last executing test programs: 5m54.248823918s ago: executing program 3 (id=369): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom1\x00', 0x1802, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x27) bind$can_raw(r0, &(0x7f00000000c0), 0x10) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r2 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x8, 0x4, 0x4, 0x19, 0x6}, {0x5000, 0xeeee6001, 0xd, 0x0, 0x8, 0x5, 0x7d, 0x7, 0x5, 0x3}, {0x4, 0x100000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x0, 0x6, 0x5, 0x81}, {0x6000, 0xffef3000, 0xa, 0x6, 0x4, 0x42, 0xe0, 0x6, 0x8, 0x7, 0xe}, {0x8080000, 0xd000, 0x0, 0x3, 0x1, 0x7, 0xab, 0x7f, 0xf, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0002, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0xf, 0x85, 0x7, 0x5, 0x3d, 0x1, 0x3, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0x0, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x8000000, 0x1001}, {0x10000, 0x7}, 0x80000031, 0x0, 0xdddd1000, 0x2010, 0x7, 0xa001, 0x3000, [0x6800000000000000, 0x7, 0x5e, 0xff]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc7441, 0x0) 5m54.12896309s ago: executing program 0 (id=371): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x100000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 5m54.051671801s ago: executing program 0 (id=373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000080)={0x4, 0xc, 0x90, 0xfffffffffffff1f7, 0x3ff}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) read$FUSE(r5, &(0x7f0000003c40)={0x2020}, 0xfffffdd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000006240)={0x0, 0x0, &(0x7f0000006200)={&(0x7f0000005040)={0x14, 0x1b, 0x1, 0x70bd28, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r9], 0x10) sendfile(r8, r7, 0x0, 0xffffffff) 5m53.971235333s ago: executing program 3 (id=375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x8) socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f2, 0x0, 0x3ff000000}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x30, r6, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 5m53.886815944s ago: executing program 3 (id=378): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x5803a000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x5803a000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x1}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 5m53.828678286s ago: executing program 3 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1400000028001f0321bd7000f600000004003780"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005ec0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r3, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1000, 0x0, 0x0, 0xa, 0xe0, 0x0, 0xc}, 0xfffffffe}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@rand_addr=' \x01\x00', @in6=@loopback, @in=@loopback, 0x3c, 0x0, 0x0, 0x6, 0x8, 0x2}]}]}, 0xa0}}, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6}, 0x10) getrlimit(0xc, &(0x7f0000000140)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) 5m53.780471116s ago: executing program 3 (id=382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000004"]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x0, 0x19}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x1}) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x80000000000fffe, 0x40000001}) syz_usb_control_io$hid(r3, &(0x7f0000000980)={0x24, &(0x7f0000000880)={0x40, 0x1, 0xf, {0xf, 0xd, "504ea1a825ba691c77602a1a73"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f0000000c40)={0x0, 0x22, 0x1b, {[@local=@item_4={0x3, 0x2, 0x8, "c885e236"}, @local=@item_4={0x3, 0x2, 0x5, "6bcd7262"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0xc08488c9f27a08b7, 'rdw\\'}, @local=@item_012={0x1, 0x2, 0x4, "c1"}, @global=@item_4={0x3, 0x1, 0xb, "a2e144ca"}, @global=@item_012={0x0, 0x1, 0xc}, @main=@item_012={0x2, 0x0, 0x8, "68d9"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x44, 0x1, {0x22, 0xe21}}}}, &(0x7f0000000c00)={0x2c, &(0x7f00000009c0)={0x40, 0x5, 0xb0, "d97c96577a7d50c28d5eb73622419c23472b9e81614ba0c244b394581b34259f0138e68fc4e203582cf43a7342b52b26af69a03b2adf677899119f8808ed7e593ec3779c0e70f87aa84350d6ab9a3f2336c6d30b5c976e8bd9a69afc241d530d7e7d4d76d74984aef186d23848f512a2c0c90949947099e4e80fb20e3f2989a1c28115bb817988dece216273775a49929eabca612e957c366ff69b37b8f21131b342d29aefe0ec23971355e316e1c737"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x27}, &(0x7f0000000b00)={0x20, 0x1, 0xb7, "5dead6f4b131bc4716b9ac64a6f227efac840fe61eb95504797aaa087dee1681cace3ff0b2c639522b44c92b6dc4373b5850f017771a1f791a07262f88e40817a99155616346af20c907edb09b355e1b883f98319703ef275dbf9282ea5d8ac4dfd17a17f7138210fc83e6c0c5993cbd174325e76d70f112a91eedd178e355c8a7603d854e05b08e7e371c3ce7f53bea0046102af544f18cf85c9d00779c50b3e8b3d92e6c50ff97ebb08da9a56585ff28eac64bd5f949"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x6}}) fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, &(0x7f0000000600)="660fc732baa100ec0f015e0f66b9400a000066b800a0000066ba000000000f30f081091300440f20c066350f000000440f22c00f07baa00066ed66b9b90a000066b80900000066ba000000000f3066b96d09000066b80000000066ba000000800f30", 0x62}], 0x1, 0x0, &(0x7f0000000880), 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "4321ae2a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)={0x20, 0x21, 0x5a, {0x5a, 0x23, "79e27d79fae3caca812586c524d6d2ab90f23faf340b8502cac4a698480f1bbfdebf3996ea29dd781ffefb3def53e8ef6f1cdb3e27c8e8f5b608ac1a630fe92da744e8ee398251a11d9e9c78089846c1be2d612fb4440d09"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, &(0x7f0000000140)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x8, "2584cad7"}, @global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x6, 0x1, {0x22, 0x844}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x20, 0x11, 0x39, "05a6426689607a41fbf22bb835e15ac572e1a37fd6f5cabbe92c15fe39c6f3cce7b7cb695d4293e9e096bcd1f3da661c37ac43cd442268c483"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000002c0)={0x20, 0x1, 0x7, "1c5d065a20b897"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0xfd}}) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "fafd"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab7c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) 5m53.694656378s ago: executing program 0 (id=384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/2, 0x2, 0x1, 0x1c}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x50, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000640)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8ab8148a0e021b5cf4690a761ba22fd7fca4f6c2d"}) 5m53.59134218s ago: executing program 3 (id=386): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) r3 = syz_pidfd_open(0x0, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r5 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) r7 = syz_open_procfs(r6, &(0x7f0000000100)='net/sco\x00') pread64(r7, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) setsockopt$inet6_int(r8, 0x29, 0x12, &(0x7f0000000000)=0x6, 0x4) 5m53.530609702s ago: executing program 32 (id=386): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) r3 = syz_pidfd_open(0x0, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r5 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) r7 = syz_open_procfs(r6, &(0x7f0000000100)='net/sco\x00') pread64(r7, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) setsockopt$inet6_int(r8, 0x29, 0x12, &(0x7f0000000000)=0x6, 0x4) 5m52.854954504s ago: executing program 0 (id=394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r1, 0xffffffffffffffff) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x3000001, 0x28011, r2, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xbf0e, 0x3}}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000340)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat$null(r5, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r6, 0x0, 0x20, &(0x7f0000000880)="66be8f037545cda1011298f0", 0xc) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) ioctl$KVM_GET_NR_MMU_PAGES(r7, 0xae45, 0x8001) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2, 0x0) r8 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r8, 0x4c00, 0x3) syz_clone(0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 5m52.845849315s ago: executing program 0 (id=395): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x50, 0xff, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x7, 0x1, 0x3, 0xda, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x8, 0x6}}}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x7, 0x1, 0xfd, 0x10, 0x2a}, 0x36, &(0x7f00000000c0)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x3, 0x4, 0x9, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "7a7131d23445ef672adf7701836a490c"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x9, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x1, 0x3, 0x10, 0x1}]}, 0x2, [{0xe9, &(0x7f0000000180)=@string={0xe9, 0x3, "0b5c48269a4872ac02a185c5a0c4809cffa8f255059b63de595242c3250f6a30577a20914e052ab584dbd0390943fbb2ed502d59937a9362e12615183a95ecd74fe12be6696b5a945a1087592462206f11611f8f4d98031778d315b4f3b04b9a01aa331d7a26c45c3241437f6a452a408a4023a475b287f7d8162b8787e07519caa269da8ce42093b47562782d1e34c941559a72c89499bae7c34aa5368fd53622000dd8bbcef97f88e01c3295422ec4a562cc5d8d61ccafb6e749d90064cfdbed3cd33a221c94563fd549647d7b468fdc1dd1289035e343b48f62bf8d3a3bbb846fecb2e5605f"}}, {0x7f, &(0x7f0000000280)=@string={0x7f, 0x3, "da2c726eb00ef939db96c5845942bccae061d32a2a417b2bf627d8604d99336d874296b49b6908f3993a93c8b6f852f1d637d18e1203d2177038a1b7f741ae93456a906f6532c4ef81cf83f78b162c319c4223cc7031cc6c83cadb8b2dbc73225cc7fbfc562c42064527868d4fd963197b0bac05c42aad70ed03a299fe"}}]}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 5m52.780431556s ago: executing program 0 (id=396): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r0, 0x0, 0x0) write$selinux_context(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @local}}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m52.715504727s ago: executing program 33 (id=396): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r0, 0x0, 0x0) write$selinux_context(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @local}}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m51.01198984s ago: executing program 1 (id=426): r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000), 0x88000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="66bd3d830e02744962d52a4c5243c7603d95cc4e6b5f301e8a873126d30e3fd241926cb0845f124bd145190b472259093843c6225147fd372d693f03ed589e1ead83b8b515e9f6693cf75030ee5fae1752d40ba9e427dd11c84e87471750786477ec530d93fb38ec5b92e02835abbc1b34ef611130ce4264e3e7733ed1089e9696ae29a6ddc7c4cf9e459db167e0ed48", @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x4f, 0x29, 0x1, {0xfffff000, [{{0x1, 0x3, 0x5}, 0xe7a0, 0x81, 0x7, './file0'}, {{0x0, 0x2, 0x7}, 0x9, 0x8, 0xd, './file0/file0'}]}}, 0xa8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="3e0f340f005a00f20f58bd00300f38079d62e30fbe250125010c66b8d277288c66efbafc0cb83e00eff20f0866b8010000000f01c1baf80c66b8380d708466efbafc0c66b80048000066efdc2c", 0x4d}], 0x1, 0x64, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0x0, 0x107000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = open(&(0x7f0000000380)='./file0\x00', 0x20040, 0x1c1) finit_module(r7, 0x0, 0x0) write$FUSE_LSEEK(r7, &(0x7f0000000240)={0x18, 0x0, r2, {0x3}}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x1a3) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5, 0x1008000, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x20, 0x10001}}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x40806685, &(0x7f0000000040)={{0x2, 0x4e21, @multicast2}, {0x1, @broadcast}, 0x8, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x9}}, 'team0\x00'}) 5m50.763055625s ago: executing program 1 (id=427): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r2 = gettid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e24, 0x101, @mcast2, 0x2a3c}, {0xa, 0xfffd, 0xfffffffd, @remote, 0x8000024}, 0xffffffffffffffff, {[0x1, 0x0, 0xfffffffe, 0x10083, 0x0, 0x2, 0x1]}}, 0x5c) tkill(r2, 0x12) r6 = gettid() tkill(r6, 0x15) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x200003, 0x0, 0x2e}, 0x18) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0x3}, 0x6) 5m50.702502217s ago: executing program 1 (id=428): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00000001e00090002000000ffdbdf2505"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) (rerun: 64) 5m50.539171349s ago: executing program 1 (id=430): mount$bpf(0x0, 0x0, 0x0, 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB='u']) prctl$PR_GET_NAME(0x10, &(0x7f0000000cc0)=""/142) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x8c) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ppoll(&(0x7f0000000440)=[{r4, 0x500}], 0x1, &(0x7f0000000480), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x9e, [@rand_addr=0x64010101, @private=0xa010101]}]}}}], 0x20}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f0000000140)={0x0}}, 0x20008000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 5m50.538791449s ago: executing program 1 (id=431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0xc0010117, 0x0, 0x2}, {0x8d9, 0x0, 0x4}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000002002010040"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) 5m50.243059485s ago: executing program 1 (id=433): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000210005022bbd7000fcdbdf2406"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24000010) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="408bca43db6dab43b357cc73396b21342c1eaddb4f94360a9223129f643af2d4b8259b2b49e7da7bbfa2b89c98ceb4c0ae7d5fcf4d46235286bc44dba6c30f87f943d8af3626e8dc4ecce4a3eb0527f9152aab0a6410a2aed9c40071252f79ecee5aafca966846d6a1d6928f65cd33b06f0cbfa471918232b1133ed59c19f4926b713a448a6212d6748ef2903302521d77ca66b388e13cdedf5ebb60e0ce10f2ee06826f2e1a4cfc9402efdc24adfc3a42b5ab3a5b784552f124c2a0560c324128dc98eac2e29144fc979e33b5685f1ea29262c733506665fd4f1f085b58ba1dcdf9d10d14d017c7c8f9a97a56a9"], 0x70}, 0x80) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) setuid(0xee00) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000000)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x1, 0x3, 0x0, 0x400, 0x5}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/157) 5m50.178069846s ago: executing program 34 (id=433): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000210005022bbd7000fcdbdf2406"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24000010) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="408bca43db6dab43b357cc73396b21342c1eaddb4f94360a9223129f643af2d4b8259b2b49e7da7bbfa2b89c98ceb4c0ae7d5fcf4d46235286bc44dba6c30f87f943d8af3626e8dc4ecce4a3eb0527f9152aab0a6410a2aed9c40071252f79ecee5aafca966846d6a1d6928f65cd33b06f0cbfa471918232b1133ed59c19f4926b713a448a6212d6748ef2903302521d77ca66b388e13cdedf5ebb60e0ce10f2ee06826f2e1a4cfc9402efdc24adfc3a42b5ab3a5b784552f124c2a0560c324128dc98eac2e29144fc979e33b5685f1ea29262c733506665fd4f1f085b58ba1dcdf9d10d14d017c7c8f9a97a56a9"], 0x70}, 0x80) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) setuid(0xee00) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000000)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x1, 0x3, 0x0, 0x400, 0x5}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/157) 3m5.2522505s ago: executing program 6 (id=3788): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m5.135168423s ago: executing program 6 (id=3789): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x115, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x115, 0x1}) (async) 3m5.133928492s ago: executing program 6 (id=3790): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) chdir(&(0x7f00000003c0)='./bus\x00') close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0xf4041, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0xb, 0x94, {0x94, 0x1, "30dc67a845618f8bd95d3db1e1134b99db3d6dd2c718b99a7931afc6fbf7d485e10711c6081476e832569880ad745069f4f8fa11adeeca9346be20fc07c0a37ba07ae95388f54b6787832bf6f8124223e1365a70cbf799820f40ad169d50bd620d638159fd6a3c329485177e8ccb5436c2326ac5826ce839d5469611eafc7523ba5c02d36803d397fae93ce3f53c87d0819e"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000000580)={0x0, 0xf, 0xc0, {0x5, 0xf, 0xc0, 0x6, [@generic={0x83, 0x10, 0x1, "1b6d0b78b700f9e48ce7fd086e4ac237295b9ca6a204c72247f5dcb2bc6c2f20e867751d316e7a62f8beb94524ffea34b42a40c6bf06721612ad0aa7e2b8799a50dd0e3cb20ee920464010b63059bfa6b93eff4a9678eb6b79b0246d78db4bd09a81e84a6752932ac631aaf8053fa1160ccca4097212eac372084c753dfe866f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf7, 0xc, 0x8d9}, @generic={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0xffff, 0xf00f, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "9563f9fbdc13a323f3e25196585ae49a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa6, 0x7f, 0x1, 0xfff9, 0x2}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7b, 0x60, 0x5, 0x0, "c9854770"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0x3, 0x6, 0x6, 0x3, 0x81}}}, &(0x7f0000000c40)={0x84, &(0x7f00000007c0)=ANY=[@ANYBLOB="000edf000000694c37f14b14d0255d2d70e25cd16eb19b7608bc101e6487e27575dd2c8fc0bd7d927b3ba140cf55c6f94da85c33de62af09119200ee60cda5f5cdb50d7433305a0e0369f5b8f65aee1daf1616a4c770e64477893a415d755934a77817282772662de4db309e30e83f67aa80d532de4516f31337ba1ff8a2b51b45000ca21cb89adb14a72fd80859eb12d7ed7cf7205833f65322ae72cb6f3f08535822893339a2d722507da1917950de16a588d03f6de6fd9fbfe5f48f84a527b3e5acf9bbc096cb4ecc5d8967f5c7325255d68ebb3a6e5d3bf4a81ebb053ea901cdd7bdc8"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0x0]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x200}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "ace1"}, &(0x7f0000000a00)={0x40, 0xf, 0x2}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, '~r'}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x142}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x1}}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 3m2.130242621s ago: executing program 6 (id=3822): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x143440, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=']') socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000200)="1c0200001a009b8a324b033b3d4610c8d8070000003b9b701f400004", 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd(0x1008c69) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0xb40c0, 0x21) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f0000000000)="f7b80fa148") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="0f7e624b660f127850f80f073e2e0f2175f22ef212979b00660f3880b3000075000f01ca36653e3e640f6245f4", 0x2d}], 0x1, 0xa9, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3m2.039091623s ago: executing program 6 (id=3825): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000002200)=@ethtool_sset_info={0x37, 0x6, 0x102}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, 0x0, 0x1, 0x5, 0xd, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x54}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000001c0)) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r5}) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_delete(r6) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m1.970583324s ago: executing program 6 (id=3828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) futex_waitv(&(0x7f0000002100)=[{0x80000000, &(0x7f0000000140)=0xab0, 0x2}, {0x7fffffffffffffff, &(0x7f0000000180)=0x5, 0x82}, {0xc20, &(0x7f00000001c0)=0x4, 0xa52e29bfaf278cfb}, {0xdd89, &(0x7f0000000200), 0x82}, {0x31, &(0x7f0000000240), 0x2}, {0xffff, &(0x7f0000000280)=0x7, 0x2}, {0x6, &(0x7f00000002c0)=0x7fff, 0x2}, {0x800, &(0x7f0000000300)=0xffffffff7fffffff, 0x2}, {0xa000, &(0x7f0000000340)=0xa, 0x82}, {0x80, &(0x7f0000000380)=0x2, 0x82}, {0x1c, &(0x7f00000003c0)=0x808, 0x82}, {0xa, &(0x7f0000000440)=0x5, 0x82}, {0x1, &(0x7f0000000480)=0x3, 0x2}, {0xfffffffffffffffd, &(0x7f00000004c0)=0xccc3}, {0x400, &(0x7f0000000580)}, {0x6, &(0x7f00000005c0)=0x9c, 0x2}, {0x3, &(0x7f0000000600)=0x4, 0x82}, {0x4, &(0x7f0000000640)=0x4cf, 0x2}, {0x80000000, &(0x7f0000000680)=0x6, 0x2}, {0xffffffffffffffff, &(0x7f00000006c0)=0x8, 0x2}, {0x2, &(0x7f0000000700)=0x3, 0x2}, {0xc, &(0x7f0000000740)=0x7fffffffffffffff, 0x82}, {0x7f, &(0x7f0000000780), 0x2}, {0x0, &(0x7f00000007c0)=0x800000007, 0x82}, {0xffffffffffffff00, &(0x7f0000000800)=0x8, 0x82}, {0x9, &(0x7f0000000840)=0x120000000000, 0x82}, {0x0, &(0x7f0000000880)=0x9f, 0x82}, {0x9, &(0x7f00000008c0)=0xe, 0x2}, {0x8000000000000000, &(0x7f0000000900)=0x81, 0x82}, {0x1, &(0x7f00000020c0)=0x7, 0x80}, {0x2, &(0x7f0000000980)=0x1, 0x2}, {0x400000000000, &(0x7f00000009c0)=0x63b, 0x2}, {0x6, &(0x7f0000000a00)=0x40, 0x82}, {0x4, &(0x7f0000000a40)=0xbca1, 0x2}, {0xc0b, &(0x7f0000000a80)=0xfffffffffffffa77, 0x82}, {0x595416fb, &(0x7f0000000ac0)=0x9, 0x82}, {0x8, &(0x7f0000000b00)=0x6, 0x82}, {0x7ff, &(0x7f0000000b40)=0x7c99, 0x82}, {0x10000, &(0x7f0000000b80)=0x7, 0x82}, {0x869c, &(0x7f0000000bc0)=0x9, 0x2}, {0x7fffffffffffffff, &(0x7f0000000c00)=0x7, 0x2}, {0x9, &(0x7f0000000c40)=0x401, 0x82}, {0xec7, &(0x7f0000000c80)=0x3, 0x82}, {0x4, &(0x7f0000000cc0)=0x1, 0x82}, {0x1, &(0x7f0000000d00)=0x3, 0x82}, {0xff, &(0x7f0000000d40)=0x6}, {0x400000, &(0x7f0000000d80)=0xdb9, 0x82}, {0xfff, &(0x7f0000000dc0), 0x82}, {0x9, &(0x7f0000000e00)=0x9f}, {0xfffffffffffffff9, &(0x7f0000000e40)=0x4, 0x82}, {0x9, &(0x7f0000000e80), 0x2}, {0x8, &(0x7f0000000ec0)=0x6, 0x82}, {0x8, &(0x7f0000000f00)=0xffffffffffffffff, 0x2}, {0x6, &(0x7f0000000f40), 0x82}, {0x100000000, &(0x7f0000000f80)=0x401, 0x2}, {0x7, &(0x7f0000000fc0)=0xa, 0x2}, {0x0, &(0x7f0000001000)=0x4, 0x82}, {0x2, &(0x7f0000001040)=0x8, 0x82}, {0x10000, &(0x7f0000001080)=0x1, 0x2}, {0x7, &(0x7f00000010c0)=0xffffffff, 0x2}, {0x80000000, &(0x7f0000001100)=0x529}, {0x4, &(0x7f0000001140)=0xffffffffffffffff}, {0xffffffff, &(0x7f0000001180)=0x4, 0x82}, {0xcc4, &(0x7f00000011c0)=0x5, 0x82}, {0x0, &(0x7f00000017c0)=0x2, 0x82}, {0xf63, &(0x7f0000001240)=0x7, 0x82}, {0x9, &(0x7f0000001280)=0xc33, 0x2}, {0x2, &(0x7f00000012c0)=0x800000000000, 0x2}, {0x100000000, &(0x7f0000001300)=0x1, 0x82}, {0x7, &(0x7f0000001340)=0x8001, 0x82}, {0x2, &(0x7f0000001380)=0x9, 0x82}, {0xffffffff, &(0x7f00000013c0)=0x3, 0x82}, {0x593, &(0x7f0000001400)=0x6, 0x82}, {0x8, &(0x7f0000001440)=0x6, 0x82}, {0x1eb, &(0x7f0000001480)=0x9, 0x2}, {0x9, &(0x7f00000014c0)=0x80000001, 0x2}, {0x6, &(0x7f0000001500)=0x109, 0x82}, {0x2, &(0x7f0000001540)=0x2000000000000, 0x2}, {0x0, &(0x7f0000001580)=0x200, 0x2}, {0x490, &(0x7f00000015c0)=0xc, 0x2}, {0x5, &(0x7f0000001600)=0x8000000000000001, 0x2}, {0xd, &(0x7f0000001640)=0x7, 0x2}, {0x4, &(0x7f0000001680)=0x9, 0x82}, {0x0, &(0x7f00000016c0)=0x1000, 0x2}, {0x8, &(0x7f0000001700)=0x7fffffffffffffff, 0x2}, {0x5f6c85d, &(0x7f0000001740)=0x1, 0x2}, {0x1ff, &(0x7f0000001780)=0xffffffffb2834b0a, 0x82}], 0x57, 0x0, &(0x7f0000000000), 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8913, &(0x7f0000000940)={'netpci0\x00'}) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8913, &(0x7f0000000940)={'netpci0\x00'}) ptrace$pokeuser(0x6, r4, 0x358, 0x5) (async) ptrace$pokeuser(0x6, r4, 0x358, 0x5) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r5, 0x0, 0x8, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002000), 0x1, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000002040)={'sit0\x00', 0x8}) (async) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000002040)={'sit0\x00', 0x8}) sched_setscheduler(r5, 0x1, &(0x7f0000000040)=0xfffffff7) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3fc) (async) chmod(&(0x7f0000000100)='./file0\x00', 0x3fc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) (async) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x4d, 0x0, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x4d, 0x0, 0x0) writev(r3, &(0x7f00000000c0), 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) fcntl$setpipe(r2, 0x407, 0xffffffff) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r8, &(0x7f0000001200), 0x4001) socket$tipc(0x1e, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r9, 0xc008aec1, &(0x7f0000000400)={0xb, 0x0, [{0xd, 0x78, 0x1, 0x73, 0x68d2}, {0x40000000, 0x273, 0x1, 0xc, 0x6, 0x7c, 0x5}, {0xd, 0x90, 0x0, 0x7ff, 0x2, 0x1}, {0x80000007, 0x4, 0x1, 0x7, 0x4, 0x4, 0x6}, {0x6, 0x1, 0x4, 0x4, 0xd4f, 0xeb, 0x3}, {0xd, 0x8, 0x5, 0xfff, 0x8, 0xfffffe00, 0x60000000}, {0x80000001, 0x3, 0x0, 0x6, 0x9, 0x221, 0x8}, {0x7, 0x7fffffff, 0x0, 0x7, 0x7fffffff, 0x1, 0x2}, {0xd, 0x81, 0x0, 0x30, 0x4, 0xffffffff, 0x5}, {0x80000000, 0x40, 0x4, 0xbe, 0xc8, 0xf, 0x8}, {0x6, 0x9, 0x4, 0x2, 0x4, 0x2, 0x3}]}) 3m1.929831745s ago: executing program 35 (id=3828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) futex_waitv(&(0x7f0000002100)=[{0x80000000, &(0x7f0000000140)=0xab0, 0x2}, {0x7fffffffffffffff, &(0x7f0000000180)=0x5, 0x82}, {0xc20, &(0x7f00000001c0)=0x4, 0xa52e29bfaf278cfb}, {0xdd89, &(0x7f0000000200), 0x82}, {0x31, &(0x7f0000000240), 0x2}, {0xffff, &(0x7f0000000280)=0x7, 0x2}, {0x6, &(0x7f00000002c0)=0x7fff, 0x2}, {0x800, &(0x7f0000000300)=0xffffffff7fffffff, 0x2}, {0xa000, &(0x7f0000000340)=0xa, 0x82}, {0x80, &(0x7f0000000380)=0x2, 0x82}, {0x1c, &(0x7f00000003c0)=0x808, 0x82}, {0xa, &(0x7f0000000440)=0x5, 0x82}, {0x1, &(0x7f0000000480)=0x3, 0x2}, {0xfffffffffffffffd, &(0x7f00000004c0)=0xccc3}, {0x400, &(0x7f0000000580)}, {0x6, &(0x7f00000005c0)=0x9c, 0x2}, {0x3, &(0x7f0000000600)=0x4, 0x82}, {0x4, &(0x7f0000000640)=0x4cf, 0x2}, {0x80000000, &(0x7f0000000680)=0x6, 0x2}, {0xffffffffffffffff, &(0x7f00000006c0)=0x8, 0x2}, {0x2, &(0x7f0000000700)=0x3, 0x2}, {0xc, &(0x7f0000000740)=0x7fffffffffffffff, 0x82}, {0x7f, &(0x7f0000000780), 0x2}, {0x0, &(0x7f00000007c0)=0x800000007, 0x82}, {0xffffffffffffff00, &(0x7f0000000800)=0x8, 0x82}, {0x9, &(0x7f0000000840)=0x120000000000, 0x82}, {0x0, &(0x7f0000000880)=0x9f, 0x82}, {0x9, &(0x7f00000008c0)=0xe, 0x2}, {0x8000000000000000, &(0x7f0000000900)=0x81, 0x82}, {0x1, &(0x7f00000020c0)=0x7, 0x80}, {0x2, &(0x7f0000000980)=0x1, 0x2}, {0x400000000000, &(0x7f00000009c0)=0x63b, 0x2}, {0x6, &(0x7f0000000a00)=0x40, 0x82}, {0x4, &(0x7f0000000a40)=0xbca1, 0x2}, {0xc0b, &(0x7f0000000a80)=0xfffffffffffffa77, 0x82}, {0x595416fb, &(0x7f0000000ac0)=0x9, 0x82}, {0x8, &(0x7f0000000b00)=0x6, 0x82}, {0x7ff, &(0x7f0000000b40)=0x7c99, 0x82}, {0x10000, &(0x7f0000000b80)=0x7, 0x82}, {0x869c, &(0x7f0000000bc0)=0x9, 0x2}, {0x7fffffffffffffff, &(0x7f0000000c00)=0x7, 0x2}, {0x9, &(0x7f0000000c40)=0x401, 0x82}, {0xec7, &(0x7f0000000c80)=0x3, 0x82}, {0x4, &(0x7f0000000cc0)=0x1, 0x82}, {0x1, &(0x7f0000000d00)=0x3, 0x82}, {0xff, &(0x7f0000000d40)=0x6}, {0x400000, &(0x7f0000000d80)=0xdb9, 0x82}, {0xfff, &(0x7f0000000dc0), 0x82}, {0x9, &(0x7f0000000e00)=0x9f}, {0xfffffffffffffff9, &(0x7f0000000e40)=0x4, 0x82}, {0x9, &(0x7f0000000e80), 0x2}, {0x8, &(0x7f0000000ec0)=0x6, 0x82}, {0x8, &(0x7f0000000f00)=0xffffffffffffffff, 0x2}, {0x6, &(0x7f0000000f40), 0x82}, {0x100000000, &(0x7f0000000f80)=0x401, 0x2}, {0x7, &(0x7f0000000fc0)=0xa, 0x2}, {0x0, &(0x7f0000001000)=0x4, 0x82}, {0x2, &(0x7f0000001040)=0x8, 0x82}, {0x10000, &(0x7f0000001080)=0x1, 0x2}, {0x7, &(0x7f00000010c0)=0xffffffff, 0x2}, {0x80000000, &(0x7f0000001100)=0x529}, {0x4, &(0x7f0000001140)=0xffffffffffffffff}, {0xffffffff, &(0x7f0000001180)=0x4, 0x82}, {0xcc4, &(0x7f00000011c0)=0x5, 0x82}, {0x0, &(0x7f00000017c0)=0x2, 0x82}, {0xf63, &(0x7f0000001240)=0x7, 0x82}, {0x9, &(0x7f0000001280)=0xc33, 0x2}, {0x2, &(0x7f00000012c0)=0x800000000000, 0x2}, {0x100000000, &(0x7f0000001300)=0x1, 0x82}, {0x7, &(0x7f0000001340)=0x8001, 0x82}, {0x2, &(0x7f0000001380)=0x9, 0x82}, {0xffffffff, &(0x7f00000013c0)=0x3, 0x82}, {0x593, &(0x7f0000001400)=0x6, 0x82}, {0x8, &(0x7f0000001440)=0x6, 0x82}, {0x1eb, &(0x7f0000001480)=0x9, 0x2}, {0x9, &(0x7f00000014c0)=0x80000001, 0x2}, {0x6, &(0x7f0000001500)=0x109, 0x82}, {0x2, &(0x7f0000001540)=0x2000000000000, 0x2}, {0x0, &(0x7f0000001580)=0x200, 0x2}, {0x490, &(0x7f00000015c0)=0xc, 0x2}, {0x5, &(0x7f0000001600)=0x8000000000000001, 0x2}, {0xd, &(0x7f0000001640)=0x7, 0x2}, {0x4, &(0x7f0000001680)=0x9, 0x82}, {0x0, &(0x7f00000016c0)=0x1000, 0x2}, {0x8, &(0x7f0000001700)=0x7fffffffffffffff, 0x2}, {0x5f6c85d, &(0x7f0000001740)=0x1, 0x2}, {0x1ff, &(0x7f0000001780)=0xffffffffb2834b0a, 0x82}], 0x57, 0x0, &(0x7f0000000000), 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8913, &(0x7f0000000940)={'netpci0\x00'}) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8913, &(0x7f0000000940)={'netpci0\x00'}) ptrace$pokeuser(0x6, r4, 0x358, 0x5) (async) ptrace$pokeuser(0x6, r4, 0x358, 0x5) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r5, 0x0, 0x8, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002000), 0x1, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000002040)={'sit0\x00', 0x8}) (async) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000002040)={'sit0\x00', 0x8}) sched_setscheduler(r5, 0x1, &(0x7f0000000040)=0xfffffff7) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3fc) (async) chmod(&(0x7f0000000100)='./file0\x00', 0x3fc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) (async) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x4d, 0x0, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x4d, 0x0, 0x0) writev(r3, &(0x7f00000000c0), 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) fcntl$setpipe(r2, 0x407, 0xffffffff) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r8, &(0x7f0000001200), 0x4001) socket$tipc(0x1e, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r9, 0xc008aec1, &(0x7f0000000400)={0xb, 0x0, [{0xd, 0x78, 0x1, 0x73, 0x68d2}, {0x40000000, 0x273, 0x1, 0xc, 0x6, 0x7c, 0x5}, {0xd, 0x90, 0x0, 0x7ff, 0x2, 0x1}, {0x80000007, 0x4, 0x1, 0x7, 0x4, 0x4, 0x6}, {0x6, 0x1, 0x4, 0x4, 0xd4f, 0xeb, 0x3}, {0xd, 0x8, 0x5, 0xfff, 0x8, 0xfffffe00, 0x60000000}, {0x80000001, 0x3, 0x0, 0x6, 0x9, 0x221, 0x8}, {0x7, 0x7fffffff, 0x0, 0x7, 0x7fffffff, 0x1, 0x2}, {0xd, 0x81, 0x0, 0x30, 0x4, 0xffffffff, 0x5}, {0x80000000, 0x40, 0x4, 0xbe, 0xc8, 0xf, 0x8}, {0x6, 0x9, 0x4, 0x2, 0x4, 0x2, 0x3}]}) 22.470385882s ago: executing program 2 (id=5668): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket(0xa, 0x3, 0x3a) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000001c0)={@empty, @loopback}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x22, 0x0, 0x8, {'/dev/loop-control\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$FUSE(r6, &(0x7f0000003800)={0x2020}, 0x2020) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f00000000c0)=0xb38, 0x4) recvfrom$inet(r5, 0x0, 0x0, 0x10140, 0x0, 0x5a) (async) listen(r0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) (async) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0x8008770b, 0x2) 22.270065086s ago: executing program 2 (id=5680): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @empty, 0xfffffe01}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @empty, 0xfffffe01}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x11) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x11) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010100000000106b1d010140000102030109028f0003"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 21.324746694s ago: executing program 2 (id=5705): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e09000000d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x8, 0x0, 0x9e, 0x2, 0xa0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}]}, 0x50}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e09000000d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x8, 0x0, 0x9e, 0x2, 0xa0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}]}, 0x50}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close(r0) (async) 21.119729868s ago: executing program 2 (id=5711): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x248800, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1cd, 0xfffffff9}}, 0x30) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.119368418s ago: executing program 2 (id=5712): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000240)=0x1) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x58100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000100)={[0xd44, 0x1000009, 0xffffeffffffffffb, 0x10000000, 0x10000, 0x3, 0x4002004c1, 0xa, 0x9, 0x0, 0x1, 0x0, 0x401, 0x0, 0x9, 0x10000008d], 0xddcd0000, 0x100000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd9000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000280)=""/67) sendto$inet6(r2, &(0x7f0000000100)="94783a9afe415d879da6ee5dbc3c9029a11483f083ffe45ac595259eea07429811b89d0fb39def56d76d8fdc5f7f99dae9180ec585bab4d1c083c0b30756ec2a1f18a195f541629f5bc2a3a3c75041b28f78cc9209adb97e0ba6a181b3ee32499104457c913e54f3f160c0f2d21524c41848f6d4e7", 0x75, 0x20000009, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @empty, 0x7ff}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4001, 0x0, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) accept(r9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.117236198s ago: executing program 2 (id=5715): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x10b900) (rerun: 64) read$usbmon(r1, &(0x7f0000000140)=""/112, 0x70) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x23, 0x30}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000009, 0x11, r3, 0x180000000) (async, rerun: 32) accept4$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name, &(0x7f0000000280)=0x10, 0x800) (async, rerun: 32) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3) (async, rerun: 32) ioctl$TCFLSH(r9, 0x540b, 0x0) (async, rerun: 32) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r10, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 9.183029371s ago: executing program 5 (id=5750): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc2241, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x4) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0xffff0001) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) (async, rerun: 32) r2 = syz_open_pts(r0, 0x20800) dup3(r2, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b) close(r4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x1, 0x20, 0x8, 0x2, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @remote, {[@end]}}}}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="6ec9541ee50e79e699e954ddb2fee81904c812c4354b6c04ef519deb4714d9baa76926777e8ab18359d91b2e1703c1ab5ae3a5d4e2bbbbbb3f2d6f8c8d21c782e3ece6683c3bab356142627a6363db9f85236f2ce66a0dff3486dab169b006796fdb6ed65f3cbae5f3ce158300a39ea7c923d7a9a4c5ba48221250a74bc094f0b38c4285d4f59c4eb15f570c24041898f0e0c7e8fa127e944d108a63fa715b475b157143382dfac725e7116ca2913ecb4df8ff35bd31297e4ba2a2fdc61624d2090b4fbb6045ce82731697803acc10b64d402a8b58d4e3b7ab3226f5ed4caa4c8739c6306f45ab47892dd7165b6c817ffb0ce92dda74a8", 0xf7}, {&(0x7f00000002c0)="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", 0xfe}, {&(0x7f0000000440)="1be03dacf38f49bd051de3a51398c0de952715aa33d0485b23c8f3d2b88710d642ffcfd43b8ca99e30c45c13d1036408e98fda64f836f1c577adb2a882a12a0e2fc66fbe591b9431fa9bae060fdcc25918ea500df2cec2206a622d7d48dfb7cb95894b9aa9ff2e5efecb19089ad227b0d50c5399275f3fccfa1d7bebfa1116579c75a94cd5fd15022dd8e607768575ee3c4fc5a1fa942231ac311b8f831d763609661126a7988874ad9e2e1feb10529b7a637c31d88ae90319f3d0f7fc5018bc237f2c36c59240f184fbd3a2", 0xcc}], 0x3, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x70}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 9.182524551s ago: executing program 7 (id=5751): syz_usb_connect(0x5, 0x61, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x62, 0x7e, 0xdf, 0x20, 0x4971, 0x1012, 0x3682, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x3, 0x7, 0x7, 0x80, 0x1, [{{0x9, 0x4, 0x67, 0x9, 0x1, 0x7f, 0xc7, 0x11, 0x3, [], [{{0x9, 0x5, 0x1, 0x4, 0x10, 0x14, 0x0, 0x9f, [@generic={0x8, 0xb, "1480c30454e8"}]}}]}}, {{0x9, 0x4, 0x3, 0x1, 0x1, 0x68, 0x15, 0xed, 0x32, [], [{{0x9, 0x5, 0x8, 0x4, 0x200, 0x5, 0x5, 0x95}}]}}, {{0x9, 0x4, 0x86, 0xff, 0x1, 0xfb, 0x77, 0x69, 0xb, [], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0xee, 0x2, 0xfe, [@generic={0x8, 0xb, "43a85bd24567"}]}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x4014, 0x0, 0x0) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 9.181432371s ago: executing program 4 (id=5752): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000080)) r5 = syz_open_pts(r4, 0x2000) dup3(r5, r4, 0x80000) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r3]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14008415ea0949fbd87894a6cb00020303000000"], 0x14}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f4b9e0000f30f1efef3900f21da0f527d55660f3880667b360fc5f700f390ba410066b89625000066ef0f00d1", 0x2d}], 0x1, 0x10, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x440, &(0x7f00000001c0)={[{@lowerdir, 0x3a}], [], 0x2f}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r6}, @flat=@weak_binder={0x77622a85, 0x29bdfb4895f82e9a, 0x1}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 7.567075103s ago: executing program 5 (id=5753): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 7.565173303s ago: executing program 7 (id=5754): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) unshare(0x62040200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYBLOB='\n'], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000140)=0x277, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.564297703s ago: executing program 4 (id=5755): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x19) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffd000/0x3000)=nil) read$eventfd(r0, &(0x7f0000000080), 0x8) 5.816041506s ago: executing program 5 (id=5756): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0x1040ffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000023, &(0x7f0000000540)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.812992366s ago: executing program 7 (id=5757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) 5.771120678s ago: executing program 4 (id=5758): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='setgroups\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x81, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = epoll_create(0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000000004800b0020007b26282f283a0000"], 0x2c}}, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x32) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x4508) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x0, r6}) r7 = gettid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x82) fchdir(r10) symlink(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00') kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000100)=[{0x48, 0x40, 0x0, 0xffffffff}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r11, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044888) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 3.982159752s ago: executing program 5 (id=5759): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000002600)=[@uexit={0x0, 0x18, 0x797}, @wrmsr={0x1e, 0x20, {0x40, 0x4}}, @wr_crn={0x46, 0x20, {0x4}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x100000000}, @rdmsr={0x32, 0x18, {0x2da}}, @cpuid={0x14, 0x18, {0x3, 0x5}}, @uexit={0x0, 0x18, 0xb}, @rdmsr={0x32, 0x18, {0x9f6}}, @wr_crn={0x46, 0x20, {0x4, 0xfebe}}, @code={0xa, 0x75, {"0fc7310f322646c2060066baf80cb88c37918fef66bafc0cb8b8000000ef48b8b3560000000000000f23d80f21f835000000c00f23f8450f01f8c74424005ec20000c744240229110000c7442406000000000f01142443dfea66b81a000f00d8670f01c5"}}, @cpuid={0x14, 0x18, {0x2, 0x81}}, @rdmsr={0x32, 0x18, {0x33d}}, @code={0xa, 0x60, {"2e2e0fc73e66ba400066ed66baf80cb89e983481ef66bafc0c66b8000066ef0fc718c4a205977f01660fc7355b6d00000f01f8b9800000c00f3235004000000f30450f01cf66bad004b81c000000ef"}}, @wrmsr={0x1e, 0x20, {0x91a, 0x8}}, @uexit={0x0, 0x18, 0x1c0000000}, @code={0xa, 0x76, {"c42198c6ad008000000066400f08c744240094000000c744240200000000c7442406000000000f011c24663e66450f0966ba4100ed0f7899008000002e660f38829465108000000f20c035000004000f22c0b805000000b9370e959e0f01c166b891008ee8"}}, @cpuid={0x14, 0x18, {0x1, 0xfff}}, @rdmsr={0x32, 0x18, {0x4000009c}}, @wrmsr={0x1e, 0x20, {0x234, 0x8}}, @wr_crn={0x46, 0x20, {0x2, 0xfffffffffffffffa}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x9}, @rdmsr={0x32, 0x18, {0xb79}}, @cpuid={0x14, 0x18, {0x4, 0x400}}], 0x38b}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000003c0)=0x5) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x6c, 0x0, &(0x7f0000000400)=[@decrefs, @acquire, @clear_death, @increfs={0x40046304, 0x40}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/215, 0xd7, 0x0, 0x7}, @flat=@weak_handle={0x77682a85, 0x1000, 0xffffffff}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 3.978766662s ago: executing program 7 (id=5760): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x240040c4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000140)={0x1, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x0, 0x86004, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x335, r3}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x0, 0x86004, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x335, r3}) fcntl$getownex(r3, 0x10, &(0x7f0000000240)) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000240)={0x0, 0x0}) sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0xfff) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0xfff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x8, 0x7, 0xa6, 0x3}, {0x4, 0x9, 0x4}, {0x8, 0x7, 0x6, 0xb30}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f00000003c0)={r7, 0x3, r5, 0x5, 0x80000}) quotactl_fd$Q_SYNC(r5, 0xffffffff80000100, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x8, 0x10, 0xf2c9, 0x73, {{0x9, 0x4, 0x3, 0xe, 0x24, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x27, [@initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast, @broadcast]}, @end]}}}}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={@empty, @loopback, @empty, 0x0, 0x2, 0x8000, 0x100, 0xfffffffffffffffe, 0x6090080, r8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000540)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x101200, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r9, 0x8004551a, &(0x7f0000000780)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r9, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2400480c}, 0x40004) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r9, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2400480c}, 0x40004) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) geteuid() (async) r11 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000029c0)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000002ac0)=0xe8) statx(r9, &(0x7f0000002b00)='./file0\x00', 0x100, 0x40, &(0x7f0000002b40)) (async) statx(r9, &(0x7f0000002b00)='./file0\x00', 0x100, 0x40, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r9, &(0x7f0000002c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000004c80)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000004d80)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004dc0)={0x0, 0x0}, &(0x7f0000004e00)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000004e40)='./file0\x00', &(0x7f0000004e80), 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000004e40)='./file0\x00', &(0x7f0000004e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) statx(r9, &(0x7f0000004f00)='./file0\x00', 0x6000, 0x2, &(0x7f0000004f40)) (async) statx(r9, &(0x7f0000004f00)='./file0\x00', 0x6000, 0x2, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r9, &(0x7f0000000940)='system.posix_acl_access\x00', &(0x7f0000005040)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1, r10}, {0x2, 0x1, r11}, {0x2, 0x1, r12}, {0x2, 0x1, r13}, {0x2, 0x2, r14}, {0x2, 0x4, r15}, {0x2, 0x4, r16}], {0x4, 0x5}, [{0x8, 0x3, r17}, {0x8, 0x0, r18}, {0x8, 0xe, 0xee00}, {0x8, 0x4, 0xffffffffffffffff}], {0x10, 0x2}}, 0x84, 0x1) 3.977349172s ago: executing program 4 (id=5761): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r3, 0x82081fc) write$cgroup_subtree(r3, &(0x7f0000000200)={[{0x2b, 'pids'}]}, 0x6) write(r2, &(0x7f0000000780)="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", 0xfc) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000340)={0x1, 0x2b8c4b4a859d9b2e, "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"}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'macsec0\x00', {0x7}, 0x682}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r5 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x40084504, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r7, 0x0, 0x87) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) recvmmsg(r8, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) 2.05546234s ago: executing program 5 (id=5762): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x200000, 0x0) 1.990489621s ago: executing program 7 (id=5763): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, 0x0, 0x0, 0x40000200, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000600)={'sit0\x00', 0x0}) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4048004) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000005800018044000400200001000a0000000797cf512d57e396000000000000000000000013f8000000200002000a00000000000000ff020000000000000000000000000000000900000d0001007564703a73"], 0x6c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x194, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x686}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x73}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9, 0x3, "20bffb213b"}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x589a}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000880}, 0x24000894) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES64=r1], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.990182941s ago: executing program 4 (id=5764): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf8, r1, 0x1, 0x5, 0x6, @multicast}, 0x14) r2 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r2, &(0x7f00000000c0)="07a44a786e2b4e076457bf76c57cf6e624fe", 0x12, 0x5, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast2, 0xcd}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808881, 0x0) 4.72354ms ago: executing program 4 (id=5765): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 3.21007ms ago: executing program 5 (id=5770): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) fadvise64(r2, 0x3, 0x0, 0x4) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 0s ago: executing program 7 (id=5766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x2800}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_VMA(0x48, 0x0, &(0x7f0000332000/0x4000)=nil, 0x4000, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) syz_clone3(&(0x7f00000005c0)={0xc2140000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000140)) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8010, r2, 0x10000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) kernel console output (not intermixed with test programs): overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 217.186197][T11832] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 217.329614][T11850] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11850 comm=syz.4.3516 [ 217.361939][T11852] cannot load conntrack support for proto=3 [ 217.545102][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3526'. [ 217.554127][T11879] bridge_slave_1: left allmulticast mode [ 217.559974][T11879] bridge_slave_1: left promiscuous mode [ 217.565663][T11879] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.573287][T11879] bridge_slave_0: left allmulticast mode [ 217.578953][T11879] bridge_slave_0: left promiscuous mode [ 217.584885][T11879] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.634519][T11874] netlink: 'syz.4.3525': attribute type 1 has an invalid length. [ 217.642345][T11874] netlink: 'syz.4.3525': attribute type 2 has an invalid length. [ 217.654892][T11873] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3525'. [ 217.861939][ T337] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 218.013072][ T337] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.021715][ T337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.031969][ T337] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.041378][ T337] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.055346][ T337] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.064979][ T337] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.073049][ T337] usb 3-1: Product: syz [ 218.081910][ T337] usb 3-1: Manufacturer: syz [ 218.103965][ T337] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 218.213990][T11894] rust_binder: inc_ref_done called when no active inc_refs [ 218.306265][T11890] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 218.315555][T11890] rust_binder: Error while translating object. [ 218.331579][T11890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.338666][T11890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:547 [ 218.353257][ T337] usb 3-1: USB disconnect, device number 28 [ 218.381651][T11898] fuse: Unknown parameter '000000000000000000030xffffffffffffffff' [ 218.400035][T11898] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 218.433113][T11902] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 218.441429][T11902] rust_binder: Write failure EINVAL in pid:502 [ 218.506756][ T36] audit: type=1326 audit(2000000037.840:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.4.3539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a7e18eba9 code=0x0 [ 218.922052][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3540'. [ 218.931752][T11919] binder: Bad value for 'max' [ 219.050948][T11929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.050978][T11929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558 [ 219.231985][ T337] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 219.311979][ T9] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 219.357894][T11942] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 219.366270][T11942] rust_binder: Write failure EINVAL in pid:514 [ 219.377459][ T725] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.390332][ T725] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.398748][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.410205][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.420201][ T337] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 219.430165][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.439241][ T337] usb 3-1: config 0 descriptor?? [ 219.463784][ T9] usb 6-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 219.472952][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.481669][ T9] usb 6-1: config 0 descriptor?? [ 219.889229][ T9] smartjoyplus 0003:0925:8866.000C: item fetching failed at offset 5/7 [ 219.897834][ T9] smartjoyplus 0003:0925:8866.000C: parse failed [ 219.904275][ T9] smartjoyplus 0003:0925:8866.000C: probe with driver smartjoyplus failed with error -22 [ 220.091930][ T45] usb 6-1: USB disconnect, device number 28 [ 220.250482][ T337] hid-led 0003:27B8:01ED.000B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 220.266289][ T337] hid-led 0003:27B8:01ED.000B: ThingM blink(1) initialized [ 220.451362][ T337] usb 3-1: USB disconnect, device number 29 [ 220.538750][T11990] overlayfs: failed to resolve './file1': -2 [ 220.616271][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3568'. [ 220.793080][T12002] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.828980][T12006] veth0_virt_wifi: entered allmulticast mode [ 220.835880][T12005] veth0_virt_wifi: left allmulticast mode [ 220.862069][ T1490] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 221.012801][T12024] rust_binder: Write failure EFAULT in pid:567 [ 221.033660][ T1490] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.055632][ T1490] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.066458][ T1490] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.077284][ T1490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.095720][ T1490] usb 6-1: Product: syz [ 221.099940][ T1490] usb 6-1: Manufacturer: syz [ 221.111910][ T1490] usb 6-1: SerialNumber: syz [ 221.286320][ T9] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 221.317500][ T36] audit: type=1400 audit(2000000040.650:812): avc: denied { append } for pid=12048 comm="syz.2.3588" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.343273][ T1490] usb 6-1: cannot find UAC_HEADER [ 221.351266][ T1490] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 221.366052][ T9022] udevd[9022]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.422039][ T1945] Bluetooth: hci0: command 0x1003 tx timeout [ 221.422062][ T1946] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.447369][T12054] netlink: 'syz.6.3590': attribute type 13 has an invalid length. [ 221.467277][T12056] rust_binder: 523: no such ref 1 [ 221.543761][ T1490] usb 6-1: USB disconnect, device number 29 [ 221.867221][T12070] netlink: 'syz.4.3596': attribute type 25 has an invalid length. [ 222.020243][ T36] audit: type=1400 audit(2000000041.350:813): avc: denied { mount } for pid=12087 comm="syz.2.3602" name="/" dev="incremental-fs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 222.020936][T12088] SELinux: security_context_str_to_sid (sytem_) failed with errno=-22 [ 222.058617][ T36] audit: type=1400 audit(2000000041.350:814): avc: denied { remount } for pid=12087 comm="syz.2.3602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 222.088393][T12097] __vm_enough_memory: pid: 12097, comm: syz.5.3605, bytes: 18014402804453376 not enough memory for the allocation [ 222.136829][T12101] netlink: 'syz.5.3607': attribute type 15 has an invalid length. [ 222.147543][ T36] audit: type=1400 audit(2000000041.480:815): avc: denied { unmount } for pid=8903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 222.234940][T12105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.238060][T12108] rust_binder: Error while translating object. [ 222.244770][T12108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 222.251320][T12108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:573 [ 222.773252][T12115] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 222.782746][T12116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.830163][ T36] audit: type=1400 audit(2000000042.160:816): avc: denied { module_load } for pid=12121 comm="syz.2.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 222.977600][T12134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3619'. [ 223.037423][T12141] tipc: Enabling of bearer rejected, failed to enable media [ 223.078941][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3624'. [ 223.088369][T12147] netlink: 'syz.4.3624': attribute type 33 has an invalid length. [ 223.096498][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3624'. [ 223.112850][T12147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=12147 comm=syz.4.3624 [ 223.240435][T12156] rust_binder: Write failure EFAULT in pid:605 [ 223.282517][T12165] overlayfs: failed to clone upperpath [ 223.308011][ T36] audit: type=1326 audit(2000000042.640:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.4.3633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a7e18eba9 code=0x0 [ 223.522497][T12178] rust_binder: Failed copying into alloc: EFAULT [ 223.522517][T12178] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 223.528983][T12178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 223.537340][T12178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:618 [ 223.610254][T12181] tipc: Started in network mode [ 223.624413][T12181] tipc: Node identity 72b63ce46f84, cluster identity 4711 [ 223.631603][T12181] tipc: Enabled bearer , priority 0 [ 223.702794][T12180] tipc: Disabling bearer [ 223.774415][T12183] veth0_vlan: entered allmulticast mode [ 223.793155][T12183] veth0_vlan: left promiscuous mode [ 223.802483][T12183] veth0_vlan: entered promiscuous mode [ 223.845684][T12185] tipc: Enabling of bearer rejected, failed to enable media [ 223.916678][T12194] rust_binder: Error while translating object. [ 223.916710][T12194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 223.922982][T12194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:633 [ 223.981915][ T36] audit: type=1326 audit(2000000043.310:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12148 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416f8eba9 code=0x7fc00000 [ 224.646505][T12222] rust_binder: 593: no such ref 3 [ 224.651583][T12222] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 224.658692][T12222] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 224.665798][T12222] rust_binder: Write failure EFAULT in pid:593 [ 224.674391][T12224] 8021q: VLANs not supported on lo [ 224.690466][T12226] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 224.801945][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 224.971910][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 224.978527][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.987201][ T9] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 224.995536][ T9] usb 3-1: config 0 has no interface number 0 [ 225.001705][ T9] usb 3-1: config 0 interface 93 altsetting 4 endpoint 0xA has invalid maxpacket 1104, setting to 64 [ 225.001921][ T45] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 225.027250][ T9] usb 3-1: config 0 interface 93 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 225.038719][ T9] usb 3-1: config 0 interface 93 has no altsetting 0 [ 225.047469][ T9] usb 3-1: New USB device found, idVendor=3285, idProduct=06b3, bcdDevice=64.3f [ 225.056843][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.065651][ T9] usb 3-1: Product: 跫ï›ï¥€âˆ¼â¥’볛僖ƛ⇿᪖儥먕픜湓㬌◰穣≩羚ԫ欣귤昰᳒꽕ì“꼯ט䧟ό㶋ʠ许姊䕫äœè”ªíŸì‹°á—•ä¾ˆá†¤ë˜œæ¡Ÿé±¹è¤’ï—텟櫦uᶆê‡í–®íƒè„®êº¨à¼‹ã½æŸäƒ£î¾†ê«ç‚»æ²¾î”짨럂ë¶ëˆ£è§´à«›ì–”쇙✋닣弛긞嚰共 [ 225.106284][ T9] usb 3-1: Manufacturer: Р [ 225.111004][ T9] usb 3-1: SerialNumber: ã©à°³ä•‡â‹«í˜ãž‘쉄⋂✄ꧽ㧵ꨪ䂵í”䌎뛨䄬礒墨Ⱦ脷缵䞾쨩⽛ㄒᅔ⛿å›Ñ éžì¦‘ᣀ鄡ç¦æ¹í—¾î‹¦ã«§âˆ²é†¬î©Šë‚¿ä’ˆã˜±â–愫鈜΅눷护é㺃â«ê¹£ [ 225.135366][ T9] usb 3-1: config 0 descriptor?? [ 225.154569][T12252] random: crng reseeded on system resumption [ 225.192957][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.211894][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.231695][ T45] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.240847][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.248981][ T45] usb 6-1: SerialNumber: syz [ 225.388681][ T9] usb 3-1: USB disconnect, device number 31 [ 225.441844][T12269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:547 [ 225.442422][ T36] audit: type=1400 audit(2000000044.770:819): avc: denied { append } for pid=12268 comm="syz.4.3668" name="rnullb0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 225.443378][T12269] rust_binder: Read failure Err(EFAULT) in pid:547 [ 225.468012][ T45] usb 6-1: 0:2 : does not exist [ 225.492692][ T45] usb 6-1: unit 5: unexpected type 0x0a [ 225.503908][ T45] usb 6-1: USB disconnect, device number 30 [ 225.511294][T12275] /dev/rnullb0: Can't lookup blockdev [ 225.523973][ T9022] udevd[9022]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 225.634831][T12289] rust_binder: 558: no such ref 1 [ 225.639947][T12289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:558 [ 225.665035][T12281] netlink: 'syz.4.3673': attribute type 10 has an invalid length. [ 225.719823][T12304] 9pnet_fd: Insufficient options for proto=fd [ 225.737382][T12307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=12307 comm=syz.4.3682 [ 225.814933][T12302] rust_binder: Failed to allocate buffer. len:8815263377109862632, is_oneway:false [ 225.814966][T12302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 225.824539][T12302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:566 [ 225.846504][T12313] vcan0: entered allmulticast mode [ 225.954584][T12324] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 225.954614][T12324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:659 [ 225.993378][T12328] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3484575601 (3484575601 ns) > initial count (1505804471 ns). Using initial count to start timer. [ 226.040609][T12333] fuseblk: Bad value for 'source' [ 226.088799][T12335] SELinux: security_context_str_to_sid () failed with errno=-22 [ 226.251916][ T1490] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 226.355637][ T36] audit: type=1400 audit(2000000045.690:820): avc: denied { getattr } for pid=12357 comm="syz.6.3699" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 226.355933][T12358] overlayfs: statfs failed on './file0' [ 226.403609][ T1490] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 226.412444][ T1490] usb 3-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 226.428513][ T1490] usb 3-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.448035][ T1490] usb 3-1: config 1 interface 0 has no altsetting 0 [ 226.457093][ T1490] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.468218][ T1490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.494512][ T1490] usb 3-1: Product: Ë憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓êŠÝœã„¿â†¦è£ŒèŽ¡ê‰³îµ°å’†çº¥ã‰¸å¾žà®´è®§ê±¿â¨”亓뉭얄슀葋ä¤ë¹—馿㞘톷注栴享◗◧報ꓨèŽè—·â¢žë¥ï¯•ì¢¢ë–¸æž±å˜¯ë–¦æ‘µï¹§ê²¥éˆáœ‡ä¤¬îªŠîŒ¹æ¼³ [ 226.529183][T12381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.529750][ T1490] usb 3-1: SerialNumber: syz [ 226.542281][T12380] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 226.542309][T12380] rust_binder: Error while translating object. [ 226.551053][T12381] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 226.558058][T12381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 226.562061][T12380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.580256][T12381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:581 [ 226.596413][T12380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:581 [ 226.802084][T12407] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 226.818374][T12407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:590 [ 227.012936][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3727'. [ 227.209396][T12456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:638 [ 227.316675][ T1490] cdc_ether 3-1:1.0: skipping garbage [ 227.343572][ T1490] cdc_ether 3-1:1.0: skipping garbage [ 227.353529][ T1490] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 227.380582][ T1490] usb 3-1: USB disconnect, device number 32 [ 227.471910][ T45] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 227.631903][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 227.638098][ T45] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 227.646413][ T45] usb 6-1: config 0 has no interface number 0 [ 227.652666][ T45] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 227.662845][ T45] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 227.674483][ T45] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 227.683602][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.691610][ T45] usb 6-1: Product: syz [ 227.695799][ T45] usb 6-1: Manufacturer: syz [ 227.700405][ T45] usb 6-1: SerialNumber: syz [ 227.705743][ T45] usb 6-1: config 0 descriptor?? [ 227.710991][T12461] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 227.718299][T12461] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 227.926759][T12461] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 227.934061][T12461] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 228.342382][ T45] asix 6-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 228.352778][ T45] asix 6-1:0.251: probe with driver asix failed with error -524 [ 228.556442][T12461] netlink: 'syz.5.3730': attribute type 4 has an invalid length. [ 228.564266][T12461] netlink: 'syz.5.3730': attribute type 6 has an invalid length. [ 228.572143][T12461] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3730'. [ 228.582025][ T409] usb 6-1: USB disconnect, device number 31 [ 228.691916][ T1490] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 228.844314][ T1490] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 228.853450][ T1490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.861441][ T1490] usb 3-1: Product: syz [ 228.865653][ T1490] usb 3-1: Manufacturer: syz [ 228.870262][ T1490] usb 3-1: SerialNumber: syz [ 229.097474][T12478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645 [ 229.127262][ T36] audit: type=1400 audit(2000000048.460:821): avc: denied { remount } for pid=12484 comm="syz.5.3738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 229.338153][T12493] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.385488][ T404] Bluetooth: hci0: Frame reassembly failed (-84) [ 229.391285][T12495] rust_binder: Error while translating object. [ 229.391919][T12495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.398164][T12495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:662 [ 229.407633][T12495] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 229.416905][T12495] rust_binder: Read failure Err(EFAULT) in pid:662 [ 229.968213][T12497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:601 [ 230.193438][T12518] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 230.211200][ T36] audit: type=1400 audit(2000000049.540:822): avc: denied { remount } for pid=12517 comm="syz.6.3751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 230.211212][T12518] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 230.242388][T12518] overlay: filesystem on ./bus not supported as upperdir [ 230.475828][T12531] rust_binder: Error in use_page_slow: ESRCH [ 230.475855][T12531] rust_binder: use_range failure ESRCH [ 230.482044][T12531] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 230.487711][T12531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 230.495800][T12531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:633 [ 230.577168][ T36] audit: type=1400 audit(2000000049.910:823): avc: granted { setsecparam } for pid=12534 comm="syz.6.3756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 230.618513][T12539] rust_binder: 641: no such ref 5 [ 230.623665][T12539] rust_binder: Write failure EINVAL in pid:641 [ 230.654550][T12542] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 230.661162][T12543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.718151][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3764'. [ 231.421918][ T1946] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 231.421918][ T1945] Bluetooth: hci0: command 0x1003 tx timeout [ 231.446791][ T1490] usb 3-1: USB disconnect, device number 33 [ 231.483119][T12592] tipc: Started in network mode [ 231.488212][T12592] tipc: Node identity a60aaa59ba44, cluster identity 4711 [ 231.495770][T12592] tipc: Enabled bearer , priority 0 [ 231.508473][T12590] tipc: Disabling bearer [ 231.622480][T12603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=12603 comm=syz.5.3778 [ 231.701761][T12609] rust_binder: 12608 RLIMIT_NICE not set [ 231.702113][T12609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:679 [ 231.911935][ T1490] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 232.072985][ T1490] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.084015][ T1490] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.093799][ T1490] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 232.102964][ T1490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.111624][ T1490] usb 3-1: config 0 descriptor?? [ 232.604697][T12640] tipc: Enabled bearer , priority 0 [ 232.612741][T12639] tipc: Disabling bearer [ 232.674581][T12643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.689322][T12645] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 232.710495][ T337] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 232.841935][ T337] usb 6-1: device descriptor read/64, error -71 [ 232.919712][ T1490] hid-led 0003:27B8:01ED.000D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 232.934754][ T1490] hid-led 0003:27B8:01ED.000D: ThingM blink(1) initialized [ 233.081920][ T337] usb 6-1: device descriptor read/64, error -71 [ 233.121667][T12620] usb 3-1: USB disconnect, device number 34 [ 233.322057][ T337] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 233.451969][ T337] usb 6-1: device descriptor read/64, error -71 [ 233.650183][T12651] tmpfs: Bad value for 'nr_blocks' [ 233.655735][T12651] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 233.691943][ T337] usb 6-1: device descriptor read/64, error -71 [ 233.737142][T12656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.737807][T12656] rust_binder: Error while translating object. [ 233.744512][T12656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 233.750768][T12656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:691 [ 233.774886][ T36] audit: type=1400 audit(2000000053.110:824): avc: denied { lock } for pid=12658 comm="syz.2.3795" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 233.792362][T12662] rust_binder: Read failure Err(EAGAIN) in pid:697 [ 233.809991][T12662] rust_binder: 697: no such ref 0 [ 233.822151][ T337] usb usb6-port1: attempt power cycle [ 233.828215][T12662] rust_binder: Read failure Err(EAGAIN) in pid:697 [ 233.892733][T12669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:704 [ 234.162038][ T337] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 234.183161][ T337] usb 6-1: device descriptor read/8, error -71 [ 234.312938][ T337] usb 6-1: device descriptor read/8, error -71 [ 234.473602][T12695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=12695 comm=syz.2.3806 [ 234.551948][ T337] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 234.572957][ T337] usb 6-1: device descriptor read/8, error -71 [ 234.703397][ T337] usb 6-1: device descriptor read/8, error -71 [ 234.730762][T12707] rust_binder: Failed copying remainder into alloc: EFAULT [ 234.730786][T12707] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 234.738679][T12707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 234.747019][T12707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:721 [ 234.822018][ T337] usb usb6-port1: unable to enumerate USB device [ 235.023990][T12711] overlayfs: failed to resolve './file0/file0': -2 [ 235.483780][T12725] rust_binder: Error while translating object. [ 235.483814][T12725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 235.490071][T12725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:695 [ 235.518794][T12727] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 235.528030][T12727] rust_binder: Error while translating object. [ 235.540291][T12727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 235.546502][T12727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:698 [ 235.557424][T12728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.625878][T12734] EXT4-fs: Conflicting test_dummy_encryption options [ 235.634623][T12734] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 235.634654][T12734] rust_binder: Error while translating object. [ 235.646969][T12734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 235.653471][T12734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:703 [ 235.679374][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3819'. [ 235.698998][T12732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12732 comm=syz.4.3819 [ 235.764146][T12743] /dev/rnullb0: Can't lookup blockdev [ 235.767240][ T36] audit: type=1400 audit(2000000055.100:825): avc: denied { mounton } for pid=12742 comm="syz.5.3824" path="/syzcgroup/unified/syz5" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 235.816880][T12745] netlink: 'syz.5.3826': attribute type 3 has an invalid length. [ 235.825067][T12745] netlink: 944 bytes leftover after parsing attributes in process `syz.5.3826'. [ 235.839122][T12745] pim6reg1: entered promiscuous mode [ 235.844508][T12745] pim6reg1: entered allmulticast mode [ 235.955516][T12756] netlink: 'syz.4.3831': attribute type 16 has an invalid length. [ 235.963622][T12756] netlink: 'syz.4.3831': attribute type 25 has an invalid length. [ 235.971506][T12756] netlink: 64094 bytes leftover after parsing attributes in process `syz.4.3831'. [ 236.102819][ T725] tipc: Left network mode [ 236.126046][T12764] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.133296][T12764] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.146556][T12764] bridge_slave_0: entered allmulticast mode [ 236.153150][T12764] bridge_slave_0: entered promiscuous mode [ 236.160431][ T725] veth1_macvtap: left promiscuous mode [ 236.166573][ T725] veth0_vlan: left promiscuous mode [ 236.251005][ T725] vcan0 (unregistering): left allmulticast mode [ 236.259471][T12764] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.271929][T12764] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.278042][T12778] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3839'. [ 236.279045][ T36] audit: type=1400 audit(2000000055.610:826): avc: denied { nlmsg_write } for pid=12777 comm="syz.5.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 236.288487][T12764] bridge_slave_1: entered allmulticast mode [ 236.315232][T12764] bridge_slave_1: entered promiscuous mode [ 236.321279][T12773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3837'. [ 236.339846][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3837'. [ 236.349166][T12774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12774 comm=syz.2.3837 [ 236.352518][T12778] rust_binder: Error while translating object. [ 236.362271][T12774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12774 comm=syz.2.3837 [ 236.363710][T12778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.381407][T12778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:722 [ 236.475788][T12764] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.492047][T12764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.499453][T12764] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.506547][T12764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.540179][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.543271][T12780] /dev/rnullb0: Can't lookup blockdev [ 236.553974][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.556021][T12792] overlayfs: failed to clone upperpath [ 236.569391][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.576496][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.599630][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.606737][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.629033][T12764] veth0_vlan: entered promiscuous mode [ 236.642515][T12764] veth1_macvtap: entered promiscuous mode [ 236.663234][ T36] audit: type=1400 audit(2000000056.000:827): avc: denied { mounton } for pid=12764 comm="syz-executor" path="/root/syzkaller.ABD3FE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=55383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 236.691942][ T1490] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 236.737339][T12798] rust_binder: Error while translating object. [ 236.737373][T12798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.743683][T12798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:730 [ 236.761728][T12800] rust_binder: Write failure EFAULT in pid:2 [ 236.811052][T12803] rust_binder: 732: no such ref 2 [ 236.832226][ T1490] usb 3-1: device descriptor read/64, error -71 [ 236.915324][T12809] rust_binder: Error while translating object. [ 236.915355][T12809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 236.921610][T12809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:4 [ 236.946480][T12812] rust_binder: Write failure EFAULT in pid:9 [ 237.072077][ T1490] usb 3-1: device descriptor read/64, error -71 [ 237.321919][ T1490] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 237.412254][T12820] overlayfs: failed to clone upperpath [ 237.440658][T12824] netlink: 'syz.4.3853': attribute type 6 has an invalid length. [ 237.461938][ T1490] usb 3-1: device descriptor read/64, error -71 [ 237.695281][T12836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.704787][T12836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.712809][ T1490] usb 3-1: device descriptor read/64, error -71 [ 237.822338][ T1490] usb usb3-port1: attempt power cycle [ 238.162096][ T1490] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 238.182905][ T1490] usb 3-1: device descriptor read/8, error -71 [ 238.312880][ T1490] usb 3-1: device descriptor read/8, error -71 [ 238.551975][ T1490] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 238.573060][ T1490] usb 3-1: device descriptor read/8, error -71 [ 238.703515][ T1490] usb 3-1: device descriptor read/8, error -71 [ 238.812133][ T1490] usb usb3-port1: unable to enumerate USB device [ 238.946368][T12854] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.953931][T12853] rust_binder: Error in use_page_slow: ESRCH [ 238.953931][T12854] rust_binder: Error in use_page_slow: ESRCH [ 238.953951][T12853] rust_binder: use_range failure ESRCH [ 238.953968][T12853] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 238.960030][T12854] rust_binder: use_range failure ESRCH [ 238.966171][T12853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 238.972172][T12854] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 238.979625][T12853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:757 [ 238.985284][T12854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 239.011276][T12854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:757 [ 239.450916][T12860] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 239.468251][T12860] rust_binder: Write failure EINVAL in pid:734 [ 240.058583][T12873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.065038][T12873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 240.136364][T12880] netlink: 'syz.7.3872': attribute type 4 has an invalid length. [ 240.153461][T12880] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3872'. [ 240.258222][T12889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.259414][T12889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.280424][T12892] can0: slcan on ttyS3. [ 240.454816][T12892] can0 (unregistered): slcan off ttyS3. [ 240.471680][T12914] can0: slcan on ttyS3. [ 240.489353][T12922] SELinux: security_context_str_to_sid () failed with errno=-22 [ 240.499890][T12922] SELinux: security_context_str_to_sid () failed with errno=-22 [ 240.731384][T12913] can0 (unregistered): slcan off ttyS3. [ 241.623015][T13025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.623111][T13025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.629851][T13025] rust_binder: Error while translating object. [ 241.636673][T13025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 241.643024][T13025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:802 [ 241.801918][T12620] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 241.962041][T12620] usb 3-1: Using ep0 maxpacket: 32 [ 241.968542][T12620] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 241.977193][T12620] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 241.989436][T12620] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 241.998677][T12620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.008427][T12620] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.011054][T13055] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3909'. [ 242.018362][T12620] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 242.029459][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3909'. [ 242.041224][T12620] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 242.058793][T12620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.067816][T12620] usb 3-1: config 0 descriptor?? [ 242.217185][ T36] audit: type=1400 audit(2000000061.550:828): avc: denied { setattr } for pid=13072 comm="syz.4.3917" name="NETLINK" dev="sockfs" ino=55008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.281313][T12620] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 242.309843][T12620] usb 3-1: USB disconnect, device number 39 [ 242.322201][T12620] usblp0: removed [ 242.754767][T13091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.755382][T13091] fuse: Unknown parameter 'ƒroVp_id' [ 242.792070][T12620] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 242.871231][T13093] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 242.871267][T13093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 242.879330][T13093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:810 [ 242.941925][T12620] usb 3-1: Using ep0 maxpacket: 32 [ 242.958117][T12620] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 242.966512][T12620] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 242.975197][T12620] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 242.984195][T12620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.993965][T12620] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.003678][T12620] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.016712][T12620] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 243.025789][T12620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.034592][T12620] usb 3-1: config 0 descriptor?? [ 243.245822][T12620] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 243.297863][T13105] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3927'. [ 243.341777][T13113] veth0_virt_wifi: entered allmulticast mode [ 243.347902][T13113] veth0_virt_wifi: left allmulticast mode [ 243.444902][ T36] audit: type=1400 audit(2000000062.780:829): avc: denied { read write } for pid=13011 comm="syz.2.3895" name="lp0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 243.446174][T12620] usb 3-1: USB disconnect, device number 40 [ 243.470383][ T36] audit: type=1400 audit(2000000062.780:830): avc: denied { open } for pid=13011 comm="syz.2.3895" path="/dev/usb/lp0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 243.477746][T12620] usblp0: removed [ 243.671384][T13139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:814 [ 243.991651][T13141] 9pnet_fd: Insufficient options for proto=fd [ 244.025485][T13143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3940'. [ 244.691952][ T1490] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 244.843080][ T1490] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.853384][ T1490] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.868277][ T1490] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 244.878123][ T1490] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 244.900655][ T1490] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.915168][T13163] fuseblk: Bad value for 'source' [ 244.922761][ T1490] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.931957][ T1490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.939977][ T1490] usb 6-1: Product: syz [ 244.944552][ T1490] usb 6-1: Manufacturer: syz [ 244.949200][ T1490] usb 6-1: SerialNumber: syz [ 244.955803][ T1490] cdc_mbim 6-1:1.0: skipping garbage [ 245.959143][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.959246][T13149] rust_binder: 818: no such ref 3 [ 245.980990][T13149] rust_binder: Write failure EINVAL in pid:818 [ 245.981918][ T1490] cdc_mbim 6-1:1.0: bind() failure [ 246.023514][ T1490] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 246.051749][ T1490] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 246.083162][ T1490] usb 6-1: USB disconnect, device number 36 [ 246.625552][T13230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.625673][T13230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 246.632558][T13230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:827 [ 246.642473][T13230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.887813][T13240] can0: slcan on ttyS3. [ 246.966270][T13240] can0 (unregistered): slcan off ttyS3. [ 248.023721][ T36] audit: type=1326 audit(2000000067.360:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.5.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 248.049503][T13297] syz.5.3982 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 248.067729][ T36] audit: type=1326 audit(2000000067.380:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.5.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 248.096138][ T36] audit: type=1326 audit(2000000067.380:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.5.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 248.130113][ T36] audit: type=1326 audit(2000000067.380:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.5.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 248.154759][ T36] audit: type=1326 audit(2000000067.380:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.5.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 248.179002][ T36] audit: type=1326 audit(2000000067.380:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.5.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 248.203728][ T36] audit: type=1326 audit(2000000067.380:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.5.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 248.237377][ T36] audit: type=1326 audit(2000000067.380:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.5.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 248.282575][ T36] audit: type=1326 audit(2000000067.380:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.5.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 248.313863][ T36] audit: type=1326 audit(2000000067.380:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.5.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 248.459132][T13327] tmpfs: Bad value for 'nr_inodes' [ 248.464750][T13327] binder: Unknown parameter '' [ 248.613914][T13339] binder: Unknown parameter '' [ 248.639221][T13341] binder: Bad value for 'max' [ 248.815854][T13347] netlink: 37 bytes leftover after parsing attributes in process `syz.5.4000'. [ 248.901942][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 249.051913][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 249.058550][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 249.066981][ T9] usb 3-1: config 127 has an invalid interface number: 15 but max is 3 [ 249.075288][ T9] usb 3-1: config 127 has an invalid interface number: 217 but max is 3 [ 249.083700][ T9] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 249.094051][ T9] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 4 [ 249.103215][ T9] usb 3-1: config 127 has no interface number 0 [ 249.109511][ T9] usb 3-1: config 127 has no interface number 1 [ 249.115846][ T9] usb 3-1: config 127 interface 15 altsetting 2 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 249.126969][ T9] usb 3-1: config 127 interface 15 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 249.138015][ T9] usb 3-1: config 127 interface 217 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 249.149208][ T9] usb 3-1: config 127 interface 217 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 249.160128][ T9] usb 3-1: config 127 interface 217 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 249.171225][ T9] usb 3-1: config 127 interface 217 altsetting 4 endpoint 0xF has invalid maxpacket 1552, setting to 64 [ 249.182424][ T9] usb 3-1: config 127 interface 217 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 249.193343][ T9] usb 3-1: config 127 interface 217 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 249.204265][ T9] usb 3-1: config 127 interface 217 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 249.215254][ T9] usb 3-1: config 127 interface 217 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 249.226345][ T9] usb 3-1: config 127 interface 217 altsetting 4 has an endpoint descriptor with address 0x97, changing to 0x87 [ 249.238783][ T9] usb 3-1: config 127 interface 217 altsetting 4 has a duplicate endpoint with address 0x87, skipping [ 249.249890][ T9] usb 3-1: config 127 interface 217 altsetting 4 has 11 endpoint descriptors, different from the interface descriptor's value: 16 [ 249.263379][ T9] usb 3-1: config 127 interface 15 has no altsetting 0 [ 249.270261][ T9] usb 3-1: config 127 interface 217 has no altsetting 0 [ 249.278761][ T9] usb 3-1: New USB device found, idVendor=2c7c, idProduct=6001, bcdDevice=39.13 [ 249.287991][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.296022][ T9] usb 3-1: Product: ј [ 249.300188][ T9] usb 3-1: Manufacturer: 뮲俪䶀ꮃᕀ⺓ⳳ硯è’뙋఼컩඀዆쎞䟴㮎ꅚ紟 [ 249.309877][ T9] usb 3-1: SerialNumber: ì¼æ¡è¶™â°±ëž“⯰樔䄙အ柾嫒㮮í¿ë ˜æ–±ãŸ“錣ìẑᚻ㛶仓겣꟞á†î¤™êŽ¨æ½ºîš™æ˜ºê’³äŒ¶ë’˜Þ‘⌤⺫ë°å´¢ê¬°è’ïžë¿–䘂è£ì¬ä‘«á¼‡å’¤â¸ˆâ²„㿷㯩꣕䉯䓸茧慀㊱쭙㈥äŽå¥³ä†°ì’µã°¾å­ªè¿ãµ€â‰¦ã¡‡ä—鶖쇑绻鳙ឧﺣ굸ãŽä€£å·’잘èªâ»ºé¨¼å·ì°‰ã‚‘゛㓋 [ 249.386815][T13363] 9pnet_fd: p9_fd_create_tcp (13363): problem connecting socket to 127.0.0.1 [ 249.559982][ T9] usb 3-1: USB disconnect, device number 41 [ 249.756640][T13388] rust_binder: Error while translating object. [ 249.756695][T13388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 249.763751][T13388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:800 [ 249.794408][T13392] overlayfs: failed to resolve './bus': -2 [ 249.861486][T13395] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.861628][T13395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61 [ 250.291975][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 250.385157][T13440] overlayfs: failed to clone upperpath [ 250.453084][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.465461][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.475442][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 250.484557][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.493381][ T9] usb 3-1: config 0 descriptor?? [ 250.551911][T12620] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 250.712340][T12620] usb 6-1: Using ep0 maxpacket: 32 [ 250.718599][T12620] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 250.728548][T12620] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 250.737429][T12620] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 250.746471][T12620] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.756196][T12620] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 250.765882][T12620] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 250.778939][T12620] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 250.788021][T12620] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.796684][T12620] usb 6-1: config 0 descriptor?? [ 250.900774][ T9] hid-steam 0003:28DE:1142.000E: item fetching failed at offset 4/5 [ 250.909064][ T9] hid-steam 0003:28DE:1142.000E: steam_probe:parse of hid interface failed [ 250.917738][ T9] hid-steam 0003:28DE:1142.000E: probe with driver hid-steam failed with error -22 [ 251.005719][T12620] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 251.017907][T12620] usb 6-1: USB disconnect, device number 37 [ 251.024617][T12620] usblp0: removed [ 251.101146][ T9] usb 3-1: USB disconnect, device number 42 [ 251.321911][T12620] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 251.471939][T12620] usb 6-1: Using ep0 maxpacket: 32 [ 251.478227][T12620] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 251.486667][T12620] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 251.495360][T12620] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 251.505150][T12620] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 251.514906][T12620] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 251.524638][T12620] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 251.537831][T12620] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 251.547221][T12620] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.556684][T12620] usb 6-1: config 0 descriptor?? [ 251.766128][T12620] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 251.787299][T12620] usb 6-1: USB disconnect, device number 38 [ 251.801462][T12620] usblp0: removed [ 251.838921][T13479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 251.976222][T13485] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 251.999076][T13485] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 252.014200][T13485] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 252.261913][ T409] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 252.411904][ T409] usb 6-1: Using ep0 maxpacket: 16 [ 252.418189][ T409] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.428339][ T409] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 252.438844][ T409] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.447948][ T409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.455990][ T409] usb 6-1: Product: syz [ 252.460163][ T409] usb 6-1: Manufacturer: syz [ 252.464869][ T409] usb 6-1: SerialNumber: syz [ 252.470198][ T409] usb 6-1: config 0 descriptor?? [ 252.677008][ T409] usb 6-1: USB disconnect, device number 39 [ 252.969424][T13502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 253.027304][T13506] overlay: ./file0 is not a directory [ 253.075888][T13519] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 253.106520][T13523] rust_binder: Error while translating object. [ 253.106580][T13523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 253.113256][T13523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:74 [ 253.197515][T13531] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4061'. [ 253.216691][T13531] /dev/rnullb0: Can't lookup blockdev [ 253.226757][ T409] kernel write not supported for file /syz1 (pid: 409 comm: kworker/1:4) [ 253.238978][T13534] tipc: Enabling of bearer rejected, failed to enable media [ 253.263674][ T36] kauditd_printk_skb: 352 callbacks suppressed [ 253.263692][ T36] audit: type=1400 audit(2000000073.599:1193): avc: denied { create } for pid=13538 comm="syz.5.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 254.020520][T13554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 254.020559][T13554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 254.047157][T13556] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4069'. [ 254.439306][T13695] SELinux: Context system_u:object_r:passwd_exec_t:s0 is not valid (left unmapped). [ 254.448886][ T36] audit: type=1400 audit(2000000074.769:1194): avc: denied { relabelfrom } for pid=13694 comm="syz.7.4076" name="NETLINK" dev="sockfs" ino=58290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.491733][ T36] audit: type=1400 audit(2000000074.789:1195): avc: denied { relabelto } for pid=13694 comm="syz.7.4076" name="NETLINK" dev="sockfs" ino=58290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:passwd_exec_t:s0" [ 254.498304][T13701] rust_binder: 13701 RLIMIT_NICE not set [ 254.819833][ T36] audit: type=1400 audit(2000000075.149:1196): avc: denied { create } for pid=13720 comm="syz.2.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 254.935370][T13733] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 254.935399][T13733] rust_binder: Error while translating object. [ 254.946228][T13733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 254.952636][T13733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:849 [ 254.963726][T13733] overlayfs: missing 'workdir' [ 255.026709][T13750] rust_binder: Write failure EFAULT in pid:851 [ 255.104846][ T31] rust_binder: 13700: removing orphan mapping 0:1048 [ 255.120667][T13763] netlink: 'syz.2.4098': attribute type 11 has an invalid length. [ 255.130082][T13763] netlink: 'syz.2.4098': attribute type 1 has an invalid length. [ 255.137881][T13763] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.4098'. [ 255.147542][T13763] __vm_enough_memory: pid: 13763, comm: syz.2.4098, bytes: 18014402804453376 not enough memory for the allocation [ 255.291158][T13789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4106'. [ 255.315456][T13791] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4107'. [ 255.325701][T13791] cgroup: none used incorrectly [ 255.651915][ T409] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 255.802970][ T409] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 255.813828][ T409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.824734][ T409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.834543][ T409] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 255.848423][ T409] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 255.857539][ T409] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 255.865672][ T409] usb 6-1: Manufacturer: syz [ 255.870978][ T409] usb 6-1: config 0 descriptor?? [ 256.101123][ T36] audit: type=1400 audit(2000000076.429:1197): avc: denied { unmount } for pid=12764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 256.131910][ T409] usbhid 6-1:0.0: can't add hid device: -71 [ 256.139039][ T409] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 256.153660][T13821] tipc: New replicast peer: 0.0.0.0 [ 256.158834][ T409] usb 6-1: USB disconnect, device number 40 [ 256.159240][T13821] tipc: Enabled bearer , priority 10 [ 256.174997][T13821] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 256.184057][T13821] rust_binder: Write failure EINVAL in pid:915 [ 256.273298][T13848] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 256.287821][T13848] rust_binder: Write failure EINVAL in pid:871 [ 256.290697][T13850] overlay: Unknown parameter 'smackfsdef' [ 256.296773][T13852] overlayfs: missing 'lowerdir' [ 256.308554][T13854] netlink: 'syz.7.4128': attribute type 1 has an invalid length. [ 256.334324][T13858] rust_binder: 929: no such ref 0 [ 256.339454][T13858] rust_binder: 929: no such ref 0 [ 256.345115][T13858] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 256.355134][T13858] rust_binder: 929: no such ref 64 [ 256.360380][T13858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:929 [ 256.391671][ T36] audit: type=1400 audit(2000000076.719:1198): avc: denied { validate_trans } for pid=13862 comm="syz.5.4131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 256.588483][T13882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126 [ 256.590879][T13885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.608668][T13885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.626102][T13877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 256.626482][T13877] rust_binder: Error in use_page_slow: ESRCH [ 256.633030][T13877] rust_binder: use_range failure ESRCH [ 256.639052][T13877] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 256.644644][T13877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 256.652734][T13877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:881 [ 256.787673][T12620] usb 5-1: USB disconnect, device number 10 [ 256.931895][ T1490] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 256.940412][T13908] binder: Unknown parameter 'fscontext?}' [ 256.964999][T13907] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.972143][T13907] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.979303][T13907] bridge_slave_0: entered allmulticast mode [ 256.985780][T13907] bridge_slave_0: entered promiscuous mode [ 256.997112][T13907] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.004226][T13907] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.011314][T13907] bridge_slave_1: entered allmulticast mode [ 257.017827][T13907] bridge_slave_1: entered promiscuous mode [ 257.072571][T13907] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.080415][T13907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.087752][T13907] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.093160][ T1490] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.094820][T13907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.106008][ T1490] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 257.122095][ T1490] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.136764][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.139137][ T1490] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 257.154906][ T1490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.163099][ T1490] usb 3-1: Product: syz [ 257.167340][ T1490] usb 3-1: Manufacturer: syz [ 257.174515][ T1490] usb 3-1: SerialNumber: syz [ 257.181511][ T1490] hub 3-1:1.0: bad descriptor, ignoring hub [ 257.187577][ T1490] hub 3-1:1.0: probe with driver hub failed with error -5 [ 257.281907][ T337] tipc: Node number set to 474917465 [ 257.285262][ T725] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.294420][ T725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.324938][T13907] veth0_vlan: entered promiscuous mode [ 257.337755][ T726] tipc: Left network mode [ 257.344992][T13907] veth1_macvtap: entered promiscuous mode [ 257.375886][ T36] audit: type=1400 audit(2000000077.709:1199): avc: denied { mounton } for pid=13907 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 257.382866][ T1490] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 257.431138][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.431169][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.438144][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.447751][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.456241][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.463185][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.469938][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.476675][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.483553][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.490070][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.496596][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.503669][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.510146][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.516742][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.516957][T13931] rust_binder: Error while translating object. [ 257.525995][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.535854][T13931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 257.535883][T13931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 257.542744][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.552867][T13931] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 257.561712][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.575263][T13931] rust_binder: Read failure Err(EFAULT) in pid:2 [ 257.575436][ T726] veth1_macvtap: left promiscuous mode [ 257.582196][T13925] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 257.593655][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.597001][ T726] veth0_vlan: left promiscuous mode [ 257.601589][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.601611][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.619974][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.626475][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.633312][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.639791][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.646305][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.654279][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.660757][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.667421][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.676784][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.683553][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.690027][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.692357][ T1490] usb 3-1: USB disconnect, device number 43 [ 257.697108][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.714056][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.714090][ T1490] usblp0: removed [ 257.720616][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.733200][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.739743][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.746742][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.753339][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.759912][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.766655][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.773402][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.779946][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.786527][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.793119][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.799627][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.806223][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.812793][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.819335][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.825943][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.832478][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.838924][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.845461][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.852070][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.858620][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.865116][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.871575][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.878173][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.884699][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.891225][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.897839][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.904585][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.911129][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.917742][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.924375][T13926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.219049][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4151'. [ 258.236378][T13936] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.245456][T13936] bridge_slave_0 (unregistering): left allmulticast mode [ 258.252769][T13936] bridge_slave_0 (unregistering): left promiscuous mode [ 258.259814][T13936] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.496659][T13964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.612187][ T1490] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 258.783179][ T1490] usb 5-1: Using ep0 maxpacket: 8 [ 258.790064][ T1490] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.798541][ T1490] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 258.810213][ T1490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 258.821162][ T1490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 258.831020][ T1490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 258.840881][ T1490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 258.850628][ T1490] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 258.860558][ T1490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 258.871111][ T1490] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 258.882731][ T1490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 258.894531][ T1490] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 258.903721][ T1490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.911757][ T1490] usb 5-1: Product: syz [ 258.916003][ T1490] usb 5-1: Manufacturer: syz [ 258.920636][ T1490] usb 5-1: SerialNumber: syz [ 258.925987][ T1490] usb 5-1: config 0 descriptor?? [ 258.942186][ T9570] udevd[9570]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 259.165178][ T395] usb 5-1: USB disconnect, device number 11 [ 259.542756][ T36] audit: type=1400 audit(2000000079.879:1200): avc: denied { setattr } for pid=13982 comm="syz.5.4168" path="socket:[59814]" dev="sockfs" ino=59814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.569043][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4168'. [ 259.704288][T13985] __vm_enough_memory: pid: 13985, comm: syz.4.4169, bytes: 18014402804453376 not enough memory for the allocation [ 259.716621][T13987] __vm_enough_memory: pid: 13987, comm: syz.4.4169, bytes: 18014402804453376 not enough memory for the allocation [ 260.034065][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 260.191999][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 260.198346][ T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 260.206857][ T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 260.215515][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 260.224504][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.234225][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 260.243936][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 260.256933][ T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 260.265996][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.274698][ T31] usb 5-1: config 0 descriptor?? [ 260.281998][ T337] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 260.433154][ T337] usb 3-1: config 1 has an invalid descriptor of length 16, skipping remainder of the config [ 260.443576][ T337] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.453361][ T337] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 260.462522][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 260.470539][ T337] usb 3-1: SerialNumber: syz [ 260.482550][ T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 260.494789][ T31] usb 5-1: USB disconnect, device number 12 [ 260.501579][ T31] usblp0: removed [ 260.646811][T14008] incfs: Can't find or create .index dir in ./file0 [ 260.653549][T14008] incfs: mount failed -17 [ 260.689068][ T337] usb 3-1: 0:2 : does not exist [ 260.700860][ T337] usb 3-1: unit 5: unexpected type 0x09 [ 260.708283][ T337] usb 3-1: USB disconnect, device number 44 [ 260.716893][ T9022] udevd[9022]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.921918][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 261.081953][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 261.088451][ T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 261.097249][ T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 261.106871][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 261.116274][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.126354][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.136061][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 261.149107][ T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 261.158352][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.169455][ T31] usb 5-1: config 0 descriptor?? [ 261.379507][ T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 261.521910][ T337] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 261.576579][T13994] veth1: entered allmulticast mode [ 261.633481][T14054] veth1: left allmulticast mode [ 261.681974][ T337] usb 3-1: Using ep0 maxpacket: 16 [ 261.682498][ T31] usb 5-1: USB disconnect, device number 13 [ 261.689474][ T337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.697041][ T31] usblp0: removed [ 261.703692][ T337] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.717260][ T337] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.726408][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.734445][ T337] usb 3-1: Product: syz [ 261.738654][ T337] usb 3-1: Manufacturer: syz [ 261.743353][ T337] usb 3-1: SerialNumber: syz [ 261.949679][T14042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:915 [ 261.952185][ T337] usb 3-1: 0:2 : does not exist [ 261.968766][ T337] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 261.979909][ T337] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 261.991085][ T337] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 262.002591][ T337] usb 3-1: USB disconnect, device number 45 [ 262.013580][ T9022] udevd[9022]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 262.468247][ T36] audit: type=1400 audit(2000000082.799:1201): avc: denied { mounton } for pid=14068 comm="syz.2.4194" path="/proc/917/cgroup" dev="proc" ino=60888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 262.468663][T14069] rust_binder: Write failure EFAULT in pid:917 [ 262.512087][T14071] SELinux: failed to load policy [ 262.534534][T14073] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 262.558918][T14075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 262.559261][T14075] rust_binder: Error in use_page_slow: ESRCH [ 262.565836][T14075] rust_binder: use_range failure ESRCH [ 262.571953][T14075] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 262.577477][T14075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 262.585569][T14075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:923 [ 262.764883][T14096] /dev/rnullb0: Can't lookup blockdev [ 262.993869][T14115] SELinux: failed to load policy [ 262.999415][T14115] EXT4-fs: dax option not supported [ 263.262277][ T395] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 263.412956][ T395] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 263.424668][ T395] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 263.442212][ T395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.451462][ T395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 263.460656][ T395] usb 5-1: SerialNumber: syz [ 263.613130][T14138] fuse: Unknown parameter 'rootmohð' [ 263.620067][ T1490] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 263.642575][ T1490] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.692409][ T395] usb 5-1: USB disconnect, device number 14 [ 263.951961][ T1490] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 264.021757][T14156] tipc: Enabling of bearer rejected, failed to enable media [ 264.041976][ T395] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 264.051992][T14159] /dev/sr0: Can't lookup blockdev [ 264.059919][T14160] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 264.059945][T14160] rust_binder: Read failure Err(EFAULT) in pid:143 [ 264.119202][ T1490] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 264.133996][ T1490] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.144780][ T1490] usb 3-1: config 0 has no interface number 0 [ 264.152599][ T1490] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 264.161814][ T1490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.171487][ T1490] usb 3-1: Product: syz [ 264.175937][ T1490] usb 3-1: Manufacturer: syz [ 264.180624][ T1490] usb 3-1: SerialNumber: syz [ 264.192053][ T1490] usb 3-1: config 0 descriptor?? [ 264.198615][ T395] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 264.207756][ T395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.216554][ T395] usb 5-1: config 0 descriptor?? [ 264.222615][ T395] usb 5-1: selecting invalid altsetting 1 [ 264.230706][ T395] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 264.234129][ T9570] udevd[9570]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 264.442727][T12620] usb 5-1: USB disconnect, device number 15 [ 264.723272][ T1490] usb 3-1: Found UVC 0.00 device syz (056d:0000) [ 264.729689][ T1490] usb 3-1: No valid video chain found. [ 264.738497][ T1490] usb 3-1: USB disconnect, device number 46 [ 280.288714][T14176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.289146][T14176] rust_binder: Error in use_page_slow: ESRCH [ 280.293724][ T36] audit: type=1400 audit(2000000100.629:1202): avc: denied { mounton } for pid=14174 comm="syz.7.4231" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.301882][T14176] rust_binder: use_range failure ESRCH [ 280.353045][T14176] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 280.364366][T14176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 280.385490][T14176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:943 [ 280.581971][ T395] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 280.743009][ T395] usb 5-1: No LPM exit latency info found, disabling LPM. [ 280.754935][ T395] usb 5-1: config 3 has an invalid interface number: 141 but max is 2 [ 280.763349][ T395] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 280.772465][ T395] usb 5-1: config 3 has an invalid interface number: 103 but max is 2 [ 280.780645][ T395] usb 5-1: config 3 has an invalid interface number: 245 but max is 2 [ 280.789246][ T395] usb 5-1: config 3 has no interface number 0 [ 280.795388][ T395] usb 5-1: config 3 has no interface number 1 [ 280.801487][ T395] usb 5-1: config 3 has no interface number 2 [ 280.802919][T14239] 9pnet_fd: Insufficient options for proto=fd [ 280.807824][ T395] usb 5-1: config 3 interface 141 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 280.824939][ T395] usb 5-1: config 3 interface 103 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 280.837029][ T395] usb 5-1: config 3 interface 103 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 8 [ 280.848415][ T395] usb 5-1: config 3 interface 103 altsetting 2 endpoint 0x8 has invalid maxpacket 64, setting to 8 [ 280.859190][ T395] usb 5-1: config 3 interface 103 altsetting 2 endpoint 0xA has invalid maxpacket 32, setting to 8 [ 280.870109][ T395] usb 5-1: config 3 interface 103 altsetting 2 endpoint 0x1 has invalid maxpacket 16, setting to 8 [ 280.881082][ T395] usb 5-1: config 3 interface 103 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 280.892156][ T395] usb 5-1: config 3 interface 103 altsetting 2 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 280.904829][ T395] usb 5-1: config 3 interface 103 altsetting 2 endpoint 0x86 has invalid maxpacket 2554, setting to 8 [ 280.916118][ T395] usb 5-1: config 3 interface 103 altsetting 2 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 280.927205][ T395] usb 5-1: config 3 interface 103 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 280.937132][T14246] x_tables: duplicate underflow at hook 1 [ 280.938293][ T395] usb 5-1: config 3 interface 103 altsetting 2 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 280.948605][T14246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=515 sclass=netlink_tcpdiag_socket pid=14246 comm=syz.7.4256 [ 280.957415][ T395] usb 5-1: config 3 interface 245 altsetting 109 has a duplicate endpoint with address 0x1, skipping [ 280.980777][ T395] usb 5-1: config 3 interface 245 altsetting 109 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 280.992191][ T395] usb 5-1: config 3 interface 245 altsetting 109 has an invalid descriptor for endpoint zero, skipping [ 281.003455][ T395] usb 5-1: config 3 interface 245 altsetting 109 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 281.014735][ T395] usb 5-1: config 3 interface 245 altsetting 109 has a duplicate endpoint with address 0x3, skipping [ 281.025832][ T395] usb 5-1: config 3 interface 245 altsetting 109 has a duplicate endpoint with address 0x4, skipping [ 281.036748][ T395] usb 5-1: config 3 interface 245 altsetting 109 endpoint 0xF has invalid maxpacket 1024, setting to 8 [ 281.047828][ T395] usb 5-1: config 3 interface 245 altsetting 109 has a duplicate endpoint with address 0xA, skipping [ 281.058770][ T395] usb 5-1: config 3 interface 245 altsetting 109 has a duplicate endpoint with address 0x5, skipping [ 281.070702][ T395] usb 5-1: config 3 interface 245 altsetting 109 has a duplicate endpoint with address 0x4, skipping [ 281.081667][ T395] usb 5-1: config 3 interface 245 altsetting 109 has a duplicate endpoint with address 0x6, skipping [ 281.092683][ T395] usb 5-1: config 3 interface 245 altsetting 109 has an invalid descriptor for endpoint zero, skipping [ 281.104154][ T395] usb 5-1: config 3 interface 245 altsetting 109 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 281.115188][ T395] usb 5-1: config 3 interface 245 altsetting 109 has a duplicate endpoint with address 0xB, skipping [ 281.126231][ T395] usb 5-1: config 3 interface 141 has no altsetting 0 [ 281.136938][ T395] usb 5-1: config 3 interface 103 has no altsetting 0 [ 281.144174][ T395] usb 5-1: config 3 interface 245 has no altsetting 0 [ 281.156501][ T395] usb 5-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=3f.ed [ 281.164501][T14251] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.165764][ T395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.180348][ T395] usb 5-1: Product: ⱺ [ 281.184831][ T395] usb 5-1: Manufacturer: à ¬ [ 281.189456][ T395] usb 5-1: SerialNumber: à¡  [ 281.223895][ T36] audit: type=1400 audit(2000000101.559:1203): avc: denied { link } for pid=14250 comm="syz.2.4258" name="file1" dev="overlay" ino=1695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 281.246585][ T36] audit: type=1400 audit(2000000101.559:1204): avc: denied { setattr } for pid=14250 comm="syz.2.4258" name="#56" dev="tmpfs" ino=1696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 281.402717][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.410457][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.418713][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.426488][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.434225][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.441945][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.449611][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.457314][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.465111][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.472817][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.480529][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.488330][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.496037][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.503865][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.511739][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.519451][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.527182][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.534880][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.542604][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.550308][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.558012][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.565821][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.573651][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.581563][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.589938][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.598061][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.606200][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.614066][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.622078][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.629779][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.637689][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.645547][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.653502][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.661289][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.669640][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.677452][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.685538][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.693243][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.700941][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.708680][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.716394][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.724114][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.731875][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.739598][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.747405][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.755157][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.759472][T14262] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 281.763122][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.771887][T14262] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 281.779454][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.797225][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.805213][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.812948][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.820616][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.828437][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.836137][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.843922][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.851601][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.859378][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.867113][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.874804][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.882500][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.890186][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.897925][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.905617][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.913309][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.921079][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.928770][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.936830][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.944533][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.952236][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.959904][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.967592][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.975297][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.983242][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 281.991174][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.000535][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.009198][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.016970][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.024729][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.032687][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.040681][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.049770][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.057508][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.065301][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.076963][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.087377][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.095494][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.103260][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.110968][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.118709][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.126513][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.134248][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.142407][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.150324][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.161930][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.169678][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.177423][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.185176][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.193200][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.203746][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.211464][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.231957][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.239693][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.266097][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.283782][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.301964][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.309827][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.321917][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.329645][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.361973][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.370010][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.382246][ T36] audit: type=1400 audit(2000000102.719:1205): avc: denied { relabelto } for pid=14284 comm="syz.2.4267" name="file0" dev="tmpfs" ino=1717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 282.391956][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.409727][ T36] audit: type=1400 audit(2000000102.719:1206): avc: denied { associate } for pid=14284 comm="syz.2.4267" name="file0" dev="tmpfs" ino=1717 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 282.441924][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.461959][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.469705][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.477597][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.490296][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.498218][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.506046][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.515518][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.523836][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.531897][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.539613][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.547652][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.555696][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.564686][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.573005][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.581267][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.596629][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.607167][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.615839][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.621921][ T1490] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 282.624205][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.639010][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.647615][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.662831][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.676466][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.685125][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.693267][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.701194][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.717684][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.727592][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.736325][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.744316][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.752248][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.752505][T14300] overlayfs: failed to clone upperpath [ 282.760400][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.774155][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.782444][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.791791][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.802931][ T1490] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 282.809134][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.819064][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.824362][ T1490] usb 3-1: config 0 has no interface number 0 [ 282.829543][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.840669][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.851880][ T1490] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 282.862179][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.869985][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.871909][ T1490] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.889967][ T1490] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 282.900302][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.901642][ T1490] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 282.908108][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.937392][ T1490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.940787][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.951881][ T1490] usb 3-1: Product: syz [ 282.954354][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.957413][ T1490] usb 3-1: Manufacturer: syz [ 282.965249][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.977407][ T1490] usb 3-1: SerialNumber: syz [ 282.977696][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 282.982225][T14304] tmpfs: Unknown parameter '' [ 282.990025][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.001541][T14304] netlink: 'syz.5.4277': attribute type 16 has an invalid length. [ 283.002376][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.010356][ T1490] usb 3-1: config 0 descriptor?? [ 283.017990][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.024560][T14304] netlink: 'syz.5.4277': attribute type 25 has an invalid length. [ 283.030503][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.038210][T14304] netlink: 64094 bytes leftover after parsing attributes in process `syz.5.4277'. [ 283.046196][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.055120][T14285] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 283.063089][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.077717][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.085485][ T1490] ftdi_sio 3-1:0.99: FTDI USB Serial Device converter detected [ 283.085759][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.099241][ T1490] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 283.101249][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.115966][T14307] overlayfs: failed to clone upperpath [ 283.121675][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.129641][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.137427][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.145413][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.154850][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.162782][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.170627][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.188669][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.196503][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.198581][T14319] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.4281'. [ 283.204248][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.221272][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.229022][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.233152][T14321] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4282'. [ 283.236759][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.258559][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.266723][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.275177][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.283310][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.291015][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.300922][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.308837][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.316887][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.324966][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.335043][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.343646][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.354588][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.362838][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.366227][T14335] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4287'. [ 283.371777][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.392034][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.400160][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.408481][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.417264][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.426973][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.435855][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.443844][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.458970][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.469055][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.477122][ T31] hid-generic 0003:5EF3549:0061.0010: unknown main item tag 0x0 [ 283.486236][ T31] hid-generic 0003:5EF3549:0061.0010: hidraw0: USB HID vfffff3.d4 Device [syz0] on syz1 [ 283.492527][ T337] usb 3-1: USB disconnect, device number 47 [ 283.503856][ T337] ftdi_sio 3-1:0.99: device disconnected [ 283.523158][T14349] fido_id[14349]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 283.542470][ T395] usb 5-1: USB disconnect, device number 16 [ 283.629548][ T404] tipc: Subscription rejected, illegal request [ 284.005370][ T36] audit: type=1400 audit(2000000104.339:1207): avc: denied { unlink } for pid=8903 comm="syz-executor" name="file0" dev="tmpfs" ino=1717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 284.063950][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.073221][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.181930][ T337] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 284.334721][ T337] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 284.344886][ T337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.353065][ T337] usb 5-1: Product: syz [ 284.357450][ T337] usb 5-1: Manufacturer: syz [ 284.362103][ T337] usb 5-1: SerialNumber: syz [ 284.498337][ T36] audit: type=1326 audit(2000000104.829:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.2.4301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe026d8eba9 code=0x0 [ 284.549648][T14395] sock: sock_timestamping_bind_phc: sock not bind to device [ 284.838326][T14397] veth0_to_team: entered promiscuous mode [ 284.844168][T14397] veth0_to_team: entered allmulticast mode [ 284.853675][T14397] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4302'. [ 285.721957][T12620] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 285.871923][T12620] usb 3-1: Using ep0 maxpacket: 16 [ 285.878293][T12620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.891893][T12620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.902805][T12620] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 285.912283][T12620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.922162][T12620] usb 3-1: config 0 descriptor?? [ 285.963097][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4310'. [ 286.072844][T14421] /dev/loop0: Can't lookup blockdev [ 286.079307][T14421] /dev/loop0: Can't lookup blockdev [ 286.240748][T14444] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4317'. [ 286.250848][T14443] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4317'. [ 286.260195][T14443] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4317'. [ 286.334465][T12620] playstation 0003:054C:05C4.0011: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 286.733851][T12620] playstation 0003:054C:05C4.0011: Invalid reportID received, expected 163 got 1 [ 286.743172][T12620] playstation 0003:054C:05C4.0011: Failed to retrieve DualShock4 firmware info: -22 [ 286.752619][T12620] playstation 0003:054C:05C4.0011: Failed to get firmware info from DualShock4 [ 286.761659][T12620] playstation 0003:054C:05C4.0011: HW/FW version data in sysfs will be invalid. [ 286.911469][ T1490] usb 5-1: USB disconnect, device number 17 [ 286.943642][T14408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.952255][T14408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.976376][T14455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4320'. [ 287.124868][T14468] fuse: Bad value for 'fd' [ 287.130391][T14468] fuse: Bad value for 'fd' [ 287.161256][T14474] tipc: Enabling of bearer rejected, failed to enable media [ 287.864931][T14527] overlayfs: missing 'lowerdir' [ 287.865772][ T36] audit: type=1400 audit(2000000108.199:1209): avc: denied { mounton } for pid=14525 comm="syz.5.4345" path="/410/file0" dev="tmpfs" ino=2316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 288.444514][ T36] audit: type=1326 audit(2000000108.779:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14543 comm="syz.5.4352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc416f8eba9 code=0x0 [ 288.510752][T14545] __nla_validate_parse: 1 callbacks suppressed [ 288.510775][T14545] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4352'. [ 288.526512][T14545] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4352'. [ 288.540510][T12620] playstation 0003:054C:05C4.0011: Failed to retrieve feature with reportID 2: -71 [ 288.551884][T12620] playstation 0003:054C:05C4.0011: Retrying DualShock 4 get calibration report (0x02) request [ 288.563137][T12620] playstation 0003:054C:05C4.0011: Failed to retrieve feature with reportID 2: -71 [ 288.572758][T12620] playstation 0003:054C:05C4.0011: Retrying DualShock 4 get calibration report (0x02) request [ 288.583715][T12620] playstation 0003:054C:05C4.0011: Failed to retrieve feature with reportID 2: -71 [ 288.593268][T12620] playstation 0003:054C:05C4.0011: Failed to retrieve DualShock4 calibration info: -71 [ 288.603865][T12620] playstation 0003:054C:05C4.0011: Invalid gyro calibration data for axis (3), disabling calibration. [ 288.629612][T12620] playstation 0003:054C:05C4.0011: Invalid gyro calibration data for axis (4), disabling calibration. [ 288.640829][T12620] playstation 0003:054C:05C4.0011: Invalid gyro calibration data for axis (5), disabling calibration. [ 288.652104][T12620] playstation 0003:054C:05C4.0011: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 288.663906][T12620] playstation 0003:054C:05C4.0011: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 288.679679][T12620] playstation 0003:054C:05C4.0011: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 288.691524][T12620] playstation 0003:054C:05C4.0011: Failed to get calibration data from DualShock4 [ 288.700891][T12620] playstation 0003:054C:05C4.0011: Gyroscope and accelerometer will be inaccurate. [ 288.711269][T12620] input: HID 054c:05c4 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0011/input/input19 [ 288.725566][T14557] fuse: Bad value for 'fd' [ 288.736201][T12620] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0011/input/input20 [ 288.771337][T12620] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0011/input/input21 [ 288.802744][T12620] playstation 0003:054C:05C4.0011: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 288.817179][T12620] usb 3-1: USB disconnect, device number 48 [ 288.960846][T14572] 9pnet_fd: Insufficient options for proto=fd [ 289.224748][T14585] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.224975][T14585] rust_binder: Error in use_page_slow: ESRCH [ 289.231420][T14585] rust_binder: use_range failure ESRCH [ 289.237520][T14585] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 289.243080][T14585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 289.251162][T14585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:999 [ 289.262326][ T36] audit: type=1400 audit(2000000109.599:1211): avc: denied { map } for pid=14584 comm="syz.2.4364" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 289.703177][ T36] audit: type=1400 audit(2000000110.039:1212): avc: denied { read } for pid=14603 comm="syz.2.4370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.851029][ T36] audit: type=1326 audit(2000000110.179:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.5.4375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc416f8eba9 code=0x0 [ 290.556545][ T36] audit: type=1400 audit(2000000110.889:1214): avc: denied { accept } for pid=14627 comm="syz.4.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.655805][T14636] devpts: called with bogus options [ 290.737334][T14638] overlayfs: failed to clone lowerpath [ 290.938087][T14651] tipc: Enabled bearer , priority 0 [ 290.939029][ T36] audit: type=1400 audit(2000000111.269:1215): avc: denied { create } for pid=14654 comm="syz.5.4388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 290.945814][T14652] tipc: Resetting bearer [ 290.972278][T14655] tipc: Enabling of bearer rejected, failed to enable media [ 290.981435][T14651] syzkaller0: entered promiscuous mode [ 291.023424][ T36] audit: type=1326 audit(2000000111.359:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14650 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe026d8eba9 code=0x7fc00000 [ 291.047113][T14651] tipc: Resetting bearer [ 291.053939][T14651] tipc: Disabling bearer [ 291.394868][T14672] rust_binder: validate_parent_fixup: new_min_offset=21, sg_entry.length=0 [ 291.394901][T14672] rust_binder: Error while translating object. [ 291.403749][T14672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 291.410019][T14672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201 [ 291.656457][T14684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 291.666104][T14684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 292.127729][ T36] audit: type=1400 audit(2000000112.459:1217): avc: denied { read } for pid=14686 comm="syz.5.4399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.842419][T14704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.928940][T14708] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4405'. [ 294.172120][T14747] netlink: 'syz.4.4411': attribute type 4 has an invalid length. [ 294.321462][T14763] overlayfs: failed to clone upperpath [ 294.391911][ T1490] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 294.418475][T14773] overlayfs: failed to clone upperpath [ 294.448676][T14777] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 294.541894][ T1490] usb 3-1: Using ep0 maxpacket: 8 [ 294.548103][ T1490] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 294.558583][ T1490] usb 3-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0 [ 294.567713][ T1490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.577741][ T1490] ftdi_sio 3-1:254.0: Ignoring interface reserved for JTAG [ 294.787128][T14752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.795921][T14752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.804932][ T1490] usb 3-1: USB disconnect, device number 49 [ 294.893344][T14788] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 294.902155][T14788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 295.364395][T14822] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 295.371734][T14822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1024 [ 295.681961][ T1490] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 295.841889][ T1490] usb 3-1: Using ep0 maxpacket: 8 [ 295.847965][ T1490] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 295.857163][ T1490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.867490][ T1490] usb 3-1: config 0 descriptor?? [ 295.982972][T14849] overlayfs: failed to clone upperpath [ 296.076864][ T1490] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 296.086900][ T1490] asix 3-1:0.0: probe with driver asix failed with error -32 [ 296.113202][ T1490] usb 3-1: USB disconnect, device number 50 [ 296.142730][T14861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.143504][T14861] rust_binder: 1031: no such ref 0 [ 296.691963][T14907] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 297.020482][T14931] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4473'. [ 297.040933][ T36] audit: type=1326 audit(2000000117.369:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 297.064984][ T36] audit: type=1326 audit(2000000117.369:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 297.090227][ T36] audit: type=1326 audit(2000000117.369:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 297.116321][ T36] audit: type=1326 audit(2000000117.369:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 297.141061][ T36] audit: type=1326 audit(2000000117.369:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 297.166772][ T36] audit: type=1326 audit(2000000117.369:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.5.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc416f8eba9 code=0x7ffc0000 [ 297.350543][T14969] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 297.601900][ T66] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 297.731894][ T66] usb 3-1: device descriptor read/64, error -71 [ 297.971907][ T66] usb 3-1: device descriptor read/64, error -71 [ 298.177771][T15029] overlayfs: failed to clone upperpath [ 298.211920][ T66] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 298.351914][ T66] usb 3-1: device descriptor read/64, error -71 [ 298.591900][ T66] usb 3-1: device descriptor read/64, error -71 [ 298.702058][ T66] usb usb3-port1: attempt power cycle [ 299.027142][T15043] tipc: Enabling of bearer rejected, failed to enable media [ 299.051903][ T66] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 299.066144][T15048] fuse: Bad value for 'fd' [ 299.071608][T15048] overlay: ./file0 is not a directory [ 299.082979][ T66] usb 3-1: device descriptor read/8, error -71 [ 299.212919][ T66] usb 3-1: device descriptor read/8, error -71 [ 299.287149][T15056] netlink: 'syz.5.4511': attribute type 27 has an invalid length. [ 299.302970][T15056] veth0_to_team: left promiscuous mode [ 299.308502][T15056] veth0_to_team: left allmulticast mode [ 299.451937][ T66] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 299.473167][ T66] usb 3-1: device descriptor read/8, error -71 [ 299.603019][ T66] usb 3-1: device descriptor read/8, error -71 [ 299.712237][ T66] usb usb3-port1: unable to enumerate USB device [ 300.006700][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4518'. [ 300.497128][ T36] audit: type=1400 audit(2000000120.829:1224): avc: denied { remount } for pid=15093 comm="syz.2.4522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 300.544437][T15101] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4525'. [ 300.552643][ T36] audit: type=1400 audit(2000000120.879:1225): avc: denied { ioctl } for pid=15102 comm="syz.5.4526" path="socket:[64779]" dev="sockfs" ino=64779 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 300.646418][T15105] fuse: Bad value for 'user_id' [ 300.651347][T15105] fuse: Bad value for 'user_id' [ 301.071962][T15110] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.4529'. [ 301.082483][T15110] incfs: Error accessing: ./file0. [ 301.087720][T15110] incfs: mount failed -20 [ 301.092894][ T36] audit: type=1400 audit(2000000121.429:1226): avc: denied { watch } for pid=15109 comm="syz.5.4529" path="/file0" dev="rootfs" ino=5659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 301.103542][T15117] fuse: Unknown parameter 'Fd' [ 301.149749][ T36] audit: type=1326 audit(2000000121.479:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.4.4534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7c898eba9 code=0x0 [ 301.705646][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4537'. [ 301.714781][T15135] netlink: 'syz.5.4537': attribute type 6 has an invalid length. [ 301.983262][T15141] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4538'. [ 302.219189][T15161] overlayfs: failed to resolve './file0': -2 [ 302.224978][T15162] netlink: 'syz.5.4543': attribute type 27 has an invalid length. [ 302.288614][T15161] rust_binder: Write failure EFAULT in pid:1106 [ 302.356036][T15167] /dev/rnullb0: Can't lookup blockdev [ 302.508492][T15170] 9pnet_fd: Insufficient options for proto=fd [ 302.879331][T15180] overlayfs: failed to clone upperpath [ 302.890536][T15189] fuse: Unknown parameter 'smackfstransmute' [ 316.196735][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 316.196754][ T36] audit: type=1326 audit(2000000136.529:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.4.4568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7c898eba9 code=0x0 [ 316.225750][ T36] audit: type=1326 audit(2000000136.529:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.4.4568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7c898eba9 code=0x0 [ 316.252722][T15229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.254169][T15229] rust_binder: Error in use_page_slow: ESRCH [ 316.260721][T15229] rust_binder: use_range failure ESRCH [ 316.266789][T15229] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 316.272347][T15229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 316.280353][T15229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1118 [ 316.335067][T15240] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.394556][ T36] audit: type=1400 audit(2000000136.729:1232): avc: denied { accept } for pid=15243 comm="syz.4.4574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 316.439580][ T36] audit: type=1326 audit(2000000136.769:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.4.4576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7c898eba9 code=0x0 [ 316.581948][ T1490] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 316.732882][ T1490] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 316.742092][ T1490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.750770][ T1490] usb 3-1: config 0 descriptor?? [ 316.836341][T15253] fuse: Unknown parameter 'grou“’_þ‰jWjNÉ' [ 316.844641][T15253] fuse: Bad value for 'group_id' [ 316.844641][T15254] fuse: Bad value for 'group_id' [ 316.844663][T15253] fuse: Bad value for 'group_id' [ 316.849618][T15254] fuse: Bad value for 'group_id' [ 316.935075][T15273] overlayfs: failed to clone upperpath [ 316.974488][T15276] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4583'. [ 317.162643][ T1490] usb 3-1: Cannot read MAC address [ 317.168471][ T1490] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 317.511281][T15420] tipc: Trying to set illegal importance in message [ 317.577982][T15427] fuse: Bad value for 'user_id' [ 317.583039][T15427] fuse: Bad value for 'user_id' [ 317.635097][T15431] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.642349][T15431] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.649733][T15431] bridge0: entered promiscuous mode [ 317.655032][T15431] bridge0: entered allmulticast mode [ 317.662937][T15431] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.670101][T15431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.677472][T15431] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.684564][T15431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.229052][T15478] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4609'. [ 318.857784][T15497] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4617'. [ 318.866922][T15497] netlink: 59 bytes leftover after parsing attributes in process `syz.5.4617'. [ 318.876019][T15497] netlink: 59 bytes leftover after parsing attributes in process `syz.5.4617'. [ 318.953210][T15502] netlink: 'syz.4.4619': attribute type 29 has an invalid length. [ 318.961265][T15502] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4619'. [ 319.344653][ T66] usb 3-1: USB disconnect, device number 55 [ 319.370031][T15524] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4627'. [ 319.394005][T15526] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 319.394400][T15526] rust_binder: Error in use_page_slow: ESRCH [ 319.400914][T15526] rust_binder: use_range failure ESRCH [ 319.407078][T15526] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 319.413186][T15526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 319.421224][T15526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1127 [ 319.536023][T15539] overlayfs: failed to clone upperpath [ 319.584778][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4636'. [ 319.785808][T15560] overlayfs: failed to clone upperpath [ 319.941921][ T66] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 320.071895][ T66] usb 3-1: device descriptor read/64, error -71 [ 320.311920][ T66] usb 3-1: device descriptor read/64, error -71 [ 320.551879][ T66] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 320.681873][ T66] usb 3-1: device descriptor read/64, error -71 [ 320.921910][ T66] usb 3-1: device descriptor read/64, error -71 [ 321.032162][ T66] usb usb3-port1: attempt power cycle [ 321.066779][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4654'. [ 321.371118][T15631] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 321.371913][ T66] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 321.409388][ T66] usb 3-1: device descriptor read/8, error -71 [ 321.547715][T15645] overlayfs: failed to clone upperpath [ 321.563776][ T66] usb 3-1: device descriptor read/8, error -71 [ 321.801897][ T66] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 321.830296][ T66] usb 3-1: device descriptor read/8, error -71 [ 321.831883][T15679] /dev/loop0: Can't lookup blockdev [ 321.887885][T15689] gre0: entered promiscuous mode [ 321.892955][T15689] gre0: entered allmulticast mode [ 321.983012][ T66] usb 3-1: device descriptor read/8, error -71 [ 322.091988][ T66] usb usb3-port1: unable to enumerate USB device [ 337.503359][T15700] rust_binder: Got transaction with invalid offset. [ 337.503406][T15700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.510160][T15700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 337.831879][ T337] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 337.991880][ T337] usb 3-1: Invalid ep0 maxpacket: 64 [ 338.121896][ T337] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 338.271882][ T337] usb 3-1: Invalid ep0 maxpacket: 64 [ 338.277323][ T337] usb usb3-port1: attempt power cycle [ 338.621907][ T337] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 338.642294][ T337] usb 3-1: Invalid ep0 maxpacket: 64 [ 338.771921][ T337] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 338.792305][ T337] usb 3-1: Invalid ep0 maxpacket: 64 [ 338.797886][ T337] usb usb3-port1: unable to enumerate USB device [ 340.544307][T15768] veth0_virt_wifi: entered allmulticast mode [ 340.603968][T15767] veth0_virt_wifi: left allmulticast mode [ 340.619211][ T36] audit: type=1400 audit(2000000160.949:1234): avc: denied { ioctl } for pid=15769 comm="syz.2.4710" path="/" dev="configfs" ino=2678 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.642912][ T36] audit: type=1400 audit(2000000160.949:1235): avc: denied { mounton } for pid=15769 comm="syz.2.4710" path="/" dev="configfs" ino=2678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.884078][T15802] fuse: Unknown parameter '0x0000000000000007' [ 341.550059][T15843] SELinux: failed to load policy [ 341.556129][T15843] rust_binder: Write failure EFAULT in pid:1162 [ 341.570874][T15845] binder: Unknown parameter 'defcontext01777777777777777777777' [ 341.645141][T15851] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 341.653502][T15851] rust_binder: Write failure EINVAL in pid:1170 [ 342.545906][T15884] netlink: 'syz.5.4752': attribute type 3 has an invalid length. [ 342.560020][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4752'. [ 342.580877][T15887] net_ratelimit: 182 callbacks suppressed [ 342.580901][T15887] sock: sock_set_timeout: `syz.5.4753' (pid 15887) tries to set negative timeout [ 342.599092][T15891] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 342.634338][T15900] futex_wake_op: syz.5.4757 tries to shift op by 32; fix this program [ 342.841880][ T337] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 343.001955][ T337] usb 3-1: config 0 has no interfaces? [ 343.029338][ T337] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 343.039958][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 343.049000][ T337] usb 3-1: SerialNumber: syz [ 343.061561][ T337] usb 3-1: config 0 descriptor?? [ 343.270684][ T337] usb 3-1: USB disconnect, device number 64 [ 343.697364][T15972] veth0_virt_wifi: entered allmulticast mode [ 343.796742][T15977] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 343.804032][T15977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1179 [ 343.966083][ T36] audit: type=1326 audit(2000000164.299:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15995 comm="syz.2.4788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe026d8eba9 code=0x0 [ 344.077802][T16006] rust_binder: Write failure EFAULT in pid:289 [ 344.104459][T16010] rust_binder: validate_parent_fixup: new_min_offset=144115188075855932, sg_entry.length=0 [ 344.110698][T16010] rust_binder: Error while translating object. [ 344.120859][T16010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 344.127147][T16010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 344.278789][T15970] veth0_virt_wifi: left allmulticast mode [ 344.831722][T16023] rust_binder: Write failure EFAULT in pid:1198 [ 344.846749][T16025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1200 [ 344.995376][T16031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1206 [ 345.004755][T16032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1206 [ 345.021177][T16031] rust_binder: Read failure Err(EFAULT) in pid:1206 [ 345.049881][T16035] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 345.066420][T16035] SELinux: failed to load policy [ 345.071708][T16035] netlink: 'syz.2.4802': attribute type 4 has an invalid length. [ 345.082972][T16035] netlink: 'syz.2.4802': attribute type 17 has an invalid length. [ 345.097402][T16035] tipc: Enabled bearer , priority 0 [ 345.105547][T16035] tipc: Disabling bearer [ 345.208311][T16050] random: crng reseeded on system resumption [ 345.356338][T16066] fuse: Unknown parameter '0000000000000000000000501777777777777777777777017777777777777777777770xffffffffffffffff' [ 346.069839][T16089] netlink: 1351 bytes leftover after parsing attributes in process `syz.2.4820'. [ 347.024668][T16097] binder: Unknown parameter 'dont_measure' [ 347.157323][T16104] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 347.222960][T16115] fuse: Unknown parameter 'ÿ' [ 347.245063][T16118] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 347.252334][T16118] rust_binder: Write failure EINVAL in pid:309 [ 347.266952][T16122] rust_binder: Error while translating object. [ 347.273328][T16122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 347.279560][T16122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:311 [ 347.433104][T16137] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 347.679354][T16142] tipc: Enabling of bearer rejected, failed to enable media [ 347.893202][T16151] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4841'. [ 348.278941][T16167] tipc: Enabling of bearer rejected, failed to enable media [ 349.300981][T16209] fuse: Unknown parameter 'max_r' [ 349.306616][T16209] fuse: Bad value for 'fd' [ 349.441873][ T337] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 349.591893][ T337] usb 3-1: Using ep0 maxpacket: 32 [ 349.598286][ T337] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 349.606728][ T337] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 349.615410][ T337] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 349.624405][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 349.634122][ T337] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 349.643797][ T337] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 349.656818][ T337] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 349.665913][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.674835][ T337] usb 3-1: config 0 descriptor?? [ 349.890564][ T337] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 349.895526][T16235] overlayfs: failed to clone upperpath [ 349.904525][ T337] usb 3-1: USB disconnect, device number 66 [ 349.916456][ T337] usblp0: removed [ 350.165129][T16253] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4874'. [ 350.331893][ T337] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 350.481895][ T337] usb 3-1: Using ep0 maxpacket: 32 [ 350.488111][ T337] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 350.496544][ T337] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 350.505242][ T337] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 350.514235][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 350.524071][ T337] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 350.533781][ T337] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.546847][ T337] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 350.555930][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.564658][ T337] usb 3-1: config 0 descriptor?? [ 350.772709][ T10] rust_binder: 0: removing orphan mapping 0:4208 [ 350.802362][ T337] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 350.848587][T16276] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4884'. [ 350.915935][T16277] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.923135][T16277] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.930516][T16277] bridge_slave_0: entered allmulticast mode [ 350.936897][T16277] bridge_slave_0: entered promiscuous mode [ 350.943498][T16277] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.950585][T16277] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.957733][T16277] bridge_slave_1: entered allmulticast mode [ 350.964056][T16277] bridge_slave_1: entered promiscuous mode [ 351.000703][ T1490] usb 3-1: USB disconnect, device number 67 [ 351.007753][ T1490] usblp0: removed [ 351.027786][T16277] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.034875][T16277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.042203][T16277] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.049251][T16277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.071219][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.078664][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.393974][ T404] bridge_slave_1: left allmulticast mode [ 351.399755][ T404] bridge_slave_1: left promiscuous mode [ 351.405483][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.465889][ T726] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.472978][ T726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.482251][ T724] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.489332][ T724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.514732][T16277] veth0_vlan: entered promiscuous mode [ 351.527287][T16277] veth1_macvtap: entered promiscuous mode [ 351.553091][T16298] can0: slcan on ttyS3. [ 351.559802][ T36] audit: type=1400 audit(2000000171.889:1237): avc: denied { lock } for pid=16297 comm="syz.2.4889" path="socket:[69533]" dev="sockfs" ino=69533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 351.602560][ T404] tipc: Disabling bearer [ 351.608063][ T404] tipc: Left network mode [ 351.762908][T16319] overlayfs: failed to clone upperpath [ 351.768884][T16320] overlayfs: failed to clone upperpath [ 351.789343][ T404] veth1_macvtap: left promiscuous mode [ 351.796552][ T404] veth0_vlan: left promiscuous mode [ 351.821917][ T1490] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 351.971913][ T1490] usb 3-1: Using ep0 maxpacket: 16 [ 351.978190][ T1490] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.988489][ T1490] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 352.003258][ T1490] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.012453][ T1490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.020483][ T1490] usb 3-1: Product: syz [ 352.025017][ T1490] usb 3-1: Manufacturer: syz [ 352.030067][ T1490] usb 3-1: SerialNumber: syz [ 352.035791][T16342] /dev/rnullb0: Can't lookup blockdev [ 352.041539][ T1490] usb 3-1: config 0 descriptor?? [ 352.253472][ T1490] usb 3-1: USB disconnect, device number 68 [ 352.313892][T16298] can0 (unregistered): slcan off ttyS3. [ 352.365567][ T36] audit: type=1400 audit(2000000172.699:1238): avc: denied { module_load } for pid=16357 comm="syz.7.4900" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=68479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 352.512612][T16375] 9p: Unknown access argument _º÷PÛL«Š: -22 [ 353.112053][ T31] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 353.241898][ T31] usb 6-1: device descriptor read/64, error -71 [ 353.293723][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4916'. [ 353.333892][T16434] overlayfs: failed to clone upperpath [ 353.353722][T16432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1290 [ 353.481864][ T31] usb 6-1: device descriptor read/64, error -71 [ 353.614497][T16464] rust_binder: Error while translating object. [ 353.614526][T16464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 353.620721][T16464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1295 [ 353.630318][T16463] overlayfs: failed to resolve './file0': -2 [ 353.731898][ T31] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 353.861916][ T31] usb 6-1: device descriptor read/64, error -71 [ 353.973475][T16477] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 353.980553][T16477] overlayfs: failed to set xattr on upper [ 353.986360][T16477] overlayfs: ...falling back to redirect_dir=nofollow. [ 353.993326][T16477] overlayfs: ...falling back to uuid=null. [ 354.011894][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 354.102222][ T31] usb 6-1: device descriptor read/64, error -71 [ 354.171864][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 354.192906][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 354.201313][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 354.212335][ T31] usb usb6-port1: attempt power cycle [ 354.216620][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 354.227190][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 354.242908][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 354.252854][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 354.266086][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 354.287650][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.298590][ T10] usb 3-1: config 0 descriptor?? [ 354.365542][T16504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4940'. [ 354.397690][T16507] netlink: 'syz.4.4941': attribute type 2 has an invalid length. [ 354.525564][T16515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.537651][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 354.549732][ T10] usb 3-1: USB disconnect, device number 69 [ 354.556747][ T10] usblp0: removed [ 354.562023][ T31] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 354.563475][T16515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.603051][ T31] usb 6-1: device descriptor read/8, error -71 [ 354.736353][ T31] usb 6-1: device descriptor read/8, error -71 [ 354.744827][ T36] audit: type=1400 audit(2000000175.079:1239): avc: denied { setattr } for pid=16533 comm="syz.4.4949" name="/" dev="configfs" ino=2678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 354.971874][ T337] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 354.991894][ T31] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 355.012996][ T31] usb 6-1: device descriptor read/8, error -71 [ 355.121871][ T337] usb 3-1: Using ep0 maxpacket: 8 [ 355.128017][ T337] usb 3-1: config 0 has an invalid interface number: 72 but max is 0 [ 355.136228][ T337] usb 3-1: config 0 has no interface number 0 [ 355.143652][ T337] usb 3-1: New USB device found, idVendor=0403, idProduct=7151, bcdDevice=1b.16 [ 355.152782][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.153118][ T31] usb 6-1: device descriptor read/8, error -71 [ 355.160786][ T337] usb 3-1: Product: syz [ 355.160806][ T337] usb 3-1: Manufacturer: syz [ 355.160823][ T337] usb 3-1: SerialNumber: syz [ 355.181285][ T337] usb 3-1: config 0 descriptor?? [ 355.187143][ T337] hub 3-1:0.72: bad descriptor, ignoring hub [ 355.193276][ T337] hub 3-1:0.72: probe with driver hub failed with error -5 [ 355.200898][ T337] ftdi_sio 3-1:0.72: FTDI USB Serial Device converter detected [ 355.209350][ T337] ftdi_sio ttyUSB0: unknown device type: 0x1b16 [ 355.272002][ T31] usb usb6-port1: unable to enumerate USB device [ 355.561969][ T337] usb 3-1: USB disconnect, device number 70 [ 355.577857][ T337] ftdi_sio 3-1:0.72: device disconnected [ 356.124675][T16607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4975'. [ 356.178176][T16614] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.178316][T16614] rust_binder: Error while translating object. [ 356.184918][T16614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 356.191127][T16614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1326 [ 356.210393][T16616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.222185][ T36] audit: type=1404 audit(2000000176.559:1240): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 356.243727][ T36] audit: type=1400 audit(2000000176.559:1241): avc: denied { ioctl } for pid=16619 comm="syz.2.4979" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 356.288870][ T36] audit: type=1400 audit(2000000176.619:1242): avc: denied { read write } for pid=8903 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 356.313624][ T332] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 356.321972][ T36] audit: type=1400 audit(2000000176.629:1243): avc: denied { read } for pid=16622 comm="syz.2.4980" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 356.348937][ T36] audit: type=1400 audit(2000000176.639:1244): avc: denied { read write } for pid=8903 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 356.376111][ T36] audit: type=1400 audit(2000000176.649:1245): avc: denied { create } for pid=16624 comm="syz.2.4981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 356.397370][ T36] audit: type=1400 audit(2000000176.669:1246): avc: denied { read write } for pid=8903 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 356.510511][T16641] netlink: 'syz.2.4986': attribute type 4 has an invalid length. [ 356.518456][T16641] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4986'. [ 356.603684][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 356.603703][ T36] audit: type=1400 audit(2000000176.939:1303): avc: denied { mounton } for pid=16644 comm="syz.2.4988" path="/436/file0" dev="tmpfs" ino=2405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 356.632629][ T36] audit: type=1400 audit(2000000176.939:1304): avc: denied { remount } for pid=16644 comm="syz.2.4988" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 356.844127][ T36] audit: type=1400 audit(2000000177.179:1305): avc: denied { mounton } for pid=16648 comm="syz.4.4989" path="/298/file0" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=0 [ 356.880188][ T36] audit: type=1400 audit(2000000177.209:1306): avc: denied { read write } for pid=16277 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 356.904684][ T36] audit: type=1400 audit(2000000177.229:1307): avc: denied { read write } for pid=16277 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 356.929337][ T36] audit: type=1400 audit(2000000177.259:1308): avc: denied { read write } for pid=16277 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 356.954389][ T36] audit: type=1400 audit(2000000177.259:1309): avc: denied { read } for pid=16659 comm="syz.5.4992" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 356.977453][ T36] audit: type=1400 audit(2000000177.259:1310): avc: denied { mounton } for pid=16659 comm="syz.5.4992" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 356.999896][ T36] audit: type=1400 audit(2000000177.259:1311): avc: denied { mounton } for pid=16659 comm="syz.5.4992" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 357.023216][ T36] audit: type=1400 audit(2000000177.269:1312): avc: denied { read write } for pid=16277 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 357.791981][T16700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16700 comm=syz.2.5008 [ 358.562695][T16746] netlink: 25 bytes leftover after parsing attributes in process `syz.4.5026'. [ 358.725170][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5040'. [ 358.777132][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5043'. [ 359.066712][T16827] pim6reg1: entered promiscuous mode [ 359.072159][T16827] pim6reg1: entered allmulticast mode [ 359.194300][T16844] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5061'. [ 359.805191][T16912] sit0: entered promiscuous mode [ 359.811198][T16912] netlink: 'syz.7.5084': attribute type 1 has an invalid length. [ 359.819084][T16912] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5084'. [ 359.970068][T16941] binfmt_misc: register: failed to install interpreter file ./cgroup [ 361.358927][T17069] netlink: 'syz.2.5146': attribute type 13 has an invalid length. [ 362.061078][ T36] kauditd_printk_skb: 767 callbacks suppressed [ 362.061097][ T36] audit: type=1400 audit(2000000182.389:1894): avc: denied { read write } for pid=8903 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 362.092475][ T36] audit: type=1400 audit(2000000182.399:1895): avc: denied { read write } for pid=17109 comm="syz.2.5160" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 362.115904][ T36] audit: type=1400 audit(2000000182.399:1896): avc: denied { read } for pid=17109 comm="syz.2.5160" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 362.138884][ T36] audit: type=1400 audit(2000000182.399:1897): avc: denied { create } for pid=17109 comm="syz.2.5160" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 362.175717][ T36] audit: type=1400 audit(2000000182.399:1898): avc: denied { read write } for pid=17109 comm="syz.2.5160" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 362.200185][ T36] audit: type=1400 audit(2000000182.409:1899): avc: denied { name_bind } for pid=17109 comm="syz.2.5160" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 362.223602][ T36] audit: type=1400 audit(2000000182.429:1900): avc: denied { read write } for pid=8903 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 362.248543][ T36] audit: type=1400 audit(2000000182.439:1901): avc: denied { read write } for pid=17111 comm="syz.2.5161" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 362.274601][ T36] audit: type=1400 audit(2000000182.439:1902): avc: denied { mounton } for pid=17111 comm="syz.2.5161" path="/485/file0" dev="tmpfs" ino=2664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 362.297961][ T36] audit: type=1400 audit(2000000182.439:1903): avc: denied { read } for pid=17111 comm="syz.2.5161" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 363.909702][T17219] netlink: 'syz.7.5199': attribute type 13 has an invalid length. [ 363.917834][T17219] erspan0: refused to change device tx_queue_len [ 364.381935][ T1945] Bluetooth: hci0: command 0x1003 tx timeout [ 364.381979][ T1946] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 364.426560][T17244] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5209'. [ 364.522565][T17269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5211'. [ 365.565512][T17348] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 365.648398][T17364] can0: slcan on ttyS3. [ 365.703820][T17363] can0 (unregistered): slcan off ttyS3. [ 366.470010][T17447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17447 comm=syz.4.5276 [ 366.638173][T17467] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5284'. [ 367.061906][ T36] kauditd_printk_skb: 13117 callbacks suppressed [ 367.061927][ T36] audit: type=1400 audit(2000000187.399:14835): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.070480][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 367.089500][ T36] audit: type=1400 audit(2000000187.399:14836): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.096396][ T150] audit: audit_lost=125 audit_rate_limit=0 audit_backlog_limit=64 [ 367.117238][ T36] audit: type=1400 audit(2000000187.399:14837): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.125044][ T150] audit: backlog limit exceeded [ 367.146199][ T36] audit: type=1400 audit(2000000187.399:14838): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.151509][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 367.171936][ T36] audit: type=1400 audit(2000000187.399:14839): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.178916][ T150] audit: audit_lost=126 audit_rate_limit=0 audit_backlog_limit=64 [ 367.396639][T17504] netlink: 'syz.2.5297': attribute type 15 has an invalid length. [ 368.495754][T17563] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5320'. [ 368.961353][T17600] 8021q: VLANs not supported on lo [ 369.403731][T17610] futex_wake_op: syz.5.5336 tries to shift op by -1; fix this program [ 371.696136][T17754] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.715249][T17754] serio: Serial port ptm0 [ 371.912946][T17771] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5393'. [ 372.072171][ T150] audit_log_start: 42458 callbacks suppressed [ 372.072210][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 372.078840][ T36] audit: type=1400 audit(2000000192.329:54789): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.085314][ T150] audit: audit_lost=963 audit_rate_limit=0 audit_backlog_limit=64 [ 372.085348][ T150] audit: backlog limit exceeded [ 372.085474][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 372.085490][ T150] audit: audit_lost=964 audit_rate_limit=0 audit_backlog_limit=64 [ 372.085508][ T150] audit: backlog limit exceeded [ 372.085616][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 372.085645][ T150] audit: audit_lost=965 audit_rate_limit=0 audit_backlog_limit=64 [ 372.085662][ T150] audit: backlog limit exceeded [ 372.271478][T17787] x_tables: duplicate underflow at hook 2 [ 372.401394][T17812] netlink: 'syz.7.5405': attribute type 13 has an invalid length. [ 373.347631][T17877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=17877 comm=syz.4.5430 [ 374.735011][T17992] netlink: 'syz.5.5473': attribute type 4 has an invalid length. [ 374.743300][T17992] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5473'. [ 374.819813][T17998] pim6reg1: entered promiscuous mode [ 374.826024][T17998] pim6reg1: entered allmulticast mode [ 374.993730][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5484'. [ 375.030319][T18029] netlink: 'syz.5.5485': attribute type 4 has an invalid length. [ 375.754214][T18086] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.761516][T18086] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.081908][ T36] kauditd_printk_skb: 45407 callbacks suppressed [ 377.081943][ T36] audit: type=1400 audit(2000000197.419:94461): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.094232][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 377.109619][ T36] audit: type=1400 audit(2000000197.419:94462): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.116369][ T150] audit: audit_lost=2878 audit_rate_limit=0 audit_backlog_limit=64 [ 377.137234][ T36] audit: type=1400 audit(2000000197.419:94463): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.145212][ T150] audit: backlog limit exceeded [ 377.167229][ T36] audit: type=1400 audit(2000000197.419:94464): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.171783][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 377.192128][ T36] audit: type=1400 audit(2000000197.419:94465): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.198611][ T150] audit: audit_lost=2879 audit_rate_limit=0 audit_backlog_limit=64 [ 377.341840][ T1946] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 377.342006][ T1945] Bluetooth: hci0: command 0x1003 tx timeout [ 377.414587][T18140] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5528'. [ 382.091869][ T36] kauditd_printk_skb: 38751 callbacks suppressed [ 382.091890][ T36] audit: type=1400 audit(2000000202.419:133066): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.105948][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 382.119650][ T36] audit: type=1400 audit(2000000202.429:133067): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.126568][ T150] audit: audit_lost=2930 audit_rate_limit=0 audit_backlog_limit=64 [ 382.147249][ T36] audit: type=1400 audit(2000000202.429:133068): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.155557][ T150] audit: backlog limit exceeded [ 382.176350][ T36] audit: type=1400 audit(2000000202.429:133069): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.182076][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 382.202393][ T36] audit: type=1400 audit(2000000202.429:133070): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.216331][ T150] audit: audit_lost=2931 audit_rate_limit=0 audit_backlog_limit=64 [ 387.101930][ T36] kauditd_printk_skb: 50286 callbacks suppressed [ 387.101948][ T36] audit: type=1400 audit(2000000207.439:183356): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.110385][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 387.129747][ T36] audit: type=1400 audit(2000000207.439:183357): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.136082][ T150] audit: audit_lost=2932 audit_rate_limit=0 audit_backlog_limit=64 [ 387.157792][ T36] audit: type=1400 audit(2000000207.439:183358): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.165556][ T150] audit: backlog limit exceeded [ 387.186821][ T36] audit: type=1400 audit(2000000207.439:183359): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.192249][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 387.212731][ T36] audit: type=1400 audit(2000000207.439:183360): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.219460][ T150] audit: audit_lost=2933 audit_rate_limit=0 audit_backlog_limit=64 [ 392.111871][ T36] kauditd_printk_skb: 50623 callbacks suppressed [ 392.111891][ T36] audit: type=1400 audit(2000000212.449:233983): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.119799][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 392.139575][ T36] audit: type=1400 audit(2000000212.449:233984): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.146049][ T150] audit: audit_lost=2934 audit_rate_limit=0 audit_backlog_limit=64 [ 392.167683][ T36] audit: type=1400 audit(2000000212.449:233985): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.175102][ T150] audit: backlog limit exceeded [ 392.196298][ T36] audit: type=1400 audit(2000000212.449:233986): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.201608][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 392.222261][ T36] audit: type=1400 audit(2000000212.449:233987): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.228688][ T150] audit: audit_lost=2935 audit_rate_limit=0 audit_backlog_limit=64 [ 393.160707][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5593'. [ 393.181857][T18340] erspan0: default FDB implementation only supports local addresses [ 393.200601][T18340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=18340 comm=syz.7.5593 [ 394.582148][T18427] netlink: 'syz.4.5623': attribute type 13 has an invalid length. [ 394.665144][T18441] netlink: 'syz.4.5627': attribute type 16 has an invalid length. [ 394.808580][T18467] cannot load conntrack support for proto=3 [ 394.957981][T18488] netlink: 'syz.7.5644': attribute type 4 has an invalid length. [ 394.965907][T18488] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5644'. [ 395.070155][T18507] ip6gretap0: mtu less than device minimum [ 395.428317][T18560] netlink: 'syz.5.5672': attribute type 16 has an invalid length. [ 395.442035][T18560] netlink: 'syz.5.5672': attribute type 25 has an invalid length. [ 395.450613][T18560] netlink: 64094 bytes leftover after parsing attributes in process `syz.5.5672'. [ 395.627485][T18585] can0: slcan on ttyS3. [ 395.772326][T18584] can0 (unregistered): slcan off ttyS3. [ 396.817691][T18699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18699 comm=syz.4.5719 [ 397.121845][ T36] kauditd_printk_skb: 33489 callbacks suppressed [ 397.121865][ T36] audit: type=1400 audit(2000000217.454:266901): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.150528][ T36] audit: type=1400 audit(2000000217.464:266902): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.161516][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.172942][ T36] audit: type=1400 audit(2000000217.464:266903): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.178605][ T150] audit: audit_lost=3151 audit_rate_limit=0 audit_backlog_limit=64 [ 397.200840][ T36] audit: type=1400 audit(2000000217.464:266904): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.210719][ T150] audit: backlog limit exceeded [ 397.237682][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.240400][T18703] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.245406][ T150] audit: audit_lost=3152 audit_rate_limit=0 audit_backlog_limit=64 [ 397.333409][ T404] bridge_slave_1: left allmulticast mode [ 397.339757][ T404] bridge_slave_1: left promiscuous mode [ 397.346878][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.358433][ T404] bridge_slave_0: left allmulticast mode [ 397.364794][ T404] bridge_slave_0: left promiscuous mode [ 397.379035][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.542970][ T404] tipc: Left network mode [ 397.624310][ T404] veth1_macvtap: left promiscuous mode [ 397.629950][ T404] veth0_vlan: left promiscuous mode [ 402.131913][ T36] kauditd_printk_skb: 11756 callbacks suppressed [ 402.131932][ T36] audit: type=1400 audit(2000000222.474:278658): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 402.160371][ T36] audit: type=1400 audit(2000000222.474:278659): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 402.171321][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 402.182622][ T36] audit: type=1400 audit(2000000222.474:278660): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 402.188262][ T150] audit: audit_lost=3154 audit_rate_limit=0 audit_backlog_limit=64 [ 402.210218][ T36] audit: type=1400 audit(2000000222.474:278661): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 402.217282][ T150] audit: backlog limit exceeded [ 402.239228][ T36] audit: type=1400 audit(2000000222.474:278662): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 402.245703][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 402.265496][ T36] audit: type=1400 audit(2000000222.474:278663): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.142254][ T36] kauditd_printk_skb: 12478 callbacks suppressed [ 407.142273][ T36] audit: type=1400 audit(2000000227.484:291032): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.198850][ T36] audit: type=1400 audit(2000000227.504:291033): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.226917][ T36] audit: type=1400 audit(2000000227.514:291034): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.249556][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 407.256149][ T150] audit: audit_lost=3192 audit_rate_limit=0 audit_backlog_limit=64 [ 407.265233][ T150] audit: backlog limit exceeded [ 407.270575][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 407.278350][ T36] audit: type=1400 audit(2000000227.514:291035): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.300432][ T150] audit: audit_lost=3193 audit_rate_limit=0 audit_backlog_limit=64 [ 407.309170][ T150] audit: backlog limit exceeded [ 410.341607][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5754'. [ 412.110804][T18814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18814 comm=syz.4.5758 [ 412.154458][ T36] kauditd_printk_skb: 12244 callbacks suppressed [ 412.154477][ T36] audit: type=1400 audit(2000000232.494:303232): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.182793][ T36] audit: type=1400 audit(2000000232.494:303233): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.204560][ T36] audit: type=1400 audit(2000000232.494:303234): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.217542][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 412.226708][ T36] audit: type=1400 audit(2000000232.494:303235): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.232456][ T150] audit: audit_lost=3210 audit_rate_limit=0 audit_backlog_limit=64 [ 412.254383][ T36] audit: type=1400 audit(2000000232.494:303236): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.263102][ T150] audit: backlog limit exceeded [ 412.283495][ T36] audit: type=1400 audit(2000000232.494:303237): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.289975][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 413.989342][T18828] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5761'. [ 417.161985][ T36] kauditd_printk_skb: 12786 callbacks suppressed [ 417.162004][ T36] audit: type=1400 audit(2000000237.504:316019): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.190388][ T36] audit: type=1400 audit(2000000237.504:316020): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.199757][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 417.212529][ T36] audit: type=1400 audit(2000000237.504:316021): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.218257][ T150] audit: audit_lost=3213 audit_rate_limit=0 audit_backlog_limit=64 [ 417.240156][ T36] audit: type=1400 audit(2000000237.504:316022): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.247274][ T150] audit: backlog limit exceeded [ 417.269353][ T36] audit: type=1400 audit(2000000237.504:316023): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.275814][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 417.295188][ T36] audit: type=1400 audit(2000000237.504:316024): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 418.382806][ T404] bridge_slave_1: left allmulticast mode [ 418.388495][ T404] bridge_slave_1: left promiscuous mode [ 418.394203][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.402041][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.643295][ T404] veth1_macvtap: left promiscuous mode [ 418.648893][ T404] veth0_vlan: left promiscuous mode [ 419.722838][ T404] bridge_slave_1: left allmulticast mode [ 419.728621][ T404] bridge_slave_1: left promiscuous mode [ 419.735439][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.744087][ T404] bridge_slave_0: left allmulticast mode [ 419.749818][ T404] bridge_slave_0: left promiscuous mode [ 419.756435][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.765023][ T404] bridge_slave_1: left allmulticast mode [ 419.770694][ T404] bridge_slave_1: left promiscuous mode [ 419.777344][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.786115][ T404] bridge_slave_0: left allmulticast mode [ 419.791880][ T404] bridge_slave_0: left promiscuous mode [ 419.797514][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.255204][ T404] veth1_macvtap: left promiscuous mode [ 420.261303][ T404] veth1_macvtap: left promiscuous mode [ 420.267865][ T404] veth0_vlan: left promiscuous mode [ 422.171912][ T36] kauditd_printk_skb: 11759 callbacks suppressed [ 422.171931][ T36] audit: type=1400 audit(2000000242.514:327668): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.200517][ T36] audit: type=1400 audit(2000000242.514:327669): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.207955][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 422.222708][ T36] audit: type=1400 audit(2000000242.514:327670): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.228576][ T150] audit: audit_lost=3253 audit_rate_limit=0 audit_backlog_limit=64 [ 422.250528][ T36] audit: type=1400 audit(2000000242.514:327671): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.257597][ T150] audit: backlog limit exceeded [ 422.279671][ T36] audit: type=1400 audit(2000000242.514:327672): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.286038][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 422.305512][ T36] audit: type=1400 audit(2000000242.514:327673): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.182045][ T36] kauditd_printk_skb: 13223 callbacks suppressed [ 427.182063][ T36] audit: type=1400 audit(2000000247.524:340784): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.210612][ T36] audit: type=1400 audit(2000000247.524:340785): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.217428][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 427.232760][ T36] audit: type=1400 audit(2000000247.524:340786): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.238542][ T150] audit: audit_lost=3292 audit_rate_limit=0 audit_backlog_limit=64 [ 427.260406][ T36] audit: type=1400 audit(2000000247.524:340787): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.267678][ T150] audit: backlog limit exceeded [ 427.289516][ T36] audit: type=1400 audit(2000000247.524:340788): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.295889][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 427.315470][ T36] audit: type=1400 audit(2000000247.524:340789): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0