last executing test programs: 2.261182566s ago: executing program 3 (id=133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40e00, 0x0) (async, rerun: 32) r2 = socket(0x1d, 0x1, 0xc) (rerun: 32) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x0, {[0x0, 0x0, 0x2, 0xffffffff, 0x1, 0x4, 0x0, 0xb0]}}, 0x5c) (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) r3 = syz_io_uring_complete(0x0) utime(0x0, 0x0) (async, rerun: 64) process_madvise(r3, 0x0, 0x0, 0x8, 0x0) (rerun: 64) mkdir(&(0x7f0000000400)='./file0\x00', 0x99) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x2000) (async) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './bus', [], 0xa, "b77a3d558c"}, 0xe) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r5, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000140)={0x42, 0x3, 0x2, 0x1006, 0x1ffd}) (async) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x1) (async) getpgid(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) listen(r3, 0x8) (rerun: 64) ioctl$sock_SIOCINQ(r6, 0x541b, 0x0) (async) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c00), 0x2, 0x2) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0x80800) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x2}], 0xfffffffffffffee8, 0x0, &(0x7f0000000480)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851becdb93f1fdac6eae02bf72c9a8f24193aff4b1da44dc02bbac20b5f9b6656a0658e008d8e8f179fd219bca1c3ba94554fbd59d32814798bf3f64f83dc2d1c66ec847d31b173a1c65caa2035717b4347e9fbe3d5af3617e417265185d0aa9c63e71365d44f6bc9b869a332e05e1aa9ed2abddb09c8275e92"}) 2.260118876s ago: executing program 3 (id=134): syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @local, 0x8}, 0x18) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0xd2001, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x60000000) epoll_pwait(r6, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x8, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) 2.138186037s ago: executing program 1 (id=137): r0 = syz_clone3(&(0x7f00000011c0)={0x840000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/81, 0x51, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ptrace$setsig(0x4203, r0, 0x4, &(0x7f0000001240)={0x22, 0x80000001, 0x6}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000103}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) setuid(0xee00) pidfd_getfd(0xffffffffffffffff, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000269000/0x4000)=nil, 0x4000}) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.837826512s ago: executing program 1 (id=144): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x1, {0x1000, [{{0x2, 0x0, 0x5}, 0xd, 0xef, 0x7, './file0'}, {{0x1, 0x4, 0x1}, 0x81, 0x2, 0x7, './file0'}]}}, 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) 1.812055313s ago: executing program 1 (id=145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001000130726bd70000000000000000000000000000000ffffe0000002ac14141b0000000000000000000000004e23000100000003020000a03a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001000130726bd70000000000000000000000000000000ffffe0000002ac14141b0000000000000000000000004e23000100000003020000a03a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) (async) read$rfkill(r1, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) (async) 1.742240263s ago: executing program 1 (id=146): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000100)) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xd000, 0xeeee0000, 0x3, 0x0, 0x3cd6}) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1.740732883s ago: executing program 1 (id=147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)=ANY=[@ANYBLOB="1c0000000e0601"], 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) (async) syz_open_dev$hiddev(&(0x7f0000000080), 0xffffffffffffffff, 0x161041) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.31408093s ago: executing program 3 (id=152): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x145200, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=0x0, @ANYRES64=r1], 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) 608.843471ms ago: executing program 2 (id=160): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2a, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x14000890}, 0x40801) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="00012a00"/18, @ANYRES32=r4, @ANYBLOB="0a00060050505050505000000a0006005050505050500000080027000300000008003500000000000a000600a7010429d17d00000a003400020202020202000020006e800400010004000100040002000400010004000100040001000400010020006e80040001000400020004000100040001000400010004000200040002000b000a003c65a6e89dccb900110007002d331fbfa253e646bbe9b867810000000800090005ac0f00"], 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x93, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a431676"}) (async) mmap$binder(&(0x7f0000741000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xba37) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xca8c}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000940)=""/210, 0xd2}, {&(0x7f0000000b80)=""/76, 0x4c}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/121, 0x79}], 0x9}, 0x81}], 0x3, 0x2100, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000001, 0x12, r7, 0x45809000) (async, rerun: 64) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 64) connect$packet(r8, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r9, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async, rerun: 32) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) (async, rerun: 32) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r12, 0x5453, 0x0) (async) ioctl$TIOCMGET(r12, 0x5415, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000100)={0x80a0000, 0x1000}) ioctl$HIDIOCGUSAGE(r11, 0xc018480b, &(0x7f0000000000)={0x2, 0xffffffff, 0x7, 0x10000, 0x8, 0x8}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 499.120703ms ago: executing program 2 (id=161): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000b0a000/0x2000)=nil, 0x2000, 0x3000009, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 478.119663ms ago: executing program 2 (id=162): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x1, {0x1000, [{{0x2, 0x0, 0x5}, 0xd, 0xef, 0x7, './file0'}, {{0x1, 0x4, 0x1}, 0x81, 0x2, 0x7, './file0'}]}}, 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) 472.942283ms ago: executing program 2 (id=163): ioprio_set$uid(0x3, 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0]) 426.116593ms ago: executing program 2 (id=164): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x8, 0xfffffff9, 0x1}) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x110, r0, 0x45809000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x41, r1, 'id0\x00'}) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x0) 425.752673ms ago: executing program 2 (id=165): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioprio_set$uid(0x3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x14, r2, 0x1, 0x70bd2b, 0x255fdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210009000122940309058103"], 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210009000122940309058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0x2000775) (async) inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0x2000775) dup(r5) (async) r6 = dup(r5) creat(&(0x7f0000000000)='./file0\x00', 0x1) (async) creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000140), 0x1, 0x400180) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x82) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x82) io_submit(r8, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r9, 0x0, 0x0, 0x8800000, 0x0, 0x0, r9}]) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r10, 0x4758f000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) 333.911535ms ago: executing program 1 (id=166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x6, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socket$key(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) read$FUSE(r3, &(0x7f0000002840)={0x2020, 0x0, 0x0}, 0x2020) ioctl$FITHAW(r0, 0xc0045878) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd']) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x3, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x6, 0x7fff, 0x80000000002, 0x80000000004, 0x400000000000, 0x6, 0x200, 0x0, 0x1, 0x5000, 0x7, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000740)={0x90, 0x0, r6, {0x0, 0x3, 0x6, 0x5, 0xffffff65, 0x0, {0x1, 0x6, 0xd7, 0x4, 0x3f2, 0xd1, 0xff56, 0x7fffffff, 0xbd59, 0xc000, 0xa133, r7, 0x0, 0x5, 0x7fffffff}}}, 0x90) ppoll(&(0x7f0000000380)=[{r3, 0x200}, {r5, 0x4000}], 0x2, &(0x7f0000000500), 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 172.136868ms ago: executing program 0 (id=167): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 102.101769ms ago: executing program 0 (id=168): prctl$PR_SET_DUMPABLE(0x4, 0x3) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 100.697459ms ago: executing program 0 (id=169): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000080)='f2fs\x00', 0x22284a0, 0x0) 98.244099ms ago: executing program 0 (id=170): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x18600, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x0, r0, 'id1\x00'}) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x3, 0x3, {0xa, 0x4e21, 0x8, @remote, 0x254c}}}, 0x32) connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0xff, 0x6, @random}, 0x14) 88.145569ms ago: executing program 3 (id=171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x2) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=r3, @ANYBLOB="04002cbd7000fcdbdf2509000000050013001000000005001d0019000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001d40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0xfffffffffffffff5, r4, {0x7, 0x2b, 0x9, 0x28000180, 0xfff7, 0x5, 0x2, 0xff, 0x0, 0x0, 0x40, 0x5}}, 0x50) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) 75.161089ms ago: executing program 0 (id=172): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x1, {0x1000, [{{0x2, 0x0, 0x5}, 0xd, 0xef, 0x7, './file0'}, {{0x1, 0x4, 0x1}, 0x81, 0x2, 0x7, './file0'}]}}, 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) 61.009079ms ago: executing program 0 (id=173): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r1, &(0x7f00000004c0)='\x00\x00', 0x2, 0x1400c821, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/61, 0x3d) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x2}}], 0x18, 0x4c00}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r8, 0xfc, 0x0) getdents64(r8, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000000)={{0x8, 0x3ee}, {0x7, 0x8000}, 0xd, 0x1}) preadv2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500)=""/202, 0xca}, {&(0x7f0000000600)=""/199, 0xc7}], 0x2, 0x5, 0x80000000, 0x0) 11.2828ms ago: executing program 3 (id=174): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000001080)={'syz0\x00', {0xf, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0xffffffff, 0x0, 0x7d, 0x13, 0x5, 0x0, 0x6, 0x0, 0xffffffff, 0x4000000, 0x0, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0x9, 0xb, 0x681c1eb2, 0x11e, 0x0, 0x0, 0x0, 0x2, 0x12, 0xffffffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xa, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff6, 0x0, 0xf681, 0x0, 0x1ab9, 0xffffffff, 0x0, 0x0, 0xfffffffb, 0x1c15d73a], [0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x8, 0xab1, 0x1fd, 0x1, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x0, 0x9, 0x0, 0x9, 0x4, 0x9, 0x0, 0x10001, 0x3, 0x0, 0x4, 0xfffffffb, 0xbc, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x5, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x0, 0x40, 0x0, 0xc7, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0x80000, 0xc, 0x5, 0x200, 0xcc0, 0x0, 0x6, 0x63, 0x0, 0x0, 0x0, 0xe, 0x929, 0x202f, 0x20000000, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6574, 0x0, 0x0, 0xcd55, 0xfb], [0x216, 0x6, 0x0, 0x2, 0x1, 0x2, 0x5, 0x7000000, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffff14, 0x0, 0x194e, 0x0, 0xe793, 0xddda, 0x3, 0x6, 0x80000001, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4, 0x4000, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0x9, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000200)=0x5, 0x4) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/205) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) fsopen(&(0x7f0000004600)='bdev\x00', 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"]) 0s ago: executing program 3 (id=175): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRESDEC=r1]) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x7000003) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x9, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @local}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xc, &(0x7f0000000540)=0x4, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x408, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@CLASSIFY={0x0, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfcd7) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[{0xa8, 0x0, 0x562d, "3eb8a35bb531924450acb8bccebc5557cf19400c430ccb7a751173d6e0cffadbea841694863f055fa8f1b40fd83a4dc58ff195e31d4114a75cc78dae35cdd656dca3e16778a2629084ae117c2c4c0d986d10105254cc193f2f319256202af89c1a78844721a3f8ee3bc5b451393e96fcac2329b4e611c050f4f48fe662220b0a53d0959b1810bb61a46d8487703d91c58c935abac3"}], 0xa8}}], 0x1, 0x4080) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e22, @empty}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$EVIOCGPROP(r10, 0x80404509, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 27.588239][ T36] audit: type=1400 audit(1751237698.830:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.589593][ T281] cgroup: Unknown subsys name 'net' [ 27.610911][ T36] audit: type=1400 audit(1751237698.830:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.638531][ T36] audit: type=1400 audit(1751237698.860:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.638753][ T281] cgroup: Unknown subsys name 'devices' [ 27.818111][ T281] cgroup: Unknown subsys name 'hugetlb' [ 27.823747][ T281] cgroup: Unknown subsys name 'rlimit' [ 27.998915][ T36] audit: type=1400 audit(1751237699.240:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.022103][ T36] audit: type=1400 audit(1751237699.240:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.035428][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.047064][ T36] audit: type=1400 audit(1751237699.240:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.078495][ T36] audit: type=1400 audit(1751237699.290:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.086961][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.103894][ T36] audit: type=1400 audit(1751237699.290:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.138211][ T36] audit: type=1400 audit(1751237699.320:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.163844][ T36] audit: type=1400 audit(1751237699.320:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.977173][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.984235][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.991532][ T288] bridge_slave_0: entered allmulticast mode [ 28.998096][ T288] bridge_slave_0: entered promiscuous mode [ 29.014927][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.022021][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.029165][ T288] bridge_slave_1: entered allmulticast mode [ 29.035408][ T288] bridge_slave_1: entered promiscuous mode [ 29.048726][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.055844][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.062905][ T289] bridge_slave_0: entered allmulticast mode [ 29.069279][ T289] bridge_slave_0: entered promiscuous mode [ 29.075459][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.082564][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.089712][ T291] bridge_slave_0: entered allmulticast mode [ 29.096116][ T291] bridge_slave_0: entered promiscuous mode [ 29.106995][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.114134][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.121383][ T289] bridge_slave_1: entered allmulticast mode [ 29.127677][ T289] bridge_slave_1: entered promiscuous mode [ 29.133798][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.140895][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.148052][ T291] bridge_slave_1: entered allmulticast mode [ 29.154286][ T291] bridge_slave_1: entered promiscuous mode [ 29.260328][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.267437][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.274493][ T290] bridge_slave_0: entered allmulticast mode [ 29.280891][ T290] bridge_slave_0: entered promiscuous mode [ 29.297071][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.304132][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.311251][ T290] bridge_slave_1: entered allmulticast mode [ 29.317708][ T290] bridge_slave_1: entered promiscuous mode [ 29.403160][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.410240][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.417558][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.424597][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.451938][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.459140][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.466458][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.473502][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.488312][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.495380][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.502732][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.509807][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.518835][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.525902][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.533202][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.540262][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.586921][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.594211][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.601555][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.609273][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.616643][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.623867][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.632430][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.639883][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.648975][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.656036][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.666388][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.673439][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.689953][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.697047][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.704562][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.711610][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.730321][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.737385][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.744903][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.751989][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.782309][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.789382][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.808180][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.815227][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.828428][ T288] veth0_vlan: entered promiscuous mode [ 29.840531][ T291] veth0_vlan: entered promiscuous mode [ 29.863518][ T291] veth1_macvtap: entered promiscuous mode [ 29.872007][ T288] veth1_macvtap: entered promiscuous mode [ 29.899415][ T289] veth0_vlan: entered promiscuous mode [ 29.917440][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.938594][ T290] veth0_vlan: entered promiscuous mode [ 29.966824][ T289] veth1_macvtap: entered promiscuous mode [ 29.992973][ T309] rust_binder: Error in use_page_slow: ESRCH [ 29.993019][ T309] rust_binder: use_range failure ESRCH [ 30.001731][ T309] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 30.001768][ T290] veth1_macvtap: entered promiscuous mode [ 30.021596][ T309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 30.021654][ T309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 30.083640][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.099849][ T322] overlayfs: conflicting options: nfs_export=on,index=off [ 30.258380][ T31] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 30.260926][ T343] fuse: Bad value for 'group_id' [ 30.270931][ T343] fuse: Bad value for 'group_id' [ 30.281839][ T343] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.307765][ T319] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.427779][ T31] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.445613][ T31] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 30.471077][ T373] binder: Bad value for 'defcontext' [ 30.476775][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.485085][ T319] usb 3-1: config 1 has an invalid interface descriptor of length 7, skipping [ 30.504494][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 30.513648][ T319] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 30.530221][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.539021][ T319] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.552813][ T31] usb 1-1: config 0 descriptor?? [ 30.560118][ T312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 30.568644][ T319] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.582325][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.602918][ T319] usb 3-1: Product: ф [ 30.619375][ T319] usb 3-1: Manufacturer: 쁻揷榃躎ꐴ뽷罬塽윘꺸蓕汅ﲧ᣸䑂婥㴭빩훝룵젝엩뮃樒㡏ƛ帿䲥譔䈁ꔖ퀖ꦎ㞩ᄠ߉ꯉ䄟㔒梉鶗࿲⢷䬽辖裹漁葁쿆㶎㷸أ鈜ᒁ鮴⒪堎⺢⩱㰓駬䥟๼뮇ংꀦ痽쐋c솋崷ꛭ묳ꒋ푨䕙⸈푘ṱ蟠疡휖벎鍶௎䵜ྂ䑸 [ 30.650213][ T319] usb 3-1: SerialNumber: syz [ 30.927321][ T401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.927373][ T401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.953371][ T406] Zero length message leads to an empty skb [ 30.993893][ T31] logitech 0003:046D:C286.0001: unknown main item tag 0x6 [ 31.014841][ T31] logitech 0003:046D:C286.0001: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 31.035735][ T31] logitech 0003:046D:C286.0001: no inputs found [ 31.078972][ T318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.099479][ T318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.114830][ T319] usb 3-1: 0:2 : does not exist [ 31.123417][ T319] usb 3-1: USB disconnect, device number 2 [ 31.138287][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.195149][ T306] usb 1-1: USB disconnect, device number 2 [ 31.225797][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.375764][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 31.382050][ T45] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 31.390322][ T45] usb 2-1: config 1 has no interface number 0 [ 31.396515][ T45] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 31.405783][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.406511][ T45] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 31.424015][ T45] usb 2-1: config 1 interface 105 has no altsetting 0 [ 31.432259][ T45] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 31.441379][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.449680][ T45] usb 2-1: Product: syz [ 31.453892][ T45] usb 2-1: Manufacturer: syz [ 31.458575][ T45] usb 2-1: SerialNumber: syz [ 31.464112][ T410] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.471376][ T410] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.566969][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 31.575390][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 31.584388][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 31.594873][ T9] usb 4-1: config 220 has no interface number 2 [ 31.601571][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 31.615206][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 31.622274][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 31.629218][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 31.645225][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 31.655011][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.659683][ T421] netlink: 'syz.2.33': attribute type 4 has an invalid length. [ 31.663233][ T9] usb 4-1: Product: syz [ 31.671337][ T421] netlink: 'syz.2.33': attribute type 6 has an invalid length. [ 31.678700][ T9] usb 4-1: Manufacturer: syz [ 31.682950][ T421] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.33'. [ 31.687188][ T9] usb 4-1: SerialNumber: syz [ 31.699555][ T421] /dev/nullb0: Can't lookup blockdev [ 31.770698][ T432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.37'. [ 31.843775][ T433] rust_binder: Error while translating object. [ 31.843820][ T433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.850509][ T433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 31.906186][ T410] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.923928][ T410] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.933884][ T419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.944218][ T419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.020361][ T447] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.136005][ T436] veth1_to_team: entered promiscuous mode [ 32.144815][ T436] veth1_to_team: entered allmulticast mode [ 32.164915][ T410] rust_binder: Error while translating object. [ 32.164956][ T410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 32.185363][ T410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:52 [ 32.255212][ T45] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 32.278379][ T45] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 32.290101][ T45] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 32.304081][ T45] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c6:eb:eb:d9:62:ad [ 32.320701][ T45] usb 2-1: USB disconnect, device number 2 [ 32.327970][ T45] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 32.406977][ T45] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 32.418699][ T45] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 32.438058][ T45] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 32.525745][ T319] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 32.693463][ T319] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.704553][ T319] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 32.718663][ T319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 32.725320][ T319] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 32.734523][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.743554][ T319] usb 3-1: config 0 descriptor?? [ 32.748894][ T456] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 32.905762][ T45] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 32.958900][ T319] smartjoyplus 0003:6666:8804.0002: unknown main item tag 0x0 [ 32.966692][ T319] smartjoyplus 0003:6666:8804.0002: unknown main item tag 0x0 [ 32.976478][ T319] smartjoyplus 0003:6666:8804.0002: unknown main item tag 0x0 [ 32.984175][ T319] smartjoyplus 0003:6666:8804.0002: unknown main item tag 0x0 [ 32.991721][ T319] smartjoyplus 0003:6666:8804.0002: unknown main item tag 0x0 [ 32.999263][ T319] smartjoyplus 0003:6666:8804.0002: unknown main item tag 0x0 [ 33.008235][ T319] smartjoyplus 0003:6666:8804.0002: unknown main item tag 0x0 [ 33.015834][ T319] smartjoyplus 0003:6666:8804.0002: unknown main item tag 0x0 [ 33.024422][ T319] smartjoyplus 0003:6666:8804.0002: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0 [ 33.041571][ T45] usb 1-1: device descriptor read/64, error -71 [ 33.045722][ T316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.049686][ T319] smartjoyplus 0003:6666:8804.0002: no output reports found [ 33.073616][ T319] usb 3-1: USB disconnect, device number 3 [ 33.087314][ T36] kauditd_printk_skb: 107 callbacks suppressed [ 33.087331][ T36] audit: type=1400 audit(1751237704.330:181): avc: denied { mount } for pid=498 comm="syz.2.47" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 33.119471][ T36] audit: type=1400 audit(1751237704.330:182): avc: denied { setopt } for pid=498 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.138619][ T36] audit: type=1400 audit(1751237704.360:183): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 33.167636][ T36] audit: type=1400 audit(1751237704.410:184): avc: denied { write } for pid=500 comm="syz.2.48" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.215692][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 33.222195][ T316] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 33.233286][ T316] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 33.249374][ T316] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.258692][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.267037][ T316] usb 2-1: Product: syz [ 33.271421][ T316] usb 2-1: Manufacturer: syz [ 33.276257][ T316] usb 2-1: SerialNumber: syz [ 33.315740][ T45] usb 1-1: device descriptor read/64, error -71 [ 33.489478][ T316] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 33.500596][ T316] usb 2-1: USB disconnect, device number 3 [ 33.505809][ T319] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.513214][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.555734][ T45] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 33.655717][ T319] usb 3-1: Using ep0 maxpacket: 16 [ 33.662034][ T319] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 33.670455][ T319] usb 3-1: config 1 has no interface number 0 [ 33.676690][ T319] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 33.686665][ T45] usb 1-1: device descriptor read/64, error -71 [ 33.692975][ T319] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 33.696064][ T36] audit: type=1400 audit(1751237704.930:185): avc: denied { setopt } for pid=490 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.703023][ T319] usb 3-1: config 1 interface 105 has no altsetting 0 [ 33.722556][ T491] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 33.730842][ T319] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 33.743783][ T491] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 33.747977][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.754664][ T36] audit: type=1400 audit(1751237704.980:186): avc: denied { relabelto } for pid=490 comm="syz.1.45" name="cgroup" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 33.762489][ T319] usb 3-1: Product: syz [ 33.789683][ T36] audit: type=1400 audit(1751237704.980:187): avc: denied { associate } for pid=490 comm="syz.1.45" name="cgroup" dev="tmpfs" ino=95 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 33.820607][ T319] usb 3-1: Manufacturer: syz [ 33.820631][ T319] usb 3-1: SerialNumber: syz [ 33.822024][ T501] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 33.826227][ T36] audit: type=1400 audit(1751237704.980:188): avc: denied { ioctl } for pid=490 comm="syz.1.45" path="socket:[3975]" dev="sockfs" ino=3975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.832233][ T501] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 33.837416][ T36] audit: type=1400 audit(1751237704.980:189): avc: denied { connect } for pid=490 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.889091][ T36] audit: type=1400 audit(1751237704.980:190): avc: denied { read } for pid=490 comm="syz.1.45" name="cgroup" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 34.015722][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.126269][ T45] usb usb1-port1: attempt power cycle [ 34.143228][ T9] usb 4-1: selecting invalid altsetting 0 [ 34.149241][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 34.155649][ T9] usb 4-1: No valid video chain found. [ 34.167381][ T9] usb 4-1: USB disconnect, device number 2 [ 34.183416][ T316] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 34.191150][ T316] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 34.199472][ T316] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 34.285069][ T501] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 34.292515][ T501] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 34.495732][ T45] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 34.516807][ T45] usb 1-1: device descriptor read/8, error -71 [ 34.535734][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.648766][ T45] usb 1-1: device descriptor read/8, error -71 [ 34.665772][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.739971][ T514] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 34.747824][ T514] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 34.756185][ T514] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 34.763948][ T514] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 34.802976][ T520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:70 [ 34.885734][ T45] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 34.904450][ T319] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 34.915805][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.917162][ T319] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 34.933648][ T45] usb 1-1: device descriptor read/8, error -71 [ 34.941726][ T319] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e6:67:ab:40:ba:fb [ 34.959292][ T319] usb 3-1: USB disconnect, device number 4 [ 34.966689][ T319] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 35.018202][ T319] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 35.027675][ T319] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 35.037102][ T319] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 35.065757][ T315] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 35.074329][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.155731][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.188681][ T45] usb usb1-port1: unable to enumerate USB device [ 35.216749][ T315] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 35.224867][ T315] usb 2-1: config 0 has no interface number 0 [ 35.231018][ T315] usb 2-1: config 0 interface 41 has no altsetting 0 [ 35.239361][ T315] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 35.249042][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.257126][ T315] usb 2-1: Product: syz [ 35.261332][ T315] usb 2-1: Manufacturer: syz [ 35.265986][ T315] usb 2-1: SerialNumber: syz [ 35.271493][ T315] usb 2-1: config 0 descriptor?? [ 35.285791][ T9] usb 4-1: device descriptor read/64, error -71 [ 35.526309][ T9] usb 4-1: device descriptor read/64, error -71 [ 35.534225][ T553] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 35.635927][ T9] usb usb4-port1: attempt power cycle [ 35.650835][ T562] netlink: 'syz.2.60': attribute type 4 has an invalid length. [ 35.658546][ T562] netlink: 'syz.2.60': attribute type 21 has an invalid length. [ 35.666433][ T562] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.60'. [ 35.870108][ T589] rust_binder: Write failure EFAULT in pid:33 [ 35.913123][ T595] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 35.975734][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.998133][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.004898][ T598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.013554][ T598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.043701][ T601] binder: Bad value for 'max' [ 36.048920][ T601] incfs: Options parsing error. -22 [ 36.054176][ T601] incfs: mount failed -22 [ 36.097480][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.099784][ T606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 36.115811][ T606] bridge0: entered promiscuous mode [ 36.122304][ T605] bridge0: left promiscuous mode [ 36.128692][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.318167][ T315] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 36.327577][ T315] usb 2-1: USB disconnect, device number 4 [ 36.365772][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.386886][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.516784][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.625873][ T9] usb usb4-port1: unable to enumerate USB device [ 36.935797][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.075720][ T45] usb 3-1: device descriptor read/64, error -71 [ 37.198795][ T628] SELinux: failed to load policy [ 37.315775][ T45] usb 3-1: device descriptor read/64, error -71 [ 37.382653][ T637] binder: Unknown parameter 'defcontext01777777777777777777777' [ 37.412405][ T643] rust_binder: Write failure EFAULT in pid:55 [ 37.566018][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.695809][ T315] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.695818][ T316] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.710963][ T45] usb 3-1: device descriptor read/64, error -71 [ 37.845735][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 37.845761][ T315] usb 2-1: device descriptor read/64, error -71 [ 37.852108][ T316] usb 4-1: config 0 has no interfaces? [ 37.864203][ T316] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.873322][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.881375][ T316] usb 4-1: Product: syz [ 37.885548][ T316] usb 4-1: Manufacturer: syz [ 37.890183][ T316] usb 4-1: SerialNumber: syz [ 37.895472][ T316] usb 4-1: config 0 descriptor?? [ 37.965833][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.075877][ T45] usb usb3-port1: attempt power cycle [ 38.095782][ T315] usb 2-1: device descriptor read/64, error -71 [ 38.103104][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 38.103120][ T36] audit: type=1400 audit(1751237709.340:225): avc: denied { mounton } for pid=650 comm="syz.3.89" path="/proc/63/task" dev="proc" ino=5850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 38.104179][ T609] usb 4-1: USB disconnect, device number 7 [ 38.131507][ T608] Bluetooth: hci0: command 0x1003 tx timeout [ 38.137362][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.168385][ T656] rust_binder: Error while translating object. [ 38.168412][ T656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 38.174620][ T656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43 [ 38.277393][ T662] tipc: Enabling of bearer rejected, failed to enable media [ 38.335880][ T315] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.405124][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.408528][ T670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.97'. [ 38.420476][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.421323][ T36] audit: type=1400 audit(1751237709.660:226): avc: denied { setopt } for pid=669 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.449963][ T45] usb 3-1: device descriptor read/8, error -71 [ 38.465754][ T315] usb 2-1: device descriptor read/64, error -71 [ 38.489301][ T670] kvm: pic: non byte write [ 38.586964][ T45] usb 3-1: device descriptor read/8, error -71 [ 38.630033][ T36] audit: type=1400 audit(1751237709.870:227): avc: denied { ioctl } for pid=672 comm="syz.3.98" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.655093][ T36] audit: type=1400 audit(1751237709.890:228): avc: denied { map } for pid=672 comm="syz.3.98" path="socket:[6309]" dev="sockfs" ino=6309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.678444][ T36] audit: type=1400 audit(1751237709.890:229): avc: denied { read } for pid=672 comm="syz.3.98" path="socket:[6309]" dev="sockfs" ino=6309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.705812][ T315] usb 2-1: device descriptor read/64, error -71 [ 38.746759][ T673] binder: Bad value for 'stats' [ 38.815862][ T315] usb usb2-port1: attempt power cycle [ 38.835766][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.879060][ T36] audit: type=1400 audit(1751237710.120:230): avc: denied { read write } for pid=674 comm="syz.3.99" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.880879][ T675] input: syz1 as /devices/virtual/input/input4 [ 38.903308][ T45] usb 3-1: device descriptor read/8, error -71 [ 38.909030][ T36] audit: type=1400 audit(1751237710.120:231): avc: denied { open } for pid=674 comm="syz.3.99" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.938074][ T36] audit: type=1400 audit(1751237710.120:232): avc: denied { ioctl } for pid=674 comm="syz.3.99" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.962853][ T36] audit: type=1400 audit(1751237710.150:233): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=460 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.985087][ T36] audit: type=1400 audit(1751237710.150:234): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=460 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.994012][ T675] rust_binder: Error while translating object. [ 39.008406][ T675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.014606][ T675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 39.046899][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.111518][ T679] fuse: Bad value for 'fd' [ 39.165858][ T45] usb usb3-port1: unable to enumerate USB device [ 39.185743][ T315] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.206727][ T315] usb 2-1: device descriptor read/8, error -71 [ 39.232206][ T687] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 39.240440][ T687] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 39.249140][ T687] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 39.257170][ T687] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 39.314256][ T694] ======================================================= [ 39.314256][ T694] WARNING: The mand mount option has been deprecated and [ 39.314256][ T694] and is ignored by this kernel. Remove the mand [ 39.314256][ T694] option from the mount to silence this warning. [ 39.314256][ T694] ======================================================= [ 39.345623][ T315] usb 2-1: device descriptor read/8, error -71 [ 39.349815][ T694] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 39.394010][ T697] virtio-fs: tag not found [ 39.408981][ T697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=697 comm=syz.3.108 [ 39.595772][ T315] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.616809][ T315] usb 2-1: device descriptor read/8, error -71 [ 39.746800][ T315] usb 2-1: device descriptor read/8, error -71 [ 39.858256][ T315] usb usb2-port1: unable to enumerate USB device [ 39.935941][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.935975][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.950309][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.950337][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.965321][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.965354][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.979667][ T712] rust_binder: Error in use_page_slow: ESRCH [ 39.993846][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.993874][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.008343][ T712] rust_binder: use_range failure ESRCH [ 40.008375][ T712] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 40.021756][ T712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.023781][ T712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:84 [ 40.045477][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.045504][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.060075][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.060107][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.076940][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.076973][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.092207][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.092365][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.107895][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.107928][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.127257][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.127286][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.133768][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.157281][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.172563][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.185764][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.192369][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.198946][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.215733][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.222247][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.228933][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.235414][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.254034][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.260878][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.306283][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.320586][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.328392][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.336280][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.344054][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.353588][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.359065][ T719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 40.361412][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.362389][ T719] rust_binder: Error while translating object. [ 40.371472][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.378696][ T719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.385158][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.392780][ T719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 40.402272][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.428652][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.436636][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.445771][ T608] Bluetooth: hci0: command 0x1003 tx timeout [ 40.445957][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.479818][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.487917][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.495896][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.509476][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.517886][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.525746][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.533586][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.541486][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.549299][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.557137][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.565010][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.572856][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.581046][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.588911][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.596781][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.604618][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.612834][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.620847][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.628746][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.655755][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.663613][ T315] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 40.672202][ T315] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.713477][ T731] fido_id[731]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.771961][ T735] incfs: Backing dir is not set, filesystem can't be mounted. [ 40.785724][ T316] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.788207][ T737] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 40.795750][ T735] incfs: mount failed -2 [ 40.965876][ T316] usb 1-1: Using ep0 maxpacket: 8 [ 40.972895][ T316] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.986104][ T316] usb 1-1: config 1 interface 0 has no altsetting 0 [ 40.994318][ T316] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 41.003993][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.013249][ T316] usb 1-1: Manufacturer: 푺ᴖ∺ᢚሜ鄂ꩡ璍莞콿蟡捖쁤氢짮”擺៚ࣺ෤틢樘罾媙⾏빜䊖 [ 41.035735][ T316] usb 1-1: SerialNumber: syz [ 41.044072][ T728] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.076459][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.085815][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.093331][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.101170][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.108795][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.116515][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.123971][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.131743][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.139384][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.147129][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.154631][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.162500][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.170211][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.177967][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.185632][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.193465][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.215852][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.225887][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.233449][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.241408][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.249567][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.258685][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.280071][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.289117][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.296764][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.304323][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.312207][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.319971][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.327593][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.335143][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.342995][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.350677][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.358307][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.366034][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.373522][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.381407][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.389043][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.396819][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.404296][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.412256][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.419966][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.427672][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.435159][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.442953][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.450583][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.463513][ T316] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 41.476974][ T316] usb 1-1: USB disconnect, device number 7 [ 41.482891][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.491281][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.499234][ T316] usblp0: removed [ 41.504909][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.512603][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.520286][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.527988][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.535535][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.543308][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.551136][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.558790][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.568032][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.575513][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.583371][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.590965][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.598616][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.606200][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.613732][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.621494][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.629147][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.636758][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.644287][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.652045][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.660001][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.667602][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.675636][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.683349][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.691014][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.698598][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.706252][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.713732][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.721457][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.729098][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.737306][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.744767][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.752488][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.760213][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.767856][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.775264][ T64] hid-generic 0000:0000:0AE5.0005: unknown main item tag 0x0 [ 41.788738][ T64] hid-generic 0000:0000:0AE5.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 41.823393][ T766] fido_id[766]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.861416][ T770] incfs: Backing dir is not set, filesystem can't be mounted. [ 41.875752][ T770] incfs: mount failed -2 [ 41.951390][ T784] binder: Bad value for 'stats' [ 41.975205][ T786] fuse: Bad value for 'fd' [ 41.998941][ T786] fuse: Bad value for 'fd' [ 42.006307][ T791] SELinux: Context system_u:object_r:var_lock_t:s0 is not valid (left unmapped). [ 42.016198][ T786] fuse: Bad value for 'fd' [ 42.265773][ T316] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 42.312359][ T812] incfs: Backing dir is not set, filesystem can't be mounted. [ 42.319964][ T812] incfs: mount failed -2 [ 42.337772][ T814] binder: Bad value for 'max' [ 42.343249][ T814] binder: Bad value for 'max' [ 42.360593][ T818] /dev/sr0: Can't lookup blockdev [ 42.416812][ T316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.426983][ T316] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.436631][ T316] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 42.445796][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 42.453811][ T316] usb 1-1: SerialNumber: syz [ 42.615729][ T64] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 42.660536][ T791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 42.670096][ T791] 9pnet_fd: Insufficient options for proto=fd [ 42.679605][ T316] usb 1-1: 0:2 : does not exist [ 42.684568][ T316] usb 1-1: unit 5 not found! [ 42.696843][ T316] usb 1-1: USB disconnect, device number 8 [ 42.724157][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.774728][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.795713][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.805506][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.819126][ T64] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.833593][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.848779][ T64] usb 2-1: config 0 descriptor?? [ 42.941743][ T844] 9pnet_fd: Insufficient options for proto=fd [ 43.060008][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.067618][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.075021][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.082516][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 43.090062][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.097595][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.105045][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.112669][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.120121][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.127570][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.135013][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.142448][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.149871][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.157319][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.164721][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.174248][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.182285][ T64] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 43.192507][ T64] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 43.218173][ T848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 43.256870][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.267626][ T820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=820 comm=syz.1.147 [ 43.280127][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.290031][ T64] usb 2-1: USB disconnect, device number 9 [ 43.300432][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.309594][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.317680][ T10] usb 4-1: SerialNumber: syz [ 43.527393][ T10] usb 4-1: 0:2 : does not exist [ 43.534752][ T10] usb 4-1: USB disconnect, device number 8 [ 43.547451][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.566126][ T315] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 43.607847][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 43.607865][ T36] audit: type=1400 audit(2000000001.590:259): avc: denied { ioctl } for pid=855 comm="syz.2.160" path="socket:[7645]" dev="sockfs" ino=7645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.707480][ T36] audit: type=1400 audit(2000000001.690:260): avc: denied { watch watch_reads } for pid=871 comm="syz.2.165" path="/54" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.730081][ T315] usb 1-1: Using ep0 maxpacket: 8 [ 43.736949][ T315] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 43.746053][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.754722][ T315] usb 1-1: config 0 descriptor?? [ 43.966321][ T315] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 43.976319][ T315] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 43.986897][ T315] asix 1-1:0.0: probe with driver asix failed with error -71 [ 43.996507][ T315] usb 1-1: USB disconnect, device number 9 [ 44.019627][ T36] audit: type=1400 audit(2000000002.000:261): avc: denied { remount } for pid=882 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.056969][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 44.093489][ T894] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 44.100925][ T894] rust_binder: Write failure EINVAL in pid:83 [ 44.101201][ T36] audit: type=1400 audit(2000000002.090:262): avc: denied { write } for pid=895 comm="syz.3.174" path="socket:[7700]" dev="sockfs" ino=7700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.110790][ T894] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 44.110790][ T894] null pointer dereference occurred [ 44.143326][ T894] ------------[ cut here ]------------ [ 44.148862][ T894] kernel BUG at rust/helpers/bug.c:7! [ 44.149031][ T36] audit: type=1400 audit(2000000002.090:263): avc: denied { read write } for pid=893 comm="syz.0.173" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.161977][ T894] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 44.178598][ T36] audit: type=1400 audit(2000000002.090:264): avc: denied { open } for pid=893 comm="syz.0.173" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.184773][ T894] CPU: 1 UID: 0 PID: 894 Comm: syz.0.173 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 44.208421][ T36] audit: type=1400 audit(2000000002.140:265): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 44.221489][ T894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.221512][ T894] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 44.221554][ T894] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 53 68 f6 ae 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 19 ac bf 22 90 90 90 90 90 90 90 90 90 [ 44.221574][ T894] RSP: 0018:ffffc9000f28f1b0 EFLAGS: 00010246 [ 44.243713][ T36] audit: type=1400 audit(2000000002.140:266): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.253334][ T894] [ 44.253356][ T894] RAX: 000000000000005a RBX: 1ffff92001e51e38 RCX: 1c11f4066932b200 [ 44.259121][ T36] audit: type=1400 audit(2000000002.140:267): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.278254][ T894] RDX: ffffc900015f1000 RSI: 000000000003dc41 RDI: 000000000003dc42 [ 44.278276][ T894] RBP: ffffc9000f28f1b0 R08: ffffc9000f28eea7 R09: 1ffff92001e51dd4 [ 44.278294][ T894] R10: dffffc0000000000 R11: fffff52001e51dd5 R12: 0000000000000000 [ 44.278312][ T894] R13: dffffc0000000000 R14: ffffc9000f28f1e0 R15: ffffc9000f28f210 [ 44.278330][ T894] FS: 00007fa6c32aa6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 44.284592][ T36] audit: type=1400 audit(2000000002.140:268): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.305651][ T894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.305671][ T894] CR2: 00007fa6c3287f98 CR3: 000000010c78e000 CR4: 00000000003526b0 [ 44.305692][ T894] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.305708][ T894] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.338474][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.345172][ T894] Call Trace: [ 44.345184][ T894] [ 44.345195][ T894] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 44.353439][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.361162][ T894] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 44.361204][ T894] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 44.369824][ T10] usb 2-1: Product: syz [ 44.378113][ T894] ? p9pdu_vwritef+0x2720/0x2720 [ 44.378157][ T894] ? radix_tree_node_alloc+0x1af/0x400 [ 44.399206][ T10] usb 2-1: Manufacturer: syz [ 44.405247][ T894] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 44.413751][ T10] usb 2-1: SerialNumber: syz [ 44.421240][ T894] ? __asan_memcpy+0x5a/0x80 [ 44.421278][ T894] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 44.525943][ T894] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 44.534732][ T894] ? p9pdu_writef+0xdb/0x130 [ 44.539359][ T894] ? p9pdu_vwritef+0x2720/0x2720 [ 44.544311][ T894] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 44.553532][ T894] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 44.562414][ T894] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 44.570237][ T894] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 44.577892][ T894] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 44.583800][ T894] ? p9_client_prepare_req+0x732/0xa10 [ 44.589279][ T894] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 44.597543][ T894] ? __kasan_check_write+0x18/0x20 [ 44.602680][ T894] ? _raw_spin_lock+0x8c/0x120 [ 44.607476][ T894] ? __cfi__raw_spin_lock+0x10/0x10 [ 44.612688][ T894] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 44.618583][ T894] ? mon_bin_poll+0x122/0x170 [ 44.623268][ T894] ? p9_fd_request+0x374/0x500 [ 44.628034][ T894] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 44.636286][ T894] p9_fd_request+0x440/0x500 [ 44.641142][ T894] p9_client_rpc+0x2f9/0xb40 [ 44.645747][ T894] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 44.654008][ T894] ? p9_fid_create+0x3d0/0x3d0 [ 44.658783][ T894] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 44.667038][ T894] ? p9_conn_create+0x4c9/0x570 [ 44.671899][ T894] ? p9_fd_create+0x2f3/0x4c0 [ 44.676612][ T894] p9_client_create+0x96a/0x1190 [ 44.681561][ T894] ? __cfi_p9_client_create+0x10/0x10 [ 44.686942][ T894] ? kasan_save_alloc_info+0x40/0x50 [ 44.692244][ T894] ? __kasan_kmalloc+0x96/0xb0 [ 44.697029][ T894] ? kstrdup+0x7b/0x140 [ 44.701192][ T894] ? __kasan_check_write+0x18/0x20 [ 44.706315][ T894] v9fs_session_init+0x1e1/0x1820 [ 44.711346][ T894] ? __cfi_v9fs_session_init+0x10/0x10 [ 44.716814][ T894] ? kasan_save_alloc_info+0x40/0x50 [ 44.722109][ T894] ? __kasan_kmalloc+0x96/0xb0 [ 44.726884][ T894] ? v9fs_mount+0xbd/0xa00 [ 44.731315][ T894] v9fs_mount+0xd7/0xa00 [ 44.735571][ T894] ? __cfi_v9fs_mount+0x10/0x10 [ 44.740465][ T894] ? selinux_capable+0x38/0x50 [ 44.745239][ T894] legacy_get_tree+0x106/0x1b0 [ 44.750004][ T894] ? __cfi_v9fs_mount+0x10/0x10 [ 44.754864][ T894] vfs_get_tree+0x9e/0x290 [ 44.759286][ T894] do_new_mount+0x251/0xb40 [ 44.763802][ T894] ? security_capable+0xcf/0xf0 [ 44.768668][ T894] path_mount+0x688/0x1050 [ 44.773104][ T894] ? putname+0x113/0x150 [ 44.777358][ T894] __se_sys_mount+0x2bd/0x480 [ 44.782041][ T894] ? __x64_sys_mount+0xf0/0xf0 [ 44.786819][ T894] ? __kasan_check_write+0x18/0x20 [ 44.791940][ T894] ? fpregs_restore_userregs+0x11d/0x260 [ 44.797593][ T894] __x64_sys_mount+0xc3/0xf0 [ 44.802195][ T894] x64_sys_call+0x2021/0x2ee0 [ 44.806882][ T894] do_syscall_64+0x58/0xf0 [ 44.811297][ T894] ? clear_bhb_loop+0x50/0xa0 [ 44.815981][ T894] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.821882][ T894] RIP: 0033:0x7fa6c238e929 [ 44.826334][ T894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.846036][ T894] RSP: 002b:00007fa6c32aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.854471][ T894] RAX: ffffffffffffffda RBX: 00007fa6c25b5fa0 RCX: 00007fa6c238e929 [ 44.862453][ T894] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 0000000000000000 [ 44.870430][ T894] RBP: 00007fa6c2410b39 R08: 0000200000000040 R09: 0000000000000000 [ 44.878408][ T894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.886381][ T894] R13: 0000000000000000 R14: 00007fa6c25b5fa0 R15: 00007ffd57f75c58 [ 44.894371][ T894] [ 44.897398][ T894] Modules linked in: [ 44.902252][ T894] ---[ end trace 0000000000000000 ]--- [ 44.908979][ T894] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 44.914318][ T894] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 53 68 f6 ae 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 19 ac bf 22 90 90 90 90 90 90 90 90 90 [ 44.934062][ T894] RSP: 0018:ffffc9000f28f1b0 EFLAGS: 00010246 [ 44.940257][ T894] RAX: 000000000000005a RBX: 1ffff92001e51e38 RCX: 1c11f4066932b200 [ 44.948371][ T894] RDX: ffffc900015f1000 RSI: 000000000003dc41 RDI: 000000000003dc42 [ 44.956515][ T894] RBP: ffffc9000f28f1b0 R08: ffffc9000f28eea7 R09: 1ffff92001e51dd4 [ 44.964536][ T894] R10: dffffc0000000000 R11: fffff52001e51dd5 R12: 0000000000000000 [ 44.972600][ T894] R13: dffffc0000000000 R14: ffffc9000f28f1e0 R15: ffffc9000f28f210 [ 44.980670][ T894] FS: 00007fa6c32aa6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 44.990243][ T894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.997110][ T894] CR2: 000000110c33ea44 CR3: 000000010c78e000 CR4: 00000000003526b0 [ 45.005192][ T894] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.013256][ T894] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.021299][ T894] Kernel panic - not syncing: Fatal exception [ 45.027676][ T894] Kernel Offset: disabled [ 45.032008][ T894] Rebooting in 86400 seconds..