last executing test programs: 1m25.152806549s ago: executing program 2 (id=1136): socketpair(0x1a, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x3, 0x7, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x68, 0x0, 0x5, 0xd19f583196d6b290, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0x7, 0xcc, [@dev={0xac, 0x14, 0x14, 0x17}]}, @generic={0x82, 0xb, "e5fc625dc028007cfc"}, @timestamp_addr={0x44, 0xc, 0xe6, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}]}, @timestamp={0x44, 0x8, 0x6b, 0x0, 0x5, [0x6]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x2f, 0x5, 0x6f, 0x3, 0x5d, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x10, 0x1, 0xd, 0xff}}) (async) socketpair(0x2b, 0x2, 0x7, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(r4, &(0x7f0000000200)={0x11, 0xf6, r3, 0x1, 0x16, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) close_range(r0, r1, 0x0) (async) sendmmsg(r4, &(0x7f0000001ec0)=[{{&(0x7f0000000240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001380)=[{&(0x7f00000002c0)="486efe061d64cb728a2bafd9a5f4505b54", 0x11}, {&(0x7f0000000300)="d2fb2831ce84d739a0cc36e89b1ca86f2b6f2d69056959", 0x17}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="93bb99eda0c71b1372a013a06cafeb9a93d32766372cbd8c1af1f9baeb", 0x1d}], 0x4}}, {{&(0x7f00000013c0)=@llc={0x1a, 0x108, 0x20, 0xbf, 0xc5, 0x6, @remote}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001440)="9b96c153e449a466a0c612e8dcfde16aebf0c1a0a4456212079b81c2327ef063341e48d8b96d71b9d19f725dd4734fa0460c4c0bc383d4282851cb0b5f1e8fc70385935fe479ce5597b74763867c0034656cbdbadc7de97599be986632ad1e08fc683b4eaa2fe6311a1627345642f1", 0x6f}, {&(0x7f00000014c0)="965252457673b6ac5d9c4915d1fc36f483bbec1e30fd3adeced260fa569dd6d9f21463f32ced1a194d8b408612760dbbe473c90731fbdfd0d58670a6b3bfee9c698ba38858a258ad2b9d4b4961465f3c4378bc57fa2d7e65e724b881176a35ac71f3ed527b4062b1ec08c94f6162331351ef1a0b4f90433435377d1729a043d6292c38f543f7e3fc1631675020ad2a8e5c6574594123a58543a5b312afa662235e3641801d963a6db023dcbb9152b59aae7ddbd5698ea22f0dbbd2d0af0645d16e734c208dfb75376dfe56aea990a47c6ec79095f1e5134f80269d2ca9ea6354b4564c493c", 0xe5}, {&(0x7f00000015c0)="304fc5ac74b01f052e45fcb1399a4b9b4e3ec1a34f88d1b75a15b0e47dac0561b6acf5b73dc47f70f379c7bf3aa866d44c2dbf16de22ff4e423ba542068b03785d792c331ea7cd45b47e608939c62fd1e28cdf3618910402cd819fbe34107c9af9b2f193606075411369fe0efdde00f85411c9e2a8538230c2f85e2e73732ef5a3c2313ecf71716d3d006d4187f96be96fc890ce962d383b769e50f7fab61a85c6171e2d0bb1c1eb748299e38a0a67da31a64376005f3904daab92117069cfd0a3d6614dff4f6e7e36d1", 0xca}], 0x3, &(0x7f0000001700)=[{0x38, 0x10b, 0x8, "c96ed58f54ecdfd571e295343e2464f2d023115a71d23d2e50de42d0db3b3261af1766b6ceaf01"}, {0x60, 0x100, 0x4, "a71660a1e1a6d38b5fc44136cd5e80bcb10784a61a8f1483219d4f4b77bf8b20455884d1cb7bb6fd9be762f931e0ac4c4fdee2a893ae26b574989e434bdbe3f52d6884148b0091fb49fed384c8"}], 0x98}}, {{&(0x7f00000017c0)=@x25, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001840)="b185f04e26a4ce50f4e31696460b9365af7582b38a5e949e269adfde4705ecae168f2cad51fdc703bc88dba54a6381a0f4992fa212b875af4fa345a3e81caf40a582f3da87ef0b37bdd1ecfa4d2a76180af285e2b892787cefa5bd609c7d7c97028d3feecfb6f55b5779b735fbe07224245395833b312f", 0x77}], 0x1, &(0x7f0000001900)=[{0xe8, 0x101, 0x4, "88211652880b3678144d912bc667083d6de96f96a0feeffa6a9897d608588a5b53f3a7720bfb6eff68df5be919bd87ea4989fd8fc8def9cbfa4f5e81a8f4ed6771448930516bb84c55158ddc34111d1386b975153ac9d5fc0040920c4cef80fbb179587dd8f63941365de9fa70f1855f68739ba08f6add878a43d0fc4335e44a6fd306f9b8898610cc5555015c2e32f6afdd50c40831a895063a855b24e91ee888d78c54b505bdde2d894191f01d1b3025af76f437db30a9ebffe1e12a2d605f73f54554e6673449a6b59e4fffd992707481a2"}, {0xf0, 0x3a, 0xd43c, "0da3415e97f83f905e75dac576006ee37278269927ea29a239e0df66ab4c006caafabfa029869e91526eb339cf757f584f39358094bdf76389cf2a0e51726f189e90b20da15e29fe45432ae878c2592cf6c909c00b4bdc7e9eb0323e3a47cd1052cdf593e9a7783e2118cc563748d94646b56bc686aadcb148e5b0ed8e82ef51b50a53570aa5112e62efaa7302bd30fd7073a444753bba66def689eb1fce5e381b80e848a5ca7f6830165b5b07771b18cd53c3abc00d2d2a5c69d823fa7d7e6d6f69700960b6796181f183f70c4c171a6883d8a393e76571dbb0f6"}, {0x58, 0x0, 0x5eb2, "34eb91dd2b2900e527ac0a7e52247d2f88f82d4fd5ef28b91443d196e1e1b4786ecfc644eba9bb5be46fabcadc3e7640457d0c8c6af223526baa7635af74cd358c23dad479"}, {0xe0, 0xff, 0x0, "6eba409213352da9fc6f6486f6076d8e0b21daa2da1c93332a01901b7f58ca02fba67adc46b72767920f21522082774047bdf0c2d485d4be82ff3f24604ff93e8248a064ec8abb0bd1fb5d993e76fcfebf2a4374ac18f6ccefd9c04bab52470510a9c539f702fd5d1023a5e27fa0b275a39ac1c81047730a18e736aa48c74171c5cec6b1bf50496ee85fa1fea52f630d6342b8389ee9400d0337e384a33adf5cb7baf48e3d727708fe9172e65cceddd41ec35bd620e88ce724d116a121d7ff27e98805e7d41210746fb82ea6c3"}, {0x18, 0x114, 0x6, "e5d8966407d9c8"}, {0x48, 0x101, 0x55, "70c460cf9a1ca3c9860efdaa85224902e29eae10df1eb8356d050402daf5c254fe3640b1982f7424599091edc89d1e7e1162"}, {0x30, 0x10c, 0xc, "0f37a5d27a17510a92591b55a2bcb8954a058848eb486da0e280"}, {0x110, 0x107, 0x8, "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"}, {0xe0, 0x10d, 0x100, "308e0d874362ab5844521067cb89cb65fcabc8a72b9a86613f153cecd58b1631b46775a9e9cb244eac167f3233a749d85866ac590d311aca334de3041e79da08113f5a8e157b3671f102504bd41ec3026a1e11c85283c02a996a0220d4811df95c091f04ec8923b4ef9a4f53a1a1fe9d40ccab5185b8de46ac32fcc5c92b344aced157e99ac62c38664d56cb5db18c49728b2e3bb120b590784818de8ca05d92ffbd36cba30ff19636becccbe0ea990078b31f93111745c8d6c3e9559a66a16e8ab4b5ecb626bf7559ad588c9a5d"}], 0x590}}], 0x3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001f80)='./binderfs2/binder0\x00', 0x0, 0x0) (async) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000001fc0)={@remote, 0x0}, &(0x7f0000002000)=0x14) sendmsg$nl_route_sched_retired(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)=@delqdisc={0x44, 0x25, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10, 0xffff}, {0xffff, 0xa}, {0x4}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf31b}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x4000) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000002180)={0x1e, 0x36, 0x12, 0x3, 0x6, 0x2e36, 0x1, 0xad, 0xd43fd34a55a9c42f}) (async) r7 = timerfd_create(0x0, 0x1800) timerfd_gettime(r7, &(0x7f00000021c0)) (async) rt_sigaction(0x2f, &(0x7f00000022c0)={&(0x7f0000002200)="66430fdcce40a7c40239aa7f0c8f890898d36566470fd252abc401b457cb430f19808dffffff66660f38dfb60e0000000ff3b4130b0000002636660ffa9b948b0000", 0x80000001, &(0x7f0000002280)="f2400f2d805931af21c46365689e00000000050fc66a00f9c482a1977200c4210defdf450fa9c481fc11f3c4e14a593ef041f79600000000c402f935630c", {[0x400]}}, &(0x7f00000023c0)={&(0x7f0000002300)="8f0a78120e0010c0fe8f897882f9c46135ef2500088041c4a1d9fe162a6900c4237d7fa00d000000b246815b6415000000c4e167d0dcd35e65470f01ef", 0x0, &(0x7f0000002340)="64f3470fbd4910c441c97c22c4437d09c48d440feffd3e2e6466460f63a5e4f07bb9d8d0c423715d637ec8c4c17c289ef6ffff7f6666440f3a608e0000000000400fae8e92c70000"}, 0x8, &(0x7f0000002400)) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r8, 0xb703, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x20000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f0000002480)=""/132) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r10, &(0x7f00000045c0)={0x18, 0x0, r11, {0x6}}, 0x18) (async) r12 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000004600)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x3, 0xfe}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x5, 0x6}}]}}}]}}]}}, &(0x7f00000048c0)={0xa, &(0x7f0000004640)={0xa, 0x6, 0x201, 0x8, 0x6, 0x1, 0xff, 0x4}, 0x2d, &(0x7f0000004680)={0x5, 0xf, 0x2d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x2, 0x5edb}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x81e, 0x0, 0x400, [0xff00cf]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x4, 0x4, 0x100}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x4}]}, 0x3, [{0xc3, &(0x7f00000046c0)=@string={0xc3, 0x3, "6e84e5bd8417b499df3b4dd4b90d6405ecc11690f2bf193753ec9ea6dfdd09f32fae8cb2eeb0279f47829563774e66191227df84cb72521768506c20aaf2ae7c2e37618c14e8668582348797a0519d6d86c93d6bae55a4042c5b831a02834b2ade8572ba058e32d446af33886c27e67cd8742844d2f9cf7ab2c38838fb08d8f0aea82f61185fde8cf2f9e21ac442658a5609d6a9459e6106715012d2b3cbf3328d5b7c88849fc67e4f1802eb05e86cdc75114d86812cadc307b0f46b52d0620b61"}}, {0x89, &(0x7f00000047c0)=@string={0x89, 0x3, "05bab7632ac173b39963744112aafd83afa3cc1dae613899637da4cac5b5129bb2bf86d5d4eed03c331a3844acae9bdf685f8988b57869f19e2acb28f7e6a13897f3ea1f2ccf9e935f9e04362c7f7d556e2a0bab64717068bc8d5e74d29cc4ef9bcd04856f62955f39e6b9b74fb25fbad0d7176d49231e8094983d79fa32c34500497569595c62"}}, {0x4, &(0x7f0000004880)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_control_io$printer(r12, &(0x7f0000004a40)={0x14, &(0x7f0000004900)={0x40, 0x1, 0x4e, {0x4e, 0x4, "418979ae6a1383ad778e759ade9dbf50e012b4d7e65d5c211233b0e2cb7e51e0423cd474883ba87041a3f80525f51fa713386c1a75065ff99c3bbee571dc8f6837780ef52c9fc3c8962ed07a"}}, &(0x7f0000004980)={0x0, 0x3, 0x94, @string={0x94, 0x3, "fd1834b4a881745aa4a89fe78df43643dc36b93630bbec8e7021de0b3bf75c5dce371eee9bb0fbdc9bbed0f3b683fe1d9e7763423b5a0ba838570595735bac9c7b9e506d9de2cc8a90d20a1e692065f32b77a488f34e36279149a9a24d9e40d121a0ce9ebff003e568e10af46e12fae409ab1845f61e3becd8ffe1c0c07bca345f4410e2ce50fb7c95245dadc48a22ed71b1"}}}, &(0x7f0000004dc0)={0x34, &(0x7f0000004a80)={0x20, 0x30, 0xca, "f0488038d6c748a7a80253a30f5d4f4b5659992a71cb6e19a9dc73c937feeab4ad00a3b00256b1298d549868ca8d2a723f903a531e68f2c099609ac9f4f25ed6acb58febddd8a7c81b345175335c56abbcfc9ef19ca98df799edd92b6c3b1afb178c1c13218722decb197afb58c3da63638730ec7b64db09e1828a24775cb639093dacb06bf9b8f4e79649118cb46a5874bdacc410e77ecabf1e004826fd8c2d44bbff7dd4934d2cbe732c8993f1f0e3303c421ca085a0cdd172fcaf8030b7a6e61fd83bab39e7b989f7"}, &(0x7f0000004b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000004bc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000004c00)={0x20, 0x0, 0xfe, {0xfc, "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"}}, &(0x7f0000004d40)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000004d80)={0x20, 0x0, 0x1, 0x4}}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r5, 0x2074b000) r13 = accept$inet6(r1, &(0x7f0000004e00)={0xa, 0x0, 0x0, @dev}, &(0x7f0000004e40)=0x1c) setsockopt$inet6_mreq(r13, 0x29, 0x1b, &(0x7f0000004e80)={@private2={0xfc, 0x2, '\x00', 0x1}, r3}, 0x14) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000004ec0)={0x3, 0x144, 0x0, 0x7, 0x1, 0x0, [{0x9, 0x6, 0x3, '\x00', 0x903}]}) (async) r14 = ioctl$TIOCGPTPEER(r9, 0x5441, 0x8) syncfs(r14) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000005540)={0x14, &(0x7f00000053c0)={0x20, 0x23, 0x4a, {0x4a, 0x10, "ccc53addbc4f6ae0a81d5fdc5effb9c6288fa18833f4fc7056e7e50055e767ca573df857318006fd6838d7d982bcc21714b3913e3a1714f0fb9c7f60662a3246ed9d486bccefdcc9"}}, &(0x7f0000005440)={0x0, 0x3, 0xce, @string={0xce, 0x3, "3ed40575fe73c1988e81a8e702af509f8f7f3cbdc7f19bcaac54e9c26a7883868df4047bcb0bf4e4cf99a9613f8be1a322025c690cd33ae57a5e36e38397e83c09b272fb03d5f3342671a87ec72fe6f52bc89fdb7eb017d17ef2d21c9ef1f39abc70ae3b19ec9b33acb237fab609ec1226d4183ec41a80def5825f9af741f0ce5822308d1ec27d57d64465a87313e1a0de988ecbd480cceabea5a67f556d47ed9880f9fb79c5d19d3a81c26c32701f031cec7f34151fa6fc796e8ebbe65e3bae703bfed3e6b8b53e3bb604a8"}}}, &(0x7f0000005780)={0x44, &(0x7f0000005580)={0x20, 0xe, 0x8, "334336f4fc5db335"}, &(0x7f00000055c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000005600)={0x0, 0x8, 0x1}, &(0x7f0000005640)={0x20, 0x81, 0x3, "ea6e8f"}, &(0x7f0000005680)={0x20, 0x82, 0x3, "f00295"}, &(0x7f00000056c0)={0x20, 0x83, 0x2, "73a9"}, &(0x7f0000005700)={0x20, 0x84, 0x4, "a5fa9ac8"}, &(0x7f0000005740)={0x20, 0x85, 0x3, "f9e8ff"}}) 1m22.136981743s ago: executing program 2 (id=1174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e24, @local}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10f}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x4e24, @local}}) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNGETFILTER(r4, 0x801054db, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0xa, 0x2]}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000140)=r5) close_range(r0, r0, 0x2) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x10000001003, 0x9, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, 0xffffffffffffffff, 0x7dfff000) r8 = add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="30cc395c5b08773c994a441c9a7a437bfc2077992a87752a21bbdd7a31d5e2c5d05f9b376f27784740bb40b9cc9e659d8701f92634aeba978f29aae1caa71732cac24c42d4ae80224282e593ec41d5dcb0feff150cf3528689593366bcf985df7db4c259f24beb1442b958d1eee99da90b9c", 0x72, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r3, 0x4d) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, 0xffffffffffffffff, 0x3d7c3000) 1m21.978024515s ago: executing program 2 (id=1175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000eeff130000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000040)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000eeff130000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m21.941493536s ago: executing program 2 (id=1177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) (async) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, 0x0) (async) listen(r1, 0x0) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.927940306s ago: executing program 2 (id=1178): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x24, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r1 = gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) fcntl$lock(r2, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x10001, r1}) write$binfmt_script(r6, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) 1m21.870117217s ago: executing program 2 (id=1179): syz_usb_connect$cdc_ncm(0x5, 0x97, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002020000082505a1a44000010203010902850002011e10030904000001020d0000052406000105240001000d240f01020000001f0000105f06241a05000005241501001524120400a317a88b045e4f01a607c0ffcb7e392a0424020907240a090104070424020309058103d7080000090904010000020d00000904010102020d000009058202000206800009cd9733d930050302"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x405}}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) unshare(0x62040200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_names\x00') syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000019}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa5) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) ioctl$TIOCGPTPEER(r3, 0x5441, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000500), 0x5, 0x100) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) fchown(r0, r1, r2) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001000)=""/4111, 0x100f}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/146, 0x92}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x64b1}], 0x7, 0x2100, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m6.879701422s ago: executing program 32 (id=1179): syz_usb_connect$cdc_ncm(0x5, 0x97, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002020000082505a1a44000010203010902850002011e10030904000001020d0000052406000105240001000d240f01020000001f0000105f06241a05000005241501001524120400a317a88b045e4f01a607c0ffcb7e392a0424020907240a090104070424020309058103d7080000090904010000020d00000904010102020d000009058202000206800009cd9733d930050302"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x405}}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) unshare(0x62040200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_names\x00') syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000019}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa5) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) ioctl$TIOCGPTPEER(r3, 0x5441, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000500), 0x5, 0x100) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) fchown(r0, r1, r2) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001000)=""/4111, 0x100f}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/146, 0x92}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x64b1}], 0x7, 0x2100, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.393740498s ago: executing program 1 (id=2207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x23, [{{0x9, 0x4, 0x0, 0x6, 0x5, 0x3, 0x0, 0x2, 0xff, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0xd4d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0xfa, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffc, 0x4380c0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x52, 0x8, 0x8, {0x651d, 0x6}, {0xff00, 0x5}, @cond=[{0x7ff, 0x0, 0x3, 0x7fff, 0x4, 0x3}, {0x9, 0x81, 0x5, 0x9, 0x5, 0x5e}]}) 2.378017513s ago: executing program 4 (id=2218): ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) 2.377823413s ago: executing program 4 (id=2219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) listen(r1, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x81}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 64) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.374962933s ago: executing program 4 (id=2220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) accept4(r3, 0x0, 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) userfaultfd(0x80000) creat(&(0x7f0000000040)='./file0\x00', 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xf) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000080)={@local}) write(r1, 0x0, 0x0) (async) write(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2.177396716s ago: executing program 1 (id=2221): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') fcntl$lock(r0, 0x24, &(0x7f0000001000)={0x2, 0x2, 0x7}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) shutdown(r2, 0x1) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2aa442, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0) 2.147441536s ago: executing program 1 (id=2222): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x391000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040010}, 0x4050004) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c0c8}, 0x20000841) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c890) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x764}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x18802, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0xc0c89425, &(0x7f0000000a40)={"3433ffec74be920df0f85218c38ec192", 0x0, r12, {0x5, 0x87af}, {0x400, 0x6}, 0x4, [0x6, 0x10001, 0x4, 0x401, 0x200, 0xb2, 0x7, 0x5, 0x6, 0x5e47, 0x0, 0x100000001, 0x95, 0x2, 0x8, 0x2]}) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x50850404}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x6c, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44804}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x74, r13, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) getrandom(&(0x7f0000000e00)=""/82, 0x52, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x500002}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x80, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_notify_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x88010}, 0x4004080) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r6, 0x20a, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x54, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x8081}, 0x20000001) write$binfmt_aout(r9, &(0x7f0000001200)={{0x10b, 0x4, 0x9, 0x347, 0x3a3, 0x9, 0x272, 0x400}, "077db64baa498b69e112872977960949f2871f5a6e381ce902c8a37935f2e9ed9bd268b48cf4cb50aff986680d4aa6d1d1d8e77c5093a5f03733cefbd57ccd", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x95f) open(&(0x7f0000001b80)='./file0\x00', 0x40000, 0x10) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004) 2.094384968s ago: executing program 1 (id=2223): r0 = socket$netlink(0x10, 0x3, 0xa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f646530303030303030303030303030303430303030070000000000000016", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000240)=[@exit_looper, @decrefs], 0x0, 0x0, 0x0}) 2.094144088s ago: executing program 1 (id=2224): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f4b75af4269643dba93c603faa97f5f4fc595b0adbcbe3b348ed4770d14424d3ba1b54982498aa81cb1af0423509fbaea31bd", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80000, 0x4) openat(r2, &(0x7f0000000080)='./file1/file0\x00', 0x84800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.093975277s ago: executing program 1 (id=2225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1800, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300e70009210000000122083cb36e448a624a0b500009058103200000fe09"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) r2 = epoll_create(0x3) ppoll(&(0x7f0000000200)=[{r2, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) (async) ppoll(&(0x7f0000000200)=[{r2, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) (async) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGUNIQ(r3, 0x80404508, 0x0) (async) ioctl$EVIOCGUNIQ(r3, 0x80404508, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 1.487417247s ago: executing program 4 (id=2235): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ptrace(0xffffffffffffffff, 0x0) (async) ptrace(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b3b000) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000002940)) 1.426347638s ago: executing program 4 (id=2237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = eventfd(0x1) read$eventfd(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1.425432968s ago: executing program 4 (id=2238): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x300000000000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x60, 0x0, &(0x7f00000002c0)=[@decrefs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x1, 0x2, 0x27}, @flat=@handle={0x73682a85, 0x10a, 0x2}, @fda={0x66646185, 0x3, 0x2, 0x16}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x400}, @acquire={0x40046305, 0x2}, @enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000540)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@cpuset_v2_mode}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000086a052303000000000001090224000100003003090400000217000300092107000001220500090581030002060000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/11], 0x0}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1844b, &(0x7f0000000440)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/4096, 0x0, 0x1, 0xd}, @fda={0x66646185, 0xa, 0x1, 0x100028}}}}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={r3, 0x4, 0x8, 0x1}) pread64(r4, &(0x7f0000000400)=""/12, 0xc, 0x7fffffff) open(&(0x7f0000000180)='./bus\x00', 0x8042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001880), 0x600200, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x10) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 1.250647611s ago: executing program 0 (id=2250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r5, 0x0) cachestat(r5, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140), 0x0) fgetxattr(r5, &(0x7f0000000080)=@random={'osx.', '/dev/kvm\x00'}, &(0x7f0000000200)=""/94, 0x5e) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000094}]}) close(r2) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.228523501s ago: executing program 0 (id=2251): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendfile(r0, r0, 0x0, 0xa121) 1.098270613s ago: executing program 3 (id=2252): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000200)) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0xfffffff6, 0x4) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x110, r4, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, 0x0) 1.097868003s ago: executing program 3 (id=2253): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x3, 0x0) unshare(0x62040200) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0xb, 0x4) pipe(0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000600)={@any, 0xdffff, 0x72, 0xbbf, 0x1, 0xe, "e7b9196ce296662f330a3a510f950f944db1cf5ed631cd71c5bc2ccf67f2cf6ad265f081870be603c77f5e73a85d727056992e4a7e034060543ca7b930e305e808a114bcfa04ee7a7bfbf69d66fbf4a3265c2c6045e0adc4ab78b3a3b7f741141104aacef800"}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002000000086d0486c20000000000010902240001af5433650000a02009040006010300020009210000000122080009058103200000fe09d174c1ef93a3928b2c98a9390ef958b6e725ad0d32da086b61d18791547f0abdb32dec1c42f9fdd4705a6d0100000000000080aabf3b5aa4ab0d17cac2cd5679af9f8aef4dd4240017ea"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, 0x0) sendto$packet(r2, &(0x7f0000000440)="0b0312002e0064000200475400f6a13bb10000ef086086dd480308bf9a4fa43218f12b700da392666b78a41623871d2db8a46169eaa6891ef0e236e41942e340b1fe3efb8afea500144530b1a890c2c8063cd780d47cfa89e3c465e915c7ed91ed11ebe47b3c9b9f41941bb5ca8d8d7c4015ae85d6da250aa152808a59c64acd8bac04", 0x83, 0x0, &(0x7f0000000500)={0x11, 0x86dd, r4}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x8, 0x2, 0x40, 0x9}, {0x3, 0x1f, 0x2, 0xdc}, {0x8, 0x3, 0x9, 0x400}]}) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "1c65cef91e90d4750c8e94693642c7cb02920100d965d302e8230692d757ff9580390f0f28d95604fad15c60d523a14402d47b554d1ddd5538f9ab1f2bf622f8", 0x11}, 0x48, 0xfffffffffffffffd) keyctl$link(0x8, r7, 0xffffffffffffffff) close(r3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r8, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 1.095834453s ago: executing program 0 (id=2254): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x3004000, &(0x7f0000000080)=ANY=[@ANYBLOB="6e7364656c6567617452aee0e3f29ae96bdd4ae0652c00"]) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x4000801}, 0xd0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x1, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110014a696d40030410604101010203010902240001000000020904098402a1d760010905060000005003050905", @ANYRESDEC], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') poll(&(0x7f0000000040)=[{r4, 0x1000}], 0x1, 0xc) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 554.263181ms ago: executing program 0 (id=2255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0xffffffffffffffff, 0x4d8083) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x1947, 0xf}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x37}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 552.505001ms ago: executing program 3 (id=2256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) socket(0x10, 0x803, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x100}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1001}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 543.548812ms ago: executing program 3 (id=2257): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 494.374722ms ago: executing program 3 (id=2258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee8, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xd, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 493.693393ms ago: executing program 3 (id=2259): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x40) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) preadv2(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/161, 0xa1}], 0x1, 0x2822, 0x7ff, 0x3f) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) (async) ppoll(&(0x7f0000000200)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 7.49495ms ago: executing program 0 (id=2260): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x9, 0x0, [{0x922, 0x0, 0xf997}, {0x63a, 0x0, 0x2234}, {0x89d, 0x0, 0xb2}, {0x40000080, 0x0, 0x3}, {0xb29, 0x0, 0x6}, {0x9a5, 0x0, 0xe}, {0x1d9, 0x0, 0x3}, {0xb07, 0x0, 0x3}, {0x39a, 0x0, 0x7}]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x2, 0x84, 0x0, 0x1, 0x5, 0x3, 0x4, 0x80, 0x10, 0x3, 0xbe, 0x0, 0x7f, 0x4, 0xf0, 0xd5, 0x8, 0x6, '\x00', 0xc, 0x21}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2261): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$userns(r4, &(0x7f0000002080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000a, 0x40010, r5, 0x4cbf4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000003, 0x40413, r6, 0xc508c000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000002140)={0x40, 0x30, '\x00', 0x0, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$FUSE_STATX(r7, &(0x7f00000021c0)={0x130, 0x0, r1, {0x10000, 0x2, 0x0, '\x00', {0x2, 0x8, 0x0, 0xcd, r2, r3, 0x8000, '\x00', 0x0, 0x400, 0x91, 0x2, {0xffffffffffffffff, 0x80}, {0x2, 0x8}, {0x80, 0x7fffffff}, {0x3260000000000000, 0x2}, 0xa, 0x200, 0x5, 0x80}}}, 0x130) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000002300)={0x1, 0xfffffffffffffeff, 0x9}) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000002380)={'filter\x00', 0x7, 0x4, 0x4c8, 0xe8, 0xe8, 0x2d0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000002340), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff, 0xcb0}}}, {{@arp={@rand_addr=0x64010101, @empty, 0xff000000, 0xff, 0x8, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="28d080da375c", {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x101, 0x9, 0xfffc, 0xd910, 0x4, 'bond0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x0, 0x2c}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:vmware_device_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x28, r9, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) r10 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000002a00)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0xff, 0x5543, 0x3031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x4, 0x0, {0x9, 0x21, 0x3, 0x40, 0x1, {0x22, 0x2aa}}, {{{0x9, 0x5, 0x81, 0x3, 0x3bf, 0x6, 0x5, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0xa}}]}}}]}}]}}, &(0x7f0000002b40)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x110, 0x5, 0x80, 0x4, 0x20, 0x2}, 0x4d, &(0x7f0000002a80)={0x5, 0xf, 0x4d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x75, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x10000, 0xf000, 0x9, [0xff000f, 0xf, 0xf, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0xaef33fc32b6b4a13, 0x3, 0x5, 0x5, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x4, 0xa, 0x3}]}, 0x1, [{0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_control_io$hid(r10, &(0x7f0000002e00)={0x24, &(0x7f0000002b80)={0x0, 0xa, 0xf9, {0xf9, 0xc, "31525fa19a769aa8bdc19e5e2665f93f5b0c320cf5b710e4d3ad3d05efb0ad680e30d029a4905c7d442a8bd9c13a07ffcb885a52d58d6d0406a181e194096c7d1e33464f377425e34abcd42611578c453173f30f779d5f29e50a1bbf4e9a43b1b42949bc79b9c2584d44eaf620cfe1d4a26a827bb7911f32374e7b179be2ae3fd6db44f37e131a932e6495dd2460648af9b9fc6afc6d98c967ae82f9e9a2906facc809a1e481f2455d2d57d7dbee1239e4d3eb56f89913b75c641389eaa2a627852eafcde2d6f88669829b2b61fb843d07d9c7376f869e2e22b6b77aaed92fc4cea5e3faa0b30f9cf2b35aaf7c70141d5d892fbd25b811"}}, &(0x7f0000002c80)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "17c72045c43e1cba4e1307fb35561c6cdd75fd4ab174d7ebe54335fda2a2b1b020ddaa4be815deb7e3c5d4953d8073903a69fe769a5ff24399216ce992862d9d71941335120bb0b62114001e11a8ff7ab40358bba871e6ca6bb7212909a0467e33460a225c816489bec7f83049f02a89c0908056715db5571b12f27faf006a644cec354357201e3f61429509b565e19ddd8675cc264066f311c663fc2fa709e54495f02f85db4a28def91e96c3d7e5d50ee389d2df81f64da5f8e44fafbff77b44"}}, &(0x7f0000002d80)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x0, 'tz'}, @global=@item_012={0x1, 0x1, 0x3, "b6"}]}}, &(0x7f0000002dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x35, 0x1, {0x22, 0xc70}}}}, &(0x7f0000003040)={0x2c, &(0x7f0000002e40)={0x0, 0x7, 0xe7, "58ee40acb35eafbe8bad377a41050f2d4e5e634aba3d9ee1b9c5eb1e7758bc024b458bf7be600b0df7b7a6264e781891291c64a2a11175f3511730d095f64e1b58ed29b1334451463c0ad49b890e07128041065fdfeaa8fe6de32c86652e8e8d5a41cfacccde87f61a396df88e8641875ae8788f37a93bda2b9f53ec01cbb273f3cdce479baa374775a64a0493006c8f9e6737a9adb804cd1a3cd0da22a279eac1c63d2304a0de97336f51953efc283e70076750319499b5174b26fffbbfa5c8413c55924208a636375cd2f2e9e7a659a8193f4a0c395e11e13a1652b49ecc874de21365077aa2"}, &(0x7f0000002f40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002f80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002fc0)={0x20, 0x1, 0x3, "4c056d"}, &(0x7f0000003000)={0x20, 0x3, 0x1, 0xb}}) mount$fuse(0x0, &(0x7f0000003080)='./file0\x00', &(0x7f00000030c0), 0x4000, &(0x7f0000003100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xc1ff}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0xfd}}, {@max_read={'max_read', 0x3d, 0x9}}], [{@dont_hash}, {@uid_gt={'uid>', r2}}, {@uid_gt={'uid>', r2}}]}}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) read$FUSE(r7, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r11, &(0x7f00000052c0)={0x60, 0x0, r12, {{0xd522, 0x9, 0x2, 0xdb, 0x0, 0x8, 0xec, 0x18}}}, 0x60) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000005380)={0x4, &(0x7f0000005340)=[{0x9, 0x6, 0x4, 0x7}, {0x3, 0x8, 0x8, 0xf}, {0x1ff, 0xe7, 0xfe, 0x5}, {0x7, 0x8, 0x0, 0x8}]}) write$FUSE_NOTIFY_INVAL_ENTRY(r11, &(0x7f00000053c0)={0x29, 0x3, 0x0, {0x3, 0x8, 0x0, '#$@@/!\'@'}}, 0x29) statx(r7, &(0x7f0000007700)='./file0\x00', 0x6000, 0x800, &(0x7f0000007740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000078c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000079c0)=0xe8) syz_fuse_handle_req(r7, &(0x7f0000005400)="2a7d588cfc17d3c6f55a49cfd6aa875cab7fa3a1851df67397b028f07c8f48804d29d456beba0132a98be6bbd0148814b418677801b5684b5b4c6c652ee7ac21c631614379358a4cf4ebe5a1c5bc7f2e48220b68d31231903b0c2a9e55f08335098fd1b2f8cc6d0a7fee5fea5ec3659f85b9ec01a2182af47e815d7f25514de8507aabbca36a044a077692e7f7f60de8722429be80ff9a44ba7471aa0e59a11935b6fc12bfcf7f0f7c3e9cbcc1caad65e7824e2c914d19f5ed5bd20da239f6b61226b924d69e7d4255a381ddbaf6adb17933a4c48440a1ed9658f564b32ac45a2d9597725b55565af7ae3cccbaa21a03de23879ade712edd7b7069729dd0ae64f2a4c80a4eee7ca336b9f3e814ba56220ee12158e124014581b0e4b19c9a2e5e03803785cfc5bcd28215bb4129f2241b935793404ce3a08c9367af99c3ef6187faa7102bef04b8eae8b46bb6f3a755272e0ca28058de1fd79d0c1b69daa94f6da7cd4286bc3534ee661458e950dfef90b07224da80e624b1b431ead9e9636f6b86bcb4428b03cb78f30082bec61888f1ef5324347a12d7f9156ecd57d79ffca89af27eabb866ffcc43b976752c77b0bef71ae080e41e1826f9c0525a8e60e2d7b381edbca9cdc7cd3730b04939e811859f088c01247fc75ca1cd49e2aca6419269304c522d34616047f53f4e0a0ebab21403ffd4af622a5ebf569e149038e343a9f0758aa69a0077cf4efc51b4b4154dd13466008016a188a8ce5a7e3103c916114e05f0f96cd7b60b995ea1d6c69d9019448fe1f362d79fea9e5e7e98afc41a57ff4f3e58f46636d57ed10bc60d14beb32ff96c3a2145594d3dd3761ff8787fa587989e972ca41532e6dcf1146106faed4b6fc7a3b2a8cc9f8f04d479985f3cb985c8e3948118ce3c9bedbbed71772483ee35b5f8f44f27c45f66b1a5723a4e2251979d6a055ecce4fa10931456cd45caa55a52bee9f63ad86d58cc66afadb94dc9cdd94c5128971559aab01df30068909f8290d4d3c1464f95b0d69a87d062004ac42f6c28caced234b441d8b98eb4b693efcc51c7781cd5b9a04da8ac28ef691015bea42e72a79c5b1260de3d9dcac5f71c07d7bf8fedd2a25c9e8aaa6b28748b583d9ffd58f62b29ab1575dfb44349b5128a309b596e0e00fe11cc9a20ca25b0b6ea364abcce4d266b1920b2b3a23dde992daf86d2e2a63ef16fdb757106627b3a475bb6c47b124025e730751b8761c6df7ac2997225c51698788c43bf0a7b24d03f8d60852be25bd02dc79eb4f2934dc514c7350eab35ec34b0aa4ff972cb931a24bab0de37db30165958fb9a685bc5d1ef7b89ddfcd9ff64ea3d63c375130d2c1787f2d85d4e3057a8ab553f5d2b72a44dbf7103dcc9003293148d5e872445e10d94a04bb546d25376ef2379c0b5247f3e414421df3da08b8be0d56128a6353fa8335093bbd64b2fccc5586a200a4991fadcbc556c67efb6a0c0c114504bb2b4c5d59f8dc71e83ec96869c300b30008c7dbd6659fac4750b57bcb7711e7395083fbe92fca0634e4f091f864d35ce2485654d61a87c24eb3afb5104f55c93b36840c8b0fea231a290a624f1c3433bc97cba5efc3e6c496dbf57eafa8b2cd567b6d9e69a4f7ebf23b86e3e29d3d94e0a05c4a164006fca40d969dd8bb80cf1e38b1e092d6be32a07f7fbbebf0daca1c4005545ff092b74aea63652d07b3feff464691c1f9f0fe3b5f1784b435eb0c083d4d0ca30be78ed5305d0410a92f9e3f45639ced8404078b6bb20058cb1e27659fad901e3c80f15ad83f9e929719c114cc1e944a01005da4d339fe1ae1a2cce0188fd922a8b6b292e18957b7212b8e9d723dd4b05546bc5129fd494c129a5f0ce43889996e5dc5cce59861d57ff3055f430f8a587352c2e78b6e4104b6b28b16362590737afd15a039cf7b54776b646e3e22994c00945d8374b1839efcebb54afba40ff589dd1448e411b518f1937ce94061bb7b7f36a96f48334369f3dd4e1e8f1e77440085e7fbe3584095ff4f88904f53c0e5e324d963559fa1b912ef6eb8b113ba5dc0f11221c77d27030c57028db0c5b0b097b1c6c9a96d7ab6d58dc05cf6e27028e4464257b2e7ebb0b4ddad491c26131505ca0d3be80cc6ff6fd2646a8091d6edc83762cac67666ffefe7d76907eb58ae01aa33f2b07dbf48392cd61e33c3c73219ce9053e377003a4242e39fb1810ef6b88d99c80d7c3eabbd03e2a8e24e24f4fe21d6cf8a5b362f3484eead2dbd729e44b2baeb04549a99618b455d533713cc76773ccba0397b97173125ef00c95aa9af3861d89d06250206780ffd7debfe5e92c70348fd80cd94e3f1a6e08758fdf8d1fbb553024c8b7819a4a375a11c38110b1b7dfa14c3feba8beb16aea28b07a70e16cadcfc7550a5694c21c0f6a439db7da5739d031abfe11eec2a954cbd9eba37e40b4b2c29bc43373013aa4956a574a76c58a2bf281d1379a2e43bca855c1520d0388ddea6da78ee49ce4da5564c631c026e1ad275e582803ee09d2c7134adac0ae7e24a725257caba04276e6c3b4940b8f52e66159ac70c381c1c54d595c12317f9ff7b783b46255e5b10dcbe341aee3752da15019ce7db4b33281c8f3ba8f8f5ad42818ab4014d5bfa7e5abddbaf1f460d832a92e721b33290117be77124dcd41c0005ae546d49d4213e7ed9ebf36051cb4351e4bd562d8515722b529c43955f283d4636cce03f430e8b1910e26c4697c8aaeb74220b6b2f03e6753b74bb73ce02f96865c8a57d16f15cc442fe829413b704ac77d9c800cdba6ff38fe03a6fdb38f85e96b9acdcd42716494ca318875c3cef6cd132add6a419540bf4d224bb50cba0d6029200f0c7c1635a31c95cab18cc1bd61f3cd9c866ea1da1664c2f97e565c3aa743ef871eee791a0d6cf05aece3caf5f71855ebecd37c4ed1f2cd30b1782ae9bd0dc7044cc9512fec4fe8a07757fbce75728e023c2976746ffd339d4eb633ad6dc010cba3fb5c3c9e36d03e06bc073b8e87a93f914b4f259a36bed595348cdf0d9eb104e8940d3e543199ae37d380f8715d8a6a03d73e2cf7dd0a470fa29c8cf90906a6a003e07c050579a757c1ea2988c6601751df02c488bbf372f0182ccff861d9386b08c572d9907fb22a099a332d40cefe6930602162eec9dbaf5fc440ac179d04010cb284be1ee82f1731426792c2b9dae73b4be7f474585144caf4f3be8595c427a29ba704415ed30295ae064c4bd2dfc176663fe61e8c76375e5c89126c4a625ea37d0b1db31b9d50b8268de6a655dd49c84244f3f90f6f9ba1958d90bb4bc8ec267712b9283d43f63ba31d6a8f4461329085f985aea1f5a4ff34e53b1d01739e2104ccd9362ef3c32f645a0cc5e813baaccd234fe81190ed84e0af61b40455dfd4c136e94fcaca65e81bee39b90e7586a95a5a98b044cb2ed6ca377c25c0df50b5e50a0f388bedbd3c43eda5c786bb5ad384a86fc09408012be902d4c8da35d6f8c5aea143ace8d3c94ad5fd6a7c0c626d1f83eaebdd4df4eb09f41873146c417c174ec02124cff86494e38c827a7656592f67ae83583d219a05a6d460c5ad0acfecdcf61b39c2cdce79ac35de3c48b56609ef5f50f89bb3322b3463d7a2a44ed643aa6ece47ceb1a7a82306afed563d05a2b60a205a1851e03d0ff880732220bb2dd70f25828432699763a0ba99b6098267375fdb73f24fb04803468b9f50dd49c629151a79528266bd96d908b987e13ffb1a309c2fad4a206a0c9efc4c070134c6db8f3f43fd74b779d7c7b69ff1285b229228b7807c4290d1d8fb01be5b3ed7d946aa8051bc2229a440aa0a27fd09c729540743d6daa4f0eab1adb69329b7b60f22df40ff9bc50867788a7d076c81261e5fe45f18421c5fa95874af6f65a06fac73b5839a142074e47a52a3de17437fa90e2cca69347294f18eed93281a7937d5346c272aafff0bc38d6c3477168c0c937597e98d2adbf99d710d0f16a7507ad8e37fde0223a44e65597431d50cd4aff8a59938a9f72d76e8553aa4b4ee63ef8961d4f34f724a9347d0d2b25a5b5d6ba2214b6877c64f275d56e9367fc158a52a6c78bdae7687fdb7954f196a60c74488ac47a290b0b1def0d003236a182b5e4a18ce4c39806571ad51b2f3d996cf4479bad49faede9e0a450993137f8c17a06edbbb65fa76b7e5ad3c683f63f0ebc3d05ef54b76f5bb560ee05dab7ec51e0d93028a35379a0a084bf77796c94dd685da5f0bf0d1ec1fa5b8c82c8ed2e740435c08afaf297e2a374de3128224f60ffbc94423fa4ec9ebebac60a013822ecc2889b847b7b82671b5829656734e82edfedf45f501302cdbe80e9756476a4d0f51ba35b844d160f325cf9bdb8a1b79146ffec2cf5c2bf60eae437ecd899d1688ebfeb8c7be08a15cc25a74d7b41a0b48925738e42c31710c4f391c309860652a4948983c852a4595c8d49234257e3427629489bc715862a8b2311a6cf2bdb9370aeef77a8f7142585a01f780f07aa71dce15553829648b60a381a6d12615f951fc1b88e05624e148366de6c42cc9890f7fd7cdb72f57492700e8f4c707904139b1ece6796e9ef85c79ede8e917335f041928c49ebae281ba7515e9f3c49dca819d606a9f4eee45a4987d7f7fcc7ffb4263d684bf302b6c0efc1049e4d0dd62cde84173c474b671f28f2b566bc7108cf5f67d90fc1d915c175c67304ce99d0639fd21be86f49df535426199155db4ec732eb19f95d186eebf9d7e434b4befbce8c1e2b3466a714c6bf3289621aba1e09532fa2a8230f27a364d51470700cf94421dc7c4600fdc307dd0dda651a8afed71bebfdf81caaf053e3339e1a24bccceaeff461368bf94fdb10e0ca64b41fe91692faf872f24879fb840af3c9b34dfdd97a62fe948889bae1ea87353582c817365f31e67f1581d7309a58c571c43ed222f39ec508b65a5df47df96380d32685785c25e34890a1e50d74c49f10b532f5ebe4f32f610d83a48f267c6c7ddcd5a6d0efa58350a4e2d8d4fe9a21193fe59979bb13f92eab9a7e351bc38798948c1c9269e4737bf3b6a72c801708901e98d2f9989f907c533b79c656253dec61636748b145c2daf57e0bc9bed0b8d28e844f52fcf37614ebf4fb0250d8090c66f41ffb7b20506ae95335c371753c8a9a4da6e081eea42e13a576430b9e4a7bb5682bd932263bcc6913bb7198b6834edbcf5bf3f2cf47724532aa32b0ecf156cbdc4e13eacc2157093b6a3abf58dd92fe958877d67e7764538c6e36113b487f1b6402770eedf141579f9a7fe58c4a3ecb991acbdad8c5bec1b9db33bdd38c17c9b781584c4c3a9c1e4c84e9279f9022acbeb9f6173b9d8c3fa4c76aad943cae186fb4c2cd3a56a1f74649aeb730e97eef2c7ab692a83388c2e2f75c3bdcf663d5c886817737ef6c14203cfe33ab000801989fb7b1285c1a55e33c7ebb5e959a135489148c24d98c2a8b472117a4b47a363e0b811ec7ffb7b9e9c8455196d8a5aa7e487580654f6927a2b5eac36566561a4d20fe8f926ca7b640625eb636ebe90ba30d06486afe76073976ec197e93190585cbcbab4e0e9b0638670fa7a257e92a2a869eef0cb8948aa41ea40a9521a605c7aada22160087fe1df2196d48baf85d0c9edb978916aa738b3fc30b25abb87c04b824537b33f23f2aa7678dcfe164b9ca6036a7c8d0e259c20dbe675bfda0d49692715cad72b6855e17a5d9e1f4544285c55ce11fbe9fd4a9905b75a15dfffc16492f35cbcedf2bb2382435ec767c470662c9f88927490aaa2391a5014ecaa2b7fb7a203c30a5c67214bae7972be32e8710fbdd9470fcbc4af0b1435a6f5acd09307e17ab85d71fcf0a7dad7422914fdd0efb269228949a92beb6ef82a0089b33f7f3897983fb0395d7d1ae5afdfae236df8ae2f30e505e6d6ce265ced70a81de9ca595e8e741a180ffdd01576af47c7cce8d017e19041901f225e05084d66d797d83925521a49985b67f8c13a1889a25b315fa8270e9eb33d1739ea9d3554603ed20ca4bb73a4fe9de3b6155a1512097edea4a9f379d05fa9c302e011ecd2415be52f5ff3b161503f4ceab58a2b97d22aa7d4d7e048bf1ef98d6feb774e2e9dafdabcb5884121c32dfb186be107953fe8d481d370d267ec6322da0702b320561c23d92ce47f8f2d5ddd17521190872340037b65ac84ee25b6b3c4a77c9c891e87d38277b20a09173b59e45700887ba81dc0da87e5d8d2d596db1ae86f311cdba93a1a36a2afb7791eefa93e5e685d111c57f3b78e5a81b40841b7cbe530f9371ee90b33f1d64439adc28410b58ea5f0af328ca7f6501dcf8a21771c5c1913287fded44f135d2edd15753ccb8f62f54a5fefde8e1be59575f7089e4e279cbd5cb1432b8572a273a4d8297aa7a82def8430a358bb8b1be73c6d5e7b9f46ea6d6ec639928593a4dd57d0a43e275fa38e7aaa49d6fbe83c5ca33a80f63ccfeb87117fcdc935e060299f409062fb9afd1ff88a69534e1f2f7ad4c05eae722768c8e0c22e0b351294c51262dbffd91e4e4fc659879f673a091bb0094452d62c1edaf14a55ce539115dad09f1451e3edc1c5e67355e47e60af55a31df2b4fa37ff4adf3b101c9775d893f658da3ae15033a1820849c3acaa335959b3383fbd2a0994dcc8be5bb7c1eac2a2ffb6bb2a8917186a46dcc25242bc9bf344c1f82b05625f38f891ad4504684c0d7664f8ba457117e4173248f6d95d065ac9836d66cb181535ca988777cdcc1ef2f211ed4d2ed5bf2b545f735c6b77894a72ff856818514bd94f8a01e630a633f7393e74f14f8db13a5697507316d434fd7a2ea94775c57a2553e46e291532d5b80a32413055598de343df75f0447e1367b6797aff30ee5d5dcb970d0ec2c42d17b876740888397246bf67d7ffaee3f46ed664bc10c5f08fabac88e693199c595bfcf4fadd02c4f004991f2daf9b5033d45e0fffc9321b5e75c0300b6cc08273839f355d9501cd3e33b3bde38d6adcc4f61933e23c957089bda5e275a72c3a61b737ca8b514eb22dd4df4424073bb00f7856c35e37c61236a03dc953745d4cd4d64d2919f8b3810a7cf9d218921dd73de3e9914d67eb614cc01f3268eaa590d6244972c1cccf282a318cbe4f16d14e802734aadcd37e280dde1460936432b0b1360df7103af6bd42fa0bdb31f8364d75be18b15ad00a62b531192be764d145b14a72b6f939a96a10d91531728a0eaaa8ccc0a88169cd12b53f266e64e793b723ec913121232d20738d0023539829a9019b763316baf3f6a8397f51ec6aa38c3bc413148c1bb3536b3af48284cfcf753f94dbf230c9c88ad670d262540d0fc5ef7364c00a99c65113e9de137e2a9b3a5734e14da885fec9ae0161bff2f6222fee27d2190c008be537e3454549afb147eb6bfb8aa0b87028a3772aae97b51d1680af8ca8a74bf98cf8aaf62248b424b2f0f1c8012350f7fd60458d166a8d6bb1ce96bd24739d9b8ce45509e3df131dffea895d8930ecd66304f3f0e775110094f17fdeefd466eb979253bad6b3d620cda3f5f80522159d55f63a8cb8203660835bec23106ca0412147cd636122c0c1d79f7bcddf1dc552bf9fdb719da93f562d9d9bddaef6af3e8d3d0a9e9acad05f1c0196ec1699397479f9c218010a833e5da03ad9ea256548a530ffd0d0c5033ed789b6f3bc5b01e12e79be1e63ab9901a42d4ac61d238623566d194f4753988c222da6eddec03b8824afde80eb2240efc9520fab565630bf700f6d6838bea1da169ec48c8e29d1f01b90e36b2bd8624c0ba3e75ff567a27c612d3d97575d330650eadebe8b71d9675801b9da018e083698358f272697241e3630140371a4d46a30a8e7c99f61090d254a89377e8a0b4d7eb62154e8db7f9e0338e43715efb1c2100c48433d279b782137d01d0e4b1022f4a4f11f11fed597a7d2ef0ca44b3e0e9e66457e707857028ee26600cc4bc85198fbe9ee8faceded7cf12b99c1b37b8ed654d145ba8174d84c6b516a32fefd8010530e8dfc518ff6b674059e49fa41d1b41cb9ec33bb30c8fed64a2ab7349648f022fb6cedf5056cf1078ef091edb944aa70eef34786f198d9959488b42fe650af0fbed70e01ed5bfcb1af02d4844ceaf064c843c110492667aa8fbe55a3612d16dbb1d918aadd255b558566f0fba8d88b9f7eda90bf302c53d1009feb646cf9f5c44f9fc825382b7a41dfcd582c2a428dcc17ddd0ac95eecc3792d3f568c60359577a00d59fecee450890ce802e3c5338e9b2acf4a04ba8427b6292cfca0cc743bf99f0ea88212771cb2ef265c26fc312e66cf34262f6d3f7ed5f057632b6f0dc342469f10d14e4e6e3ec4adfdf69c73b2259731f7b8250f26fe1130ed2b30f805633c11a206c0b6aa026281e081fcb24064b14af12eee5ecf000bdbf805ac52da13fc958d4fd520fcc3aab4c78f56de76befdb8ab247c40ccc792c99d044e6e1454e9ceaf7c57ed6e4342e53848f035145fbd57048766755bec9b10d57c3a98b2b3eb3682659ef57667a608458e239b6cccf6d351a8b0c9e1974e81189fd4d05d6659bfe16e2869a6d2148f284f08f269bb12d5f03ae5cda59c2caef991cf4949c776d33006b06fe399fcb929743dda21ee3092aa790077e2974bba7e37a47f62049a713971dacd67f12b9f002d05db2227d2562c4ef79282aa530816df808f8a20d938a67802c040cf0d1aa4b9de798c4fdc3cafa1a3a2f701b6bd4eb2de87e5d76414e9f198589d6a7f602bf95c31cc89970e9b6998d433bbd34732e2a146f15255d1285a996b8dcfda509fd8ef82b721faf42afd78b3476cc07f714c98d69d1597f8777a0c4b638663adf145e1b3bb38a091d5ecf11e9284f662d5104a05660d2f827003f2cdb5a5c13ab4f2977c64417726f98ee57c5a29032941aa0d25bb239bc633b877d132d0905d6cbcea7bef4c9ad22efafbc1b2ef5d578d9d49f9fe573c02f4d5faa0e8a5c964e3b830d595ddf397e7d27d2b08df8f46ef3c559b953f7fcb408cceb5d038f64b64fbb06e675fbd96743c4707ed61efd1d5dfbc62101c1454a9af06aba08f8fe5dacb085d4107fdd3f20564c6497e0e639704ef63e13c4d363b6e96042bf3f9b99113e66d230096ae299475b00eb6976c10e87d882b5b984f90ade0a59722d23f7e3f13dfadc0968bf0959a18418e274d7c0ee6a2d50dc10bc5794bd6f20c0ace661dc05b0c24478fa09c89234974b740d9324df716e75a52a896a3ab10f506d6e4c1c28a6a275820a16e52c1ddb181c9306145718050e6f466ceafe23004dddaa8a88883e4b8dc36fabff934a8d59a3d61bb2b0ec0c90b3a5e76d86a04f5d495907dd25e59bbae308a6b4b469d83b6aee11e50e389711485fd76c7f382aee7c4d512c7b2688c12d173f146b05d2eca1eeb39cc1dd4c11f9ef4ac95edd9f1f11810eed2262d22f2049f9f7cac47dd2e89779a145224c7eb3deab2654860462727e7c4ef114221def7af3be6789b77be67f145835861bd81d01ff461edb12a45979926b39fa00da1b49e9830635fea2af91efebeae0076f93cf40365eae74e98cbf74a7862e2a13a60bd791c32e8a8c959714495a6326049317148f5169db8e4d34a25740a70bdf5e5bc317ae756f44c49b99608b3eccff8807b4ac9e081a81221921fe40ca37b5501f1df81f74f00745f27418f15997ca153a0f6fb5cbb0c738b83536ed647616ad1275f956aeefb68a9a5da73486b893e1e347d28f0fc5ece7b91889ac52500980e14e2f3221c95d8296ed23882e5f4525689ebd28980fd8c36cbc5a5ab5a6fa33e89f06e58dd37497ea55ae8c07d5935f6ea8a30554211421231b86fba20285fc31067dd6e27ef9d16643d607440c1ed1f747df1b6b181b32363b1b3eaa81f43f60c570c4f5f910c2b775598d3bbb4625b639543e0f2dfdff5c4175c0fa60e4afb3268d9af58e5b22fd0e6be69af3fe775df437d4836d2626a6d57a1b8b6c90e72c5f708f3cd352505cbb7adaf56090d86939ce7020a3923ba78dd75a674734bf91615530b6eb8f59e2088c2c90a64872a8b4db6740359ceea6cf7ac8b49e10c51f03a2a34d1625d4ccdc14a85cd91c40377db0ab66ff5c25d7b6864ed6fb3a9ef8c973f06b28e27fedcd6fa2b160c050eccb4c53336fa7080c1f7661d3bc23b4d0683107b5f1b3aede1e6c4767465a9f1b5525a735ea1cce9ec87b9327c2b99b05225d0cde908b0233092abf92b34ae5d39e85b601d0fa462293befc90063a35110cb3e5ee58b90ae6d3fdf98bbc7ae4892a244d64140a92d0a497bb606adc8f1ead0419bbe1159579fd86980c7814c35ada7a139f5701d99f4bff7f08b7e2796b1b5cc18bfe54a63bfe0b0136638a92e7737e4ba2e12ccbe2c8f574dad07cd9c2ec40036fc353232b9277b862d7db04ffc7bf04a59f774ece8a8fbb56a44c5449397809f2ccca3302ef2addeeb93128daae540b7fdc645977231dbcb33b3877044f2c261aabc3f8bf3842c51ad6844252a4677c0bed4bfca1ec0d39d967b1e06ee5ebc1433ab59a7d2511cff99ed15ec3401efcb77d2a6be3140cd0bd7ef46d1515acd396eb75b72c46fc024cbba49de3d8b26dd2ca77441abdb57d0f9c342c3303d0a7805f529134461bed5cd52ba2d4ce354bf5c61b26c6412eb39f85f06383900fb121d8abf5e87e319f91f3ca4a38c1b3583ad00339b0fff8299a927545c9d8b15c919829671c7553448c2788dac14b37c8d9a6318ae1563db6832aa3ea5857387345b2a3e4403b55303020f53213162b4f316cc2af65a153721847868e2a8c62b49201c2755d397029ae551ba949810dfb7718f271097d0bb54a7fa05d884b3e91ded12cc115f2fd131c4414a1b1d2c04cc9ade76b859693a90c4e9515a3a8d51d679a462e042e189de022d959944a4c2bf7e0295b69f7edc56d0a64f16166e46c13dd52f648f8bc69a9d9be2ceac5c012d3f3104d6eb294d3fe86599c6656c81e96b44a64128a5f67decfed21f88056031728675fb0aaa7eea97f8afb0b05d5eb3da875f944328895f9fa240bb8a837459c3ea64abe631258614a8ecf6d96cd91e9c5d23743dbbe8bdde57749e44f8fb22d8cdf4bfadb71e34ac65c99e77430252193b0175dde50c972fe0f2c157da59c8850447488d7f7b59b0cb013df172fe73147023cadec395fea2c0ae169a4a0010c94da61c05cb978e191ce86c5a64298facbbe2d70147f4118d41287d10697e1720b9c0e890a66d7e3981dd68ef2d62f101dd112fdfd4ef581e85294dc63ac7bbddfe914b893e96f412c7723930c543ff8c2142c4b93d4dc7f9e323ea0b67163487836c91965b470a4e251c27b16ebdabd96eccf85b077aea982c9ac41ced3d30be1b0ec5020c439cf90af5b06e3429a3eccc2e485c279a18d7ade4e3b29028d686713590e51034613ed673920647cce3012f5d291ba665e1406e772a71f03a05c600aedf4f958cd281111ab4cb4f70f12801e139115c8ceb8756931671cc026ec3cb977588b92ef4e626192bc252fc67534462cf2b97788a96557e8d593706ab73581b33ba615", 0x2000, &(0x7f0000008140)={&(0x7f0000007400)={0x50, 0x0, 0x49db, {0x7, 0x2b, 0x2600000, 0xffffffff80000001, 0x5, 0x9, 0x6, 0x4, 0x0, 0x0, 0x40, 0xb3}}, &(0x7f0000007480)={0x18, 0xfffffffffffffff5, 0x3ff, {0x6}}, &(0x7f00000074c0)={0x18, 0xffffffffffffffda, 0x9, {0x8000000000000001}}, &(0x7f0000007500)={0x18, 0x0, 0x9, {0x1dd}}, &(0x7f0000007540)={0x18, 0x0, 0x4, {0x2}}, &(0x7f0000007580)={0x28, 0x0, 0xe55, {{0x1000, 0x71, 0x1, r15}}}, &(0x7f00000075c0)={0x60, 0x0, 0x9, {{0x4, 0x2, 0xffff, 0x5, 0xffffffff, 0xab90, 0x9, 0x2}}}, &(0x7f0000007640)={0x18, 0x0, 0x100, {0x4}}, &(0x7f0000007680)={0x11, 0x0, 0x3, {'\x00'}}, &(0x7f00000076c0)={0x20, 0xffffffffffffffda, 0x1, {0x0, 0x19}}, &(0x7f0000007840)={0x78, 0xfffffffffffffff5, 0x6, {0x7, 0x10000, 0x0, {0x4, 0x1, 0x3, 0xffffffff, 0x5, 0x2, 0x6a0, 0x80000001, 0x4f, 0x8000, 0x800, r2, r16, 0x2e, 0x9}}}, &(0x7f0000007a00)={0x90, 0xfffffffffffffff5, 0x8, {0x5, 0x2, 0xc, 0x4000400000, 0x800, 0x3ff, {0x2, 0x7, 0x8, 0x6, 0x1, 0x9, 0x40, 0x400, 0x9, 0x2000, 0xfffffffc, r17, r3, 0xce5, 0x81}}}, &(0x7f0000007ac0)={0x30, 0x0, 0x88, [{0x4, 0xfff, 0x8, 0x2, '#$@@/!\'@'}]}, &(0x7f0000007b00)={0x3c8, 0xffffffffffffffda, 0x4, [{{0x3, 0x3, 0x6, 0x2, 0x7, 0x0, {0x3, 0x9, 0x3, 0x1, 0x4, 0x2, 0x1, 0x0, 0x0, 0x2000, 0xee6, r2, r14, 0x8, 0x7fffffff}}, {0x6, 0x0, 0xa, 0x10000, '/dev/fuse\x00'}}, {{0x3, 0x3, 0x3, 0x4, 0x0, 0x4, {0x1, 0x1600, 0x5, 0x9, 0x7f, 0x6, 0x40, 0x8, 0x7, 0x4000, 0x8, r13, r14, 0xef, 0x8000}}, {0x1, 0xfffffffffffffffa, 0x4, 0x4, '\'{&('}}, {{0x5, 0x0, 0x0, 0x3, 0x8, 0x4000000, {0x2, 0x6, 0x7, 0x3, 0x2, 0x7fffffff, 0xab02, 0xc, 0x5, 0x6000, 0x7, r13, r3, 0x5, 0x4}}, {0x2, 0x100000001, 0x8, 0x4, 'ns/user\x00'}}, {{0x6, 0x3, 0x8d, 0xa, 0x2, 0x80, {0x1, 0x3, 0x8, 0x9, 0x9, 0x53, 0x8, 0x5, 0x4f81000, 0xa000, 0x9, r13, r3, 0x2, 0x3}}, {0x4, 0x9, 0x0, 0x9}}, {{0x4, 0x2, 0x7, 0x4, 0x6, 0x4, {0x3, 0x100000001, 0xff, 0x8, 0x14, 0xa2cb, 0x180, 0x8, 0x3, 0x4000, 0x1, r2, r14, 0x6, 0xd}}, {0x0, 0x1, 0x6, 0xfffffffb, 'bond0\x00'}}, {{0x3, 0x0, 0xb, 0x4b7, 0x3ff, 0x7f, {0x0, 0x9, 0x8000000000000000, 0x6, 0x7, 0x2, 0x8, 0x4361, 0x10001, 0x4000, 0x0, r2, r14, 0x5, 0x101}}, {0x1, 0x8000000000000}}]}, &(0x7f0000007f00)={0xa0, 0x0, 0xfffffffffffffffe, {{0x5, 0x1, 0xffffffffffffd43b, 0x100000001, 0x3, 0x0, {0x1, 0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x3, 0x62, 0x8, 0x39, 0xc000, 0x1, r2, r3, 0xb1ed, 0x7}}, {0x0, 0xb0477add4b1c6329}}}, &(0x7f0000007fc0)={0x20, 0xfffffffffffffff5, 0x8, {0x4, 0x4, 0x7}}, &(0x7f0000008000)={0x130, 0x0, 0x8, {0x9ed2, 0x5, 0x0, '\x00', {0x10000, 0x0, 0x800000000, 0x443, r13, r3, 0xc000, '\x00', 0xaf0, 0xfffffffffffffffd, 0x1, 0x8, {0x4, 0x2}, {0x10000, 0x1}, {0x8, 0x3}, {0x6, 0x6}, 0x8, 0x2, 0x8, 0x1}}}}) io_setup(0x5bf6, &(0x7f0000008200)=0x0) r19 = openat$urandom(0xffffffffffffff9c, &(0x7f0000008240), 0x400, 0x0) io_submit(r18, 0x1, &(0x7f0000008380)=[&(0x7f0000008340)={0x0, 0x0, 0x0, 0x2, 0x84d, r19, &(0x7f0000008280)="f44f32deac00d005cc905faa1fcc652f3efd00e4fef53bca2ab98a6b3c6c342dfa71849beb6569fcd69f6d4fff8b10ab4fcd4a15ae1b080e2aff5d3fccc3ca9bd2fcbc1178a3903e95fbe482c07f948df0d3446ca8e132a2fe8971307138154f09ee87675da9fd3199a1c0762bf22527716063565ca1ec504e6f176c9d9fb3ee8510163c45dd6150806252550975c12a4b17c400c9f9f24418f738bcd00485ba62fadc0c8ae8bd78c8db4efa8e8a558b6d", 0xb1, 0x28dc, 0x0, 0x2}]) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000008500)={&(0x7f00000083c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000084c0)={&(0x7f0000008440)={0x44, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x1) kernel console output (not intermixed with test programs): -1 NI 0 yes kernel y n n n n n n n n n n n n n n n n n [ 69.435114][ T2029] UDP-Lite 1216 0 0 NI 0 yes kernel y y y n y y y [ 69.435160][ T36] audit: type=1400 audit(1751242490.939:1265): avc: denied { ioctl } for pid=2028 comm="syz.3.533" path="socket:[16066]" dev="sockfs" ino=16066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.586615][ T36] audit: type=1400 audit(1751242491.089:1266): avc: denied { write } for pid=2041 comm="syz.3.537" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 69.618522][ T485] usb 3-1: device descriptor read/64, error -71 [ 69.635432][ T2053] sit0: entered promiscuous mode [ 69.643958][ T2053] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 69.652218][ T2053] netlink: 9 bytes leftover after parsing attributes in process `syz.3.539'. [ 69.858538][ T485] usb 3-1: device descriptor read/64, error -71 [ 69.958856][ T2074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.018646][ T61] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 70.098562][ T485] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 70.189619][ T61] usb 4-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 70.200216][ T61] usb 4-1: too many endpoints for config 0 interface 0 altsetting 6: 65, using maximum allowed: 30 [ 70.212154][ T61] usb 4-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 70.225431][ T61] usb 4-1: config 0 interface 0 has no altsetting 0 [ 70.232972][ T61] usb 4-1: New USB device found, idVendor=0465, idProduct=c286, bcdDevice= 4.00 [ 70.242077][ T485] usb 3-1: device descriptor read/64, error -71 [ 70.248447][ T61] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.248741][ T2096] netlink: 37 bytes leftover after parsing attributes in process `syz.1.553'. [ 70.266567][ T61] usb 4-1: config 0 descriptor?? [ 70.318504][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 70.468503][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 70.472719][ T2067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.475296][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.482200][ T2067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.491124][ T485] usb 3-1: device descriptor read/64, error -71 [ 70.499347][ T2067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.504875][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 70.513664][ T2067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.521472][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 70.530381][ T2067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.538138][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.547224][ T2067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.556087][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.564877][ T2067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.573427][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.583449][ T2067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.594799][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 70.603636][ T2067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.611577][ T485] usb usb3-port1: attempt power cycle [ 70.620661][ T2067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.625442][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.641025][ T61] usb 4-1: string descriptor 0 read error: -71 [ 70.649331][ T61] usb 4-1: USB disconnect, device number 23 [ 70.655685][ T10] usb 1-1: config 0 descriptor?? [ 70.862468][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 70.958525][ T485] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 70.979486][ T485] usb 3-1: device descriptor read/8, error -71 [ 71.109890][ T485] usb 3-1: device descriptor read/8, error -71 [ 71.120310][ T10] usb 1-1: USB disconnect, device number 25 [ 71.127771][ T10] usblp0: removed [ 71.348539][ T485] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 71.369621][ T485] usb 3-1: device descriptor read/8, error -71 [ 71.388528][ T307] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 71.499515][ T485] usb 3-1: device descriptor read/8, error -71 [ 71.539478][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.549632][ T307] usb 4-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.562690][ T307] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.570783][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.581262][ T307] usb 4-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.594403][ T307] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.601757][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.612537][ T307] usb 4-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.618592][ T485] usb usb3-port1: unable to enumerate USB device [ 71.625583][ T307] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.639251][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.649717][ T307] usb 4-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.662804][ T307] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.670398][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.680353][ T2132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2132 comm=syz.0.568 [ 71.680820][ T307] usb 4-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.705829][ T307] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.712533][ T307] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 71.721600][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.733802][ T307] usb 4-1: config 0 descriptor?? [ 71.740367][ T307] hub 4-1:0.0: Invalid hub with more than one config or interface [ 71.748193][ T307] hub 4-1:0.0: probe with driver hub failed with error -22 [ 71.870534][ T2141] syzkaller0: entered promiscuous mode [ 71.876016][ T2141] syzkaller0: entered allmulticast mode [ 71.882708][ T36] audit: type=1400 audit(1751242493.389:1267): avc: denied { append } for pid=2140 comm="syz.0.571" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.952607][ T2118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.961441][ T2118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.973160][ T2118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.982387][ T2118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.986135][ T2151] fuse: Bad value for 'group_id' [ 71.992056][ T45] usb 4-1: USB disconnect, device number 24 [ 71.995192][ T2151] fuse: Bad value for 'group_id' [ 72.339868][ T2172] 9p: Unknown access argument .: -22 [ 72.419734][ T2183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.439730][ T2186] tipc: Enabling of bearer rejected, failed to enable media [ 72.482058][ T2195] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.482728][ T2195] rust_binder: Error in use_page_slow: ESRCH [ 72.489246][ T2195] rust_binder: use_range failure ESRCH [ 72.495227][ T2195] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 72.500791][ T2195] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 72.508833][ T2195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:452 [ 72.518526][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 72.688548][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 72.694751][ T10] usb 1-1: config 0 has no interfaces? [ 72.701511][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.710592][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.718595][ T10] usb 1-1: Product: syz [ 72.722780][ T10] usb 1-1: Manufacturer: syz [ 72.727347][ T10] usb 1-1: SerialNumber: syz [ 72.732617][ T10] usb 1-1: config 0 descriptor?? [ 72.778550][ T45] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 72.788525][ T485] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 72.918513][ T485] usb 4-1: device descriptor read/64, error -71 [ 72.929492][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.939637][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.940594][ T10] usb 1-1: USB disconnect, device number 26 [ 72.948537][ T36] audit: type=1400 audit(1751242494.449:1268): avc: denied { mounton } for pid=2163 comm="syz.0.578" path="/proc/372/task" dev="proc" ino=17082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 72.979948][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.989200][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.997400][ T45] usb 3-1: SerialNumber: syz [ 73.002697][ T36] audit: type=1400 audit(1751242494.509:1269): avc: denied { listen } for pid=2201 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.158536][ T485] usb 4-1: device descriptor read/64, error -71 [ 73.398538][ T485] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 73.418148][ T45] usb 3-1: 0:2 : does not exist [ 73.423538][ T45] usb 3-1: unit 5 not found! [ 73.430021][ T45] usb 3-1: USB disconnect, device number 28 [ 73.437249][ T817] udevd[817]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.528519][ T485] usb 4-1: device descriptor read/64, error -71 [ 73.768771][ T485] usb 4-1: device descriptor read/64, error -71 [ 73.878643][ T485] usb usb4-port1: attempt power cycle [ 73.894398][ T2219] fuseblk: Unknown parameter 'roo' [ 73.915931][ T36] audit: type=1400 audit(1751242495.419:1270): avc: denied { mount } for pid=2220 comm="syz.1.594" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 73.940725][ T2223] fuse: Unknown parameter 'ron\ode' [ 73.986898][ T2229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.996066][ T2229] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 74.118797][ T2234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.127396][ T2234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.238524][ T485] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 74.259635][ T485] usb 4-1: device descriptor read/8, error -71 [ 74.348522][ T61] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 74.390205][ T485] usb 4-1: device descriptor read/8, error -71 [ 74.509616][ T61] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.523614][ T61] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.533952][ T61] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 74.543403][ T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.552952][ T61] usb 1-1: config 0 descriptor?? [ 74.566432][ T2245] overlayfs: unescaped trailing colons in lowerdir mount option. [ 74.575370][ T36] audit: type=1400 audit(1751242496.079:1271): avc: denied { create } for pid=2243 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 74.652908][ T2251] fuse: Unknown parameter '/sys/power/pm_freeze_timeout' [ 74.662525][ T485] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 74.673279][ T2251] can: request_module (can-proto-6) failed. [ 74.715546][ T485] usb 4-1: device descriptor read/8, error -71 [ 74.767086][ T61] usbhid 1-1:0.0: can't add hid device: -71 [ 74.778535][ T61] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 74.807293][ T61] usb 1-1: USB disconnect, device number 27 [ 74.849890][ T485] usb 4-1: device descriptor read/8, error -71 [ 74.878414][ T36] audit: type=1400 audit(1751242496.379:1272): avc: denied { accept } for pid=2286 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.958601][ T485] usb usb4-port1: unable to enumerate USB device [ 74.983428][ T36] audit: type=1400 audit(1751242496.489:1273): avc: denied { validate_trans } for pid=2288 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 75.009714][ T36] audit: type=1326 audit(1751242496.519:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2290 comm="syz.2.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f482158e929 code=0x0 [ 75.060791][ T2292] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 75.273275][ T36] audit: type=1400 audit(1751242496.779:1275): avc: denied { append } for pid=2293 comm="syz.0.620" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.286399][ T2296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:388 [ 75.838540][ T61] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 75.876854][ T2326] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.879150][ T2326] rust_binder: Error in use_page_slow: ESRCH [ 75.885713][ T2326] rust_binder: use_range failure ESRCH [ 75.891794][ T2326] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 75.897271][ T2326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 75.905376][ T2326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:466 [ 75.915860][ T36] audit: type=1400 audit(1751242497.419:1276): avc: denied { read } for pid=2325 comm="syz.2.631" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 75.950550][ T2332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.952098][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 75.964936][ T36] audit: type=1400 audit(1751242497.419:1277): avc: denied { open } for pid=2325 comm="syz.2.631" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 76.009544][ T61] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 76.019285][ T61] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.035475][ T61] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 76.044782][ T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.053060][ T61] usb 1-1: SerialNumber: syz [ 76.061516][ T61] cdc_ether 1-1:1.0: skipping garbage [ 76.067084][ T61] usb 1-1: bad CDC descriptors [ 76.072346][ T61] usb-storage 1-1:1.0: USB Mass Storage device detected [ 76.083595][ T61] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 76.139600][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.150623][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.160469][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.173677][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.182920][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.196126][ T45] usb 4-1: config 0 descriptor?? [ 76.248503][ T31] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 76.269447][ T2322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.277962][ T2322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.288256][ T2322] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 76.295897][ T2322] SELinux: failed to load policy [ 76.378530][ T31] usb 3-1: device descriptor read/64, error -71 [ 76.408307][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.415812][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.423328][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.426137][ T2361] binder: Binderfs stats mode cannot be changed during a remount [ 76.430874][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.446071][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.455019][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.456672][ T2363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312 [ 76.462516][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.480253][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.481137][ T2365] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 76.487756][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.503598][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.511218][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.518878][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.526556][ T45] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.534272][ T45] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 76.558603][ T45] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 76.587823][ T45] usb 4-1: USB disconnect, device number 29 [ 76.609305][ T2370] rust_binder: Failed to vm_insert_page(35184372105216): vma_addr:35184372101120 i:1 err:EFAULT [ 76.609332][ T2370] rust_binder: Error in use_page_slow: EFAULT [ 76.619808][ T2370] rust_binder: use_range failure EFAULT [ 76.625899][ T2370] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 76.631544][ T2370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 76.639662][ T2370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:319 [ 76.649126][ T31] usb 3-1: device descriptor read/64, error -71 [ 76.661240][ T2373] rust_binder: Write failure EINVAL in pid:319 [ 76.805229][ T2389] netlink: 'syz.1.649': attribute type 46 has an invalid length. [ 76.817181][ T2391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.872455][ T2396] rust_binder: Error in use_page_slow: ESRCH [ 76.878966][ T2396] rust_binder: use_range failure ESRCH [ 76.884939][ T2396] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 76.890504][ T2396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 76.898548][ T2396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:406 [ 76.908647][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 77.048768][ T31] usb 3-1: device descriptor read/64, error -71 [ 77.288526][ T31] usb 3-1: device descriptor read/64, error -71 [ 77.398892][ T31] usb usb3-port1: attempt power cycle [ 77.738521][ T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 77.759526][ T31] usb 3-1: device descriptor read/8, error -71 [ 77.889592][ T31] usb 3-1: device descriptor read/8, error -71 [ 77.952294][ T2411] tipc: Started in network mode [ 77.957168][ T2411] tipc: Node identity e0000001, cluster identity 4711 [ 77.963999][ T2411] tipc: Enabling of bearer rejected, failed to enable media [ 78.128665][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 78.163303][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 78.163318][ T36] audit: type=1326 audit(1751242499.669:1280): auid=4294967295 uid=49663 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2428 comm="syz.1.664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb47b8e929 code=0x0 [ 78.195716][ T31] usb 3-1: device descriptor read/8, error -71 [ 78.216919][ T36] audit: type=1400 audit(1751242499.719:1281): avc: denied { ioctl } for pid=2443 comm="syz.3.667" path="socket:[18689]" dev="sockfs" ino=18689 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.253393][ T306] tipc: Left network mode [ 78.339498][ T31] usb 3-1: device descriptor read/8, error -71 [ 78.400462][ T2449] binder: Bad value for 'stats' [ 78.408744][ T2449] netlink: 68 bytes leftover after parsing attributes in process `syz.3.669'. [ 78.458625][ T31] usb usb3-port1: unable to enumerate USB device [ 78.678511][ T307] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 78.829652][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.839452][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 78.852046][ T307] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.861366][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.869547][ T307] usb 4-1: Product: syz [ 78.873839][ T307] usb 4-1: Manufacturer: syz [ 78.878685][ T307] usb 4-1: SerialNumber: syz [ 78.885576][ T307] usb 4-1: config 0 descriptor?? [ 78.985695][ T2451] rust_binder: Write failure EFAULT in pid:470 [ 78.986670][ T2451] rust_binder: Write failure EFAULT in pid:470 [ 79.044426][ T2461] FAT-fs (rnullb0): bogus number of reserved sectors [ 79.058449][ T2459] overlayfs: failed to clone upperpath [ 79.064434][ T2461] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 79.103383][ T307] usb 4-1: USB disconnect, device number 30 [ 79.118626][ T36] audit: type=1400 audit(1751242500.619:1282): avc: denied { bind } for pid=2474 comm="syz.1.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.129449][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.138205][ T36] audit: type=1400 audit(1751242500.619:1283): avc: denied { name_bind } for pid=2474 comm="syz.1.679" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 79.175459][ T2472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.180809][ T36] audit: type=1400 audit(1751242500.619:1284): avc: denied { node_bind } for pid=2474 comm="syz.1.679" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 79.184309][ T2472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.357982][ T2490] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.365924][ T2490] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 79.374510][ T2490] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.382456][ T2490] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 80.255411][ T2511] fuse: Bad value for 'group_id' [ 80.260479][ T2511] fuse: Bad value for 'group_id' [ 80.292718][ T36] audit: type=1326 audit(1751242501.799:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2518 comm="syz.1.695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb47b8e929 code=0x0 [ 80.470285][ T2524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.470321][ T2524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:354 [ 80.479841][ T31] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 80.520716][ T2533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:363 [ 80.533101][ T2536] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 80.561322][ T36] audit: type=1400 audit(1751242502.069:1286): avc: denied { accept } for pid=2537 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.561812][ T2538] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 80.589950][ T2538] rust_binder: Write failure EINVAL in pid:368 [ 80.603498][ T36] audit: type=1326 audit(1751242502.109:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.3.702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa990b8e929 code=0x0 [ 80.659637][ T31] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.670692][ T31] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 80.681342][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.687945][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 80.697046][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.705586][ T31] usb 3-1: config 0 descriptor?? [ 80.710857][ T2505] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 81.187093][ T2552] raw_sendmsg: syz.1.705 forgot to set AF_INET. Fix it! [ 81.204435][ T36] audit: type=1400 audit(1751242502.709:1288): avc: denied { accept } for pid=2553 comm="syz.1.706" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.230661][ T2556] tmpfs: Bad value for 'huge' [ 81.265500][ T2563] fuse: Bad value for 'user_id' [ 81.270428][ T2563] fuse: Bad value for 'user_id' [ 81.288912][ T2567] overlayfs: failed to clone upperpath [ 81.414167][ T2577] overlayfs: failed to resolve './file0': -2 [ 81.738522][ T307] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 81.888509][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 81.894776][ T307] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 81.903062][ T307] usb 4-1: config 0 has no interface number 0 [ 81.910490][ T307] usb 4-1: New USB device found, idVendor=0403, idProduct=7c90, bcdDevice=fe.71 [ 81.919578][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.927568][ T307] usb 4-1: Product: syz [ 81.931748][ T307] usb 4-1: Manufacturer: syz [ 81.936344][ T307] usb 4-1: SerialNumber: syz [ 81.941519][ T307] usb 4-1: config 0 descriptor?? [ 81.947341][ T307] ftdi_sio 4-1:0.244: FTDI USB Serial Device converter detected [ 81.955447][ T307] ftdi_sio ttyUSB0: unknown device type: 0xfe71 [ 82.149338][ T2598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.149394][ T2598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 82.161179][ T45] usb 4-1: USB disconnect, device number 31 [ 82.180615][ T45] ftdi_sio 4-1:0.244: device disconnected [ 82.427057][ T36] audit: type=1326 audit(1751242503.929:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2616 comm="syz.0.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7435d8e929 code=0x0 [ 82.693311][ T2632] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 82.717834][ T2634] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 83.251293][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 83.267811][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 83.283596][ T31] usb 3-1: USB disconnect, device number 33 [ 83.628539][ T31] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 83.779593][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.790632][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.800550][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 83.810133][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.818965][ T31] usb 3-1: config 0 descriptor?? [ 83.835331][ T2684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.844107][ T2684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.848541][ T68] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 83.864656][ T2689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 83.873670][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 83.873685][ T36] audit: type=1400 audit(1751242505.379:1291): avc: denied { remount } for pid=2687 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 83.875083][ T2688] devpts: called with bogus options [ 84.018530][ T68] usb 4-1: Using ep0 maxpacket: 16 [ 84.024725][ T68] usb 4-1: config 0 has no interfaces? [ 84.031813][ T68] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.040931][ T68] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.049422][ T68] usb 4-1: Product: syz [ 84.053586][ T68] usb 4-1: Manufacturer: syz [ 84.058167][ T68] usb 4-1: SerialNumber: syz [ 84.063406][ T68] usb 4-1: config 0 descriptor?? [ 84.271056][ T10] usb 4-1: USB disconnect, device number 32 [ 86.311905][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 86.318996][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 86.327551][ T31] usb 3-1: USB disconnect, device number 34 [ 96.468152][ T2696] rust_binder: Failed copying remainder into alloc: EFAULT [ 96.468178][ T2696] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 96.485145][ T2696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 96.493159][ T2701] overlayfs: failed to clone upperpath [ 96.493835][ T2696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:391 [ 96.544750][ T36] audit: type=1400 audit(1751242518.049:1292): avc: denied { getopt } for pid=2709 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.588802][ T2712] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 96.674453][ T36] audit: type=1400 audit(1751242518.179:1293): avc: denied { ioctl } for pid=2732 comm="syz.0.765" path="/160/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.005700][ T10] hid-generic 0006:000C:0208.0010: hidraw0: VIRTUAL HID v0.01 Device [syz1] on syz1 [ 97.049502][ T2754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.049790][ T2754] rust_binder: Error in use_page_slow: ESRCH [ 97.056332][ T2754] rust_binder: use_range failure ESRCH [ 97.062441][ T2754] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 97.067976][ T2754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 97.075857][ T2754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:512 [ 97.152420][ T2761] kvm: pic: non byte write [ 97.196778][ T36] audit: type=1400 audit(1751242518.699:1294): avc: denied { create } for pid=2766 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 97.248870][ T2774] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 97.528499][ T68] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 97.594183][ T2781] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 97.603790][ T36] audit: type=1400 audit(1751242519.109:1295): avc: denied { relabelto } for pid=2780 comm="syz.1.782" name="file0" dev="tmpfs" ino=1745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 97.630789][ T36] audit: type=1400 audit(1751242519.109:1296): avc: denied { associate } for pid=2780 comm="syz.1.782" name="file0" dev="tmpfs" ino=1745 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0" [ 97.657992][ T36] audit: type=1400 audit(1751242519.119:1297): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=1745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 97.698523][ T68] usb 3-1: Using ep0 maxpacket: 32 [ 97.704721][ T68] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.714833][ T68] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 97.723884][ T68] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.732413][ T68] usb 3-1: config 0 descriptor?? [ 97.738310][ T68] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 97.773719][ T36] audit: type=1400 audit(1751242519.279:1298): avc: denied { map } for pid=2805 comm="syz.0.791" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.798551][ T36] audit: type=1400 audit(1751242519.279:1299): avc: denied { execute } for pid=2805 comm="syz.0.791" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.939575][ T2779] tmpfs: Bad value for 'uid' [ 97.944279][ T2779] tmpfs: Bad value for 'uid' [ 97.953704][ T307] usb 3-1: USB disconnect, device number 35 [ 98.037943][ T36] audit: type=1400 audit(1751242519.539:1300): avc: denied { mount } for pid=2831 comm="syz.0.800" name="/" dev="configfs" ino=2346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 98.060754][ T36] audit: type=1400 audit(1751242519.549:1301): avc: denied { mount } for pid=2831 comm="syz.0.800" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 98.093666][ T2835] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 98.101961][ T2837] rust_binder: Error in use_page_slow: ESRCH [ 98.101986][ T2837] rust_binder: use_range failure ESRCH [ 98.113571][ T2837] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 98.113592][ T2837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 98.121295][ T2837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:406 [ 98.153892][ T2839] input: syz0 as /devices/virtual/input/input16 [ 98.748500][ T61] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 98.898490][ T61] usb 3-1: Using ep0 maxpacket: 32 [ 98.914585][ T61] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 98.925664][ T61] usb 3-1: config 0 has no interface number 0 [ 98.933446][ T61] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 98.942760][ T61] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.951020][ T61] usb 3-1: Product: syz [ 98.955268][ T61] usb 3-1: Manufacturer: syz [ 98.960116][ T61] usb 3-1: SerialNumber: syz [ 98.968222][ T61] usb 3-1: config 0 descriptor?? [ 98.975368][ T61] smsc95xx v2.0.0 [ 99.184960][ T2880] overlayfs: failed to clone upperpath [ 99.203121][ T61] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 99.219482][ T2880] overlayfs: failed to clone upperpath [ 99.229533][ T2882] overlayfs: workdir and upperdir must be separate subtrees [ 99.246537][ T61] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.272454][ T61] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 99.284116][ T2880] overlayfs: failed to clone upperpath [ 99.308644][ T61] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 99.337181][ T61] usb 3-1: USB disconnect, device number 36 [ 99.353840][ T2886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.816'. [ 99.369210][ T2886] binder: Bad value for 'defcontext' [ 99.440747][ T2894] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 99.468706][ T2898] overlayfs: failed to resolve './file0': -2 [ 99.519988][ T2909] netlink: 260 bytes leftover after parsing attributes in process `syz.2.825'. [ 99.594166][ T2912] FAT-fs (rnullb0): bogus number of reserved sectors [ 99.600947][ T2912] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 99.618536][ T10] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 99.755368][ T10] usb 4-1: device descriptor read/64, error -71 [ 99.931551][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.939731][ T306] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.998499][ T10] usb 4-1: device descriptor read/64, error -71 [ 100.238500][ T10] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 100.378505][ T10] usb 4-1: device descriptor read/64, error -71 [ 100.618495][ T10] usb 4-1: device descriptor read/64, error -71 [ 100.728592][ T10] usb usb4-port1: attempt power cycle [ 101.068482][ T10] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 101.099402][ T10] usb 4-1: device descriptor read/8, error -71 [ 101.229454][ T10] usb 4-1: device descriptor read/8, error -71 [ 101.468498][ T10] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 101.499470][ T10] usb 4-1: device descriptor read/8, error -71 [ 101.629413][ T10] usb 4-1: device descriptor read/8, error -71 [ 101.738574][ T10] usb usb4-port1: unable to enumerate USB device [ 101.768475][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 101.768493][ T36] audit: type=1400 audit(101.745:1305): avc: denied { create } for pid=2985 comm="syz.1.852" name=C1FEDC30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.008518][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 102.014662][ T1497] Bluetooth: hci1: command 0x1003 tx timeout [ 102.020704][ T437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.085796][ T3000] cgroup: Unknown subsys name 'rlimit' [ 102.092098][ T36] audit: type=1400 audit(102.075:1306): avc: denied { mounton } for pid=2999 comm="syz.2.857" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 102.110010][ T3000] overlay: filesystem on ./bus is read-only [ 102.315721][ T3012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.315777][ T3011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.322949][ T3011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:604 [ 102.420312][ T36] audit: type=1400 audit(102.405:1307): avc: denied { execute } for pid=3022 comm="syz.1.867" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.450410][ T36] audit: type=1400 audit(102.405:1308): avc: denied { execute_no_trans } for pid=3022 comm="syz.1.867" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.528685][ T3030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.660170][ T36] audit: type=1326 audit(102.645:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3038 comm="syz.2.873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f482158e929 code=0x0 [ 102.712916][ T3048] overlayfs: failed to clone upperpath [ 102.712916][ T3047] overlayfs: failed to clone upperpath [ 102.725297][ T36] audit: type=1400 audit(102.705:1310): avc: denied { mount } for pid=3046 comm="syz.1.875" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.747440][ T3048] overlayfs: failed to clone upperpath [ 102.918494][ T307] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 103.015676][ T3061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 103.049815][ T3065] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 103.069599][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.077017][ T3069] overlayfs: failed to clone upperpath [ 103.079850][ T307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.094915][ T307] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.104046][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.112164][ T307] usb 4-1: SerialNumber: syz [ 103.120210][ T36] audit: type=1400 audit(103.105:1311): avc: denied { read } for pid=3072 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.171175][ T3074] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.885'. [ 103.320000][ T3026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:419 [ 103.322465][ T307] usb 4-1: 0:2 : does not exist [ 103.336538][ T307] usb 4-1: unit 5: unexpected type 0x09 [ 103.343947][ T307] usb 4-1: USB disconnect, device number 37 [ 103.376243][ T3083] tipc: Enabling of bearer rejected, failed to enable media [ 103.520927][ T3085] veth0_to_bond: mtu less than device minimum [ 103.798541][ T307] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 103.889647][ T3095] rust_binder: Error while translating object. [ 103.889684][ T3095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.895891][ T3095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:423 [ 103.948514][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 103.969243][ T307] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 103.977439][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.987630][ T307] usb 3-1: config 1 has no interface number 0 [ 103.994895][ T307] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.008099][ T307] usb 3-1: config 1 interface 105 has no altsetting 0 [ 104.016545][ T307] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 104.025639][ T307] usb 3-1: New USB device strings: Mfr=1, Product=35, SerialNumber=3 [ 104.033768][ T307] usb 3-1: Product: syz [ 104.037981][ T307] usb 3-1: Manufacturer: syz [ 104.042611][ T307] usb 3-1: SerialNumber: syz [ 104.249882][ T307] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 104.452049][ T307] usb 3-1: USB disconnect, device number 37 [ 104.649411][ T36] audit: type=1326 audit(104.635:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3125 comm="syz.1.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb47b8e929 code=0x7ffc0000 [ 104.672418][ T36] audit: type=1326 audit(104.635:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3125 comm="syz.1.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb47b8e929 code=0x7ffc0000 [ 104.695352][ T36] audit: type=1326 audit(104.635:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3125 comm="syz.1.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb47b8e929 code=0x7ffc0000 [ 105.198304][ T3153] tipc: Enabling of bearer rejected, failed to enable media [ 105.824021][ T3199] binder: Binderfs stats mode cannot be changed during a remount [ 105.832538][ T3201] binder: Binderfs stats mode cannot be changed during a remount [ 105.940996][ T3208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:467 [ 106.369333][ T3244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:654 [ 106.378616][ T3244] rust_binder: Read failure Err(EFAULT) in pid:654 [ 106.478586][ T3246] rust_binder: Write failure EFAULT in pid:658 [ 106.806102][ T3266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.954'. [ 106.838520][ T307] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 106.856351][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 106.856405][ T36] audit: type=1400 audit(106.835:1318): avc: denied { watch } for pid=3275 comm="syz.1.957" path="/378/file0" dev="tmpfs" ino=2109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.913501][ T36] audit: type=1400 audit(106.895:1319): avc: denied { getopt } for pid=3281 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.998536][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 107.005855][ T307] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.019183][ T307] usb 3-1: config 1 interface 0 has no altsetting 0 [ 107.028515][ T307] usb 3-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 107.038083][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.046446][ T307] usb 3-1: Product: 抶㹨ᬁ坿⑜蠷頒⼡ᾈ귃䡛逴炭攆▬瓈⚂몁死ꕺ剃ᕞ꿄ꪕꁿ䏍騯뇪㝔㕏⑦ۉ䙊ꌴ틊ꑁ㎿쐵茻闤辫킳维祘纽駩ﭹ㳷ᴀꞡ촢비웊젡↷쉸ꌦ⁵㿒͹䣙곢窾촱샪軔ᔯ붽荋年妉쾪쫞猡䑢옫菩蒗쯃꼧寛룃۠썈憯鿉纵⎖䓖쮞⼫갃礃霠ꥵ耋砇꼥癝 [ 107.051882][ T36] audit: type=1400 audit(107.035:1320): avc: denied { create } for pid=3293 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 107.098416][ T307] usb 3-1: Manufacturer: ࡏꦷ뤵푢辀毻먮䚌᳑㢪֌佨Ј隖샐猷똸뵞眒ᆼƾ悌䉎䕤ⷶ쀃聡媈犊哨樊鶜쭆瞧ଟ쪡䙂ꐻ௎党碯뛉㟀≧᣼拄뜁㭽ẏ [ 107.116980][ T307] usb 3-1: SerialNumber: 뾅ﶊᏧ޲ⓞ᫵㎘摲⼮칔ῲ⍯緊練᪙矅楖⡡⠁界狗䚮鈀ꖇ榹憝﬊蔛㠕菘ᘸ鎷팒㑢똯ꮄ捾ꠎﯙ덴﷩༶㻺쯘ﭚ䁪聯纂ꅜ鮰⽩⢲Ᏺ⹞귖쾵怍₽Ԁ쬹៴礬禁縡힢ఛ♐懤﫻喪ྐ䑑᎐ꕉ끽隀鎅얎鏖ꢱΐ㻺⋐抟䀆埅臻ऒ䖣捰⫹鲣얺륛㻪ҡ⨑瓆۩Ⳅﲣꆤ [ 107.219006][ T36] audit: type=1400 audit(107.205:1321): avc: denied { map } for pid=3296 comm="syz.0.966" path="socket:[24223]" dev="sockfs" ino=24223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.241509][ T36] audit: type=1400 audit(107.205:1322): avc: denied { read } for pid=3296 comm="syz.0.966" path="socket:[24223]" dev="sockfs" ino=24223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.556911][ T307] usbhid 3-1:1.0: can't add hid device: -71 [ 107.562943][ T307] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 107.573039][ T307] usb 3-1: USB disconnect, device number 38 [ 107.669319][ T3322] mmap: syz.1.974 (3322) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.078908][ T3361] rust_binder: Error while translating object. [ 108.078932][ T3361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.085127][ T3361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:667 [ 108.106373][ T36] audit: type=1400 audit(108.085:1323): avc: denied { setopt } for pid=3362 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 108.135179][ T36] audit: type=1400 audit(108.095:1324): avc: denied { ioctl } for pid=3362 comm="syz.2.990" path="socket:[23278]" dev="sockfs" ino=23278 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 108.135259][ T485] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 108.159942][ T36] audit: type=1400 audit(108.095:1325): avc: denied { create } for pid=3362 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 108.169241][ T485] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.192143][ T36] audit: type=1400 audit(108.095:1326): avc: denied { getopt } for pid=3362 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 108.285198][ T36] audit: type=1400 audit(108.265:1327): avc: denied { map } for pid=3378 comm="syz.1.996" path="socket:[24450]" dev="sockfs" ino=24450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 108.314160][ T3383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.997'. [ 108.452311][ T3395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 108.951113][ T3402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 109.857858][ T3443] rust_binder: Failed copying remainder into alloc: EFAULT [ 109.857885][ T3443] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 109.865467][ T3443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 109.874114][ T3443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:503 [ 109.939884][ T3452] input: syz1 as /devices/virtual/input/input18 [ 110.322241][ T3478] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 110.337724][ T3479] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 110.702648][ T68] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 110.720729][ T3488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:535 [ 110.802195][ T3491] rust_binder: Write failure EINVAL in pid:537 [ 110.836419][ T3493] fuse: Bad value for 'fd' [ 110.848246][ T3493] rust_binder: Error while translating object. [ 110.848293][ T3493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.854737][ T3493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:540 [ 110.866541][ T68] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 110.897981][ T68] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.906246][ T68] usb 3-1: Product: syz [ 110.910825][ T68] usb 3-1: Manufacturer: syz [ 110.915488][ T68] usb 3-1: SerialNumber: syz [ 110.943820][ T3497] rust_binder: Error while translating object. [ 110.943857][ T3497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.950443][ T3497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544 [ 111.428504][ T45] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 111.588484][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 111.594779][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 111.603686][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.614056][ T45] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.623166][ T45] usb 4-1: config 1 has no interface number 1 [ 111.629476][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 111.642554][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.654064][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.663366][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.671515][ T45] usb 4-1: Product: syz [ 111.675780][ T45] usb 4-1: Manufacturer: syz [ 111.680614][ T45] usb 4-1: SerialNumber: syz [ 111.948586][ T45] usb 4-1: USB disconnect, device number 38 [ 112.674127][ T3559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.674164][ T3559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:570 [ 113.385613][ T68] usb 3-1: USB disconnect, device number 39 [ 113.408207][ T3582] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 113.408232][ T3582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 113.416879][ T3582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:712 [ 113.512245][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 113.512264][ T36] audit: type=1400 audit(2000000002.589:1409): avc: denied { shutdown } for pid=3605 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.548403][ T3604] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1072'. [ 114.018586][ T61] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 114.134781][ T3644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 114.168514][ T61] usb 4-1: Using ep0 maxpacket: 16 [ 114.174706][ T61] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.184879][ T61] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.195333][ T61] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.204569][ T61] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.212650][ T61] usb 4-1: Product: syz [ 114.216794][ T61] usb 4-1: Manufacturer: syz [ 114.221393][ T61] usb 4-1: SerialNumber: syz [ 114.557711][ T3661] netlink: 'syz.1.1093': attribute type 46 has an invalid length. [ 114.644036][ T3672] cgroup: release_agent respecified [ 114.679696][ T3675] cgroup: Unknown subsys name 'rlimit' [ 114.686897][ T36] audit: type=1326 audit(2000000003.762:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.0.1099" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7435d8e929 code=0x0 [ 114.910590][ T61] usb 4-1: invalid UAC_HEADER (v1) [ 114.917589][ T61] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 114.927529][ T61] usb 4-1: USB disconnect, device number 39 [ 114.932601][ T2713] udevd[2713]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.058575][ T485] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 115.182427][ T3686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 115.209512][ T485] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.228939][ T485] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.239228][ T485] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 115.249442][ T485] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 115.260885][ T485] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.270222][ T485] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.283642][ T485] usb 3-1: Product: syz [ 115.292222][ T485] usb 3-1: Manufacturer: syz [ 115.299308][ T3692] can0: slcan on ptm0. [ 115.302964][ T485] usb 3-1: SerialNumber: syz [ 115.312178][ T485] cdc_mbim 3-1:1.0: skipping garbage [ 115.318853][ T3692] rust_binder: Error while translating object. [ 115.318887][ T3692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.325077][ T3692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:587 [ 115.391640][ T3691] can0 (unregistered): slcan off ptm0. [ 115.461217][ T36] audit: type=1400 audit(2000000004.542:1411): avc: denied { execmem } for pid=3719 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 115.511520][ T3678] binder: Bad value for 'stats' [ 115.560054][ T485] cdc_mbim 3-1:1.0: bind() failure [ 115.565819][ T485] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 115.572683][ T485] cdc_ncm 3-1:1.1: bind() failure [ 115.580271][ T485] usb 3-1: USB disconnect, device number 40 [ 115.626044][ T36] audit: type=1400 audit(2000000004.702:1412): avc: denied { create } for pid=3735 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.646366][ T36] audit: type=1400 audit(2000000004.702:1413): avc: denied { write } for pid=3735 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.666740][ T36] audit: type=1400 audit(2000000004.702:1414): avc: denied { nlmsg_write } for pid=3735 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.840259][ T36] audit: type=1400 audit(2000000004.922:1415): avc: denied { nlmsg_read } for pid=3741 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.910390][ T3753] 9pnet_fd: Insufficient options for proto=fd [ 116.359755][ T3769] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 116.574438][ T3775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 116.628619][ T61] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 116.788573][ T485] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 116.797420][ T61] usb 4-1: No LPM exit latency info found, disabling LPM. [ 116.805842][ T61] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 116.816811][ T61] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 116.827073][ T61] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 116.838559][ T61] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.847673][ T61] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.855713][ T61] usb 4-1: Product: Ћ [ 116.859977][ T61] usb 4-1: Manufacturer: ࠖ [ 116.864587][ T61] usb 4-1: SerialNumber: 쭉ꖫ쮰ẃ䑬鱰揓䰢캁ᩮ➑鮁㝐庮㗚∂꓏㼯蟇뵮牕ߍ觡ှ鞪囤됙讍뀭촤졂헸듿䄪㨹䉺覆鄻䪄㪀纗늤푥㯫醣ꮅ欵눦鼇贸혼 [ 116.884603][ T3771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.939831][ T485] usb 3-1: not running at top speed; connect to a high speed hub [ 116.948330][ T485] usb 3-1: config 1 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 116.959487][ T485] usb 3-1: config 1 interface 0 altsetting 11 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 116.970447][ T485] usb 3-1: config 1 interface 0 has no altsetting 0 [ 116.978569][ T485] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.40 [ 116.987686][ T485] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.995733][ T485] usb 3-1: Product: љ [ 116.999873][ T485] usb 3-1: Manufacturer: 뜻訔쪋췢勏ཧ옛竎ﰊ盷੬덄疞⹖絗⎽㯜柩䇯꾿勠ፎ㏷ꙇ墅啤䀦ﳂ禃픽䩬묢昖㛯阹ᔢ曔谴銣辤瘭맯㽁鬨箦礟ꏍʘᆫタ膃䄛몡鉾踹㝵瘠︆㺎鞈ᜠ쓝荣⤍꤄࿝섋╊ﲉ幐摦擿㡱釒࿐噰접豻鎒㓃㧳൭䇇ㅀ宴슒쳻䂚黪ᒬ蜰ရ񠀣㱢᳐㸂 [ 117.032940][ T485] usb 3-1: SerialNumber: syz [ 117.038542][ T3791] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 117.045780][ T3791] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 117.294021][ T3771] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 117.294049][ T3771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 117.302653][ T3771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:600 [ 117.314099][ T61] cdc_ncm 4-1:1.0: bind() failure [ 117.329062][ T61] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 117.335877][ T61] cdc_ncm 4-1:1.1: bind() failure [ 117.342174][ T61] usb 4-1: USB disconnect, device number 40 [ 117.458591][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.467116][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.475939][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.484454][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.494060][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.502616][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.714250][ T485] usbhid 3-1:1.0: can't add hid device: -71 [ 117.720290][ T485] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 117.729382][ T485] usb 3-1: USB disconnect, device number 41 [ 117.857873][ T36] audit: type=1326 audit(2000000006.932:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3809 comm="syz.3.1133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa990b8e929 code=0x0 [ 117.917441][ T3812] rust_binder: Write failure EFAULT in pid:604 [ 118.033351][ T36] audit: type=1326 audit(2000000007.112:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.0.1134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7435d8e929 code=0x0 [ 118.226156][ T3817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.226494][ T3817] rust_binder: Error in use_page_slow: ESRCH [ 118.233055][ T3817] rust_binder: use_range failure ESRCH [ 118.239222][ T3817] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 118.244760][ T3817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 118.252848][ T3817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:765 [ 118.271951][ T36] audit: type=1400 audit(2000000007.352:1418): avc: denied { create } for pid=3818 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.508552][ T307] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 118.638497][ T307] usb 3-1: device descriptor read/64, error -71 [ 118.696507][ T3822] overlayfs: failed to resolve '/b [ 118.696507][ T3822] tbF?! 4eUzS0voI/@B@_b./file0': -2 [ 118.722609][ T3822] kvm: pic: non byte write [ 118.860184][ T306] tipc: Subscription rejected, illegal request [ 118.878514][ T307] usb 3-1: device descriptor read/64, error -71 [ 119.004091][ T3851] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 119.012882][ T36] audit: type=1400 audit(2000000008.092:1419): avc: denied { map } for pid=3849 comm="syz.0.1147" path="socket:[25532]" dev="sockfs" ino=25532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.098500][ T45] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 119.118508][ T307] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 119.248543][ T307] usb 3-1: device descriptor read/64, error -71 [ 119.255812][ T45] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.266799][ T45] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 119.277432][ T45] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 119.288133][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.294752][ T45] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 119.303821][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.312756][ T45] usb 4-1: config 0 descriptor?? [ 119.317986][ T3827] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 119.325276][ T3827] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 119.388690][ T3854] x_tables: duplicate underflow at hook 1 [ 119.488525][ T307] usb 3-1: device descriptor read/64, error -71 [ 119.598598][ T307] usb usb3-port1: attempt power cycle [ 119.735905][ T45] hid-generic 0003:1B1C:1C0D.0012: hidraw1: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.3-1/input0 [ 119.839312][ T3889] incfs: Backing dir is not set, filesystem can't be mounted. [ 119.847068][ T3889] incfs: mount failed -2 [ 119.938536][ T307] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 119.959549][ T307] usb 3-1: device descriptor read/8, error -71 [ 120.090077][ T307] usb 3-1: device descriptor read/8, error -71 [ 120.104997][ T3891] tipc: Enabling of bearer rejected, failed to enable media [ 120.328532][ T307] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 120.349660][ T307] usb 3-1: device descriptor read/8, error -71 [ 120.479656][ T307] usb 3-1: device descriptor read/8, error -71 [ 120.588590][ T307] usb usb3-port1: unable to enumerate USB device [ 121.093904][ T36] audit: type=1400 audit(2000000010.172:1420): avc: denied { create } for pid=3912 comm="syz.0.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 121.114514][ T36] audit: type=1400 audit(2000000010.172:1421): avc: denied { shutdown } for pid=3912 comm="syz.0.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.344870][ T3933] netlink: 'syz.2.1174': attribute type 4 has an invalid length. [ 121.353141][ T3933] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1174'. [ 121.416590][ T3936] kvm: pic: non byte write [ 121.422223][ T3936] netlink: 'syz.2.1175': attribute type 4 has an invalid length. [ 121.506540][ T36] audit: type=1400 audit(2000000010.582:1422): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.551885][ T3952] tipc: Can't bind to reserved service type 0 [ 121.584453][ T3954] tipc: Enabling of bearer rejected, failed to enable media [ 121.871052][ T45] usb 4-1: USB disconnect, device number 41 [ 121.901739][ T3958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 121.901773][ T3958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 122.233538][ T3978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'. [ 122.301720][ T3978] netlink: 'syz.0.1192': attribute type 12 has an invalid length. [ 122.310071][ T36] audit: type=1400 audit(2000000011.392:1423): avc: denied { setopt } for pid=3977 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.338529][ T45] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 122.498819][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 122.505276][ T3988] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 122.509347][ T45] usb 4-1: config 4 has an invalid interface number: 60 but max is 0 [ 122.517123][ T36] audit: type=1400 audit(2000000011.592:1424): avc: denied { relabelto } for pid=3987 comm="syz.0.1196" name="file0" dev="tmpfs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 122.538522][ T45] usb 4-1: config 4 has no interface number 0 [ 122.568633][ T45] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=da.8d [ 122.577695][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.579263][ T36] audit: type=1400 audit(2000000011.592:1425): avc: denied { associate } for pid=3987 comm="syz.0.1196" name="file0" dev="tmpfs" ino=1535 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 122.621833][ T36] audit: type=1400 audit(2000000011.642:1426): avc: denied { accept } for pid=3992 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.822063][ T45] usb 4-1: USB disconnect, device number 42 [ 123.203390][ T4019] overlayfs: failed to clone upperpath [ 123.249968][ T36] audit: type=1326 audit(2000000012.332:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7435d8e929 code=0x0 [ 123.637856][ T36] audit: type=1400 audit(2000000012.712:1428): avc: denied { search } for pid=4041 comm="syz.3.1215" name="/" dev="configfs" ino=2346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.709636][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 124.218270][ T4066] netlink: 'syz.3.1225': attribute type 4 has an invalid length. [ 124.227743][ T4065] netlink: 'syz.3.1225': attribute type 4 has an invalid length. [ 124.245664][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 124.245680][ T36] audit: type=1400 audit(2000000013.322:1431): avc: denied { accept } for pid=4064 comm="syz.3.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 124.708835][ T4092] bpf: Bad value for 'mode' [ 124.765868][ T36] audit: type=1400 audit(2000000013.842:1432): avc: denied { map } for pid=4091 comm="syz.0.1234" path="socket:[28160]" dev="sockfs" ino=28160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.870504][ T4105] overlayfs: failed to clone upperpath [ 125.435750][ T4136] /dev/rnullb0: Can't lookup blockdev [ 125.470003][ T4144] overlayfs: failed to clone lowerpath [ 125.487929][ T4144] overlayfs: failed to clone upperpath [ 125.498887][ T45] kernel write not supported for file [eventfd] (pid: 45 comm: kworker/1:1) [ 125.543196][ T4156] tmpfs: Unknown parameter '֗noswap' [ 125.680692][ T4172] overlayfs: failed to clone upperpath [ 125.780000][ T4186] 9pnet_fd: Insufficient options for proto=fd [ 126.894917][ T36] audit: type=1400 audit(2000000015.962:1433): avc: denied { accept } for pid=4221 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.940082][ T4228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1281'. [ 126.952263][ T36] audit: type=1400 audit(2000000016.032:1434): avc: denied { watch_reads } for pid=4227 comm="syz.0.1281" path="/305" dev="tmpfs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 126.993253][ T4232] overlayfs: failed to clone upperpath [ 127.031865][ T4240] cgroup: noprefix used incorrectly [ 127.038875][ T4240] overlayfs: failed to clone upperpath [ 127.078555][ T4243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=4243 comm=syz.1.1288 [ 127.093132][ T4249] tmpfs: Unknown parameter '' [ 127.098366][ T4249] tmpfs: Unknown parameter '' [ 127.109186][ T4249] tmpfs: Unknown parameter '' [ 127.115326][ T4249] tmpfs: Unknown parameter '' [ 127.131737][ T4249] tmpfs: Unknown parameter '' [ 127.136953][ T4249] tmpfs: Unknown parameter '' [ 127.144789][ T4249] tmpfs: Unknown parameter '' [ 127.151041][ T4249] tmpfs: Unknown parameter '' [ 127.156233][ T4249] tmpfs: Unknown parameter '' [ 127.166335][ T4249] tmpfs: Unknown parameter '' [ 127.174556][ T4249] tmpfs: Unknown parameter '' [ 127.182223][ T4249] tmpfs: Unknown parameter '' [ 127.187781][ T4249] tmpfs: Unknown parameter '' [ 127.197003][ T4249] tmpfs: Unknown parameter '' [ 127.202608][ T4249] tmpfs: Unknown parameter '' [ 127.207785][ T4249] tmpfs: Unknown parameter '' [ 127.231092][ T4249] tmpfs: Unknown parameter '' [ 127.236274][ T4249] tmpfs: Unknown parameter '' [ 127.241865][ T4249] tmpfs: Unknown parameter '' [ 127.253494][ T4274] tipc: Enabling of bearer rejected, failed to enable media [ 127.262489][ T4249] tmpfs: Unknown parameter '' [ 127.267646][ T4249] tmpfs: Unknown parameter '' [ 127.273084][ T4249] tmpfs: Unknown parameter '' [ 127.281206][ T4249] tmpfs: Unknown parameter '' [ 127.286445][ T4249] tmpfs: Unknown parameter '' [ 127.293589][ T4249] tmpfs: Unknown parameter '' [ 127.299695][ T4249] tmpfs: Unknown parameter '' [ 127.305010][ T4249] tmpfs: Unknown parameter '' [ 127.308966][ T4276] overlayfs: failed to clone upperpath [ 127.310515][ T4249] tmpfs: Unknown parameter '' [ 127.323359][ T4249] tmpfs: Unknown parameter '' [ 127.333493][ T4249] tmpfs: Unknown parameter '' [ 127.347665][ T4249] tmpfs: Unknown parameter '' [ 127.357759][ T4249] tmpfs: Unknown parameter '' [ 127.367857][ T4249] tmpfs: Unknown parameter '' [ 127.380192][ T4249] tmpfs: Unknown parameter '' [ 127.394292][ T4249] tmpfs: Unknown parameter '' [ 127.408294][ T4249] tmpfs: Unknown parameter '' [ 127.416380][ T4249] tmpfs: Unknown parameter '' [ 127.422093][ T4249] tmpfs: Unknown parameter '' [ 127.427307][ T4249] tmpfs: Unknown parameter '' [ 127.434500][ T4249] tmpfs: Unknown parameter '' [ 127.444550][ T4249] tmpfs: Unknown parameter '' [ 127.458584][ T4249] tmpfs: Unknown parameter '' [ 127.467489][ T4249] tmpfs: Unknown parameter '' [ 127.481084][ T4249] tmpfs: Unknown parameter '' [ 127.487393][ T4249] tmpfs: Unknown parameter '' [ 127.498766][ T4249] tmpfs: Unknown parameter '' [ 127.508934][ T4249] tmpfs: Unknown parameter '' [ 127.526317][ T4249] tmpfs: Unknown parameter '' [ 127.540404][ T4249] tmpfs: Unknown parameter '' [ 127.548040][ T4249] tmpfs: Unknown parameter '' [ 127.558816][ T4249] tmpfs: Unknown parameter '' [ 127.568811][ T4249] tmpfs: Unknown parameter '' [ 127.578784][ T4249] tmpfs: Unknown parameter '' [ 127.598590][ T4249] tmpfs: Unknown parameter '' [ 127.603838][ T4249] tmpfs: Unknown parameter '' [ 127.616619][ T4249] tmpfs: Unknown parameter '' [ 127.622144][ T4249] tmpfs: Unknown parameter '' [ 127.627308][ T4249] tmpfs: Unknown parameter '' [ 127.638987][ T4249] tmpfs: Unknown parameter '' [ 127.644411][ T4249] tmpfs: Unknown parameter '' [ 127.658829][ T4249] tmpfs: Unknown parameter '' [ 127.664159][ T4249] tmpfs: Unknown parameter '' [ 127.669754][ T4249] tmpfs: Unknown parameter '' [ 127.674926][ T4249] tmpfs: Unknown parameter '' [ 127.680350][ T4249] tmpfs: Unknown parameter '' [ 127.809632][ T36] audit: type=1400 audit(2000000016.892:1435): avc: denied { map } for pid=4321 comm="syz.1.1315" path="socket:[28434]" dev="sockfs" ino=28434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.501312][ T4344] fuse: Unknown parameter 'smackfstransmute' [ 129.032579][ T36] audit: type=1400 audit(2000000018.108:1436): avc: denied { ioctl } for pid=4369 comm="syz.3.1331" path="socket:[28515]" dev="sockfs" ino=28515 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.117010][ T36] audit: type=1400 audit(2000000018.188:1437): avc: denied { create } for pid=4371 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 129.901738][ T4415] overlayfs: failed to clone upperpath [ 131.557263][ T36] audit: type=1326 audit(2000000020.628:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.1359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa990b8e929 code=0x0 [ 133.624169][ T36] audit: type=1400 audit(2000000023.694:1439): avc: denied { listen } for pid=4455 comm="syz.0.1364" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.644579][ T36] audit: type=1400 audit(2000000023.704:1440): avc: denied { create } for pid=4459 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 134.213522][ T4479] tmpfs: Unknown parameter '18446744073709551615' [ 134.383211][ T4504] overlayfs: failed to clone upperpath [ 134.468258][ T36] audit: type=1400 audit(2000000024.534:1441): avc: denied { bind } for pid=4508 comm="syz.0.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.473500][ T4513] overlayfs: failed to clone upperpath [ 135.027710][ T4541] overlayfs: failed to clone upperpath [ 135.161684][ T36] audit: type=1326 audit(2000000025.234:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.1395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7435d8e929 code=0x0 [ 135.267193][ T36] audit: type=1400 audit(2000000025.334:1443): avc: denied { accept } for pid=4556 comm="syz.0.1398" path="socket:[29895]" dev="sockfs" ino=29895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.929939][ T36] audit: type=1400 audit(2000000025.994:1444): avc: denied { map } for pid=4578 comm="syz.3.1407" path="socket:[28857]" dev="sockfs" ino=28857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.960483][ T36] audit: type=1400 audit(2000000025.994:1445): avc: denied { accept } for pid=4578 comm="syz.3.1407" path="socket:[28857]" dev="sockfs" ino=28857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.018194][ T4595] fuse: Bad value for 'fd' [ 136.069010][ T36] audit: type=1326 audit(2000000026.144:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.3.1414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa990b8e929 code=0x0 [ 136.684261][ T36] audit: type=1400 audit(2000000026.754:1447): avc: denied { mounton } for pid=4616 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 136.723841][ T36] audit: type=1400 audit(2000000026.794:1448): avc: denied { ioctl } for pid=4617 comm="syz.0.1419" path="socket:[29967]" dev="sockfs" ino=29967 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.756561][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.763939][ T4616] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.771256][ T4616] bridge_slave_0: entered allmulticast mode [ 136.777862][ T4616] bridge_slave_0: entered promiscuous mode [ 136.784787][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.792079][ T4616] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.799422][ T4616] bridge_slave_1: entered allmulticast mode [ 136.799863][ T4625] SELinux: Context system_u:object_r:ifconfig_exec_t:s0 is not valid (left unmapped). [ 136.805844][ T4616] bridge_slave_1: entered promiscuous mode [ 136.840074][ T36] audit: type=1400 audit(2000000026.914:1449): avc: denied { relabelto } for pid=4624 comm="syz.0.1420" name="rnullb0" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ifconfig_exec_t:s0" [ 136.867328][ T36] audit: type=1400 audit(2000000026.914:1450): avc: denied { associate } for pid=4624 comm="syz.0.1420" name="rnullb0" dev="tmpfs" ino=980 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ifconfig_exec_t:s0" [ 136.915469][ T4628] 9pnet_fd: Insufficient options for proto=fd [ 136.922137][ T36] audit: type=1400 audit(2000000027.004:1451): avc: denied { getattr } for pid=4626 comm="syz.0.1421" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 136.987639][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.994755][ T4616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.002082][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.009136][ T4616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.036143][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.048776][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.067885][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.074990][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.080210][ T4647] sockfs: Unknown parameter './binderfs2/custom1' [ 137.100815][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.108257][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.160776][ T4616] veth0_vlan: entered promiscuous mode [ 137.173466][ T4616] veth1_macvtap: entered promiscuous mode [ 137.206230][ T36] audit: type=1400 audit(2000000027.274:1452): avc: denied { mounton } for pid=4616 comm="syz-executor" path="/root/syzkaller.D0p58J/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 137.289695][ T4661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 137.289738][ T4661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:4 [ 137.309431][ T4661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.379420][ T36] audit: type=1400 audit(2000000027.454:1453): avc: denied { read write } for pid=4665 comm="syz.4.1433" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.458751][ T36] audit: type=1400 audit(2000000027.494:1454): avc: denied { open } for pid=4665 comm="syz.4.1433" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.512576][ T36] audit: type=1400 audit(2000000027.494:1455): avc: denied { map } for pid=4665 comm="syz.4.1433" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.557711][ T36] audit: type=1400 audit(2000000027.534:1456): avc: denied { ioctl } for pid=4667 comm="syz.4.1434" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.727380][ T4696] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 137.829116][ T4706] overlayfs: failed to clone upperpath [ 137.938374][ T4715] 9pnet_fd: Insufficient options for proto=fd [ 138.056812][ T4732] /dev/rnullb0: Can't lookup blockdev [ 138.566232][ T4757] /dev/rnullb0: Can't lookup blockdev [ 139.034367][ T4764] tipc: Started in network mode [ 139.039339][ T4764] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 139.048360][ T4764] tipc: Enabled bearer , priority 10 [ 139.094893][ T306] tipc: Subscription rejected, illegal request [ 140.105521][ T4806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 140.144763][ T4815] overlayfs: failed to clone upperpath [ 140.158497][ T31] tipc: Node number set to 1 [ 140.234946][ T4841] overlayfs: failed to clone upperpath [ 140.267229][ T4851] 9pnet_fd: Insufficient options for proto=fd [ 140.469882][ T4861] fuse: Bad value for 'user_id' [ 140.474804][ T4861] fuse: Bad value for 'user_id' [ 140.945792][ T4874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4874 comm=syz.3.1510 [ 140.966742][ T4877] fuse: Bad value for 'rootmode' [ 141.185618][ T4902] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1519'. [ 141.195762][ T4902] wg1: entered promiscuous mode [ 141.220103][ T4906] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 141.517908][ T4916] rust_binder: Write failure EFAULT in pid:19 [ 142.071019][ T4932] tmpfs: Bad value for 'uid' [ 142.081940][ T4932] tmpfs: Bad value for 'uid' [ 142.764106][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'. [ 143.555653][ T5032] fuse: Bad value for 'group_id' [ 143.560794][ T5032] fuse: Bad value for 'group_id' [ 143.715222][ T5058] netlink: 'syz.1.1575': attribute type 4 has an invalid length. [ 143.723022][ T5058] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1575'. [ 143.781525][ T5068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1578'. [ 143.850964][ T5082] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 144.499907][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 144.499923][ T36] audit: type=1400 audit(2000000034.579:1460): avc: denied { accept } for pid=5135 comm="syz.1.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.411806][ T5155] /dev/loop0: Can't lookup blockdev [ 145.552686][ T5174] netlink: 'syz.3.1615': attribute type 4 has an invalid length. [ 147.583559][ T5187] binder: Unknown parameter 'defcontext01777777777777777777777' [ 148.072473][ T36] audit: type=1400 audit(2000000038.149:1461): avc: denied { setattr } for pid=5208 comm="syz.0.1627" name="PINGv6" dev="sockfs" ino=31788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.185973][ T5223] rust_binder: Write failure EINVAL in pid:41 [ 148.186189][ T5223] rust_binder: Read failure Err(EAGAIN) in pid:41 [ 148.594939][ T5241] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1638'. [ 148.674139][ T5246] netlink: 265 bytes leftover after parsing attributes in process `syz.3.1639'. [ 148.987884][ T36] audit: type=1400 audit(2000000039.059:1462): avc: denied { create } for pid=5247 comm="syz.0.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 149.120292][ T5256] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 149.983765][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.990950][ T5296] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.998135][ T5296] bridge_slave_0: entered allmulticast mode [ 150.004918][ T5296] bridge_slave_0: entered promiscuous mode [ 150.013721][ T306] bridge_slave_1: left allmulticast mode [ 150.019660][ T306] bridge_slave_1: left promiscuous mode [ 150.025359][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.033326][ T306] bridge_slave_0: left allmulticast mode [ 150.039130][ T306] bridge_slave_0: left promiscuous mode [ 150.044858][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.150286][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.157486][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.164688][ T5296] bridge_slave_1: entered allmulticast mode [ 150.170965][ T5296] bridge_slave_1: entered promiscuous mode [ 150.191130][ T306] tipc: Disabling bearer [ 150.196568][ T306] tipc: Left network mode [ 150.202366][ T306] veth1_macvtap: left promiscuous mode [ 150.207862][ T306] veth0_vlan: left promiscuous mode [ 150.268201][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.275263][ T5296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.282556][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.289611][ T5296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.310098][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.317471][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.328159][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.335248][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.344231][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.351307][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.378660][ T5296] veth0_vlan: entered promiscuous mode [ 150.390126][ T5296] veth1_macvtap: entered promiscuous mode [ 150.417904][ T36] audit: type=1400 audit(2000000040.489:1463): avc: denied { mounton } for pid=5308 comm="syz.1.1654" path="/proc/2/cgroup" dev="proc" ino=31999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 150.453076][ T5311] rust_binder: Error in use_page_slow: ESRCH [ 150.453096][ T5311] rust_binder: use_range failure ESRCH [ 150.459453][ T5311] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 150.464984][ T5311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 150.472847][ T5311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:4 [ 150.610073][ T5315] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 150.626964][ T5315] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 150.635495][ T5315] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 150.643519][ T5315] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 150.898533][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 151.049660][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.060683][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.070535][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.083510][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.092584][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.101239][ T31] usb 2-1: config 0 descriptor?? [ 151.309644][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.317093][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.324650][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.332097][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.339571][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.346970][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.354376][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.361832][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.369707][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.377114][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.384692][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.392366][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.399963][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.401170][ T5352] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 151.407365][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.407399][ T31] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 151.430327][ T31] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 151.444846][ T31] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 151.459944][ T31] usb 2-1: USB disconnect, device number 14 [ 151.486517][ T5360] fido_id[5360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 151.623822][ T5388] cgroup: fork rejected by pids controller in /syz0 [ 151.664097][ T36] audit: type=1400 audit(2000000041.739:1464): avc: denied { lock } for pid=5420 comm="syz.3.1687" path="socket:[31301]" dev="sockfs" ino=31301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.715925][ T5567] overlayfs: missing 'lowerdir' [ 151.928729][ T5610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2121 sclass=netlink_route_socket pid=5610 comm=syz.3.1697 [ 151.994144][ T36] audit: type=1326 audit(2000000042.069:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.0.1704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7435d8e929 code=0x0 [ 152.230968][ T5636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5636 comm=syz.4.1707 [ 152.244185][ T5636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5636 comm=syz.4.1707 [ 152.498223][ T36] audit: type=1400 audit(2000000042.569:1466): avc: denied { bind } for pid=5642 comm="syz.1.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.669423][ T5681] overlayfs: failed to resolve '/b [ 152.669423][ T5681] tbF?! 4eUzS0voI/@B@_b./file0': -2 [ 152.693536][ T5683] >: renamed from veth0_vlan (while UP) [ 152.776528][ T5690] /dev/rnullb0: Can't lookup blockdev [ 152.851970][ T5692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=5692 comm=syz.1.1729 [ 153.098563][ T5699] FAT-fs (rnullb0): bogus number of reserved sectors [ 153.105421][ T5699] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 153.293730][ T36] audit: type=1326 audit(2000000043.369:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.3.1734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa990b8e929 code=0x0 [ 153.761422][ T5712] rust_binder: Error while translating object. [ 153.761455][ T5712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 153.767880][ T5712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 153.788695][ T5716] rust_binder: Error while translating object. [ 153.797848][ T5716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 153.804213][ T5716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47 [ 154.399271][ T36] audit: type=1326 audit(2000000044.479:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.1744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa20fb8e929 code=0x0 [ 154.449925][ T36] audit: type=1326 audit(2000000044.529:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.1744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa20fb8e929 code=0x0 [ 154.500856][ T36] audit: type=1326 audit(2000000044.579:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.1744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa20fb8e929 code=0x0 [ 154.552548][ T36] audit: type=1326 audit(2000000044.629:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.1744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa20fb8e929 code=0x0 [ 154.603523][ T36] audit: type=1326 audit(2000000044.679:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.1744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa20fb8e929 code=0x0 [ 154.833037][ T5749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.857583][ T5752] rust_binder: Write failure EFAULT in pid:69 [ 154.873373][ T5754] rust_binder: Error while translating object. [ 154.879524][ T5754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.885730][ T5754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 155.077078][ T5772] FAT-fs (rnullb0): bogus number of reserved sectors [ 155.103331][ T5772] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 155.858989][ T307] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 156.019551][ T307] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 156.038474][ T307] usb 2-1: config 1 has no interface number 1 [ 156.044847][ T307] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 156.060402][ T307] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 156.073243][ T307] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.082648][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.095737][ T307] usb 2-1: Product: syz [ 156.100457][ T307] usb 2-1: Manufacturer: syz [ 156.105163][ T307] usb 2-1: SerialNumber: syz [ 156.189479][ T5851] /dev/rnullb0: Can't lookup blockdev [ 156.209669][ T5854] fuse: Unknown parameter 'fd0x000000000000000a' [ 156.216989][ T5855] overlay: ./file1 is not a directory [ 156.319958][ T307] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 156.331552][ T307] usb 2-1: 2:1 : sample bitwidth 189 in over sample bytes 3 [ 156.339314][ T307] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 156.351191][ T307] usb 2-1: USB disconnect, device number 15 [ 156.368377][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.588348][ T5874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.588401][ T5874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.596405][ T5876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.603398][ T5874] rust_binder: Write failure EINVAL in pid:79 [ 156.610117][ T5874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:79 [ 156.635156][ T368] hid (null): unknown global tag 0xc [ 156.678190][ T368] hid-generic 0500:7000000:2000000.0014: collection stack underflow [ 156.687328][ T368] hid-generic 0500:7000000:2000000.0014: item 0 1 0 12 parsing failed [ 156.695977][ T368] hid-generic 0500:7000000:2000000.0014: probe with driver hid-generic failed with error -22 [ 156.815510][ T5886] exFAT-fs (rnullb0): invalid boot record signature [ 156.828461][ T5886] exFAT-fs (rnullb0): failed to read boot sector [ 156.842572][ T5886] exFAT-fs (rnullb0): failed to recognize exfat type [ 156.851232][ T5890] rust_binder: Error while translating object. [ 156.851272][ T5890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 156.863438][ T5890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:117 [ 157.126624][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 157.146140][ T5902] overlayfs: failed to resolve './file0/file0': -2 [ 157.153593][ T368] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 157.194220][ T5907] overlayfs: failed to clone lowerpath [ 157.308465][ T368] usb 2-1: Using ep0 maxpacket: 32 [ 157.315625][ T368] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 152, changing to 11 [ 157.327123][ T368] usb 2-1: config 1 interface 0 has no altsetting 0 [ 157.335458][ T368] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.40 [ 157.344797][ T368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.353016][ T368] usb 2-1: Product: ⎢扬ﻴ﹍㪞酊湡㭦ꐭ [ 157.359779][ T368] usb 2-1: Manufacturer: ᅷᎎ 莅垪タ용ᘆ⛔櫣ᧆ墨ᵗ⊫㟒ᘈ䈙慪墹昵⦉竘豆黬秊雇菌毷ﮆ涗玂루僁띘센霉똮휼㻬㈲ﮀユ蟠㕉สข长諭ᜍᜏ䳀ꖮ썈퀢垟쟦瑠ꪓ▤삡ṕ醗胊쒆湘႖䰌㞩ჱ牿熭얘躺婏랶歠혻琟Ь浺銺緫絶慘ꡓ稅篴죩Ⲅᕖ䊍왵슽ᗆ쌣䖦卞婂ꂏ醆菦 [ 157.392409][ T368] usb 2-1: SerialNumber:  [ 157.759970][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 157.759988][ T36] audit: type=1400 audit(2000000047.829:1478): avc: denied { accept } for pid=5917 comm="syz.3.1802" lport=40086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 157.882835][ T368] usbhid 2-1:1.0: can't add hid device: -71 [ 157.894145][ T368] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 157.908471][ T368] usb 2-1: USB disconnect, device number 16 [ 158.233328][ T5964] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1820'. [ 158.242527][ T5964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1820'. [ 158.389550][ T5979] /dev/loop0: Can't lookup blockdev [ 158.424133][ T5984] binder: Bad value for 'max' [ 158.530975][ T36] audit: type=1400 audit(2000000048.609:1479): avc: denied { write } for pid=6001 comm="syz.1.1833" path="socket:[34841]" dev="sockfs" ino=34841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.590881][ T6004] kvm: pic: non byte write [ 158.723718][ T6007] binder: Unknown parameter '' [ 158.909147][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1839'. [ 158.940956][ T6021] kvm: apic: phys broadcast and lowest prio [ 159.239296][ T6030] overlayfs: failed to clone upperpath [ 159.614191][ T6058] overlayfs: failed to clone upperpath [ 160.114848][ T6093] lo: entered promiscuous mode [ 160.128850][ T6093] lo: left promiscuous mode [ 160.145267][ T6095] overlayfs: failed to clone upperpath [ 160.965359][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 160.985664][ T6118] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 160.992854][ T10] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.042717][ T6122] fido_id[6122]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.100944][ T6133] overlayfs: failed to clone upperpath [ 161.133698][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.240842][ T36] audit: type=1400 audit(2000000000.029:1480): avc: denied { read } for pid=6145 comm="syz.0.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.846388][ T6181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6181 comm=syz.1.1896 [ 161.869969][ T6183] overlayfs: failed to clone upperpath [ 161.988402][ T6187] overlayfs: failed to resolve './bus': -2 [ 162.854274][ T6215] tipc: Failed to remove unknown binding: 66,1,1/0:3131832107/3131832109 [ 162.872895][ T6217] IPv4: Oversized IP packet from 127.202.26.0 [ 162.879606][ T6217] netlink: 'syz.3.1910': attribute type 63 has an invalid length. [ 162.887424][ T6217] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1910'. [ 162.896330][ T6217] gretap0: entered allmulticast mode [ 162.902019][ T6217] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 163.208512][ T436] Bluetooth: hci0: command 0x1003 tx timeout [ 163.208511][ T2998] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.235943][ T6242] FAT-fs (rnullb0): bogus number of reserved sectors [ 163.242799][ T6242] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 163.260090][ T6246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.393577][ T6251] sock: sock_timestamping_bind_phc: sock not bind to device [ 164.236876][ T6268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.237196][ T6268] rust_binder: Error while translating object. [ 164.245135][ T6268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 164.251873][ T6268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:124 [ 164.502941][ T6297] tipc: Failed to remove unknown binding: 66,1,1/0:3079170921/3079170923 [ 164.520608][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 164.690790][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 164.698344][ T10] usb 2-1: config 0 has no interfaces? [ 164.705968][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.724458][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.736738][ T6323] cgroup: fork rejected by pids controller in /syz3 [ 164.736796][ T10] usb 2-1: Product: syz [ 164.756640][ T10] usb 2-1: Manufacturer: syz [ 164.765817][ T10] usb 2-1: SerialNumber: syz [ 164.774884][ T36] audit: type=1400 audit(2000000009.560:1481): avc: denied { lock } for pid=6445 comm="syz.0.1949" path="socket:[34717]" dev="sockfs" ino=34717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 164.798342][ T10] usb 2-1: config 0 descriptor?? [ 164.961092][ T6461] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 165.010275][ T36] audit: type=1400 audit(2000000009.800:1482): avc: denied { associate } for pid=6279 comm="syz.1.1932" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 165.011994][ T45] usb 2-1: USB disconnect, device number 17 [ 165.485793][ T6473] fuse: Bad value for 'fd' [ 166.888817][ T36] audit: type=1400 audit(2000000011.680:1483): avc: denied { map } for pid=6504 comm="syz.3.1969" path="socket:[36364]" dev="sockfs" ino=36364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 166.920706][ T6507] netlink: 'syz.3.1970': attribute type 4 has an invalid length. [ 167.040402][ T6512] Invalid ELF header len 16 [ 167.040464][ T36] audit: type=1400 audit(2000000011.830:1484): avc: denied { module_load } for pid=6510 comm="syz.0.1972" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 167.101012][ T36] audit: type=1400 audit(2000000011.890:1485): avc: denied { map } for pid=6519 comm="syz.0.1975" path="pipe:[36880]" dev="pipefs" ino=36880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 167.379889][ T6522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.438637][ T6525] fuse: Unknown parameter 'vd' [ 167.989501][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 168.040882][ T36] audit: type=1400 audit(2000000012.830:1486): avc: denied { nlmsg_tty_audit } for pid=6547 comm="syz.3.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 168.073580][ T6551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=6551 comm=syz.3.1986 [ 168.262507][ T6566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.313903][ T6568] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 168.315139][ T45] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 168.321187][ T6568] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 168.339195][ T45] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.743347][ T36] audit: type=1400 audit(2000000013.530:1487): avc: denied { lock } for pid=6608 comm="syz.1.2003" path="socket:[37061]" dev="sockfs" ino=37061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 169.283526][ T6618] bridge0: entered promiscuous mode [ 169.291814][ T6617] bridge0: left promiscuous mode [ 169.324670][ T36] audit: type=1400 audit(2000000014.110:1488): avc: denied { map } for pid=6619 comm="syz.1.2007" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 169.394206][ T6628] binder: Unknown parameter 'defcontext01777777777777777777777' [ 169.545014][ T36] audit: type=1400 audit(2000000014.330:1489): avc: denied { lock } for pid=6638 comm="syz.1.2015" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 169.568907][ T36] audit: type=1400 audit(2000000014.340:1490): avc: denied { create } for pid=6638 comm="syz.1.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.739958][ T6651] kvm: pic: non byte write [ 172.132388][ T36] audit: type=1400 audit(2000000016.920:1491): avc: denied { create } for pid=6672 comm="syz.4.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.471242][ T6704] bpf: Bad value for 'mode' [ 185.477068][ T6706] can0: slcan on ttyS3. [ 185.520935][ T6706] can0 (unregistered): slcan off ttyS3. [ 185.555778][ T36] audit: type=1326 audit(2000000030.340:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.3.2042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa990b8e929 code=0x0 [ 185.608850][ T6739] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2044'. [ 185.644423][ T6744] fuseblk: Bad value for 'source' [ 185.655551][ T6744] fuseblk: Bad value for 'source' [ 185.661994][ T6744] fuseblk: Bad value for 'source' [ 185.670751][ T6738] binder: Bad value for 'stats' [ 185.673638][ T6744] fuseblk: Bad value for 'source' [ 185.696401][ T6744] fuseblk: Bad value for 'source' [ 185.712439][ T6744] fuseblk: Bad value for 'source' [ 185.959267][ T6771] incfs: Options parsing error. -22 [ 185.965010][ T6771] incfs: mount failed -22 [ 186.001403][ T6786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.022491][ T36] audit: type=1400 audit(2000000030.810:1493): avc: denied { unmount } for pid=5296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 186.053164][ T6791] rust_binder: Error while translating object. [ 186.053212][ T6791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 186.059865][ T6791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 186.478500][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 186.639531][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.649734][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 186.663563][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.672662][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 186.680708][ T10] usb 2-1: SerialNumber: syz [ 186.686627][ T10] usb 2-1: bad CDC descriptors [ 186.889490][ T368] usb 2-1: USB disconnect, device number 18 [ 187.025222][ T6821] binder: Bad value for 'defcontext' [ 187.240528][ T6830] tipc: Enabling of bearer rejected, failed to enable media [ 188.831642][ T36] audit: type=1400 audit(2000000033.620:1494): avc: denied { setopt } for pid=6879 comm="syz.0.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.852582][ T36] audit: type=1400 audit(2000000033.620:1495): avc: denied { name_bind } for pid=6879 comm="syz.0.2085" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 189.343048][ T36] audit: type=1400 audit(2000000034.130:1496): avc: denied { create } for pid=6881 comm="syz.0.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.393242][ T36] audit: type=1326 audit(2000000034.180:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa990b8e929 code=0x7fc00000 [ 189.891825][ T36] audit: type=1400 audit(2000000034.651:1498): avc: denied { read append } for pid=6920 comm="syz.4.2099" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.915401][ T36] audit: type=1400 audit(2000000034.651:1499): avc: denied { open } for pid=6920 comm="syz.4.2099" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.938729][ T36] audit: type=1400 audit(2000000034.651:1500): avc: denied { map } for pid=6920 comm="syz.4.2099" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.961928][ T36] audit: type=1400 audit(2000000034.651:1501): avc: denied { write } for pid=6920 comm="syz.4.2099" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 191.011863][ T6976] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.111076][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 191.111094][ T36] audit: type=1400 audit(2000000035.792:1503): avc: denied { accept } for pid=7000 comm="syz.3.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 191.651792][ T368] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 191.813256][ T368] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.824407][ T368] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 191.835300][ T368] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.842062][ T368] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 191.851374][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.861045][ T368] usb 2-1: config 0 descriptor?? [ 191.872386][ T7014] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 192.528053][ T368] logitech 0003:046D:C286.0017: unknown main item tag 0x6 [ 192.536005][ T368] logitech 0003:046D:C286.0017: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0 [ 192.547742][ T368] logitech 0003:046D:C286.0017: no inputs found [ 192.742322][ T1646] usb 2-1: USB disconnect, device number 19 [ 193.333355][ T7073] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2153'. [ 193.342447][ T7073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2153'. [ 193.907395][ T7080] netlink: 'syz.0.2156': attribute type 58 has an invalid length. [ 194.467038][ T7087] batadv_slave_1: entered promiscuous mode [ 194.473072][ T7087] batadv_slave_1: left promiscuous mode [ 194.487179][ T36] audit: type=1326 audit(2000000038.954:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.0.2158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7435d8e929 code=0x0 [ 195.436335][ T436] Bluetooth: hci0: command 0x1003 tx timeout [ 195.436394][ T2998] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.724887][ T31] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 195.886308][ T31] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 195.894490][ T31] usb 2-1: config 0 has no interface number 0 [ 195.900693][ T31] usb 2-1: config 0 interface 41 has no altsetting 0 [ 195.908602][ T7100] netlink: 'syz.3.2162': attribute type 28 has an invalid length. [ 195.908896][ T31] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 195.926265][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.934461][ T31] usb 2-1: Product: syz [ 195.938771][ T31] usb 2-1: Manufacturer: syz [ 195.943392][ T31] usb 2-1: SerialNumber: syz [ 195.948795][ T31] usb 2-1: config 0 descriptor?? [ 196.388681][ T31] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -32 [ 196.471599][ T36] audit: type=1400 audit(2000000040.797:1505): avc: denied { bind } for pid=7110 comm="syz.3.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.490092][ T7111] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7111 comm=syz.3.2166 [ 196.505753][ T7111] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7111 comm=syz.3.2166 [ 196.529697][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2167'. [ 196.596043][ T7125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2171'. [ 196.605089][ T7127] overlayfs: failed to clone upperpath [ 196.634853][ T7134] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 197.516814][ T45] usb 2-1: USB disconnect, device number 20 [ 197.756555][ T36] audit: type=1400 audit(2000000042.013:1506): avc: denied { mounton } for pid=7165 comm="syz.0.2185" path="/551/file3" dev="tmpfs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 197.916534][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 198.076819][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 198.083675][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 198.095118][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 198.106569][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.115714][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.124738][ T45] usb 2-1: config 0 descriptor?? [ 198.130900][ T45] hub 2-1:0.0: USB hub found [ 198.344678][ T45] hub 2-1:0.0: 1 port detected [ 199.242184][ T7207] netlink: 'syz.0.2198': attribute type 5 has an invalid length. [ 199.249947][ T7207] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2198'. [ 199.259761][ T7207] fuseblk: Bad value for 'user_id' [ 199.264915][ T7207] fuseblk: Bad value for 'user_id' [ 199.419851][ T7154] 9pnet_fd: Insufficient options for proto=fd [ 199.427279][ T45] usb 2-1: USB disconnect, device number 21 [ 199.833039][ T7212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2200'. [ 199.873239][ T7221] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.928801][ T7222] rust_binder: Write failure EFAULT in pid:236 [ 200.246994][ T45] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 200.418049][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 200.424373][ T45] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 200.437455][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.444140][ T45] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 200.453256][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.464860][ T45] usb 2-1: config 0 descriptor?? [ 200.528900][ T7238] /dev/loop0: Can't lookup blockdev [ 200.686071][ T45] usb 2-1: string descriptor 0 read error: -71 [ 200.694855][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 200.700908][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 200.709749][ T45] usb 2-1: USB disconnect, device number 22 [ 201.030976][ T7267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.030996][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.091787][ T7268] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 201.091958][ T7269] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 201.098865][ T7268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 201.106808][ T7269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 201.114783][ T7268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:264 [ 201.124330][ T7269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:264 [ 201.143891][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.239717][ T36] audit: type=1400 audit(2000000045.259:1507): avc: denied { lock } for pid=7270 comm="syz.1.2221" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 201.280463][ T7275] fuse: Unknown parameter 'rootmode0000000000000040000' [ 201.297375][ T7277] fuse: Unknown parameter 'user_KuBid' [ 201.372689][ T36] audit: type=1400 audit(2000000045.390:1508): avc: denied { getopt } for pid=7281 comm="syz.0.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 201.396645][ T36] audit: type=1400 audit(2000000045.408:1509): avc: denied { sys_module } for pid=7287 comm="syz.0.2228" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 201.572661][ T45] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 201.733990][ T45] usb 2-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 201.744335][ T45] usb 2-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.757224][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 201.763832][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 201.773131][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.781891][ T45] usb 2-1: config 0 descriptor?? [ 201.789483][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 202.001815][ T36] audit: type=1326 audit(2000000045.979:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20fb8e929 code=0x7ffc0000 [ 202.025538][ T36] audit: type=1326 audit(2000000045.979:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20fb8e929 code=0x7ffc0000 [ 202.049239][ T36] audit: type=1326 audit(2000000045.979:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa20fb8e929 code=0x7ffc0000 [ 202.072811][ T36] audit: type=1326 audit(2000000045.979:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20fb8e929 code=0x7ffc0000 [ 202.105623][ T36] audit: type=1326 audit(2000000045.979:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20fb8e929 code=0x7ffc0000 [ 202.130634][ T36] audit: type=1326 audit(2000000045.979:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa20fb8e929 code=0x7ffc0000 [ 202.154343][ T36] audit: type=1326 audit(2000000045.979:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20fb8e929 code=0x7ffc0000 [ 202.177884][ T36] audit: type=1326 audit(2000000045.979:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fa20fb8e929 code=0x7ffc0000 [ 202.201757][ T36] audit: type=1326 audit(2000000045.979:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20fb8e929 code=0x7ffc0000 [ 202.225295][ T36] audit: type=1326 audit(2000000045.979:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fa20fb8e929 code=0x7ffc0000 [ 202.296573][ T7361] cgroup2: Unknown parameter 'nsdelegatRkJe' [ 202.306419][ T7359] netlink: 'syz.3.2253': attribute type 4 has an invalid length. [ 203.819637][ T45] ================================================================== [ 203.827750][ T45] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 203.834545][ T45] Write of size 8 at addr 0000000000000098 by task kworker/1:1/45 [ 203.842363][ T45] [ 203.844710][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 203.844745][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.844759][ T45] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 203.844825][ T45] Call Trace: [ 203.844832][ T45] [ 203.844840][ T45] __dump_stack+0x21/0x30 [ 203.844865][ T45] dump_stack_lvl+0x10c/0x190 [ 203.844886][ T45] ? __cfi_dump_stack_lvl+0x10/0x10 [ 203.844910][ T45] ? __switch_to+0xc7b/0x1310 [ 203.844935][ T45] print_report+0x3d/0x70 [ 203.844953][ T45] kasan_report+0x163/0x1a0 [ 203.844980][ T45] ? down_write+0x83/0x2a0 [ 203.845006][ T45] ? down_write+0x83/0x2a0 [ 203.845028][ T45] kasan_check_range+0x299/0x2a0 [ 203.845056][ T45] __kasan_check_write+0x18/0x20 [ 203.845079][ T45] down_write+0x83/0x2a0 [ 203.845102][ T45] ? __cfi_down_write+0x10/0x10 [ 203.845125][ T45] ? _raw_spin_lock+0x8c/0x120 [ 203.845152][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 203.845178][ T45] ? mutex_unlock+0x8b/0x240 [ 203.845199][ T45] ? __cfi_mutex_unlock+0x10/0x10 [ 203.845222][ T45] rust_binderfs_remove_file+0x6c/0x110 [ 203.845248][ T45] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 203.845285][ T45] ? update_curr_dl_se+0x65a/0xb20 [ 203.845317][ T45] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 203.845339][ T45] ? update_curr+0x60d/0xc60 [ 203.845365][ T45] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 203.845399][ T45] ? update_load_avg+0x506/0x19a0 [ 203.845419][ T45] ? detach_entity_load_avg+0x7b0/0x7b0 [ 203.845447][ T45] ? dequeue_entity+0xa9c/0x1750 [ 203.845469][ T45] ? __cfi_wg_packet_decrypt_worker+0x10/0x10 [ 203.845499][ T45] ? tg_unthrottle_up+0x980/0x980 [ 203.845520][ T45] ? kvm_sched_clock_read+0x15/0x30 [ 203.845543][ T45] ? sched_clock_noinstr+0xd/0x30 [ 203.845566][ T45] ? sched_clock+0x44/0x60 [ 203.845586][ T45] ? sched_clock_cpu+0x75/0x400 [ 203.845608][ T45] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 203.845629][ T45] ? kvm_sched_clock_read+0x15/0x30 [ 203.845654][ T45] ? __cfi_sched_clock_cpu+0x10/0x10 [ 203.845677][ T45] ? __kasan_check_write+0x18/0x20 [ 203.845699][ T45] ? __switch_to+0xc7b/0x1310 [ 203.845721][ T45] ? psi_group_change+0xb44/0x1130 [ 203.845743][ T45] ? __cfi___switch_to+0x10/0x10 [ 203.845766][ T45] ? _raw_spin_unlock+0x45/0x60 [ 203.845783][ T45] ? __switch_to_asm+0x3d/0x70 [ 203.845808][ T45] ? __schedule+0x1463/0x1f10 [ 203.845828][ T45] ? kick_pool+0xb9/0x550 [ 203.845848][ T45] process_scheduled_works+0x7d2/0x1020 [ 203.845876][ T45] worker_thread+0xc58/0x1250 [ 203.845904][ T45] kthread+0x2ca/0x370 [ 203.845929][ T45] ? __cfi_worker_thread+0x10/0x10 [ 203.845954][ T45] ? __cfi_kthread+0x10/0x10 [ 203.845980][ T45] ret_from_fork+0x64/0xa0 [ 203.846002][ T45] ? __cfi_kthread+0x10/0x10 [ 203.846029][ T45] ret_from_fork_asm+0x1a/0x30 [ 203.846055][ T45] [ 203.846063][ T45] ================================================================== [ 204.164665][ T45] Disabling lock debugging due to kernel taint [ 204.170934][ T45] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 204.178828][ T45] #PF: supervisor write access in kernel mode [ 204.185015][ T45] #PF: error_code(0x0002) - not-present page [ 204.191102][ T45] PGD 0 P4D 0 [ 204.195361][ T45] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 204.201547][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Tainted: G B 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 204.216499][ T45] Tainted: [B]=BAD_PAGE [ 204.220653][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.230724][ T45] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 204.247524][ T45] RIP: 0010:down_write+0x9a/0x2a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 204.252580][ T45] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 204.272196][ T45] RSP: 0018:ffffc900002ef500 EFLAGS: 00010256 [ 204.278279][ T45] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 204.280130][ T10] usb 1-1: USB disconnect, device number 28 [ 204.286265][ T45] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900002ef520 [ 204.300103][ T45] RBP: ffffc900002ef598 R08: ffffc900002ef527 R09: 1ffff9200005dea4 [ 204.308350][ T45] R10: dffffc0000000000 R11: fffff5200005dea5 R12: dffffc0000000000 [ 204.316352][ T45] R13: 1ffff9200005dea0 R14: ffffc900002ef520 R15: 0000000000000000 [ 204.324344][ T45] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 204.333286][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.339964][ T45] CR2: 0000000000000098 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 204.347942][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.356707][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.364890][ T45] Call Trace: [ 204.368545][ T45] [ 204.371487][ T45] ? __cfi_down_write+0x10/0x10 [ 204.376339][ T45] ? _raw_spin_lock+0x8c/0x120 [ 204.381346][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 204.386905][ T45] ? mutex_unlock+0x8b/0x240 [ 204.391502][ T45] ? __cfi_mutex_unlock+0x10/0x10 [ 204.396512][ T45] rust_binderfs_remove_file+0x6c/0x110 [ 204.402484][ T45] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 204.415221][ T45] ? update_curr_dl_se+0x65a/0xb20 [ 204.420316][ T45] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 204.426361][ T45] ? update_curr+0x60d/0xc60 [ 204.430948][ T45] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 204.444116][ T45] ? update_load_avg+0x506/0x19a0 [ 204.449122][ T45] ? detach_entity_load_avg+0x7b0/0x7b0 [ 204.454671][ T45] ? dequeue_entity+0xa9c/0x1750 [ 204.459683][ T45] ? __cfi_wg_packet_decrypt_worker+0x10/0x10 [ 204.465771][ T45] ? tg_unthrottle_up+0x980/0x980 [ 204.470779][ T45] ? kvm_sched_clock_read+0x15/0x30 [ 204.475979][ T45] ? sched_clock_noinstr+0xd/0x30 [ 204.481001][ T45] ? sched_clock+0x44/0x60 [ 204.485437][ T45] ? sched_clock_cpu+0x75/0x400 [ 204.490284][ T45] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 204.496330][ T45] ? kvm_sched_clock_read+0x15/0x30 [ 204.501508][ T45] ? __cfi_sched_clock_cpu+0x10/0x10 [ 204.506771][ T45] ? __kasan_check_write+0x18/0x20 [ 204.511879][ T45] ? __switch_to+0xc7b/0x1310 [ 204.516535][ T45] ? psi_group_change+0xb44/0x1130 [ 204.521629][ T45] ? __cfi___switch_to+0x10/0x10 [ 204.526546][ T45] ? _raw_spin_unlock+0x45/0x60 [ 204.531391][ T45] ? __switch_to_asm+0x3d/0x70 [ 204.536135][ T45] ? __schedule+0x1463/0x1f10 [ 204.540788][ T45] ? kick_pool+0xb9/0x550 [ 204.545094][ T45] process_scheduled_works+0x7d2/0x1020 [ 204.550720][ T45] worker_thread+0xc58/0x1250 [ 204.555397][ T45] kthread+0x2ca/0x370 [ 204.559452][ T45] ? __cfi_worker_thread+0x10/0x10 [ 204.564549][ T45] ? __cfi_kthread+0x10/0x10 [ 204.569119][ T45] ret_from_fork+0x64/0xa0 [ 204.573557][ T45] ? __cfi_kthread+0x10/0x10 [ 204.578131][ T45] ret_from_fork_asm+0x1a/0x30 [ 204.582963][ T45] [ 204.585976][ T45] Modules linked in: [ 204.589859][ T45] CR2: 0000000000000098 [ 204.593999][ T45] ---[ end trace 0000000000000000 ]--- [ 204.599780][ T45] RIP: 0010:down_write+0x9a/0x2a0 [ 204.604788][ T45] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 204.624375][ T45] RSP: 0018:ffffc900002ef500 EFLAGS: 00010256 [ 204.630424][ T45] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 204.638376][ T45] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900002ef520 [ 204.646383][ T45] RBP: ffffc900002ef598 R08: ffffc900002ef527 R09: 1ffff9200005dea4 [ 204.654407][ T45] R10: dffffc0000000000 R11: fffff5200005dea5 R12: dffffc0000000000 [ 204.662505][ T45] R13: 1ffff9200005dea0 R14: ffffc900002ef520 R15: 0000000000000000 [ 204.671201][ T45] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 204.680229][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.686808][ T45] CR2: 0000000000000098 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 204.694871][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.702829][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.710782][ T45] Kernel panic - not syncing: Fatal exception [ 204.717097][ T45] Kernel Offset: disabled [ 204.721420][ T45] Rebooting in 86400 seconds..