be changed during a remount [ 257.142992][ T7956] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2481'. [ 257.153158][ T7956] gretap0: entered promiscuous mode [ 257.159900][ T7956] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2481'. [ 257.169085][ T7956] 0ªî{X¹¦: renamed from gretap0 [ 257.176877][ T7956] 0ªî{X¹¦: left promiscuous mode [ 257.182327][ T7956] 0ªî{X¹¦: entered allmulticast mode [ 257.203744][ T3230] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 257.264994][ T7962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.345146][ T7971] overlay: Bad value for 'redirect_dir' [ 257.359287][ T31] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 257.380464][ T7974] overlayfs: failed to resolve './file0': -2 [ 257.399039][ T31] usb 7-1: device descriptor read/8, error -71 [ 257.431511][ T7979] rust_binder: Write failure EFAULT in pid:1755 [ 257.449126][ T3230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.490352][ T3230] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 257.530410][ T31] usb 7-1: device descriptor read/8, error -71 [ 257.537634][ T3230] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.570116][ T3230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 257.577789][ T7989] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2491'. [ 257.578166][ T3230] usb 2-1: SerialNumber: syz [ 257.656807][ T3230] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 257.769349][ T31] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 257.809044][ T31] usb 7-1: device descriptor read/8, error -71 [ 257.865440][ T1573] usb 2-1: USB disconnect, device number 56 [ 257.941272][ T31] usb 7-1: device descriptor read/8, error -71 [ 258.035549][ T8012] netlink: 492 bytes leftover after parsing attributes in process `syz.3.2498'. [ 258.070369][ T31] usb usb7-port1: unable to enumerate USB device [ 258.439400][ C0] net_ratelimit: 44478 callbacks suppressed [ 258.439426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.457787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.469995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 258.477553][ T8019] rust_binder: Error while translating object. [ 258.482182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.486734][ T8019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.488520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.513487][ T8019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:457 [ 258.521774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.543028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.555176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 258.567673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.580100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.715053][ T36] audit: type=1400 audit(2000000157.544:1495): avc: denied { read } for pid=8033 comm="syz.3.2506" path="socket:[55599]" dev="sockfs" ino=55599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 258.909435][ T8046] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.999318][ T31] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 259.035268][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2511'. [ 259.054871][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.069966][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.199287][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 259.207468][ T31] usb 7-1: config 0 has no interfaces? [ 259.214934][ T31] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.224327][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.232704][ T31] usb 7-1: Product: syz [ 259.237006][ T31] usb 7-1: Manufacturer: syz [ 259.242919][ T31] usb 7-1: SerialNumber: syz [ 259.251025][ T31] usb 7-1: config 0 descriptor?? [ 259.299284][ T618] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 259.451372][ T618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.466443][ T618] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.476653][ T31] usb 7-1: USB disconnect, device number 56 [ 259.487226][ T618] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.507026][ T618] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 259.516604][ T618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.525030][ T618] usb 2-1: Product: syz [ 259.530898][ T618] usb 2-1: Manufacturer: syz [ 259.535683][ T618] usb 2-1: SerialNumber: syz [ 259.580420][ T618] hub 2-1:1.0: bad descriptor, ignoring hub [ 259.604407][ T618] hub 2-1:1.0: probe with driver hub failed with error -5 [ 259.616060][ T8061] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2513'. [ 259.640381][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2513'. [ 259.654964][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'. [ 259.709586][ T8070] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.711789][ T8071] rust_binder: Error in use_page_slow: ESRCH [ 259.718815][ T8070] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 259.725498][ T8070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 259.734335][ T8071] rust_binder: use_range failure ESRCH [ 259.746279][ T8070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1793 [ 259.786089][ T618] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 259.807873][ T8073] netlink: 'syz.3.2516': attribute type 27 has an invalid length. [ 259.819354][ T8071] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 259.819389][ T8071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 259.842126][ T8071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1793 [ 259.901479][ T618] usb 2-1: USB disconnect, device number 57 [ 259.917427][ T8079] overlayfs: missing 'lowerdir' [ 259.945361][ T618] usblp0: removed [ 260.048222][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.055556][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.399713][ T8097] netlink: 'syz.3.2524': attribute type 4 has an invalid length. [ 260.535768][ T36] audit: type=1400 audit(2000000159.364:1496): avc: denied { accept } for pid=8111 comm="syz.3.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.603030][ T36] audit: type=1400 audit(2000000159.434:1497): avc: denied { mount } for pid=8098 comm="syz.1.2523" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 260.627649][ T36] audit: type=1400 audit(2000000159.454:1498): avc: denied { read } for pid=8098 comm="syz.1.2523" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 260.651864][ T36] audit: type=1400 audit(2000000159.454:1499): avc: denied { open } for pid=8098 comm="syz.1.2523" path="/134/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 260.866167][ T36] audit: type=1400 audit(2000000159.694:1500): avc: denied { unmount } for pid=5985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 260.974629][ T8137] tc_dump_action: action bad kind [ 260.987758][ T8137] tipc: Enabling of bearer rejected, failed to enable media [ 261.116503][ T8150] fuse: Unknown parameter 'fi' [ 261.333481][ T8166] fuse: Unknown parameter './file0' [ 261.539275][ T64] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 261.567400][ T8188] SELinux: policydb version -1467364721 does not match my version range 15-33 [ 261.577158][ T8188] SELinux: failed to load policy [ 261.584489][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.594652][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.699276][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 261.706596][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.717942][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.728884][ T64] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 261.738208][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.748943][ T64] usb 7-1: config 0 descriptor?? [ 262.153712][ T8204] __nla_validate_parse: 1 callbacks suppressed [ 262.153755][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2557'. [ 262.187197][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.213366][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.235272][ T64] usbhid 7-1:0.0: can't add hid device: -71 [ 262.259320][ T64] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 262.283347][ T64] usb 7-1: USB disconnect, device number 57 [ 262.316821][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2560'. [ 262.419990][ T8227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 262.452574][ T8227] 8021q: VLANs not supported on lo [ 262.783979][ T8233] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 262.985564][ T8247] pim6reg1: entered promiscuous mode [ 263.040932][ T8247] pim6reg1: entered allmulticast mode [ 263.234244][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 263.243287][ T1297] Bluetooth: hci0: unexpected event 0x09 length: 0 < 3 [ 263.401677][ T8263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.449358][ C0] net_ratelimit: 40383 callbacks suppressed [ 263.449385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.474023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 263.486321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.498477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.510633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.517460][ T8270] input: syz0 as /devices/virtual/input/input28 [ 263.522768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.541111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 263.553606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.566089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.578311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:f9:40:be:09:b8, vlan:0) [ 264.560185][ T8276] rust_binder: Write failure EFAULT in pid:1855 [ 265.089289][ T64] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 265.140508][ T8322] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2593'. [ 265.155158][ T36] audit: type=1400 audit(2000000163.984:1501): avc: denied { listen } for pid=8321 comm="syz.0.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.177582][ T8322] overlayfs: missing 'lowerdir' [ 265.261196][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.286459][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.299049][ T1297] Bluetooth: hci0: command 0x1003 tx timeout [ 265.305219][ T485] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 265.361037][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.370895][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.379070][ T64] usb 2-1: Product: 喬韬櫺䒨鞋ꋅӟ㙡â¡â®¹ë‚¿ê³¹î¦°íŸ¾ã’¤è§”瀸锣ë±ì¡áˆ‰ç»™ [ 265.390390][ T64] usb 2-1: Manufacturer: â [ 265.395029][ T64] usb 2-1: SerialNumber: О [ 265.722378][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.743335][ T31] ================================================================== [ 265.751477][ T31] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 265.758289][ T31] Write of size 8 at addr 0000000000000098 by task kworker/1:0/31 [ 265.766124][ T31] [ 265.768474][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 265.768512][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.768530][ T31] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 265.768619][ T31] Call Trace: [ 265.768628][ T31] [ 265.768640][ T31] __dump_stack+0x21/0x30 [ 265.768671][ T31] dump_stack_lvl+0x10c/0x190 [ 265.768699][ T31] ? __cfi_dump_stack_lvl+0x10/0x10 [ 265.768730][ T31] print_report+0x3d/0x70 [ 265.768752][ T31] kasan_report+0x163/0x1a0 [ 265.768788][ T31] ? down_write+0x83/0x2a0 [ 265.768821][ T31] ? down_write+0x83/0x2a0 [ 265.768852][ T31] kasan_check_range+0x299/0x2a0 [ 265.768888][ T31] __kasan_check_write+0x18/0x20 [ 265.768917][ T31] down_write+0x83/0x2a0 [ 265.768954][ T31] ? __cfi_down_write+0x10/0x10 [ 265.768984][ T31] ? _raw_spin_lock+0x8c/0x120 [ 265.769019][ T31] ? __cfi__raw_spin_lock+0x10/0x10 [ 265.769055][ T31] ? mutex_unlock+0x8b/0x240 [ 265.769082][ T31] ? __cfi_mutex_unlock+0x10/0x10 [ 265.769110][ T31] rust_binderfs_remove_file+0x6c/0x110 [ 265.769141][ T31] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 265.769188][ T31] ? update_curr_dl_se+0x65a/0xb20 [ 265.769219][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 265.769243][ T31] ? update_curr+0x60d/0xc60 [ 265.769275][ T31] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 265.769319][ T31] ? update_load_avg+0x506/0x19a0 [ 265.769344][ T31] ? detach_entity_load_avg+0x7b0/0x7b0 [ 265.769379][ T31] ? dequeue_entity+0xa9c/0x1750 [ 265.769406][ T31] ? __cfi_wg_packet_decrypt_worker+0x10/0x10 [ 265.769446][ T31] ? tg_unthrottle_up+0x980/0x980 [ 265.769474][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 265.769504][ T31] ? sched_clock_noinstr+0xd/0x30 [ 265.769532][ T31] ? sched_clock+0x44/0x60 [ 265.769558][ T31] ? sched_clock_cpu+0x75/0x400 [ 265.769586][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 265.769614][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 265.769644][ T31] ? __cfi_sched_clock_cpu+0x10/0x10 [ 265.769673][ T31] ? __kasan_check_write+0x18/0x20 [ 265.769703][ T31] ? __switch_to+0xc7b/0x1310 [ 265.769731][ T31] ? psi_group_change+0xb44/0x1130 [ 265.769758][ T31] ? __cfi___switch_to+0x10/0x10 [ 265.769788][ T31] ? _raw_spin_unlock+0x45/0x60 [ 265.769810][ T31] ? __switch_to_asm+0x3d/0x70 [ 265.769841][ T31] ? __schedule+0x1463/0x1f10 [ 265.769868][ T31] ? kick_pool+0xad/0x550 [ 265.769890][ T31] process_scheduled_works+0x7d2/0x1020 [ 265.769938][ T31] worker_thread+0xc58/0x1250 [ 265.769976][ T31] kthread+0x2ca/0x370 [ 265.770010][ T31] ? __cfi_worker_thread+0x10/0x10 [ 265.770043][ T31] ? __cfi_kthread+0x10/0x10 [ 265.770077][ T31] ret_from_fork+0x64/0xa0 [ 265.770106][ T31] ? __cfi_kthread+0x10/0x10 [ 265.770141][ T31] ret_from_fork_asm+0x1a/0x30 [ 265.770174][ T31] [ 265.770184][ T31] ================================================================== [ 265.857362][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.858498][ T31] Disabling lock debugging due to kernel taint [ 265.866368][ T8325] bridge_slave_0: entered allmulticast mode [ 265.867593][ T31] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 265.891673][ T8325] bridge_slave_0: entered promiscuous mode [ 265.892757][ T31] #PF: supervisor write access in kernel mode [ 266.031065][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.031359][ T31] #PF: error_code(0x0002) - not-present page [ 266.035693][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.041230][ T31] PGD 800000014181e067 P4D 800000014181e067 PUD 0 [ 266.041262][ T31] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 266.041287][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G B 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 266.041320][ T31] Tainted: [B]=BAD_PAGE [ 266.041329][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.041344][ T31] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 266.041409][ T31] RIP: 0010:down_write+0x9a/0x2a0 [ 266.041443][ T31] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 266.041465][ T31] RSP: 0018:ffffc90000207500 EFLAGS: 00010256 [ 266.041486][ T31] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 266.041502][ T31] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000207520 [ 266.041520][ T31] RBP: ffffc90000207598 R08: ffffc90000207527 R09: 1ffff92000040ea4 [ 266.041539][ T31] R10: dffffc0000000000 R11: fffff52000040ea5 R12: dffffc0000000000 [ 266.041559][ T31] R13: 1ffff92000040ea0 R14: ffffc90000207520 R15: 0000000000000000 [ 266.041578][ T31] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 266.041600][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.041618][ T31] CR2: 0000000000000098 CR3: 000000013b7dc000 CR4: 00000000003526b0 [ 266.041640][ T31] Call Trace: [ 266.041649][ T31] [ 266.041659][ T31] ? __cfi_down_write+0x10/0x10 [ 266.041690][ T31] ? _raw_spin_lock+0x8c/0x120 [ 266.041724][ T31] ? __cfi__raw_spin_lock+0x10/0x10 [ 266.041759][ T31] ? mutex_unlock+0x8b/0x240 [ 266.041785][ T31] ? __cfi_mutex_unlock+0x10/0x10 [ 266.041814][ T31] rust_binderfs_remove_file+0x6c/0x110 [ 266.041845][ T31] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 266.041891][ T31] ? update_curr_dl_se+0x65a/0xb20 [ 266.041931][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 266.041959][ T31] ? update_curr+0x60d/0xc60 [ 266.041992][ T31] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 266.042037][ T31] ? update_load_avg+0x506/0x19a0 [ 266.042061][ T31] ? detach_entity_load_avg+0x7b0/0x7b0 [ 266.042095][ T31] ? dequeue_entity+0xa9c/0x1750 [ 266.042123][ T31] ? __cfi_wg_packet_decrypt_worker+0x10/0x10 [ 266.042162][ T31] ? tg_unthrottle_up+0x980/0x980 [ 266.042190][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 266.042220][ T31] ? sched_clock_noinstr+0xd/0x30 [ 266.042247][ T31] ? sched_clock+0x44/0x60 [ 266.042273][ T31] ? sched_clock_cpu+0x75/0x400 [ 266.042300][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 266.042326][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 266.042357][ T31] ? __cfi_sched_clock_cpu+0x10/0x10 [ 266.042387][ T31] ? __kasan_check_write+0x18/0x20 [ 266.042415][ T31] ? __switch_to+0xc7b/0x1310 [ 266.042444][ T31] ? psi_group_change+0xb44/0x1130 [ 266.042471][ T31] ? __cfi___switch_to+0x10/0x10 [ 266.042502][ T31] ? _raw_spin_unlock+0x45/0x60 [ 266.042524][ T31] ? __switch_to_asm+0x3d/0x70 [ 266.042556][ T31] ? __schedule+0x1463/0x1f10 [ 266.042582][ T31] ? kick_pool+0xad/0x550 [ 266.042605][ T31] process_scheduled_works+0x7d2/0x1020 [ 266.042643][ T31] worker_thread+0xc58/0x1250 [ 266.042679][ T31] kthread+0x2ca/0x370 [ 266.042714][ T31] ? __cfi_worker_thread+0x10/0x10 [ 266.042745][ T31] ? __cfi_kthread+0x10/0x10 [ 266.042780][ T31] ret_from_fork+0x64/0xa0 [ 266.042809][ T31] ? __cfi_kthread+0x10/0x10 [ 266.042844][ T31] ret_from_fork_asm+0x1a/0x30 [ 266.042877][ T31] [ 266.042887][ T31] Modules linked in: [ 266.042910][ T31] CR2: 0000000000000098 [ 266.042931][ T31] ---[ end trace 0000000000000000 ]--- [ 266.042942][ T31] RIP: 0010:down_write+0x9a/0x2a0 [ 266.042975][ T31] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 266.042998][ T31] RSP: 0018:ffffc90000207500 EFLAGS: 00010256 [ 266.043020][ T31] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 266.043036][ T31] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000207520 [ 266.043053][ T31] RBP: ffffc90000207598 R08: ffffc90000207527 R09: 1ffff92000040ea4 [ 266.043072][ T31] R10: dffffc0000000000 R11: fffff52000040ea5 R12: dffffc0000000000 [ 266.043092][ T31] R13: 1ffff92000040ea0 R14: ffffc90000207520 R15: 0000000000000000 [ 266.043111][ T31] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 266.043133][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.043152][ T31] CR2: 0000000000000098 CR3: 000000013b7dc000 CR4: 00000000003526b0 [ 266.043175][ T31] Kernel panic - not syncing: Fatal exception [ 266.043544][ T31] Kernel Offset: disabled