last executing test programs: 1m28.46347671s ago: executing program 1 (id=489): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/110, 0x6e, 0x0, 0x2d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 1m28.45288303s ago: executing program 1 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f00000002c0)=""/117, 0x75}], 0x3, 0xbc4, 0x1) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8]) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x14, 0x0, &(0x7f0000000300)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 1m28.396023424s ago: executing program 1 (id=491): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f00005a1000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x8fe69000) (async) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd70ff7f000025010000001400020077673000000000000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) (async) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22201, 0x0) write$UHID_INPUT(r6, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r7, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x41}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4055}, 0x54) (async) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 1m28.395522525s ago: executing program 1 (id=492): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r1, 0xc0046209, &(0x7f0000000140)) 1m28.395365674s ago: executing program 1 (id=493): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1000b) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') fsopen(&(0x7f0000000140)='nsfs\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x604602, 0x102) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$netlink(0x10, 0x3, 0x0) 1m28.389527095s ago: executing program 1 (id=494): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) socket$inet6(0xa, 0x802, 0x0) (async) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x40, 0x9, 0x38, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x40, 0x1}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="b0", @ANYRES64=r4], 0xb0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) (async) pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 1m26.105762038s ago: executing program 0 (id=528): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x9, 0xd, 0x19) 1m26.081271289s ago: executing program 0 (id=529): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1000b) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') fsopen(&(0x7f0000000140)='nsfs\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x604602, 0x102) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$netlink(0x10, 0x3, 0x0) 1m26.08089437s ago: executing program 0 (id=530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r1, 0xffff, 0x800, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f00000c0000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f01d166b8e97266ef0f01c4673666d1ba00000f78e30f01ca66baf80cb818effd8cef66bafc0cb026ee36f20f0176009a0800000004010f070f01c5", 0x3c}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x8080000, 0xd9143322b16ac5ea, 0x2}}, "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", "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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1m26.024071123s ago: executing program 0 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) sendfile(r0, r0, 0x0, 0x7fd) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000840)={0x70, 0x0, &(0x7f0000000640)=[@release={0x40046306, 0x1}, @free_buffer={0x40086303, r2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x10, 0x2e}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x14}}, 0x0}, 0x400}, @dead_binder_done, @register_looper], 0x51, 0x0, &(0x7f0000000980)="1d597002c52f656f7527abe01eec1920a6a2fae7958f3ab1072aa2bb1593bd90951979f0078e74bf553b055163ef78a314a007aad5762fe8392ee7c3806cc6deeee06171dc997de54169f1b9bbf3ea191f"}) 1m26.022991233s ago: executing program 0 (id=532): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x99a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') clock_settime(0xfffffffc, &(0x7f0000000300)={0x77359400}) (async) pread64(r1, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 1m26.022428293s ago: executing program 0 (id=533): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) readv(r2, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/51, 0x33}], 0x2) (async) readv(r2, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/51, 0x33}], 0x2) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) dup(r1) (async) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, &(0x7f0000000440)) unshare(0x62040200) (async) unshare(0x62040200) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 1m13.283721306s ago: executing program 32 (id=494): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) socket$inet6(0xa, 0x802, 0x0) (async) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x40, 0x9, 0x38, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x40, 0x1}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="b0", @ANYRES64=r4], 0xb0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) (async) pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 1m10.98495695s ago: executing program 33 (id=533): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) readv(r2, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/51, 0x33}], 0x2) (async) readv(r2, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/51, 0x33}], 0x2) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) dup(r1) (async) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, &(0x7f0000000440)) unshare(0x62040200) (async) unshare(0x62040200) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 1m9.261319285s ago: executing program 2 (id=707): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000021000100"], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m9.249228755s ago: executing program 2 (id=708): io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001"], 0x14}}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) (async) getresgid(&(0x7f00000000c0), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) (async) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_clone3(&(0x7f0000000440)={0x40000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x5804, &(0x7f0000000200)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB="2c6d6f64653d3030c132ef113db8d41b303030303030303034372c00"]) 1m9.213289248s ago: executing program 2 (id=709): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.159867072s ago: executing program 2 (id=710): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000000)={0x0, &(0x7f0000002e80)=[@wr_drn={0x6e, 0x20, {0x7, 0x800000000002}}], 0x20}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000140)={0x10001, 0x0, {[0x8000000000000001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x744, 0x1000080]}}) (async) r6 = syz_usb_connect$cdc_ecm(0x6, 0x5d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x90, 0x8, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0xd052}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x12c5, 0xa, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x58, 0x7, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x26, 0x83, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x60, 0x2, 0x30, 0x1}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x4, 0xff, 0x8b, 0x40, 0x8}, 0x3e, &(0x7f0000000200)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "cc52b237c36f20df73616e143d6cdffd"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "6124b0d2451d3ecfad118a538424d7e5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x9, 0x2, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x5, 0x6, 0xc}]}, 0x4, [{0xfb, &(0x7f00000004c0)=@string={0xfb, 0x3, "7a52fd049c133287c371d010f2d18849f0a24fb6c3052787f53f031508991d977cab62b05724f1bb25faf407956cd7dec87aa04bd97400c5d4090b4d32af864011a277543f0e00d58e1b37dc2f317473b5ae8ce20fa468ea4edf226927dea57eb03a53dcb95a5ecbfc02c4422f18e9e962901a6d396e734a6b5cee414710df14d0563cdad8ce6ec6a25c1de42a4b857e36314c6bf413057b05217727e172b04f4ca5787130f2ab9e5704461dc49192276ac2cea70d1c4793103dd03149b47c9725bde7e537e5775775bd895d6c911fd6ad2c7a18c10aa8f0f5d4f30710605dddedc5ea35fd7f6b11815f4b37788dc3688cbc009cca267db3f5"}}, {0xbe, &(0x7f0000000340)=@string={0xbe, 0x3, "89011b9fde6e77840d5fb390861da7c37d5887c489dd3776aaffadf970c320a4af5462a239c608cc2c60863f31e6c8072b6a1a03f6250d38f4c78fc13c679a34045f09251c785fbf0fb54be3f73edd349b8a727e0d6191f5f9b105c929d4d5da01da02e70be5848fd4458735ce35f3659972327ba2da60c3278a7207b799cdb49993e675dac95ab3316bd8c9afdaea068714434c285b3f4f92eb99b3ae0f8dc8eaaf256b553a588a8cf19360b22490e35bef3991015708169af13b37"}}, {0xed, &(0x7f00000005c0)=@string={0xed, 0x3, "43b45ecba25c71fe67508f9797b63e970329d086ce71842de5fed65a5726d37b6505c7e45617ac3fd898172607bb8c10f62cb09025895a55ddf3cd80969cb81675d75e867e7ab4a08894c914192f513f11c8d0c9b169c2fca9e544079e8b3a4911af77a59b16e9ebbd116a669e9fb3a794772e816f86b209134c7b652e052d03b2e8d36bcbbb76cab9ebe11f9639f923252f68241c4eeb348714ff46ac4dd358ab6004c57b11fea428807477993ac6a6634acba537c1a88ab65b3ac639e43e8c8331eededd533284b5e3b06dfbbe2f3a8b785c611626a2cfb3f740e1d4fc0d998cc826e6c37c9b4d4f687a"}}, {0xfb, &(0x7f00000006c0)=@string={0xfb, 0x3, "be3c5e65d4f7374afdf3773f73821c4b6e89d99f73e4dd11627466ed3dfbb2bad2442d17efe61095e071b1bceb86d9fe4f7717f927c3a84a539caca133773c511e00e33cf930c10cc045539d389e2e9cfec14679550896b94c007b4ad2c6b3604aa99d4121542688d1e71ba406e44b7906bba8ed8db096a0a873015a0291fcf7cb69e75ca320b4d7f493ae063f5aa5b013047265f46ba584327525cedab1667dbac61b748f6b67869d486ce0609e8f2d822441cf469393d2f8943ba58563541151b133248ea2b288a8a3d67ae53ab9de76fac6ec056b408ed5ea3d9b6bac01eb6af79d34e504eb8b274c44a4ecd496f23399949d79da75e6b2"}}]}) syz_usb_control_io(r6, &(0x7f0000000a00)={0x2c, &(0x7f00000007c0)={0x20, 0x30, 0xc6, {0xc6, 0x22, "31a389bf663f993f4671b97bc71e427aac0da87581e4e0bc55424d45a038ece76da4d7c96654662ba2f1b841c3c74b4a7a6bc571e08664bb64218302f7dc3e365f504205043cce264e9134884c99b1d9b3505c2e12f7eefad77aad10ad543d3cb2ba5d800ea4fe0769e47ec625f02276b33cbd23e27d2f8c2fbbff35c386a64a5bb12864775dd030cbb2bbcdf3af8daad40efae6b6a640b4028a7dc6fa622642a56477697df39125a1f30a20070e311181fa90f0cf3e4af40a80b056907bddd94344119d"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000900)={0x0, 0xf, 0x47, {0x5, 0xf, 0x47, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x9, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x9, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x5, 0x2, 0xd, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ca551c9c5469620603f1ccc38cb9185b"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4c, 0x7f, 0x0, 0x6, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0x7, 0xc}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x2, 0x87, 0x6, "79837840", "74c78e39"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xde, 0x0, 0x4, 0x3, 0xc0, 0x4, 0x7}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a40)={0x40, 0x0, 0x6f, "38dbd440086906095dcbf9747b8131f4c04c96be350165e5531db3011151bec7f0405430ef93ccb8c65a74672718feb2f38f02ca5350de5a32484d4d9bbd3ea86c0aa9db9544bb112db76774ceee9d708e580784bcc6618f776a50bec137f0bb16e8ede8dd50faa24ab59f1e21a717"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0x4, 0x10, [0xf0f0]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000c80)={0x40, 0xb, 0x2, 'Qw'}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000d00)={0x40, 0x13, 0x6}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "42d6"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0xc1}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0xa2}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_connect(0x1, 0x79, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0xf8, 0x28, 0xe5, 0x8, 0x12d1, 0x1402, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x40, 0xf3, 0x80, 0x0, [{{0x9, 0x4, 0xae, 0xd0, 0x0, 0x3d, 0xb5, 0xaf, 0x7, [@generic={0x2, 0xe}]}}, {{0x9, 0x4, 0xfc, 0xfc, 0x4, 0x33, 0x69, 0xfe, 0x6, [], [{{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x6a, 0x5, 0x8}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x7, 0x7f, 0xa}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0xf, 0x0, 0x40}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x4, 0x1, 0x53, [@generic={0x2, 0x4}]}}]}}, {{0x9, 0x4, 0x8c, 0x9, 0x2, 0xce, 0x8f, 0xc7, 0x8d, [@hid_hid={0x9, 0x21, 0xb12, 0x7f, 0x1, {0x22, 0x792}}], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x3, 0xf8, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xeb, 0x6, 0x81}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) 1m8.690720553s ago: executing program 2 (id=718): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000142, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r5) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r8 = dup(r7) write$binfmt_elf64(r8, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x5, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10002, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x81, 0xff, 0x9, 0x7, 0x9, 0x7}]}, 0x78) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="470f38f1bd080000002e460f35450f01c965360fc734a20f01cb470f060fc759223e0f7fcd0fdfb5a30000000f01f8", 0x2f}], 0x1, 0x27, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r1, &(0x7f0000000400)="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", 0x1f000) 1m8.59211829s ago: executing program 2 (id=719): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffe71, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffe71, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000003580)=""/4084, 0xff4}, {&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000580)=""/68, 0x44}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x4}, 0x5e}], 0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="4d01000000000000002100e50414090b00920000", 0x14, 0x81, &(0x7f0000000340)={0x11, 0x0, r7, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3, 0x8, 0xd, @dev={0xfe, 0x80, '\x00', 0x36}, @private2, 0x7800, 0x7800, 0x400}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3, 0x8, 0xd, @dev={0xfe, 0x80, '\x00', 0x36}, @private2, 0x7800, 0x7800, 0x400}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18010000", @ANYRES16=r2, @ANYBLOB="180128bd7000fcdbdf2506000000480001800800030002000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="080003000300000014000200776c616e300000000000000000000000080003000300000008000100", @ANYRES32=r5, @ANYBLOB="4c00018008000100", @ANYRES32=r7, @ANYBLOB="0800030002000000140002007465616d300000000000000000000000140002006361696630000000000000000000000008000300020000000800030000000000700001801400020064756d6d79300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000300030000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1400020076657468305f766c616e0000000000000800030003200000"], 0x118}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 53.462579772s ago: executing program 34 (id=719): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffe71, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffe71, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000003580)=""/4084, 0xff4}, {&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000580)=""/68, 0x44}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x4}, 0x5e}], 0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="4d01000000000000002100e50414090b00920000", 0x14, 0x81, &(0x7f0000000340)={0x11, 0x0, r7, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3, 0x8, 0xd, @dev={0xfe, 0x80, '\x00', 0x36}, @private2, 0x7800, 0x7800, 0x400}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3, 0x8, 0xd, @dev={0xfe, 0x80, '\x00', 0x36}, @private2, 0x7800, 0x7800, 0x400}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18010000", @ANYRES16=r2, @ANYBLOB="180128bd7000fcdbdf2506000000480001800800030002000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="080003000300000014000200776c616e300000000000000000000000080003000300000008000100", @ANYRES32=r5, @ANYBLOB="4c00018008000100", @ANYRES32=r7, @ANYBLOB="0800030002000000140002007465616d300000000000000000000000140002006361696630000000000000000000000008000300020000000800030000000000700001801400020064756d6d79300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000300030000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1400020076657468305f766c616e0000000000000800030003200000"], 0x118}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 7.851476595s ago: executing program 6 (id=1370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022abd7000ffdbdf2503000000080001000100000008000200020000000800020002000000080001000300000008e4010002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x8, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000380)={0x803, r6}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000080)={0x3, r6}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x1}) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r8, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0xff5}], 0x1) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) signalfd4(r7, &(0x7f0000000000), 0x8, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 7.747248942s ago: executing program 6 (id=1371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd467}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc2db0d6f439edbb0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000001c0)=0x5, 0x4) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x4, 0x0, &(0x7f0000000200)=0x4}) (async) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0xf7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0xb, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x420, 0x7, 0xfc, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x81, 0x9, 0x2, 0x8, 0xb}, 0x32, &(0x7f0000000300)={0x5, 0xf, 0x32, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x8, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x1, 0x8, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0xc4, 0x3, 0x5, 0xed}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x7c, 0x3}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x438}}, {0x4a, &(0x7f0000000380)=@string={0x4a, 0x3, "44f12cf8f022927f547969da6ce18e271c0a4012ef270bc7fc857ea503a32602ac2eb19d39766493d6f736b5203274d7e0a2965d45541350dc8fac1f96aa049a357e1f1c5bc1fdf5"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x40, 0xd, 0x5f, {0x5f, 0xa, "d5ec6cb56abb8ed2c33bb71770a9a711e0683bd20114053e20028e1a2c220797df6bbecfcac4977756a58fb3ced7a877b4066e34ec143fc82ddc481bae646f733fa68da50ca523fd8d6471ab5bb9f56b400866849af58bb5e39460ac28"}}, &(0x7f00000004c0)={0x0, 0x3, 0x37, @string={0x37, 0x3, "c60f9e7c1717bf69026d1af2398153cc838031bc00e9c7f7c5c0516febfb198be7e38a78ecb55f6d726364714e8498900135b7178e"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000540)={0xdc3723c36da5faf, 0xb, 0x7b, "aaa6c4003d4d04cd4657c2174097a1594471cd7b17d0cc33c7da82e5ff10f1dd217fb1e7122e17eceb3e3c337c674388f61a4d0f88f7aec400fcba48bac2de64e6efa0461202f4e3255f30e03b9bce918b580534c998bc1e7adaa13c29b2ba2365f313d600b748ab065143bf815e5a91f8f577816c24146103f1ab"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x0, 0x78, {0x76, "65c178a38fa53c3e97dba1180ad88ae60f09ca9151885db3d3298ac8fe0b332b3e61c8dfa6c57eba14a4d2cb00ad8a3997325a6804d4973bf6c98a9a4093b1ff4b16b39e9672c07ad790adb23aacfbd95c26cb6783e913a08e0d263ed7cdeea04159c0cabc60543ba9d24065f65437f0a6f69ea4459e"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x9}}) (async, rerun: 32) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x2) fcntl$notify(r2, 0x402, 0x12) r5 = signalfd(r1, &(0x7f00000007c0)={[0x5]}, 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000800), 0x121200, 0x0) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000301, 0x0, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000840), 0x10380, 0x0) close(r7) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000880)) r8 = syz_usb_connect$uac1(0x1, 0xc6, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x2, 0x40, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x7ff, 0x40, "62deacac22"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0xf8, 0x3, {0x7, 0x25, 0x1, 0x82, 0xa, 0xa622}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x3, 0x1, 0x2, "34df2e2c97e13f"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x3, 0xe4, 0x6, "770307a536bb25"}, @as_header={0x7, 0x24, 0x1, 0xfa, 0x93, 0x5}, @as_header={0x7, 0x24, 0x1, 0x2, 0x4, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x8f, 0xb, 'h'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0xcb, 0x0, "a5f129"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xa6, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x8, 0xd}}}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x0, 0x1, 0x9, 0x8, 0x20, 0x3}, 0xe1, &(0x7f0000000a00)={0x5, 0xf, 0xe1, 0x1, [@generic={0xdc, 0x10, 0x3, "af75b9dfd64920732807323be56540d27b2c076ff15602c643a0870d13f83fb33c6a54953671ebd4a573c5170375081e2a959dd05a49f745f88159e3d374f77f7ad8041f7ec7415b2953150f93bdfff60ed513d682a8e7c81d8738f5c907ea02846f53d27778ec0c2fc19372846b031022ae8fa9d86bec9bba463d6e597c5b06dba245bd1d60c538e100633181f1deaa3c08d1261a78f5150612062a19f8362d527e49e0c664758952ecd9a94e32eea04d54f1bfb86389866da7c1a1bd77756b8b5f62ebf9de04ffea60bb65df3dc913749ab76a5e8540d779"}]}, 0x7, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x1c01}}, {0x8f, &(0x7f0000000c40)=@string={0x8f, 0x3, "02972f386c0b74c41d37992d2ffc1e625570bb09c88ff6c2e2896141b950204f8154f5d700064c65d37c178fe51c9d7939c966dac15b257d48460fd3364c13598c8ea5e37e70b0ad71024f3df71176a81e942e80643bb7e2137890f2edebb646754d004125187493365fd980cb3c3c5405f970ea5854a43298314f8eecbc0e3507d8581b3d2db1a971a77e71fb"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$uac1(r8, &(0x7f0000000f80)={0x14, &(0x7f0000000dc0)={0x40, 0xb, 0xa4, {0xa4, 0x8, "af6080838d9d3dd203a8cad10d1b103ca40ce755bdad3201af57ca6b1ac00e124d958a10195c95d2deb20c1531cd7b3eb41e1158e996a378a4157f33f44505d005d3d2ac841b5c8ece62bb91b03771cc17f40845f7f7cafe4dffc7853344e90a835b6f2f8c7ecc180b12c2ea6f6878b74a49ee2534f1b2301c38c8c3547eaf52dd27de42eae156f3b47e3f246986088da87c5beefc98811bf698608592395624548e"}}, &(0x7f0000000e80)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "81d38ac46b19bdf7588de3c3374200b2dc6a3b663295510aa3573e813b91883270c9360b296e7c803c268b58470f63664972213e0398a5817dfe5094576f0385e4c55da8e2db7b9e701eb235cfd306454fcc44a4d227d80821ce7893ce47ee3eda4f39965aca33b165b66d5f779262b01455ab9092ee94530505acf6e9d92d0105782844d69bdc548096b9989b33c8ec3eaa499fa8cf780ae997317a17338bdc619605dab815f4a93751f7b27ce88ded83a94758d197c23d9be50f2a36987640abc5b17451d81f1e9259b64a0f7de16f8cd06e9b495716291a75c1be5ab194549e29fb3cc7aeb53a14311af0f1b68598c1513abe169e"}}}, &(0x7f0000001240)={0x44, &(0x7f0000000fc0)={0x60, 0x3, 0x9d, "7f9d093967713467fc2921c60348f5636302a8e16fdc2de2d8889dbba2515ad2324d0164c4f3caebc0ea858c7e6354804273f02bc327f24c650f9a78ccff8042d923cedc9d7fd6bc31d8b73571805e1de0cf60a7d222443c6142edc26756596d5c855ba747d8e12bc5067f0ba7ca75d77e2b0196d76ce37c509100958c5f7eab59a9df8f1b29bcedc2865e4caff3f791ad47620a42b239e7eb3678f758"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001100)={0x20, 0x81, 0x3, "5997d2"}, &(0x7f0000001140)={0x20, 0x82, 0x3, "60f02c"}, &(0x7f0000001180)={0x20, 0x83, 0x3, "a7ffe2"}, &(0x7f00000011c0)={0x20, 0x84, 0x1, "e3"}, &(0x7f0000001200)={0x20, 0x85, 0x3, "901c8f"}}) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r9, 0x11, 0xa, &(0x7f00000012c0)=0x8, 0x4) r10 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000001300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r10, &(0x7f00000014c0)={0x14, &(0x7f0000001340)={0x40, 0xd, 0x72, {0x72, 0x23, "b734893f79be13912f7c003fac5127dcd2220c4a1aa04cf13a51a438fa1190ec451ae67e6aff0fee1386f0fcfc9d62edc44542e8e5c6942cb22224d4d134581c432a00aa47f544d0f268d9ec00a406a3a884ffae77c875821371f9b0acdec1ec2f7948aa62d02fed8827079c62d67210"}}, &(0x7f00000013c0)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "8f95993b0ddc7cfcee014e92a10d814b6a6939c74e641644e31735108701062c8f099fd0612e418719b5467d91c8ac874cef70ed06d1cfc6f7490da1cb3ab69cbd0606fa40ad058e9eb63f15e5cff0184767b86c6567c825c07ffa2b58515e97de85544520bcec10b29f4e33ccb6a3fd8d614425b5ebd7379a80af02fa97beae7cde62318aabd72a706c102ae3e896a13709fb45a0380b7b34fe4a7727c159ae15076ba8599676016bacd87126c036465768faa67465d652ea034771dedb38b82816ad1417d71e2eb949d4bf66083386d70452d3f4b2a372da6ec08d7892fdd368bb4819e7cc3ceea8857680d666d836148417d46e44"}}}, &(0x7f0000001700)={0x2c, &(0x7f0000001500)={0x40, 0xe, 0xf2, "50dca8491053023637ec8a1b6538076198bb50b59fcaca9ecd695d3f5a029fdaba256b45e5a58be95854c46349195170f629ce8ac7e2c0fc1e5ebd8eb20758973a63de50fbc88d207a84478b489d52936579eb07af6e2ed168d2d39177769316ab63f7141088cac2ac653f3c950fd5dd61b92f42d30f41f13c8f1b6c38a348b6b03d0e82a9b2d99bd563ebc432c6e2cb0a316d53a4905950daa2d4eb26bec61be1770d60ef42986a5c2b75003633e31e3efd37cffd1c139c2d7e1f73df758874ae2bb54dda185f105a8646ff45849863bd07321e54a66dec129156caeba9fd86f884ba9d92407026f516b80bbbe7faeac41a"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001680)={0xc0, 0x5, 0x6, "3e3d8f9987a1"}, &(0x7f00000016c0)}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r11, 0x0, 0x42, &(0x7f0000001740)={'TPROXY\x00'}, &(0x7f0000001780)=0x1e) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f00000017c0)={0x8000000, 0x100000, 0x1}) (async) socket$inet(0x2, 0x1, 0x3ff) (async, rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000001840)) (rerun: 32) 7.396229675s ago: executing program 4 (id=1375): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200027bd7000fedbdf25090000000c00990020050000280000000900070064488e1c8f00000004000b00"], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x1) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ntfs3\x00', 0x828081, 0x0) 7.339916229s ago: executing program 4 (id=1376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) unshare(0x60000600) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xe51}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4100, 0x1004}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/211, 0xd3}, {&(0x7f00000035c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000000)=""/92, 0x5c}], 0x9}, 0x81}], 0x3, 0x2100, 0x0) (async, rerun: 64) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000001c0)=0x1) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) r3 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2) write(r3, &(0x7f0000000040)="0600", 0x2) (async, rerun: 64) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe) (async, rerun: 64) sendfile(r3, r3, &(0x7f0000001000), 0xffff) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) 7.337705169s ago: executing program 4 (id=1379): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000180)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8000, 0x28) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000042c0)={{0xa, 0x4e24, 0xfff, @mcast2, 0x7}, {0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x23}, 0x80000001}, 0x0, {[0x80000000, 0x6, 0x1000, 0x8, 0x136, 0xb62, 0x10000, 0xf]}}, 0x5c) write$nbd(r2, &(0x7f0000004340)={0x67446698, 0x1, 0x3, 0x2, 0x4, "f6e3e489bf9acf5e276356e757b458ad18b48c218842c3c258b4b9ce6be3487a67c0b0a1beceee305e11ea4ee60ee50ba1bdde168836e84268aea8ee0f8f28b5727863e7d5d96ee8afe8d796505d798240fbfd8794ce4db2a11de3208a8f7e292336678f7be6d2d0e4265fa13abde67870672227c90c4f5cc5e65b4294c1e18eae39acec59ceb2a9151067373e297f157e547fbf3d7330"}, 0xa7) fcntl$setstatus(r4, 0x4, 0x44000) openat$cgroup_subtree(r2, &(0x7f0000004400), 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004480), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000004540)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x2c, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x24}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008840) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000004600)={{r4}, 0x9, &(0x7f0000004580)=[0x8001, 0x42d, 0xa, 0x1, 0x2, 0x9, 0x9, 0x13, 0x4], 0x81, 0x4, 0x1}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000005300)=@nat={'nat\x00', 0x19, 0x2, 0xc04, [0x2000000046c0, 0x0, 0x0, 0x2000000046f0, 0x20000000489e], 0x0, &(0x7f0000004680), &(0x7f00000046c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x0, 0x881f, 'veth0_to_hsr\x00', 'bond_slave_1\x00', 'syzkaller1\x00', 'team_slave_0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xd1982b704789c0ff], 0x116, 0x14e, 0x17e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffff00, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xff, 0xff000000], 0xf8, 0xc, 0x1, 0x1, 0x4e24, 0x4e21, 0x4e22, 0x4e24}}}, @state={{'state\x00', 0x0, 0x8}, {{0xaffd}}}], [@snat={'snat\x00', 0x10, {{@empty, 0x10}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x21, 0x6004, 'xfrm0\x00', 'team_slave_1\x00', 'ip6tnl0\x00', 'veth1\x00', @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0xff], 0x956, 0x98e, 0x9c6, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'tftp-20000\x00'}}}, @among={{'among\x00', 0x0, 0x870}, {{@zero, @zero, 0x1, {[0x6, 0x1000, 0x0, 0xffffffff, 0x0, 0x4, 0x86ec, 0x6, 0x6, 0x0, 0x4, 0x10, 0x2, 0x0, 0x8, 0x3, 0x8, 0x3, 0x4, 0x9, 0x5, 0xc7, 0x8, 0x933b, 0xffffff4b, 0x5, 0x4, 0x1, 0x0, 0x2, 0x9, 0x7, 0x95c1, 0x4, 0xfffffbff, 0x3, 0xfffffff9, 0x7, 0x10001, 0xdc, 0x65, 0x1, 0xfff, 0x2, 0xc6, 0x2, 0x9, 0x81, 0x3, 0x7, 0xffff, 0x8, 0x3ff, 0x9, 0xe, 0xbde2, 0xffff, 0xc, 0x9, 0x5, 0xe, 0x65, 0x5c, 0x8c6, 0x80000000, 0x1ff, 0x40, 0x400, 0x40, 0x1000, 0x4, 0x6, 0x7, 0x1, 0x1, 0x9, 0x4, 0x8, 0xbc, 0x200, 0x6, 0x81, 0xfff, 0xb3, 0x81, 0x1, 0x8, 0x8e2, 0x1, 0x8, 0x1ff, 0x47c5a292, 0x7, 0x1, 0x9e, 0x200, 0x5, 0x7fffffff, 0x1, 0xfff, 0x7, 0x101, 0x0, 0x6cb7, 0x3, 0x0, 0x3e, 0xb, 0xb, 0x7, 0x3, 0x9, 0x9, 0xffff4c7e, 0x7f, 0xee7c, 0x80000000, 0x8000, 0xf25, 0x4, 0xb, 0x2, 0x80000000, 0x6, 0xf, 0x7000000, 0xe, 0x7, 0x5, 0x2b9e, 0x100000, 0x400, 0x6, 0x9, 0x2, 0x7fff, 0x9, 0x80000001, 0x6, 0x4d, 0x2, 0x7, 0x8, 0xdd7a, 0x4, 0x8, 0x9, 0xb6, 0x4, 0x401, 0x23, 0x9, 0xfff, 0x4, 0x1, 0x4, 0x9, 0x0, 0x2, 0x0, 0x80, 0x80000000, 0x6, 0xffffffff, 0x4, 0x3, 0x101, 0x0, 0x5, 0x4, 0x2, 0x7fffffff, 0xfffff7aa, 0x750, 0x8, 0xeb6, 0x4, 0xfffffff7, 0x8, 0x1, 0xfffffff7, 0xc9, 0x2, 0x5, 0xd2e, 0x6, 0xfffffffa, 0x80, 0x5, 0x2, 0x7fff, 0x7, 0x101, 0x81, 0x5, 0x4cf8000, 0xfffff014, 0x7, 0xfffffe01, 0x8, 0x1, 0x31, 0x25, 0x2, 0x6, 0xfffffffc, 0x101, 0x7, 0x6, 0xe4f, 0x1cf2, 0x5, 0xd, 0x10, 0x2, 0x4, 0x0, 0x3, 0x2, 0x7ff, 0x5, 0x2, 0x7f, 0x3, 0x4, 0x2, 0x401, 0x4, 0x0, 0xfff0, 0xa, 0x3, 0x1, 0x9, 0x2, 0x1000, 0xfff, 0x1, 0xb, 0x5, 0x853f, 0x2, 0x8, 0x8, 0x3, 0x2, 0xda08, 0x3, 0x1000, 0xf, 0x8, 0x7, 0x6, 0x8001, 0x8, 0x4, 0xc], 0x2, [{[0x3, 0x100], @loopback}, {[0xfffffff7, 0x5], @dev={0xac, 0x14, 0x14, 0x24}}]}, {[0x1, 0x2, 0x1ff, 0x9, 0x9, 0x8, 0x1, 0x3, 0x919, 0x1, 0xd6a7, 0x3, 0x6, 0x6, 0x400, 0xfffffffd, 0x7, 0x1, 0xfffffffd, 0x4, 0x0, 0x3, 0x2, 0x6, 0x7, 0xe6d, 0x29, 0x1, 0xf6, 0x4, 0x5, 0x3ff2, 0x1, 0x2, 0x7, 0x6, 0xa8, 0x8, 0x8000, 0x3, 0xc50d, 0x8, 0x3, 0x7fff, 0x1, 0xa, 0x0, 0x9, 0x40, 0x4, 0x5, 0x2, 0x6, 0x7, 0xc0df, 0x4, 0x7, 0x7087, 0x6, 0xfed, 0x80000001, 0x7, 0x10, 0x93d, 0xff, 0x7, 0x0, 0x8d1, 0x4, 0x8000, 0x5, 0x6, 0x9, 0x5, 0x8, 0x9, 0x9, 0xfffffff7, 0x5, 0x7fffffff, 0x5, 0x3, 0x80000001, 0xffffffff, 0x0, 0x2, 0x5, 0x9e, 0x7, 0xc, 0x4, 0x8, 0xa1bf, 0xb3d, 0xffff, 0x6, 0x1, 0x5, 0x1, 0x4, 0x2, 0x800, 0x7, 0x1, 0x80000000, 0x9, 0x62bb, 0x8, 0x2, 0x2, 0xff, 0x3, 0xf, 0x6, 0x75, 0x81, 0x4, 0x2, 0x7fffffff, 0x2, 0x9ea4, 0x4c5, 0x2, 0x5, 0x7, 0x34, 0x0, 0x3, 0x7, 0xffff, 0x7, 0x5, 0x7, 0x4, 0x2, 0x7fff, 0x6, 0x4, 0x1539, 0x9, 0x6, 0x5, 0x15, 0x100, 0x1, 0x485b, 0x70000000, 0x7fffffff, 0x21, 0x0, 0x56685075, 0xbf7, 0x7, 0x401, 0xa, 0x7fffffff, 0x9, 0x40000000, 0x8, 0x0, 0xffff7fff, 0x7, 0xff, 0xa, 0x1000, 0x7, 0x8, 0x10001, 0xfffff5c3, 0x7, 0x281, 0x3, 0x6c, 0xcddd, 0xe6, 0x7b, 0x3ff, 0x8, 0x6, 0x0, 0x7c, 0x8, 0x9, 0x6, 0xa6, 0xffffffc0, 0x6, 0xeb, 0x3, 0xc, 0x8000, 0x5, 0xd, 0x7, 0x81, 0x6, 0xffffffff, 0x2, 0xfffffff9, 0xfffffff8, 0x2, 0x80, 0x2, 0x3, 0xd572, 0x7fff, 0x12139d52, 0x800000, 0x7f, 0x4, 0x4, 0x800, 0xff, 0x7d78, 0x0, 0x5431, 0x694, 0xfffffffb, 0x8, 0x5, 0x80000000, 0x6, 0x400, 0x8, 0xc, 0xc4, 0x5, 0x9, 0xffff, 0xfffffff9, 0x7, 0x3, 0x2, 0x5, 0x7af, 0x6, 0x1, 0x1, 0x9, 0xffff, 0xffff, 0x16, 0x2, 0xd, 0xfa, 0x2, 0x7fff, 0x2, 0x221, 0x23b104c4, 0x41, 0x8, 0x5, 0xfff, 0x40, 0x3, 0x7], 0x5, [{[0xc, 0x2], @empty}, {[0x6, 0x7ff], @dev={0xac, 0x14, 0x14, 0xd}}, {[0x5, 0x8001], @local}, {[0x2, 0x6], @rand_addr=0x64010102}, {[0x8, 0x4], @remote}]}}}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0x10}}}], @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xc7c) read$FUSE(r4, &(0x7f0000005380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) splice(r4, &(0x7f00000073c0)=0xaf, r2, &(0x7f0000007400)=0xffff, 0x100, 0x0) write$FUSE_WRITE(r2, &(0x7f0000007440)={0x18, 0x0, r5, {0x7ff}}, 0x18) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000007580)={0x60, 0x2, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x9, &(0x7f0000007480)=[{0x80, 0xa, 0x8}, {0x7aa, 0xfffffffffffffffa, 0x4}, {0x6f7, 0xff, 0x2}, {0x5838, 0x2, 0x5}, {0x800, 0x6, 0x7}, {0x3, 0x8b8, 0x101}, {0x6, 0xffff, 0x3}, {0x1, 0x5, 0x1}, {0x800, 0x1ff}, {0x4, 0x6, 0x405885f6}], 0xa, 0xfffffffffffffff7, 0x2, 0x20, 0x20, 0x20}) chmod(&(0x7f0000007600)='./file0\x00', 0x81) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000007680), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000007780)={&(0x7f0000007640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000007740)={&(0x7f00000076c0)={0x68, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f00000077c0)={0x10, 0x0, "89aa2a9ed293c7bc3b273f60f9e1a5b3"}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000007800)={0xa0, 0xfffffffffffffffe, r3, {{0x5, 0x1, 0x7ff, 0x3, 0x5, 0x5, {0x0, 0x5, 0x5, 0xffffffffffffffff, 0x0, 0x31e, 0x8001, 0x1, 0x618, 0x2000, 0x5, r6, r8, 0x1, 0x9}}, {0x0, 0x2}}}, 0xa0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000079c0)={&(0x7f00000078c0), 0xc, &(0x7f0000007980)={&(0x7f0000007900)={0x4c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x4c}}, 0x4000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000007a00), 0x2c42, 0x0) ioctl$TUNSETTXFILTER(r10, 0x400454d1, &(0x7f0000007a40)={0x0, 0x6, [@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000007a80), r2) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007b00), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000007c40)={'erspan0\x00', &(0x7f0000007b40)={'ip_vti0\x00', r0, 0x1, 0x1, 0x0, 0x6b, {{0x33, 0x4, 0x1, 0x4, 0xcc, 0x65, 0x0, 0x3, 0x29, 0x0, @empty, @private=0xa010101, {[@end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x19, 0x0, [{0x5, 0xb, "fc54cdc406609fb853"}, {0x0, 0x8, "9492f4de4082"}]}, @timestamp={0x44, 0x1c, 0xca, 0x0, 0x6, [0xfffffffe, 0x2, 0xfffffff8, 0xd, 0x1, 0xffffffff]}, @ssrr={0x89, 0x27, 0xe3, [@rand_addr=0x64010101, @empty, @broadcast, @multicast1, @rand_addr=0x64010101, @empty, @rand_addr=0x64010101, @remote, @local]}, @timestamp_prespec={0x44, 0x54, 0x24, 0x3, 0x4, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1e}}, {@local, 0x1}, {@private=0xa010102}, {@multicast2, 0x140000}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xf}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0xaf7}, {@remote, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000007e80)={&(0x7f0000007ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007e40)={&(0x7f0000007d80)={0x8c, r11, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400}, 0x8000) 7.314535901s ago: executing program 4 (id=1381): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x300000000000000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/250, 0xfa, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 7.274111734s ago: executing program 4 (id=1383): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4042, 0x100) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000027c0)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe10", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="65582f9359", 0x5}], 0x1}}], 0x3, 0xc044) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00f1dfb7ace55cfb80f2552224b994e32f671d9a4c85c0db50da86c09dd8f729e892d6b3f0cd91eb867bfcf00667f06b69d0f3629e6f5e707d9373658df432fc51eee17a1eee63f71bffd4b77e0691dcca17ab231c8839ebabf7bb014158a5ead420fe9a1cf760e3f598f24302f5378ae8d11ec2cb284f6cfa5bac7df18b02000d03549a33dce6463412f0ba787cc938025d4eca7b5a2241f8e6bf80624235685579710ba381310000"]) syz_fuse_handle_req(r1, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x69015a58, 0xdcd, 0xff, 0x8, 0x3, 0x0, 0x0, 0x40, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x800000001005, 0x7, 0x0, 0x8, 0x3, 0x7fff, 0x3, 0x35741061, 0x3, 0xa000, 0x71a0319d, 0x0, 0x0, 0x0, 0x10000df2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) utimensat(0xffffffffffffff9c, &(0x7f0000006380)='./file0\x00', 0x0, 0x0) 7.273068134s ago: executing program 4 (id=1385): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) 5.765880265s ago: executing program 5 (id=1392): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000180)=""/80, 0x50}, {0x0}], 0x2) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@loopback, r4}, 0x14) 4.923468831s ago: executing program 5 (id=1393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) splice(r1, 0x0, r4, 0x0, 0x80, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)='F', 0x1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/mem_sleep', 0x102, 0x4) sendfile(r5, r5, 0x0, 0x17e) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="600105000000a40db1a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000280)='cpuset.sched_load_balance\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) pread64(r10, &(0x7f0000000780)=""/131, 0x83, 0x302a4edd) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r10, 0x40189429, &(0x7f0000000100)={0x0, 0x10, 0xa}) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x2c}}, 0xc0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) r11 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000040)=0x50, 0x4) 4.687989776s ago: executing program 6 (id=1394): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000880)="66be8f037545cda1011298f0", 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) getdents(r2, &(0x7f0000000100)=""/64, 0x40) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 3.839858543s ago: executing program 6 (id=1397): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000018c0)=""/256, 0x100}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f0000000200)=""/212, 0xd4}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x40012122, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) pwrite64(r2, 0x0, 0x0, 0x10000) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) (async) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180), 0x4, &(0x7f0000000480)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@access_user}, {@privport}, {@version_9p2000}, {@access_client}, {@cache_readahead}, {@cachetag}, {@noextend}, {@access_any}], [{@euid_eq={'euid', 0x3d, r4}}, {@smackfsroot={'smackfsroot', 0x3d, '\x0f\x00\x00\xa57\xd9\x17!\xc1<=\xac\x7f\xd8w\x15\x00\xf1\x03\x88\x1c\xc2\x1f\x1e\xb9\xa4\x05\x9f\xb2\xf3u\x19\xbb\xc1-{\xf4\xdbj\t\x9d\xcb\x9en=\xcd\x9a%\x8d68\xdeld\x1a\x8a\x84'}}, {@subj_role}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@appraise}]}}) (async) r5 = inotify_init1(0x800) sync_file_range(r5, 0xfffffffffffff800, 0x10004, 0x5) (async) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000000c0)) 3.838718474s ago: executing program 6 (id=1399): utime(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c2400", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 3.274045801s ago: executing program 5 (id=1400): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x8000001, 0x3, 0x4}) 969.371735ms ago: executing program 3 (id=1406): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',privport,access=']) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x0, 0x8000}) lseek(r7, 0x40, 0x1) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) dup(r5) 967.725676ms ago: executing program 3 (id=1407): eventfd2(0x8, 0x80000) (async) r0 = eventfd2(0x8, 0x80000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0xffffffffffff297b, 0x8, 0x7, 0x3, 0x7, 0x7fffffff, 0x4, 0x8, 0x1d0, 0x0, 0x1, 0x0, 0x80000000, 0x5}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{r1, 0x100000000, 0xfffffffffffff20a, 0xfffffffffffffe6b, 0x0, 0x3, 0x7, 0x1000, 0x5, 0x2, 0x3ff, 0x3, 0x3, 0x5, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{r1, 0x100000000, 0xfffffffffffff20a, 0xfffffffffffffe6b, 0x0, 0x3, 0x7, 0x1000, 0x5, 0x2, 0x3ff, 0x3, 0x3, 0x5, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write(r0, &(0x7f0000000180)="a0f5679609276e1e59591b043c7b2104adeaf17cfeaed74180ad32b0721cf8f2542d849d6ad505760a5c7c639669df45306441646473be35fe85ca29b2162445ff59afde8ecfa781c5a0d7e7ccbe23c416cd31a516e75d5179676ca7157df73fc14e43040c8ab8913c", 0x69) io_setup(0x9, &(0x7f0000000200)) (async) io_setup(0x9, &(0x7f0000000200)=0x0) io_pgetevents(r2, 0x8, 0x3, &(0x7f0000000240)=[{}, {}, {}], 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x57]}, 0x8}) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x4000, r0, &(0x7f0000000340)="6c7585ae2be10a9708df703adb31ff60a8669b5dc74a6edff09c0613b5159f83e2e3a42439b991260537eaa51408706342fca225aca360f4c7c6e40826d2754fc60de078673cfbbf4d2835e967e77c7b0de10f0c4eeff02491c15b30906d7ac670690fea47f81a89963b8fa3364bc38303d6e0fbf5455f27f6bf8f1a2e7acb05426203ed8734d00e18465c36eb8b08ef519ac6c5790ef44b333ad2c169882b8b00699ae493c5bc023b861e270b265afc91a14ea1fdc281e2461ed6e70e37c9d8761304dca24754c673310aa875eeb2cd2a33a40ad25c66f1f33aceac1a8906c5f796f741c1ba", 0xe6, 0x7, 0x0, 0x2, r0}]) io_setup(0x9, &(0x7f00000004c0)=0x0) io_pgetevents(r3, 0x2a3, 0x2, &(0x7f0000000500)=[{}, {}], &(0x7f0000000540), &(0x7f00000005c0)={&(0x7f0000000580)={[0x2216]}, 0x8}) (async) io_pgetevents(r3, 0x2a3, 0x2, &(0x7f0000000500)=[{}, {}], &(0x7f0000000540), &(0x7f00000005c0)={&(0x7f0000000580)={[0x2216]}, 0x8}) clock_gettime(0x0, &(0x7f0000000640)) (async) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) io_pgetevents(r2, 0x7, 0x2, &(0x7f0000000600)=[{}, {}], &(0x7f0000000680)={r4, r5+10000000}, &(0x7f0000000700)={&(0x7f00000006c0)={[0xb]}, 0x8}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clock_nanosleep(0x6, 0xd304a5ee113d2d23, &(0x7f0000000740), &(0x7f0000000780)) pselect6(0x40, &(0x7f00000007c0)={0x4, 0x3c89, 0x6, 0x400, 0x9, 0x8, 0x8c, 0x1}, &(0x7f0000000800)={0xc, 0x8, 0x9, 0x1, 0x89, 0x0, 0x401, 0x100}, &(0x7f0000000840)={0x7fffffff, 0x401, 0x8, 0x2, 0x64faea84, 0x6, 0xfffffffffffffffd, 0x9}, &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x7]}, 0x8}) (async) pselect6(0x40, &(0x7f00000007c0)={0x4, 0x3c89, 0x6, 0x400, 0x9, 0x8, 0x8c, 0x1}, &(0x7f0000000800)={0xc, 0x8, 0x9, 0x1, 0x89, 0x0, 0x401, 0x100}, &(0x7f0000000840)={0x7fffffff, 0x401, 0x8, 0x2, 0x64faea84, 0x6, 0xfffffffffffffffd, 0x9}, &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x7]}, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x20402, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000980)={'\x00', 0x5, 0x6, 0x5, 0xc, 0xff}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000980)={'\x00', 0x5, 0x6, 0x5, 0xc, 0xff, 0x0}) r8 = syz_pidfd_open(r7, 0x0) pselect6(0x40, &(0x7f0000000a00)={0x2, 0x2, 0x6, 0x8, 0x8, 0x726, 0x3, 0xb}, &(0x7f0000000a40)={0xfffffffffffffffc, 0x101, 0xad000, 0x800, 0xffffffffffffffff, 0x3, 0x8, 0x8}, &(0x7f0000000a80)={0x7, 0x8c25a4, 0x6, 0x5, 0xfffffffffffffffc, 0x9, 0xd, 0x4}, &(0x7f0000000ac0)={0x0, 0x989680}, &(0x7f0000000b40)={&(0x7f0000000b00)={[0x3]}, 0x8}) r9 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) write$char_usb(r9, &(0x7f0000000b80)="05041907c996dc88f52b04dcd32209f54564b441ec949e53dee2e655faa834488aaf167d1ec68699b8da42c33d6495b17fee66dc66689dda7f9b0b4ef8b54081df21a603cd32d743abe88fd19192de2d5a2a2907a28a0018487cbd3bfbbe5a253d04a0b41f76020bff3d5dd715098941817517b68c0c21ad649c3812c8be2af411e37d77e2de948916b006b0a1b7a6199e86ae654daae7d637d2bf5020da9a5874c6d22579ca2979c4036c52c7ca571937f62bb352d1ec7f99e8ea5bdbd5a70f", 0xc0) (async) write$char_usb(r9, &(0x7f0000000b80)="05041907c996dc88f52b04dcd32209f54564b441ec949e53dee2e655faa834488aaf167d1ec68699b8da42c33d6495b17fee66dc66689dda7f9b0b4ef8b54081df21a603cd32d743abe88fd19192de2d5a2a2907a28a0018487cbd3bfbbe5a253d04a0b41f76020bff3d5dd715098941817517b68c0c21ad649c3812c8be2af411e37d77e2de948916b006b0a1b7a6199e86ae654daae7d637d2bf5020da9a5874c6d22579ca2979c4036c52c7ca571937f62bb352d1ec7f99e8ea5bdbd5a70f", 0xc0) fdatasync(r8) ioctl$EVIOCGKEY(r9, 0x80404518, &(0x7f0000000c40)=""/182) read$eventfd(r0, &(0x7f0000000d00), 0x8) fcntl$setlease(r0, 0x400, 0x0) r10 = accept4$inet6(r9, 0x0, &(0x7f0000000d40), 0x80400) shutdown(r10, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r6, 0x595e7000) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r6, 0x595e7000) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) (async) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r11, 0x0, 0x487, &(0x7f0000000dc0), &(0x7f0000000e00)=0x30) 913.04816ms ago: executing program 3 (id=1408): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0xb00, 0x0) fsopen(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="080086dd0001111204600000a60c6ee400be00442cfffe800080fe000000000000000002000000000000000000000000ffff"], 0xfdef) 800.910687ms ago: executing program 3 (id=1409): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) (async) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "d349f509f8ad4b4a5f8979e9b2b7837629b2b3ae4fedf2ff3bf7f5bf211f48627f49418df3a1e5b7be61ca3daa48b5a3f8168946e377df12c2295b88edfb23beb77ecb94dd505bdc1a609282e873995c7da77f59ccb83abac7aa295375556da5280b36316e0cf753ecd6c0c8fd3da7bec6acac2b58d6248e5ffbf86f5458baa80b146a076284d0773329737ca6722242dc1b501be08b91f6413f1c35f80d1f8e6e4aacf693e3af80d5202cb4fe11483dcd5f2de317a08fe3562d9d7a328e74f4ffa34f339fe4d0442a1afed68e738f526f665a8319d70166f48732026981499a4e581eb957e12e"}, 0xf7) 800.578087ms ago: executing program 3 (id=1410): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000040)={0x0, 0x20, ""/32}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 799.705737ms ago: executing program 3 (id=1411): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2501000000000000000b40"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r3, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 798.037627ms ago: executing program 6 (id=1412): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c30816040102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24f4000103020001000600060924030505030605810924030601030405050724", @ANYRES8=r1], 0x0) 254.018144ms ago: executing program 5 (id=1413): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x153002, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x6}, 0xf) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)=',^\x00', 0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x375b6000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x53e}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000040f80300f1000040"]) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000020301020000000000000000000000000900020000000001000000000800034000000007080001"], 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c2100001e00090002000000ffdbdf2508"], 0x218c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendto$inet6(r4, &(0x7f0000000380)="a6ea1b36fd757c4daff8361154f70d4c70ca80c66b71537ad1a97957c2d36780abfc6d4bfde0f847b766ce80a23858bb7d49e71ad429e0869c1623377fda82ec47518248a68937dc1444e9153b91b121d23fb9ddb7eba8ae00284c08722019d7d3c67c7b560e9bdcce9ec78a85a627394b9684cfe12f34cc69d84524ed3426d568165ae12e4e750c15946aaa236c2e87d2deb955f9c7", 0x96, 0x4044880, 0x0, 0xfffffffffffffd85) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x102) ioctl$KVM_CREATE_VM(r5, 0xae01, 0xc) madvise(&(0x7f0000355000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 76.420985ms ago: executing program 5 (id=1414): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x8) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2) 0s ago: executing program 5 (id=1415): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3, &(0x7f0000000100)=""/193, &(0x7f0000000040)=0xc1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2, 0xfffe}, 0x8, 0x7, 0xbd03, 0x0, 0x0, 0x40, 0x0}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) socket$netlink(0x10, 0x3, 0x5) kernel console output (not intermixed with test programs): =1 [ 89.751390][ T2170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.645'. [ 90.255261][ T36] audit: type=1400 audit(1759868377.342:373): avc: denied { read } for pid=2185 comm="syz.3.650" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 90.277925][ T36] audit: type=1400 audit(1759868377.342:374): avc: denied { open } for pid=2185 comm="syz.3.650" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 90.829798][ T36] audit: type=1400 audit(1759868377.922:375): avc: denied { mounton } for pid=2207 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 90.904693][ T2207] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.914873][ T2207] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.922937][ T2207] bridge_slave_0: entered allmulticast mode [ 90.929601][ T2207] bridge_slave_0: entered promiscuous mode [ 90.936314][ T2207] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.943769][ T2207] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.951131][ T2207] bridge_slave_1: entered allmulticast mode [ 90.957632][ T2207] bridge_slave_1: entered promiscuous mode [ 91.064109][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.071219][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.081337][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.088439][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.119512][ T2207] veth0_vlan: entered promiscuous mode [ 91.131549][ T2207] veth1_macvtap: entered promiscuous mode [ 91.151406][ T36] audit: type=1400 audit(1759868378.242:376): avc: denied { mounton } for pid=2207 comm="syz-executor" path="/root/syzkaller.PFeHUf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 91.192636][ T36] audit: type=1326 audit(1759868378.282:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.4.651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58578eec9 code=0x0 [ 91.900850][ T36] audit: type=1400 audit(1759868378.992:378): avc: denied { remount } for pid=2240 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 92.193642][ T2243] 9pnet_fd: Insufficient options for proto=fd [ 92.200357][ T2243] overlayfs: failed to clone lowerpath [ 92.206534][ T2243] overlayfs: failed to clone lowerpath [ 92.243618][ T2247] fuse: Unknown parameter 'rootmoÃhïÅvKžde' [ 92.300363][ T36] audit: type=1400 audit(1759868379.392:379): avc: denied { watch } for pid=2252 comm="syz.4.664" path="/1/file0" dev="tmpfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.362554][ T36] audit: type=1400 audit(1759868379.452:380): avc: denied { setopt } for pid=2257 comm="syz.4.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.689370][ T1022] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 92.819317][ T1022] usb 5-1: device descriptor read/64, error -71 [ 92.979772][ T65] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 93.059300][ T1022] usb 5-1: device descriptor read/64, error -71 [ 93.084282][ T2290] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.091411][ T2290] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.098526][ T2290] bridge_slave_0: entered allmulticast mode [ 93.105094][ T2290] bridge_slave_0: entered promiscuous mode [ 93.111594][ T2290] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.118636][ T2290] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.125798][ T2290] bridge_slave_1: entered allmulticast mode [ 93.132330][ T2290] bridge_slave_1: entered promiscuous mode [ 93.150417][ T65] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 93.158591][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 93.170066][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 93.181269][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.194243][ T65] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.203353][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.215316][ T65] usb 4-1: config 0 descriptor?? [ 93.220799][ T2274] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.256285][ T2290] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.263450][ T2290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.270760][ T2290] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.277800][ T2290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.300103][ T1022] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 93.332141][ T2290] veth0_vlan: entered promiscuous mode [ 93.344967][ T2290] veth1_macvtap: entered promiscuous mode [ 93.398489][ T2308] random: crng reseeded on system resumption [ 93.439283][ T1022] usb 5-1: device descriptor read/64, error -71 [ 93.577591][ T2314] mmap: syz.2.684 (2314): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 93.630589][ T65] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.638062][ T65] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.645691][ T65] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.653173][ T65] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.660877][ T65] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.668300][ T65] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.676261][ T65] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 93.686289][ T65] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 93.690869][ T1022] usb 5-1: device descriptor read/64, error -71 [ 93.819808][ T1022] usb usb5-port1: attempt power cycle [ 93.894046][ T45] usb 4-1: USB disconnect, device number 24 [ 93.999365][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 94.149313][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 94.155534][ T65] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 94.163897][ T65] usb 6-1: config 179 has no interface number 0 [ 94.169305][ T1022] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 94.170275][ T65] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 94.189198][ T65] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 94.190396][ T1022] usb 5-1: device descriptor read/8, error -71 [ 94.200738][ T65] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 94.217029][ T65] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.230406][ T65] usb 6-1: config 179 interface 65 has no altsetting 0 [ 94.237288][ T65] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 94.246399][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 94.254369][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.330902][ T1022] usb 5-1: device descriptor read/8, error -71 [ 94.399267][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 94.406980][ T45] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 94.417614][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.426249][ T45] usb 4-1: Product: syz [ 94.430738][ T45] usb 4-1: Manufacturer: syz [ 94.435366][ T45] usb 4-1: SerialNumber: syz [ 94.441079][ T45] usb 4-1: config 0 descriptor?? [ 94.449848][ T45] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 94.457942][ T45] usb 4-1: Detected FT-X [ 94.467018][ T1017] usb 6-1: USB disconnect, device number 2 [ 94.471814][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 94.471832][ T36] audit: type=1400 audit(1759868381.562:383): avc: denied { ioctl } for pid=2350 comm="syz.2.698" path="socket:[14019]" dev="sockfs" ino=14019 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.503517][ T36] audit: type=1400 audit(1759868381.562:384): avc: denied { getopt } for pid=2350 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.523391][ T36] audit: type=1400 audit(1759868381.562:385): avc: denied { accept } for pid=2350 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.560407][ T2360] netlink: 'syz.2.701': attribute type 11 has an invalid length. [ 94.579292][ T1022] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 94.582957][ T2363] netlink: 68 bytes leftover after parsing attributes in process `syz.2.702'. [ 94.607596][ T1022] usb 5-1: device descriptor read/8, error -71 [ 94.648283][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 94.740770][ T1022] usb 5-1: device descriptor read/8, error -71 [ 94.849974][ T1022] usb usb5-port1: unable to enumerate USB device [ 94.852381][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 94.863620][ T45] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 94.871026][ T45] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 94.881061][ T45] usb 4-1: USB disconnect, device number 25 [ 94.887863][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 94.897583][ T45] ftdi_sio 4-1:0.0: device disconnected [ 94.998462][ T36] audit: type=1400 audit(1759868382.082:386): avc: denied { ioctl } for pid=2391 comm="syz.5.712" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.429320][ T1022] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 95.488909][ T2423] fuse: Bad value for 'fd' [ 95.492820][ T2422] fuse: Bad value for 'fd' [ 95.499508][ T2423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.507996][ T2423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.516504][ T2423] rust_binder: Error in use_page_slow: ESRCH [ 95.516525][ T2423] rust_binder: use_range failure ESRCH [ 95.523393][ T2423] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 95.528912][ T2423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 95.537307][ T2423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:18 [ 95.589474][ T1022] usb 6-1: Using ep0 maxpacket: 32 [ 95.605349][ T1022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 95.616819][ T1022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 95.626879][ T1022] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 95.638514][ T1022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 95.649443][ T1022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 95.660742][ T1022] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 95.669880][ T1022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.677927][ T1022] usb 6-1: Product: syz [ 95.682157][ T1022] usb 6-1: Manufacturer: syz [ 95.686770][ T1022] usb 6-1: SerialNumber: syz [ 95.692398][ T1022] usb 6-1: config 0 descriptor?? [ 95.698888][ T1022] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10 [ 95.749286][ T373] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 95.879315][ T1017] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.899398][ T373] usb 4-1: Using ep0 maxpacket: 8 [ 95.901668][ T45] usb 6-1: USB disconnect, device number 3 [ 95.905950][ T373] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.918781][ T373] usb 4-1: config 64 has an invalid interface number: 174 but max is 2 [ 95.927107][ T373] usb 4-1: config 64 has an invalid interface number: 252 but max is 2 [ 95.935435][ T373] usb 4-1: config 64 has an invalid interface descriptor of length 2, skipping [ 95.944416][ T373] usb 4-1: config 64 has an invalid interface number: 140 but max is 2 [ 95.952792][ T373] usb 4-1: config 64 has no interface number 0 [ 95.958967][ T373] usb 4-1: config 64 has no interface number 1 [ 95.965282][ T373] usb 4-1: config 64 has no interface number 2 [ 95.971511][ T373] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 95.982763][ T373] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 95.993930][ T373] usb 4-1: config 64 interface 252 altsetting 252 bulk endpoint 0x6 has invalid maxpacket 8 [ 96.004050][ T373] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 96.015314][ T373] usb 4-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 96.026182][ T1017] usb 5-1: device descriptor read/64, error -71 [ 96.032490][ T373] usb 4-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 96.043591][ T373] usb 4-1: config 64 interface 174 has no altsetting 0 [ 96.050530][ T373] usb 4-1: config 64 interface 252 has no altsetting 0 [ 96.057431][ T373] usb 4-1: config 64 interface 140 has no altsetting 0 [ 96.065866][ T373] usb 4-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 96.075011][ T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.083069][ T373] usb 4-1: Product: syz [ 96.087240][ T373] usb 4-1: Manufacturer: syz [ 96.092419][ T373] usb 4-1: SerialNumber: syz [ 96.269291][ T1017] usb 5-1: device descriptor read/64, error -71 [ 96.519327][ T1017] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.649465][ T1017] usb 5-1: device descriptor read/64, error -71 [ 96.899275][ T1017] usb 5-1: device descriptor read/64, error -71 [ 97.010005][ T1017] usb usb5-port1: attempt power cycle [ 97.471996][ T36] audit: type=1400 audit(1759868384.562:387): avc: denied { getopt } for pid=2437 comm="syz.5.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.491549][ T1017] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.520292][ T1017] usb 5-1: device descriptor read/8, error -71 [ 97.655588][ T1017] usb 5-1: device descriptor read/8, error -71 [ 97.811596][ T2456] futex_wake_op: syz.5.730 tries to shift op by -1; fix this program [ 97.899304][ T1017] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 97.920315][ T1017] usb 5-1: device descriptor read/8, error -71 [ 98.050349][ T1017] usb 5-1: device descriptor read/8, error -71 [ 98.129291][ T1022] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 98.159375][ T1017] usb usb5-port1: unable to enumerate USB device [ 98.280388][ T1022] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.290588][ T1022] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.300277][ T1022] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.309422][ T1022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.317435][ T1022] usb 6-1: SerialNumber: syz [ 98.472885][ T373] usb-storage 4-1:64.174: USB Mass Storage device detected [ 98.518332][ T2465] overlayfs: missing 'workdir' [ 98.518350][ T2463] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 98.524386][ T2463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 98.533330][ T2463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:403 [ 98.544478][ T1022] usb 6-1: 0:2 : does not exist [ 98.561125][ T373] usb-storage 4-1:64.252: USB Mass Storage device detected [ 98.577026][ T1022] usb 6-1: USB disconnect, device number 4 [ 98.611823][ T373] usb-storage 4-1:64.140: USB Mass Storage device detected [ 98.657735][ T2480] netlink: 32 bytes leftover after parsing attributes in process `syz.3.736'. [ 98.711867][ T373] usb 4-1: USB disconnect, device number 26 [ 98.849316][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.999309][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 99.005480][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.016414][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.026214][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 99.035287][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.048542][ T45] usb 5-1: config 0 descriptor?? [ 99.204765][ T2491] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 99.458651][ T45] logitech 0003:046D:C20E.0007: rdesc size test failed for formula gp [ 99.467308][ T45] logitech 0003:046D:C20E.0007: unknown main item tag 0x3 [ 99.474512][ T45] logitech 0003:046D:C20E.0007: unknown main item tag 0x6 [ 99.481725][ T45] logitech 0003:046D:C20E.0007: bogus close delimiter [ 99.488527][ T45] logitech 0003:046D:C20E.0007: item 0 0 2 10 parsing failed [ 99.496157][ T45] logitech 0003:046D:C20E.0007: parse failed [ 99.502310][ T45] logitech 0003:046D:C20E.0007: probe with driver logitech failed with error -22 [ 99.717340][ T31] usb 5-1: USB disconnect, device number 10 [ 99.742257][ T2501] fuse: Bad value for 'fd' [ 99.760113][ T2503] rust_binder: Error while translating object. [ 99.760148][ T2503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.766348][ T2503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422 [ 99.804899][ T2508] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 99.822091][ T2508] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 99.830623][ T2508] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 99.838608][ T2508] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 99.898795][ T2512] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 99.908293][ T2512] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 99.998175][ T2520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.013489][ T2522] fuse: Bad value for 'fd' [ 100.179296][ T31] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 100.330327][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 100.341379][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 100.354214][ T31] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 100.363319][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.372100][ T31] usb 4-1: config 0 descriptor?? [ 100.377338][ T2518] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.385392][ T31] usbhid 4-1:0.0: can't add hid device: -22 [ 100.391410][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 100.638717][ T45] usb 4-1: USB disconnect, device number 27 [ 101.139328][ T373] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 101.203161][ T36] audit: type=1400 audit(1759868388.292:388): avc: denied { append } for pid=2542 comm="syz.4.758" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.289580][ T373] usb 6-1: Using ep0 maxpacket: 8 [ 101.296682][ T373] usb 6-1: unable to get BOS descriptor or descriptor too short [ 101.305427][ T373] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 101.313841][ T373] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 101.324109][ T373] usb 6-1: config 4 has no interface number 0 [ 101.332185][ T373] usb 6-1: string descriptor 0 read error: -22 [ 101.338375][ T373] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 101.347610][ T373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.425995][ T2547] rust_binder: 2543 RLIMIT_NICE not set [ 101.559649][ T36] audit: type=1400 audit(1759868388.652:389): avc: denied { mounton } for pid=2537 comm="syz.5.756" path="/29/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.559661][ T2538] bpf: Bad value for 'gid' [ 101.593555][ T2538] rust_binder: Error while translating object. [ 101.593621][ T2538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.599870][ T2538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 101.610398][ T373] usb 6-1: USB disconnect, device number 5 [ 102.067583][ T2553] FAT-fs (rnullb0): bogus number of reserved sectors [ 102.074732][ T2553] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 102.097767][ T36] audit: type=1400 audit(1759868389.182:390): avc: denied { lock } for pid=2558 comm="syz.3.762" path="socket:[15782]" dev="sockfs" ino=15782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 102.150912][ T2567] binder: Unknown parameter 'fscontext?}' [ 102.178683][ T2572] fuse: Bad value for 'fd' [ 102.179316][ T36] audit: type=1400 audit(1759868389.262:391): avc: denied { bind } for pid=2558 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.449297][ T1022] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 102.489282][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 102.599277][ T1022] usb 6-1: Using ep0 maxpacket: 8 [ 102.605492][ T1022] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.613874][ T1022] usb 6-1: config 179 has no interface number 0 [ 102.620184][ T1022] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 102.631438][ T1022] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 102.642852][ T1022] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 102.652999][ T1022] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 102.659558][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 102.666513][ T1022] usb 6-1: config 179 interface 65 has no altsetting 0 [ 102.673372][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 102.678392][ T1022] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 102.689870][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 102.698540][ T1022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.716300][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 102.727819][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 102.738864][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 102.749997][ T31] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 102.759040][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.767071][ T31] usb 5-1: Product: syz [ 102.771296][ T31] usb 5-1: Manufacturer: syz [ 102.775900][ T31] usb 5-1: SerialNumber: syz [ 102.781229][ T31] usb 5-1: config 0 descriptor?? [ 102.787699][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 102.908342][ T31] usb 6-1: USB disconnect, device number 6 [ 102.952411][ T2580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.953167][ T36] audit: type=1400 audit(1759868390.042:392): avc: denied { mount } for pid=2579 comm="syz.3.769" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 102.959779][ T2580] rust_binder: 456: no such ref 3 [ 102.986926][ T2580] rust_binder: Read failure Err(EAGAIN) in pid:456 [ 102.994251][ T2570] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.000934][ T2570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 103.014163][ T1022] usb 5-1: USB disconnect, device number 11 [ 103.159040][ T2592] __vm_enough_memory: pid: 2592, comm: syz.3.773, bytes: 18014402804453376 not enough memory for the allocation [ 103.181446][ T36] audit: type=1400 audit(1759868390.272:393): avc: denied { create } for pid=2593 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 103.200826][ T36] audit: type=1400 audit(1759868390.272:394): avc: denied { bind } for pid=2593 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.402626][ T36] audit: type=1400 audit(1759868390.492:395): avc: denied { bind } for pid=2605 comm="syz.3.778" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.422864][ T36] audit: type=1400 audit(1759868390.492:396): avc: denied { name_bind } for pid=2605 comm="syz.3.778" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 103.444008][ T36] audit: type=1400 audit(1759868390.492:397): avc: denied { node_bind } for pid=2605 comm="syz.3.778" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 103.456045][ T2608] netlink: 'syz.5.779': attribute type 6 has an invalid length. [ 103.602891][ T2622] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 103.628644][ T2628] rust_binder: Error in use_page_slow: ESRCH [ 103.628659][ T2629] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 103.628680][ T2629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 103.634913][ T2628] rust_binder: use_range failure ESRCH [ 103.652497][ T2628] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 103.658093][ T2628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 103.660568][ T2629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:127 [ 103.666630][ T2628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:127 [ 103.804329][ T2635] /dev/rnullb0: Can't open blockdev [ 103.818787][ T2637] random: crng reseeded on system resumption [ 103.821890][ T2635] /dev/rnullb0: Can't open blockdev [ 103.851888][ T2643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:55 [ 103.906199][ T2651] netlink: 'syz.5.790': attribute type 1 has an invalid length. [ 103.937087][ T2653] erspan0: entered allmulticast mode [ 104.099322][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 104.259081][ T2660] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 104.268668][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.278650][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 104.291496][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 104.300759][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.309697][ T9] usb 5-1: config 0 descriptor?? [ 104.717331][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.725158][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.725219][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.739125][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.739199][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.739379][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 104.745806][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.760655][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.774672][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.774743][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.788637][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.788677][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.802435][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.802476][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.816264][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.816320][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.830254][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.830325][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.844099][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.844149][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.857912][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.857954][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.871914][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.871951][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.885694][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.885736][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.889297][ T31] usb 6-1: device descriptor read/64, error -71 [ 104.891852][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.905880][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.919739][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.919782][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.933592][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.933639][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.947439][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.947506][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.961270][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.961318][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.975065][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.975108][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 104.988828][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 104.988874][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.002643][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.002687][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.016495][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.016538][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.030401][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.030466][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.044390][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.044434][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.058300][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.058342][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.072174][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.072224][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.086013][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.086055][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.099821][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.099856][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.113670][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.113714][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.127513][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.127561][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.141447][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.141496][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.155327][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.155377][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.169142][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.169182][ T2670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 105.169361][ T31] usb 6-1: device descriptor read/64, error -71 [ 105.175429][ T2670] rust_binder: Write failure EINVAL in pid:60 [ 105.419307][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 105.559325][ T31] usb 6-1: device descriptor read/64, error -71 [ 105.769440][ T65] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 105.799320][ T31] usb 6-1: device descriptor read/64, error -71 [ 105.909910][ T31] usb usb6-port1: attempt power cycle [ 105.928359][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 106.249359][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 106.270302][ T31] usb 6-1: device descriptor read/8, error -71 [ 106.281016][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 106.281033][ T36] audit: type=1400 audit(1759868393.368:411): avc: denied { read write } for pid=2690 comm="syz.3.803" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 106.310571][ T36] audit: type=1400 audit(1759868393.368:412): avc: denied { open } for pid=2690 comm="syz.3.803" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 106.400327][ T31] usb 6-1: device descriptor read/8, error -71 [ 106.549334][ T65] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 106.639289][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 106.660405][ T31] usb 6-1: device descriptor read/8, error -71 [ 106.699285][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 106.705687][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.716662][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 106.725752][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.734879][ T65] usb 4-1: config 0 descriptor?? [ 106.790432][ T31] usb 6-1: device descriptor read/8, error -71 [ 106.878656][ T9] uclogic 0003:5543:0045.0008: failed retrieving Huion firmware version: -71 [ 106.888015][ T9] uclogic 0003:5543:0045.0008: failed probing parameters: -71 [ 106.895964][ T9] uclogic 0003:5543:0045.0008: probe with driver uclogic failed with error -71 [ 106.906659][ T9] usb 5-1: USB disconnect, device number 12 [ 106.915170][ T31] usb usb6-port1: unable to enumerate USB device [ 106.940940][ T2699] kvm: kvm [2698]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 106.949614][ T2699] kvm: kvm [2698]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 106.960858][ T2699] kvm: kvm [2698]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 106.973343][ T2699] kvm: kvm [2698]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 106.981924][ T2699] kvm: kvm [2698]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 106.986619][ T2701] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 106.993901][ T2699] kvm_intel: kvm [2698]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 106.998427][ T2701] netlink: 'syz.4.805': attribute type 2 has an invalid length. [ 107.153605][ T65] logitech 0003:046D:C24F.0009: item fetching failed at offset 2/5 [ 107.161807][ T65] logitech 0003:046D:C24F.0009: parse failed [ 107.167857][ T65] logitech 0003:046D:C24F.0009: probe with driver logitech failed with error -22 [ 107.176882][ T2703] fuse: Bad value for 'fd' [ 107.186521][ T2703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 107.195497][ T2703] tc_dump_action: action bad kind [ 107.304011][ T2706] rust_binder: Write failure EFAULT in pid:70 [ 107.356032][ T9] usb 4-1: USB disconnect, device number 28 [ 107.505832][ T2708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.508404][ T2709] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.568154][ T2714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.583189][ T2714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.592591][ T2714] rust_binder: Failed copying into alloc: EFAULT [ 107.592627][ T2714] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 107.599101][ T2714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 107.607466][ T2714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:148 [ 107.886724][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.909293][ T1022] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 108.060508][ T1022] usb 6-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 108.070980][ T1022] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 108.083962][ T1022] usb 6-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 108.093115][ T1022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.110243][ T1022] usb 6-1: config 0 descriptor?? [ 108.119005][ T1022] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 108.319027][ T1022] usb 6-1: USB disconnect, device number 11 [ 108.504247][ T36] audit: type=1400 audit(1759868395.588:413): avc: denied { read } for pid=2750 comm="syz.4.821" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 108.979293][ T65] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 109.099322][ T1022] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 109.140353][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.151361][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.161174][ T65] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 109.170263][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.179191][ T65] usb 5-1: config 0 descriptor?? [ 109.260453][ T1022] usb 6-1: No LPM exit latency info found, disabling LPM. [ 109.268616][ T1022] usb 6-1: config 64 has an invalid interface number: 174 but max is 2 [ 109.276947][ T1022] usb 6-1: config 64 has an invalid interface number: 252 but max is 2 [ 109.285260][ T1022] usb 6-1: config 64 has an invalid interface descriptor of length 2, skipping [ 109.294274][ T1022] usb 6-1: config 64 has an invalid interface number: 140 but max is 2 [ 109.302570][ T1022] usb 6-1: config 64 has no interface number 0 [ 109.308752][ T1022] usb 6-1: config 64 has no interface number 1 [ 109.314944][ T1022] usb 6-1: config 64 has no interface number 2 [ 109.321175][ T1022] usb 6-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 109.332339][ T1022] usb 6-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 109.343425][ T1022] usb 6-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 109.353775][ T1022] usb 6-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 109.364965][ T1022] usb 6-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 109.375797][ T1022] usb 6-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 109.386810][ T1022] usb 6-1: config 64 interface 174 has no altsetting 0 [ 109.388604][ T2757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.393728][ T1022] usb 6-1: config 64 interface 252 has no altsetting 0 [ 109.403967][ T2757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.408952][ T1022] usb 6-1: config 64 interface 140 has no altsetting 0 [ 109.426001][ T1022] usb 6-1: string descriptor 0 read error: -22 [ 109.432284][ T1022] usb 6-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 109.441369][ T1022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.451328][ T1022] usb-storage 6-1:64.174: USB Mass Storage device detected [ 109.490704][ T1022] usb-storage 6-1:64.252: USB Mass Storage device detected [ 109.511901][ T1022] usb-storage 6-1:64.140: USB Mass Storage device detected [ 109.619675][ T65] hid-led 0003:27B8:01ED.000A: item fetching failed at offset 0/5 [ 109.627719][ T65] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -22 [ 109.656975][ T1022] usb 6-1: USB disconnect, device number 12 [ 109.685024][ T2778] 9p: Unknown Cache mode or invalid value loosm [ 109.745087][ T2785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.796027][ T2786] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 109.818276][ T2757] __vm_enough_memory: pid: 2757, comm: syz.4.823, bytes: 18014402804453376 not enough memory for the allocation [ 109.839079][ T2787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.847572][ T2757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.848465][ T2787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.856214][ T2757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.876351][ T65] usb 5-1: USB disconnect, device number 13 [ 109.929365][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.935589][ T805] Bluetooth: hci0: command 0x1003 tx timeout [ 110.597546][ T2805] rust_binder: Error while translating object. [ 110.597578][ T2805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 110.616353][ T2805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:539 [ 110.670135][ T36] audit: type=1400 audit(1759868397.748:414): avc: denied { setcheckreqprot } for pid=2811 comm="syz.3.838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 110.739372][ T2807] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.746556][ T2807] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.759369][ T2807] bridge_slave_0: entered allmulticast mode [ 110.769692][ T2807] bridge_slave_0: entered promiscuous mode [ 110.776336][ T2807] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.783687][ T2807] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.791077][ T2807] bridge_slave_1: entered allmulticast mode [ 110.797481][ T2807] bridge_slave_1: entered promiscuous mode [ 110.849279][ T65] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 110.939346][ T2807] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.946456][ T2807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.953787][ T2807] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.960847][ T2807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.988792][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.996382][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.007798][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.014916][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.022306][ T65] usb 6-1: Using ep0 maxpacket: 32 [ 111.032376][ T65] usb 6-1: unable to get BOS descriptor or descriptor too short [ 111.050285][ T2831] rust_binder: Write failure EFAULT in pid:545 [ 111.050406][ T2831] rust_binder: Write failure EFAULT in pid:545 [ 111.051832][ T65] usb 6-1: config 0 has no interfaces? [ 111.070795][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.077869][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.086341][ T65] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.095990][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.104625][ T65] usb 6-1: Product: syz [ 111.108843][ T65] usb 6-1: Manufacturer: syz [ 111.109052][ T2807] veth0_vlan: entered promiscuous mode [ 111.113984][ T65] usb 6-1: SerialNumber: syz [ 111.125892][ T65] usb 6-1: config 0 descriptor?? [ 111.136979][ T2807] veth1_macvtap: entered promiscuous mode [ 111.251840][ T2854] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 111.259673][ T2854] netlink: 944 bytes leftover after parsing attributes in process `syz.4.849'. [ 111.270902][ T2854] binder: Unknown parameter '00000000000000000000000' [ 111.291475][ T36] audit: type=1400 audit(1759868398.376:415): avc: denied { write } for pid=2855 comm="syz.4.850" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.329305][ T331] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 111.339793][ T2808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.348299][ T2808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.356672][ T373] usb 6-1: USB disconnect, device number 13 [ 111.480566][ T331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.493621][ T331] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 111.502725][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.511435][ T331] usb 4-1: config 0 descriptor?? [ 111.549285][ T65] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 111.679320][ T65] usb 5-1: device descriptor read/64, error -71 [ 111.799322][ T363] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 111.919771][ T331] waltop 0003:172F:0037.000B: collection stack underflow [ 111.920336][ T65] usb 5-1: device descriptor read/64, error -71 [ 111.926871][ T331] waltop 0003:172F:0037.000B: item 0 1 0 12 parsing failed [ 111.940903][ T331] waltop 0003:172F:0037.000B: probe with driver waltop failed with error -22 [ 111.960508][ T363] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.970751][ T363] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.985237][ T363] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 111.994373][ T363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.002455][ T363] usb 6-1: Product: syz [ 112.006631][ T363] usb 6-1: Manufacturer: syz [ 112.011656][ T363] usb 6-1: SerialNumber: syz [ 112.085119][ T2860] rust_binder: Error while translating object. [ 112.085145][ T2860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 112.091592][ T2860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 112.169541][ T65] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 112.220080][ T363] cdc_ncm 6-1:1.0: bind() failure [ 112.226236][ T363] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 112.235936][ T363] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 112.242792][ T363] cdc_ncm 6-1:1.1: bind() failure [ 112.251378][ T363] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 112.261199][ T363] usb 6-1: USB disconnect, device number 14 [ 112.269903][ T771] udevd[771]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.309347][ T65] usb 5-1: device descriptor read/64, error -71 [ 112.471858][ T2863] rust_binder: Write failure EFAULT in pid:547 [ 112.559290][ T65] usb 5-1: device descriptor read/64, error -71 [ 112.679354][ T65] usb usb5-port1: attempt power cycle [ 112.967087][ T2874] rust_binder: Write failure EFAULT in pid:11 [ 112.984216][ T2876] rust_binder: 15: no such ref 0 [ 112.995357][ T2876] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 113.002486][ T2876] rust_binder: 15: no such ref 2 [ 113.007490][ T2876] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 113.029288][ T65] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 113.061585][ T65] usb 5-1: device descriptor read/8, error -71 [ 113.190325][ T65] usb 5-1: device descriptor read/8, error -71 [ 113.284891][ T2900] rust_binder: Write failure EINVAL in pid:198 [ 113.285592][ T36] audit: type=1400 audit(1759868400.366:416): avc: denied { mounton } for pid=2899 comm="syz.5.866" path="/63/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 113.416772][ T2911] cgroup: Need name or subsystem set [ 113.422604][ T2911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.423003][ T2911] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 113.449337][ T65] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 113.480344][ T65] usb 5-1: device descriptor read/8, error -71 [ 113.580990][ T2923] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 113.610354][ T65] usb 5-1: device descriptor read/8, error -71 [ 113.694953][ T36] audit: type=1400 audit(1759868400.776:417): avc: denied { create } for pid=2922 comm="syz.5.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 113.695944][ T2926] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.722603][ T2926] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 113.722646][ T65] usb usb5-port1: unable to enumerate USB device [ 113.731733][ T2926] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.745451][ T2926] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 114.009339][ T331] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 114.094708][ T363] usb 4-1: USB disconnect, device number 29 [ 114.160615][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 114.172057][ T331] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 114.185713][ T331] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 114.194663][ T2937] rust_binder: Error while translating object. [ 114.194812][ T2937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 114.194994][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.199164][ T331] usb 6-1: config 0 descriptor?? [ 114.201604][ T2937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:557 [ 114.210957][ T2928] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 114.242001][ T331] usbhid 6-1:0.0: can't add hid device: -22 [ 114.243768][ T2939] binder: Bad value for 'max' [ 114.248268][ T331] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 114.315524][ T2939] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 114.334436][ T2939] kvm: kvm [2938]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 114.343386][ T2939] kvm: kvm [2938]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 114.465832][ T363] usb 6-1: USB disconnect, device number 15 [ 114.566013][ T2956] binder: Bad value for 'defcontext' [ 114.643963][ T2964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=2964 comm=syz.3.888 [ 114.669094][ T2966] rust_binder: Error while translating object. [ 114.669135][ T2966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.675399][ T2966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:568 [ 114.703334][ T2968] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 114.721568][ T2968] overlayfs: missing 'lowerdir' [ 114.734685][ T2972] binder: Unknown parameter '€' [ 114.747040][ T2976] netlink: 'syz.3.893': attribute type 46 has an invalid length. [ 114.756205][ T36] audit: type=1400 audit(1759868401.846:418): avc: denied { connect } for pid=2973 comm="syz.3.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.839186][ T2982] rust_binder: Write failure EINVAL in pid:164 [ 115.014072][ T36] audit: type=1326 audit(1759868402.096:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.5.898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a5cf8eec9 code=0x0 [ 115.209439][ T363] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 115.359293][ T363] usb 4-1: Using ep0 maxpacket: 8 [ 115.365555][ T363] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 115.374062][ T363] usb 4-1: config 179 has no interface number 0 [ 115.380607][ T363] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 115.392208][ T363] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 115.403693][ T363] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 115.413860][ T363] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 115.427230][ T363] usb 4-1: config 179 interface 65 has no altsetting 0 [ 115.434172][ T363] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 115.443243][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.606221][ T2993] rust_binder: Write failure EFAULT in pid:167 [ 115.656424][ T363] usb 4-1: USB disconnect, device number 30 [ 115.672864][ T2995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 115.672888][ T2995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:169 [ 115.892886][ T3010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.906'. [ 115.911354][ T3010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 116.035306][ T36] audit: type=1400 audit(1759868403.116:420): avc: denied { create } for pid=3028 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.065141][ T36] audit: type=1400 audit(1759868403.116:421): avc: denied { ioctl } for pid=3028 comm="syz.5.913" path="socket:[18330]" dev="sockfs" ino=18330 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.092026][ T36] audit: type=1400 audit(1759868403.116:422): avc: denied { setopt } for pid=3028 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.115590][ T36] audit: type=1400 audit(1759868403.116:423): avc: denied { bind } for pid=3028 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.142675][ T36] audit: type=1400 audit(1759868403.126:424): avc: denied { write } for pid=3028 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.183059][ T3042] rust_binder: Error while translating object. [ 116.183092][ T3042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 116.189745][ T3042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:585 [ 116.349314][ T65] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 116.510457][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 116.521557][ T363] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 116.529269][ T65] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 116.542408][ T65] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 116.551529][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.561109][ T65] usb 6-1: config 0 descriptor?? [ 116.566501][ T3036] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 116.575248][ T65] usbhid 6-1:0.0: can't add hid device: -22 [ 116.581448][ T65] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 116.709313][ T363] usb 4-1: Using ep0 maxpacket: 8 [ 116.716091][ T363] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.725130][ T363] usb 4-1: config 6 has an invalid interface number: 194 but max is 0 [ 116.734260][ T363] usb 4-1: config 6 has no interface number 0 [ 116.742347][ T363] usb 4-1: config 6 interface 194 has no altsetting 0 [ 116.750861][ T363] usb 4-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=32.00 [ 116.760436][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.768676][ T363] usb 4-1: Product: syz [ 116.773280][ T363] usb 4-1: Manufacturer: syz [ 116.777933][ T363] usb 4-1: SerialNumber: syz [ 116.786552][ T45] usb 6-1: USB disconnect, device number 16 [ 117.005351][ T363] ftdi_sio 4-1:6.194: FTDI USB Serial Device converter detected [ 117.013419][ T363] usb 4-1: Detected FT233HP [ 117.018192][ T363] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 117.025343][ T363] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 117.032804][ T363] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.041914][ T363] usb 4-1: USB disconnect, device number 31 [ 117.049725][ T363] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.059486][ T363] ftdi_sio 4-1:6.194: device disconnected [ 117.366653][ T3078] input: syz0 as /devices/virtual/input/input15 [ 117.769282][ T1022] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 117.920383][ T1022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 117.931374][ T1022] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 117.944380][ T1022] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 117.953524][ T1022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.962650][ T1022] usb 4-1: config 0 descriptor?? [ 117.971642][ T3095] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.980505][ T1022] usbhid 4-1:0.0: can't add hid device: -22 [ 117.987911][ T1022] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 118.181628][ T65] usb 4-1: USB disconnect, device number 32 [ 118.209591][ T3109] __vm_enough_memory: pid: 3109, comm: syz.5.942, bytes: 18014402804453376 not enough memory for the allocation [ 118.222140][ T3111] __vm_enough_memory: pid: 3111, comm: syz.5.942, bytes: 18014402804453376 not enough memory for the allocation [ 118.243665][ T3114] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.489277][ T45] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 118.591229][ T3118] fuse: Bad value for 'fd' [ 118.640615][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 118.648692][ T45] usb 6-1: not running at top speed; connect to a high speed hub [ 118.657845][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.668034][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.677005][ T45] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 118.688058][ T45] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 118.698424][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 118.698446][ T36] audit: type=1400 audit(1759868405.766:427): avc: denied { listen } for pid=3119 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.702551][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.736240][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.744304][ T45] usb 6-1: Product: syz [ 118.748487][ T45] usb 6-1: Manufacturer: syz [ 118.753139][ T45] usb 6-1: SerialNumber: syz [ 118.757634][ T36] audit: type=1400 audit(1759868405.846:428): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.782456][ T36] audit: type=1400 audit(1759868405.846:429): avc: denied { ioctl } for pid=3112 comm="syz.5.943" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.807456][ T36] audit: type=1400 audit(1759868405.866:430): avc: denied { open } for pid=293 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.831569][ T36] audit: type=1400 audit(1759868405.866:431): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.857060][ T36] audit: type=1400 audit(1759868405.876:432): avc: denied { read } for pid=3124 comm="syz.3.947" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.879695][ T36] audit: type=1400 audit(1759868405.876:433): avc: denied { open } for pid=3124 comm="syz.3.947" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.903569][ T36] audit: type=1400 audit(1759868405.886:434): avc: denied { read } for pid=3124 comm="syz.3.947" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.926097][ T36] audit: type=1400 audit(1759868405.886:435): avc: denied { open } for pid=3124 comm="syz.3.947" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.949374][ T36] audit: type=1400 audit(1759868405.886:436): avc: denied { ioctl } for pid=3124 comm="syz.3.947" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.975940][ T3113] rust_binder: Error in use_page_slow: ESRCH [ 118.975970][ T3113] rust_binder: use_range failure ESRCH [ 118.982146][ T3113] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 118.987701][ T3113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 118.996251][ T3113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:272 [ 119.008625][ T45] usb 6-1: 0:2 : does not exist [ 119.024743][ T45] usb 6-1: USB disconnect, device number 17 [ 119.146363][ T3129] overlayfs: missing 'lowerdir' [ 119.169151][ T3133] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 119.176603][ T3133] rust_binder: Write failure EINVAL in pid:606 [ 119.201641][ T3136] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 119.208306][ T3136] rust_binder: Error while translating object. [ 119.218966][ T3136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.231533][ T3136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:608 [ 119.614262][ T3151] input: syz0 as /devices/virtual/input/input16 [ 119.715002][ T3156] rust_binder: Error while translating object. [ 119.715090][ T3156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.728366][ T3156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283 [ 120.259270][ T1022] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 120.419279][ T1022] usb 6-1: device descriptor read/64, error -71 [ 120.454150][ T3170] FAULT_INJECTION: forcing a failure. [ 120.454150][ T3170] name failslab, interval 1, probability 0, space 0, times 1 [ 120.466963][ T3170] CPU: 0 UID: 0 PID: 3170 Comm: syz.3.963 Not tainted syzkaller #0 5da94d7ae1382d011f9cc741e3f1db1eb2c4dbed [ 120.466997][ T3170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.467020][ T3170] Call Trace: [ 120.467028][ T3170] [ 120.467037][ T3170] __dump_stack+0x21/0x30 [ 120.467074][ T3170] dump_stack_lvl+0x10c/0x190 [ 120.467104][ T3170] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.467135][ T3170] ? proc_tid_base_lookup+0x2f/0x40 [ 120.467166][ T3170] ? do_filp_open+0x1c6/0x3e0 [ 120.467192][ T3170] ? do_sys_openat2+0x12c/0x1c0 [ 120.467221][ T3170] ? __x64_sys_openat+0x13a/0x170 [ 120.467250][ T3170] ? do_syscall_64+0x58/0xf0 [ 120.467278][ T3170] dump_stack+0x19/0x20 [ 120.467306][ T3170] should_fail_ex+0x3d9/0x530 [ 120.467329][ T3170] should_failslab+0xac/0x100 [ 120.467355][ T3170] kmem_cache_alloc_noprof+0x42/0x430 [ 120.467376][ T3170] ? __asan_memcpy+0x5a/0x80 [ 120.467395][ T3170] ? vm_area_dup+0x42/0x570 [ 120.467420][ T3170] vm_area_dup+0x42/0x570 [ 120.467442][ T3170] __split_vma+0x1bd/0xa80 [ 120.467464][ T3170] ? kasan_save_alloc_info+0x40/0x50 [ 120.467498][ T3170] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 120.467524][ T3170] vms_gather_munmap_vmas+0x273/0xdd0 [ 120.467551][ T3170] mmap_region+0x598/0x1bc0 [ 120.467574][ T3170] ? __cfi_mmap_region+0x10/0x10 [ 120.467598][ T3170] ? __kasan_check_read+0x15/0x20 [ 120.467631][ T3170] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 120.467659][ T3170] ? file_mmap_ok+0x147/0x1a0 [ 120.467679][ T3170] do_mmap+0xb6d/0x13c0 [ 120.467701][ T3170] ? __cfi_do_mmap+0x10/0x10 [ 120.467720][ T3170] ? down_write_killable+0xe9/0x2d0 [ 120.467743][ T3170] ? __cfi_down_write_killable+0x10/0x10 [ 120.467767][ T3170] vm_mmap_pgoff+0x38f/0x4e0 [ 120.467789][ T3170] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 120.467810][ T3170] ? __fget_files+0x2c5/0x340 [ 120.467836][ T3170] ksys_mmap_pgoff+0x166/0x1e0 [ 120.467857][ T3170] __x64_sys_mmap+0x121/0x140 [ 120.467898][ T3170] x64_sys_call+0x13bf/0x2ee0 [ 120.467931][ T3170] do_syscall_64+0x58/0xf0 [ 120.467957][ T3170] ? clear_bhb_loop+0x50/0xa0 [ 120.467981][ T3170] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.468019][ T3170] RIP: 0033:0x7fe70d18eec9 [ 120.468042][ T3170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.468063][ T3170] RSP: 002b:00007fe70e0ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 120.468092][ T3170] RAX: ffffffffffffffda RBX: 00007fe70d3e5fa0 RCX: 00007fe70d18eec9 [ 120.468110][ T3170] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000701000 [ 120.468125][ T3170] RBP: 00007fe70e0ef090 R08: 0000000000000003 R09: 0000000000000000 [ 120.468141][ T3170] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 120.468155][ T3170] R13: 00007fe70d3e6038 R14: 00007fe70d3e5fa0 R15: 00007fffc05a8248 [ 120.468175][ T3170] [ 120.843464][ T3173] netlink: 'syz.3.964': attribute type 4 has an invalid length. [ 120.851179][ T3173] netlink: 17 bytes leftover after parsing attributes in process `syz.3.964'. [ 120.860357][ T3173] netlink: 'syz.3.964': attribute type 1 has an invalid length. [ 120.868015][ T3173] netlink: 'syz.3.964': attribute type 2 has an invalid length. [ 120.877038][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.889413][ T1022] usb 6-1: device descriptor read/64, error -71 [ 121.139288][ T1022] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 121.269294][ T1022] usb 6-1: device descriptor read/64, error -71 [ 121.509279][ T1022] usb 6-1: device descriptor read/64, error -71 [ 121.619404][ T1022] usb usb6-port1: attempt power cycle [ 121.969290][ T1022] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 121.990403][ T1022] usb 6-1: device descriptor read/8, error -71 [ 122.120417][ T1022] usb 6-1: device descriptor read/8, error -71 [ 122.359283][ T1022] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 122.380307][ T1022] usb 6-1: device descriptor read/8, error -71 [ 122.510359][ T1022] usb 6-1: device descriptor read/8, error -71 [ 122.619778][ T1022] usb usb6-port1: unable to enumerate USB device [ 122.889283][ T805] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.889291][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 123.110847][ T3197] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.111124][ T3197] rust_binder: Read failure Err(EAGAIN) in pid:41 [ 123.120301][ T3198] rust_binder: Read failure Err(EAGAIN) in pid:41 [ 123.126839][ T3197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 123.399277][ T1022] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 123.539314][ T1022] usb 6-1: device descriptor read/64, error -71 [ 123.691045][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 123.691053][ T3212] SELinux: security_context_str_to_sid () failed with errno=-22 [ 123.691064][ T36] audit: type=1400 audit(1759868410.776:507): avc: denied { mounton } for pid=3211 comm="syz.6.976" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.765817][ T36] audit: type=1400 audit(1759868410.846:508): avc: denied { map } for pid=3213 comm="syz.6.977" path="socket:[19943]" dev="sockfs" ino=19943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.766133][ T3214] rust_binder: 54: no such ref 3 [ 123.789918][ T36] audit: type=1400 audit(1759868410.846:509): avc: denied { read } for pid=3213 comm="syz.6.977" path="socket:[19943]" dev="sockfs" ino=19943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.817179][ T1022] usb 6-1: device descriptor read/64, error -71 [ 123.823648][ T3215] rust_binder: 54: no such ref 3 [ 123.860630][ T36] audit: type=1400 audit(1759868410.946:510): avc: denied { create } for pid=3216 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.922158][ T3221] rust_binder: Write failure EFAULT in pid:627 [ 123.991025][ T36] audit: type=1400 audit(1759868411.076:511): avc: denied { create } for pid=3223 comm="syz.6.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.016604][ T36] audit: type=1400 audit(1759868411.076:512): avc: denied { setopt } for pid=3223 comm="syz.6.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.035979][ T36] audit: type=1400 audit(1759868411.076:513): avc: denied { map } for pid=3223 comm="syz.6.981" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.058827][ T36] audit: type=1400 audit(1759868411.076:514): avc: denied { execute } for pid=3223 comm="syz.6.981" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.082042][ T1022] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 124.107875][ T36] audit: type=1400 audit(1759868411.186:515): avc: denied { ioctl } for pid=3225 comm="syz.3.983" path="socket:[20759]" dev="sockfs" ino=20759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.133652][ T36] audit: type=1400 audit(1759868411.186:516): avc: denied { bind } for pid=3225 comm="syz.3.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.164974][ T3234] rust_binder: Write failure EFAULT in pid:65 [ 124.219287][ T1022] usb 6-1: device descriptor read/64, error -71 [ 124.281081][ T3240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=3240 comm=syz.3.986 [ 124.293499][ T3240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=3240 comm=syz.3.986 [ 124.310156][ T3240] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 124.320608][ T3241] netlink: 152 bytes leftover after parsing attributes in process `syz.3.986'. [ 124.402647][ T3253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7762 sclass=netlink_route_socket pid=3253 comm=syz.3.990 [ 124.420961][ T3253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 124.441410][ T3255] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 124.448592][ T3255] rust_binder: Write failure EINVAL in pid:648 [ 124.469317][ T1022] usb 6-1: device descriptor read/64, error -71 [ 124.589375][ T1022] usb usb6-port1: attempt power cycle [ 124.630125][ T3265] __vm_enough_memory: pid: 3265, comm: syz.3.995, bytes: 18014402804453376 not enough memory for the allocation [ 124.642422][ T3266] __vm_enough_memory: pid: 3266, comm: syz.3.995, bytes: 18014402804453376 not enough memory for the allocation [ 124.929333][ T1022] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 124.950314][ T1022] usb 6-1: device descriptor read/8, error -71 [ 125.080481][ T1022] usb 6-1: device descriptor read/8, error -71 [ 125.319282][ T1022] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 125.340330][ T1022] usb 6-1: device descriptor read/8, error -71 [ 125.470311][ T1022] usb 6-1: device descriptor read/8, error -71 [ 125.577027][ T3285] rust_binder: Failed copying into alloc: EFAULT [ 125.577046][ T3285] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 125.579478][ T1022] usb usb6-port1: unable to enumerate USB device [ 125.583681][ T3285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 125.598719][ T3285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:666 [ 125.647972][ T3291] netlink: 'syz.3.1005': attribute type 4 has an invalid length. [ 125.667150][ T3291] netlink: 'syz.3.1005': attribute type 4 has an invalid length. [ 125.677255][ T3291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1005'. [ 125.772810][ T3295] IPv6: Can't replace route, no match found [ 125.868899][ T3314] tmpfs: Unknown parameter '0xffffffffffffffff' [ 125.902236][ T3317] rust_binder: Write failure EFAULT in pid:685 [ 125.928386][ T3325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.947872][ T3325] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 126.253156][ T45] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 126.419256][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 126.441316][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.459666][ T45] usb 4-1: config 0 has no interfaces? [ 126.466616][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.479254][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.492195][ T45] usb 4-1: Product: syz [ 126.496401][ T45] usb 4-1: Manufacturer: syz [ 126.509445][ T45] usb 4-1: SerialNumber: syz [ 126.517115][ T45] usb 4-1: config 0 descriptor?? [ 126.559311][ T1022] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 126.689291][ T1022] usb 6-1: device descriptor read/64, error -71 [ 126.724332][ T3335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.732906][ T3335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.741213][ T331] usb 4-1: USB disconnect, device number 33 [ 126.902097][ T3348] overlayfs: failed to clone upperpath [ 126.929276][ T1022] usb 6-1: device descriptor read/64, error -71 [ 127.169285][ T1022] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 127.179284][ T331] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 127.292305][ T3385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1030'. [ 127.299328][ T1022] usb 6-1: device descriptor read/64, error -71 [ 127.305351][ T3385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 127.307516][ T3385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:79 [ 127.329334][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 127.349442][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.357816][ T331] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 127.365631][ T331] usb 4-1: can't read configurations, error -71 [ 127.539265][ T1022] usb 6-1: device descriptor read/64, error -71 [ 127.649376][ T1022] usb usb6-port1: attempt power cycle [ 127.799776][ T3409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 127.989289][ T1022] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 128.010391][ T1022] usb 6-1: device descriptor read/8, error -71 [ 128.140349][ T1022] usb 6-1: device descriptor read/8, error -71 [ 128.199291][ T331] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 128.349269][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 128.355541][ T331] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.366464][ T331] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.379304][ T1022] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 128.386809][ T331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.393501][ T331] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 128.402620][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.411865][ T331] usb 4-1: config 0 descriptor?? [ 128.415407][ T3419] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 128.422918][ T1022] usb 6-1: device descriptor read/8, error -71 [ 128.560439][ T1022] usb 6-1: device descriptor read/8, error -71 [ 128.670201][ T1022] usb usb6-port1: unable to enumerate USB device [ 128.827255][ T331] logitech 0003:046D:C287.000C: unknown main item tag 0x0 [ 128.834603][ T331] logitech 0003:046D:C287.000C: unknown main item tag 0x0 [ 128.842002][ T331] logitech 0003:046D:C287.000C: unknown main item tag 0x0 [ 128.849273][ T331] logitech 0003:046D:C287.000C: unknown main item tag 0x0 [ 128.856778][ T331] logitech 0003:046D:C287.000C: unknown main item tag 0x0 [ 128.866981][ T331] logitech 0003:046D:C287.000C: hidraw0: USB HID v0.03 Device [HID 046d:c287] on usb-dummy_hcd.3-1/input0 [ 128.878688][ T331] logitech 0003:046D:C287.000C: no inputs found [ 129.024875][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 129.024893][ T36] audit: type=1400 audit(1759868416.106:561): avc: denied { setopt } for pid=3413 comm="syz.3.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.076919][ T45] usb 4-1: USB disconnect, device number 35 [ 129.115072][ T3437] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 208, size: 131) [ 129.115110][ T3437] rust_binder: Error while translating object. [ 129.125836][ T3437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.132135][ T3437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 129.142209][ T3438] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.324275][ T3446] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 129.338037][ T3446] rust_binder: Write failure EINVAL in pid:315 [ 129.359599][ T3450] __vm_enough_memory: pid: 3450, comm: syz.5.1053, bytes: 18014402804453376 not enough memory for the allocation [ 129.387810][ T36] audit: type=1326 audit(1759868416.466:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.5.1054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a5cf8eec9 code=0x0 [ 129.548485][ T36] audit: type=1400 audit(1759868416.626:563): avc: denied { create } for pid=3452 comm="syz.5.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 129.738164][ T3457] netlink: 'syz.6.1055': attribute type 5 has an invalid length. [ 129.745963][ T3457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1055'. [ 130.063826][ T36] audit: type=1400 audit(1759868417.146:564): avc: denied { bind } for pid=3481 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.083426][ T36] audit: type=1400 audit(1759868417.176:565): avc: denied { listen } for pid=3481 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.103414][ T36] audit: type=1400 audit(1759868417.186:566): avc: denied { connect } for pid=3481 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.168625][ T3485] netlink: 'syz.4.1065': attribute type 3 has an invalid length. [ 130.176762][ T3485] netlink: 944 bytes leftover after parsing attributes in process `syz.4.1065'. [ 130.204114][ T3487] overlayfs: failed to clone upperpath [ 130.609294][ T45] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 130.759291][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 130.765563][ T45] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 130.773888][ T45] usb 6-1: config 179 has no interface number 0 [ 130.780200][ T45] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 130.791439][ T45] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 130.802856][ T45] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 130.812988][ T45] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.826489][ T45] usb 6-1: config 179 interface 65 has no altsetting 0 [ 130.833476][ T45] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 130.842541][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.892605][ T3497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.892822][ T3497] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 130.972912][ T3503] netlink: 960 bytes leftover after parsing attributes in process `syz.4.1074'. [ 131.013509][ T36] audit: type=1400 audit(1759868418.096:567): avc: denied { mount } for pid=3506 comm="syz.4.1076" name="/" dev="incremental-fs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 131.056070][ T9] usb 6-1: USB disconnect, device number 30 [ 131.072741][ T36] audit: type=1400 audit(1759868418.156:568): avc: denied { connect } for pid=3512 comm="syz.4.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.079516][ T330] tipc: Subscription rejected, illegal request [ 131.159269][ T331] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 131.310447][ T331] usb 4-1: No LPM exit latency info found, disabling LPM. [ 131.318452][ T331] usb 4-1: config 64 has an invalid interface number: 6 but max is 2 [ 131.326682][ T331] usb 4-1: config 64 has an invalid interface number: 199 but max is 2 [ 131.334982][ T331] usb 4-1: config 64 has an invalid interface descriptor of length 2, skipping [ 131.344146][ T331] usb 4-1: config 64 has an invalid interface number: 251 but max is 2 [ 131.352441][ T331] usb 4-1: config 64 has no interface number 0 [ 131.358621][ T331] usb 4-1: config 64 has no interface number 1 [ 131.365274][ T331] usb 4-1: config 64 has no interface number 2 [ 131.371483][ T331] usb 4-1: config 64 interface 199 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 131.382640][ T331] usb 4-1: config 64 interface 199 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 131.393708][ T331] usb 4-1: config 64 interface 199 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 131.404011][ T331] usb 4-1: config 64 interface 199 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 131.415190][ T331] usb 4-1: config 64 interface 251 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 131.425987][ T331] usb 4-1: config 64 interface 251 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 131.436971][ T331] usb 4-1: config 64 interface 6 has no altsetting 0 [ 131.443693][ T331] usb 4-1: config 64 interface 199 has no altsetting 0 [ 131.450718][ T331] usb 4-1: config 64 interface 251 has no altsetting 0 [ 131.582419][ T3524] netlink: 960 bytes leftover after parsing attributes in process `syz.5.1083'. [ 131.645152][ T3528] rust_binder: Error while translating object. [ 131.645183][ T3528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 131.651416][ T3528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:338 [ 131.728982][ T36] audit: type=1400 audit(1759868418.806:569): avc: denied { create } for pid=3529 comm="syz.5.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.477791][ T36] audit: type=1400 audit(1759868419.556:570): avc: denied { write } for pid=3545 comm="syz.5.1092" name="pfkey" dev="proc" ino=4026533030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 132.769295][ T363] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 132.929253][ T363] usb 6-1: Using ep0 maxpacket: 32 [ 132.941054][ T363] usb 6-1: unable to get BOS descriptor or descriptor too short [ 132.955761][ T363] usb 6-1: config 0 has no interfaces? [ 132.966370][ T363] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.979292][ T363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.987436][ T363] usb 6-1: Product: syz [ 133.009294][ T363] usb 6-1: Manufacturer: syz [ 133.013950][ T363] usb 6-1: SerialNumber: syz [ 133.029491][ T363] usb 6-1: config 0 descriptor?? [ 133.242326][ T3552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.250922][ T3552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.259774][ T1022] usb 6-1: USB disconnect, device number 31 [ 133.296984][ T3631] syz.4.1123 uses obsolete (PF_INET,SOCK_PACKET) [ 133.307492][ T3631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=3631 comm=syz.4.1123 [ 133.337158][ T3634] incfs: Options parsing error. -22 [ 133.342564][ T3634] incfs: mount failed -22 [ 133.549020][ T3634] 9pnet_fd: Insufficient options for proto=fd [ 133.699258][ T1022] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 133.849283][ T1022] usb 6-1: Using ep0 maxpacket: 8 [ 133.855450][ T1022] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.865705][ T1022] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.880072][ T1022] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.889153][ T1022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.897207][ T1022] usb 6-1: Product: syz [ 133.901413][ T1022] usb 6-1: Manufacturer: syz [ 133.906026][ T1022] usb 6-1: SerialNumber: syz [ 133.918215][ T331] usb 4-1: New USB device found, idVendor=045e, idProduct=045b, bcdDevice=88.ff [ 133.927683][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.941078][ T331] usb 4-1: can't set config #64, error -71 [ 133.950139][ T331] usb 4-1: USB disconnect, device number 36 [ 134.118246][ T1022] cdc_ncm 6-1:1.0: bind() failure [ 134.124763][ T1022] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 134.131873][ T1022] cdc_ncm 6-1:1.1: bind() failure [ 134.139494][ T1022] usb 6-1: USB disconnect, device number 32 [ 134.187300][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 134.187320][ T36] audit: type=1400 audit(1759868421.266:582): avc: denied { name_bind } for pid=3656 comm="syz.4.1132" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 134.217656][ T3659] fuse: Bad value for 'fd' [ 134.630645][ T36] audit: type=1400 audit(1759868421.716:583): avc: denied { ioctl } for pid=3660 comm="syz.5.1133" path="socket:[24334]" dev="sockfs" ino=24334 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.655856][ T36] audit: type=1400 audit(1759868421.716:584): avc: denied { mounton } for pid=3660 comm="syz.5.1133" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 134.716187][ T3667] 9pnet_fd: Insufficient options for proto=fd [ 134.890888][ T36] audit: type=1400 audit(1759868421.976:585): avc: denied { mount } for pid=3668 comm="syz.4.1137" name="/" dev="ramfs" ino=24347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 135.060903][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 135.070140][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 135.079178][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 135.088221][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 135.097264][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 135.106302][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 135.115325][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 135.136145][ T3679] netlink: 'syz.3.1139': attribute type 4 has an invalid length. [ 135.145268][ T36] audit: type=1400 audit(1759868422.226:586): avc: denied { setattr } for pid=3678 comm="syz.3.1139" name="file0" dev="incremental-fs" ino=1421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.415128][ T3681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.430329][ T36] audit: type=1400 audit(1759868422.516:587): avc: denied { create } for pid=3682 comm="syz.5.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.457214][ T36] audit: type=1400 audit(1759868422.516:588): avc: denied { write } for pid=3682 comm="syz.5.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.669293][ T363] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 135.799293][ T363] usb 6-1: device descriptor read/64, error -71 [ 135.973088][ T36] audit: type=1400 audit(1759868423.056:589): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 135.998410][ T3689] rust_binder: Write failure EINVAL in pid:716 [ 136.049390][ T363] usb 6-1: device descriptor read/64, error -71 [ 136.216278][ T36] audit: type=1400 audit(1759868423.296:590): avc: denied { getopt } for pid=3710 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.297100][ T3716] overlayfs: conflicting options: userxattr,metacopy=on [ 136.309295][ T363] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 136.317954][ T36] audit: type=1400 audit(1759868423.396:591): avc: denied { lock } for pid=3715 comm="syz.3.1153" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.399455][ T3720] rust_binder: 3719 RLIMIT_NICE not set [ 136.399687][ T3719] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 136.412456][ T3719] rust_binder: Write failure EINVAL in pid:738 [ 136.417510][ T45] rust_binder: 3718: removing orphan mapping 0:1168 [ 136.470009][ T363] usb 6-1: device descriptor read/64, error -71 [ 136.719376][ T363] usb 6-1: device descriptor read/64, error -71 [ 136.829861][ T363] usb usb6-port1: attempt power cycle [ 137.179309][ T363] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 137.200405][ T363] usb 6-1: device descriptor read/8, error -71 [ 137.330394][ T363] usb 6-1: device descriptor read/8, error -71 [ 137.569301][ T363] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 137.592892][ T363] usb 6-1: device descriptor read/8, error -71 [ 137.678875][ T3781] binder: Unknown parameter '0x0000000000000003' [ 137.700918][ T3784] rust_binder: Write failure EFAULT in pid:774 [ 137.730354][ T363] usb 6-1: device descriptor read/8, error -71 [ 137.751463][ T3771] overlayfs: failed to clone upperpath [ 137.771530][ T3794] netlink: 'syz.3.1178': attribute type 5 has an invalid length. [ 137.779396][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 137.849432][ T363] usb usb6-port1: unable to enumerate USB device [ 137.893335][ T3806] rust_binder: Write failure EFAULT in pid:796 [ 138.009804][ T3814] 9pnet_fd: Insufficient options for proto=fd [ 138.201541][ T3821] netlink: 'syz.3.1186': attribute type 4 has an invalid length. [ 138.449290][ T45] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 138.480739][ T3823] netlink: 'syz.5.1187': attribute type 5 has an invalid length. [ 138.488550][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1187'. [ 138.512417][ T3827] rust_binder: Write failure EFAULT in pid:361 [ 138.546104][ T3837] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1193'. [ 138.561508][ T3837] tc_dump_action: action bad kind [ 138.574610][ T3841] overlayfs: conflicting options: userxattr,redirect_dir=on [ 138.599265][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 138.607268][ T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 138.616429][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.624580][ T45] usb 4-1: Product: syz [ 138.628815][ T45] usb 4-1: Manufacturer: syz [ 138.633503][ T45] usb 4-1: SerialNumber: syz [ 138.648290][ T3852] raw_sendmsg: syz.4.1200 forgot to set AF_INET. Fix it! [ 138.649308][ T45] r8152-cfgselector 4-1: Unknown version 0x0000 [ 138.662042][ T45] r8152-cfgselector 4-1: config 0 descriptor?? [ 138.670973][ T3856] rust_binder: Error while translating object. [ 138.671023][ T3856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 138.677223][ T3856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:371 [ 138.715747][ T3863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.734244][ T3863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.744219][ T3863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.753895][ T3863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.888700][ T45] r8152-cfgselector 4-1: Needed 2 retries to read version [ 138.896074][ T45] r8152-cfgselector 4-1: Unknown version 0x24f0 [ 138.902584][ T45] r8152-cfgselector 4-1: bad CDC descriptors [ 138.949281][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 139.079264][ T9] usb 6-1: device descriptor read/64, error -71 [ 139.092264][ T45] r8152-cfgselector 4-1: USB disconnect, device number 37 [ 139.319287][ T9] usb 6-1: device descriptor read/64, error -71 [ 139.491516][ T3879] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 139.499550][ T3879] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 139.508077][ T3879] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 139.516089][ T3879] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 139.541958][ T3881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.542064][ T3881] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 139.559255][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 139.640860][ T3883] kvm: kvm [3882]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 139.649983][ T3883] kvm: kvm [3882]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 139.674756][ T3883] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 139.700079][ T3897] rust_binder: Error while translating object. [ 139.700128][ T3897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 139.706349][ T3897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:824 [ 139.719298][ T9] usb 6-1: device descriptor read/64, error -71 [ 139.748436][ T3901] netlink: 'syz.3.1219': attribute type 3 has an invalid length. [ 139.770089][ T3903] FAULT_INJECTION: forcing a failure. [ 139.770089][ T3903] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.783332][ T3903] CPU: 0 UID: 0 PID: 3903 Comm: syz.6.1220 Not tainted syzkaller #0 5da94d7ae1382d011f9cc741e3f1db1eb2c4dbed [ 139.783364][ T3903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.783376][ T3903] Call Trace: [ 139.783383][ T3903] [ 139.783390][ T3903] __dump_stack+0x21/0x30 [ 139.783422][ T3903] dump_stack_lvl+0x10c/0x190 [ 139.783448][ T3903] ? __cfi_dump_stack_lvl+0x10/0x10 [ 139.783475][ T3903] ? kstrtoull+0x13b/0x1e0 [ 139.783504][ T3903] dump_stack+0x19/0x20 [ 139.783529][ T3903] should_fail_ex+0x3d9/0x530 [ 139.783549][ T3903] should_fail+0xf/0x20 [ 139.783566][ T3903] should_fail_usercopy+0x1e/0x30 [ 139.783587][ T3903] _copy_from_user+0x22/0xb0 [ 139.783610][ T3903] ___sys_sendmsg+0x159/0x2a0 [ 139.783638][ T3903] ? __sys_sendmsg+0x280/0x280 [ 139.783665][ T3903] ? proc_fail_nth_write+0x17e/0x210 [ 139.783690][ T3903] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 139.783722][ T3903] __x64_sys_sendmsg+0x1eb/0x2c0 [ 139.783748][ T3903] ? fput+0x1a5/0x240 [ 139.783772][ T3903] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 139.783800][ T3903] ? ksys_write+0x1ef/0x250 [ 139.783823][ T3903] ? __kasan_check_read+0x15/0x20 [ 139.783862][ T3903] x64_sys_call+0x2a4c/0x2ee0 [ 139.783891][ T3903] do_syscall_64+0x58/0xf0 [ 139.783915][ T3903] ? clear_bhb_loop+0x50/0xa0 [ 139.783935][ T3903] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 139.783965][ T3903] RIP: 0033:0x7f06ca58eec9 [ 139.783981][ T3903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.783998][ T3903] RSP: 002b:00007f06cb4b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.784019][ T3903] RAX: ffffffffffffffda RBX: 00007f06ca7e5fa0 RCX: 00007f06ca58eec9 [ 139.784035][ T3903] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 139.784048][ T3903] RBP: 00007f06cb4b2090 R08: 0000000000000000 R09: 0000000000000000 [ 139.784061][ T3903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.784072][ T3903] R13: 00007f06ca7e6038 R14: 00007f06ca7e5fa0 R15: 00007ffcc91f2ea8 [ 139.784091][ T3903] [ 139.792850][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 139.792870][ T36] audit: type=1400 audit(1759868426.876:616): avc: denied { shutdown } for pid=3906 comm="syz.3.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.821422][ T3907] netlink: 'syz.3.1222': attribute type 3 has an invalid length. [ 139.989279][ T9] usb 6-1: device descriptor read/64, error -71 [ 139.996172][ T36] audit: type=1400 audit(1759868426.966:617): avc: denied { getopt } for pid=3911 comm="syz.6.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.109648][ T9] usb usb6-port1: attempt power cycle [ 140.112894][ T3921] rust_binder: Error while translating object. [ 140.115163][ T3921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 140.115168][ T36] audit: type=1400 audit(1759868427.196:618): avc: denied { write } for pid=3920 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.150197][ T3921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:837 [ 140.174759][ T36] audit: type=1400 audit(1759868427.256:619): avc: denied { accept } for pid=3924 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 140.203404][ T36] audit: type=1400 audit(1759868427.266:620): avc: denied { accept } for pid=3924 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.421047][ T3939] FAULT_INJECTION: forcing a failure. [ 140.421047][ T3939] name failslab, interval 1, probability 0, space 0, times 0 [ 140.434430][ T3939] CPU: 1 UID: 0 PID: 3939 Comm: syz.6.1233 Not tainted syzkaller #0 5da94d7ae1382d011f9cc741e3f1db1eb2c4dbed [ 140.434468][ T3939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.434482][ T3939] Call Trace: [ 140.434489][ T3939] [ 140.434498][ T3939] __dump_stack+0x21/0x30 [ 140.434535][ T3939] dump_stack_lvl+0x10c/0x190 [ 140.434566][ T3939] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.434595][ T3939] ? release_sock+0x171/0x1f0 [ 140.434622][ T3939] dump_stack+0x19/0x20 [ 140.434651][ T3939] should_fail_ex+0x3d9/0x530 [ 140.434672][ T3939] should_failslab+0xac/0x100 [ 140.434696][ T3939] kmem_cache_alloc_node_noprof+0x45/0x440 [ 140.434719][ T3939] ? netlink_data_ready+0x20/0x20 [ 140.434746][ T3939] ? __alloc_skb+0x10c/0x370 [ 140.434774][ T3939] __alloc_skb+0x10c/0x370 [ 140.434799][ T3939] netlink_alloc_large_skb+0xf7/0x1b0 [ 140.434826][ T3939] netlink_sendmsg+0x586/0xaf0 [ 140.434863][ T3939] ? __cfi_netlink_sendmsg+0x10/0x10 [ 140.434895][ T3939] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 140.434923][ T3939] ? security_socket_sendmsg+0x33/0xd0 [ 140.434945][ T3939] ? __cfi_netlink_sendmsg+0x10/0x10 [ 140.434975][ T3939] ____sys_sendmsg+0xa15/0xa70 [ 140.435008][ T3939] ? __sys_sendmsg_sock+0x50/0x50 [ 140.435058][ T3939] ? import_iovec+0x81/0xb0 [ 140.435087][ T3939] ___sys_sendmsg+0x220/0x2a0 [ 140.435117][ T3939] ? __sys_sendmsg+0x280/0x280 [ 140.435147][ T3939] ? proc_fail_nth_write+0x17e/0x210 [ 140.435176][ T3939] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 140.435212][ T3939] __x64_sys_sendmsg+0x1eb/0x2c0 [ 140.435242][ T3939] ? fput+0x1a5/0x240 [ 140.435268][ T3939] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 140.435298][ T3939] ? ksys_write+0x1ef/0x250 [ 140.435320][ T3939] ? __kasan_check_read+0x15/0x20 [ 140.435354][ T3939] x64_sys_call+0x2a4c/0x2ee0 [ 140.435386][ T3939] do_syscall_64+0x58/0xf0 [ 140.435412][ T3939] ? clear_bhb_loop+0x50/0xa0 [ 140.435435][ T3939] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.435470][ T3939] RIP: 0033:0x7f06ca58eec9 [ 140.435489][ T3939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.435507][ T3939] RSP: 002b:00007f06cb4b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.435532][ T3939] RAX: ffffffffffffffda RBX: 00007f06ca7e5fa0 RCX: 00007f06ca58eec9 [ 140.435549][ T3939] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 140.435564][ T3939] RBP: 00007f06cb4b2090 R08: 0000000000000000 R09: 0000000000000000 [ 140.435578][ T3939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.435593][ T3939] R13: 00007f06ca7e6038 R14: 00007f06ca7e5fa0 R15: 00007ffcc91f2ea8 [ 140.435613][ T3939] [ 140.439441][ T1022] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 140.660629][ T3946] 9pnet_fd: Insufficient options for proto=fd [ 140.664168][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 140.730546][ T3950] rust_binder: Error while translating object. [ 140.730593][ T3950] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 140.736919][ T3950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 140.740340][ T9] usb 6-1: device descriptor read/8, error -71 [ 140.771806][ T36] audit: type=1326 audit(1759868427.856:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.4.1239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd58578eec9 code=0x0 [ 140.869289][ T1022] usb 4-1: Using ep0 maxpacket: 32 [ 140.876706][ T1022] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.889287][ T36] audit: type=1400 audit(1759868427.956:622): avc: denied { mounton } for pid=3963 comm="syz.4.1243" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 140.890019][ T1022] usb 4-1: config 0 has no interfaces? [ 140.924114][ T9] usb 6-1: device descriptor read/8, error -71 [ 140.931409][ T36] audit: type=1400 audit(1759868428.016:623): avc: denied { mounton } for pid=3970 comm="syz.6.1245" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.939770][ T1022] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.964148][ T1022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.977903][ T1022] usb 4-1: Product: syz [ 140.990495][ T3969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57360 sclass=netlink_tcpdiag_socket pid=3969 comm=syz.4.1244 [ 140.997534][ T3976] cgroup: Unknown parameter '@' [ 141.003440][ T1022] usb 4-1: Manufacturer: syz [ 141.003463][ T1022] usb 4-1: SerialNumber: syz [ 141.004331][ T1022] usb 4-1: config 0 descriptor?? [ 141.064568][ T3982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.064606][ T3982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 141.097792][ T3990] fuse: Bad value for 'fd' [ 141.136644][ T3996] overlayfs: failed to clone upperpath [ 141.165114][ T36] audit: type=1400 audit(1759868428.246:624): avc: denied { mount } for pid=3999 comm="syz.4.1258" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 141.169324][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 141.205220][ T36] audit: type=1400 audit(1759868428.286:625): avc: denied { create } for pid=4001 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.210321][ T9] usb 6-1: device descriptor read/8, error -71 [ 141.230269][ T4004] overlayfs: failed to clone upperpath [ 141.231254][ T4003] overlayfs: failed to clone upperpath [ 141.242547][ T4002] netlink: 'syz.4.1259': attribute type 16 has an invalid length. [ 141.250540][ T4002] netlink: 'syz.4.1259': attribute type 4 has an invalid length. [ 141.251826][ T3929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.258435][ T4002] __nla_validate_parse: 4 callbacks suppressed [ 141.258455][ T4002] netlink: 64094 bytes leftover after parsing attributes in process `syz.4.1259'. [ 141.269305][ T3929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.291148][ T1022] usb 4-1: USB disconnect, device number 38 [ 141.370317][ T9] usb 6-1: device descriptor read/8, error -71 [ 141.479377][ T9] usb usb6-port1: unable to enumerate USB device [ 141.729298][ T363] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 141.829508][ T4006] kvm: pic: non byte read [ 141.834735][ T4006] kvm: pic: single mode not supported [ 141.835266][ T4006] kvm: pic: level sensitive irq not supported [ 141.841138][ T4006] kvm: pic: level sensitive irq not supported [ 141.847434][ T4006] kvm: pic: single mode not supported [ 141.853555][ T4006] kvm: pic: level sensitive irq not supported [ 141.859482][ T4006] kvm: pic: single mode not supported [ 141.865825][ T4006] kvm: pic: level sensitive irq not supported [ 141.871397][ T4006] kvm: pic: level sensitive irq not supported [ 141.877875][ T4006] kvm: pic: single mode not supported [ 141.883983][ T4006] kvm: pic: level sensitive irq not supported [ 141.890194][ T4006] kvm: pic: level sensitive irq not supported [ 141.896701][ T363] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.897219][ T4006] kvm: pic: single mode not supported [ 141.902939][ T363] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.913680][ T4006] kvm: pic: single mode not supported [ 141.930679][ T363] usb 4-1: New USB device found, idVendor=05ba, idProduct=a4a1, bcdDevice= 0.40 [ 141.931619][ T4006] kvm: pic: single mode not supported [ 141.936735][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.945723][ T4006] kvm: pic: level sensitive irq not supported [ 141.951524][ T363] usb 4-1: Product: syz [ 141.959728][ T4006] kvm: pic: single mode not supported [ 141.965491][ T363] usb 4-1: Manufacturer: syz [ 141.969398][ T4006] kvm: pic: level sensitive irq not supported [ 141.975050][ T363] usb 4-1: SerialNumber: syz [ 141.979830][ T4006] kvm: pic: single mode not supported [ 141.990165][ T4006] kvm: pic: level sensitive irq not supported [ 141.996046][ T4006] kvm: pic: single mode not supported [ 142.162897][ T4014] fuse: Bad value for 'fd' [ 142.202118][ T363] cdc_ncm 4-1:1.0: bind() failure [ 142.208094][ T363] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 142.215019][ T363] cdc_ncm 4-1:1.1: bind() failure [ 142.223437][ T363] usb 4-1: USB disconnect, device number 39 [ 142.722853][ T4026] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1268'. [ 142.750260][ T4034] binder: Bad value for 'max' [ 142.767000][ T4031] binder: Bad value for 'stats' [ 142.773065][ T4037] fuse: Bad value for 'fd' [ 142.788518][ T4042] netlink: 944 bytes leftover after parsing attributes in process `syz.4.1274'. [ 142.816783][ T4047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.825513][ T4047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.955570][ T4062] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 143.059262][ T9] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 143.209264][ T9] usb 6-1: device descriptor read/64, error -71 [ 143.449283][ T9] usb 6-1: device descriptor read/64, error -71 [ 143.689323][ T9] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 143.819257][ T9] usb 6-1: device descriptor read/64, error -71 [ 144.059269][ T9] usb 6-1: device descriptor read/64, error -71 [ 144.169454][ T9] usb usb6-port1: attempt power cycle [ 144.509266][ T9] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 144.530351][ T9] usb 6-1: device descriptor read/8, error -71 [ 144.660334][ T9] usb 6-1: device descriptor read/8, error -71 [ 144.844883][ T4116] fuse: Bad value for 'user_id' [ 144.849807][ T4116] fuse: Bad value for 'user_id' [ 144.867660][ T4120] netlink: 'syz.4.1301': attribute type 3 has an invalid length. [ 144.875485][ T4120] netlink: 944 bytes leftover after parsing attributes in process `syz.4.1301'. [ 144.896034][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 144.896052][ T36] audit: type=1400 audit(1759868431.976:631): avc: denied { write } for pid=4121 comm="syz.4.1302" path="socket:[26070]" dev="sockfs" ino=26070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.925514][ T9] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 144.951478][ T9] usb 6-1: device descriptor read/8, error -71 [ 144.981095][ T36] audit: type=1400 audit(1759868432.066:632): avc: denied { getopt } for pid=4129 comm="syz.4.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.051107][ T4137] >: renamed from veth0_vlan (while UP) [ 145.090520][ T9] usb 6-1: device descriptor read/8, error -71 [ 145.209369][ T9] usb usb6-port1: unable to enumerate USB device [ 145.675581][ T4153] bridge0: port 3(dummy0) entered blocking state [ 145.682042][ T4153] bridge0: port 3(dummy0) entered disabled state [ 145.688462][ T4153] dummy0: entered allmulticast mode [ 145.694137][ T4153] dummy0: entered promiscuous mode [ 145.699501][ T4153] bridge0: port 3(dummy0) entered blocking state [ 145.705852][ T4153] bridge0: port 3(dummy0) entered forwarding state [ 145.713743][ T4153] netlink: 'syz.4.1316': attribute type 4 has an invalid length. [ 145.723585][ T4153] netlink: 'syz.4.1316': attribute type 4 has an invalid length. [ 145.912053][ T4158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.912601][ T4158] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 146.015032][ T4167] incfs: Can't find or create .index dir in ./cgroup [ 146.021915][ T4167] incfs: mount failed -22 [ 146.146949][ T36] audit: type=1400 audit(1759868433.226:633): avc: denied { name_bind } for pid=4169 comm="syz.3.1322" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 146.243921][ T4178] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1325'. [ 146.263829][ T4183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:415 [ 146.767838][ T4189] devpts: called with bogus options [ 146.782410][ T36] audit: type=1400 audit(1759868433.866:634): avc: denied { write } for pid=4190 comm="syz.5.1329" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.808099][ T36] audit: type=1400 audit(1759868433.866:635): avc: denied { remove_name } for pid=4190 comm="syz.5.1329" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.835293][ T36] audit: type=1400 audit(1759868433.866:636): avc: denied { unlink } for pid=4190 comm="syz.5.1329" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 146.988408][ T36] audit: type=1400 audit(1759868434.066:637): avc: denied { bind } for pid=4198 comm="syz.5.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.058413][ T36] audit: type=1400 audit(1759868434.136:638): avc: denied { getopt } for pid=4215 comm="syz.5.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.112125][ T4226] netlink: 'syz.5.1340': attribute type 4 has an invalid length. [ 147.124659][ T36] audit: type=1400 audit(1759868434.206:639): avc: denied { write } for pid=4222 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.155170][ T4226] netlink: 'syz.5.1340': attribute type 4 has an invalid length. [ 147.174346][ T4226] rust_binder: 425: no such ref 0 [ 147.197399][ T4226] rust_binder: 425: no such ref 2 [ 147.202797][ T4226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:425 [ 147.230309][ T4244] netlink: 'syz.4.1345': attribute type 12 has an invalid length. [ 147.291887][ T4244] netlink: 'syz.4.1345': attribute type 12 has an invalid length. [ 155.089459][ T36] audit: type=1400 audit(1759868442.176:640): avc: denied { setattr } for pid=4265 comm="syz.5.1349" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.122091][ T36] audit: type=1400 audit(1759868442.176:641): avc: denied { create } for pid=4272 comm="syz.4.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 155.160962][ T4283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 155.205270][ T4293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4293 comm=syz.6.1359 [ 155.220839][ T4293] netlink: 'syz.6.1359': attribute type 27 has an invalid length. [ 155.244194][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.251771][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.269752][ T4300] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 155.278273][ T4300] rust_binder: Write failure EINVAL in pid:901 [ 155.278679][ T4300] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 155.297224][ T4300] rust_binder: Write failure EINVAL in pid:901 [ 155.367688][ T4293] rust_binder: Error in use_page_slow: ESRCH [ 155.369291][ T45] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 155.374502][ T4293] rust_binder: use_range failure ESRCH [ 155.389757][ T4293] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 155.395356][ T4293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 155.412434][ T4293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180 [ 155.779259][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 155.794650][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.804813][ T45] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.813865][ T45] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 155.822999][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.831685][ T45] usb 6-1: config 0 descriptor?? [ 156.178559][ T36] audit: type=1400 audit(1759868443.256:642): avc: denied { ioctl } for pid=4328 comm="syz.6.1371" path="socket:[27315]" dev="sockfs" ino=27315 ioctlcmd=0xaee1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.595797][ T4356] netlink: 'syz.3.1380': attribute type 4 has an invalid length. [ 156.603744][ T4356] netlink: 'syz.3.1380': attribute type 2 has an invalid length. [ 156.762410][ T4372] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 156.770307][ T4372] rust_binder: Write failure EINVAL in pid:928 [ 156.913545][ T4380] rust_binder: Write failure EFAULT in pid:936 [ 156.981197][ T4385] Invalid ELF header type: 2 != 1 [ 156.981203][ T36] audit: type=1400 audit(1759868444.066:643): avc: denied { module_load } for pid=4384 comm="syz.3.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 157.259289][ T363] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 157.389314][ T363] usb 4-1: device descriptor read/64, error -71 [ 157.629263][ T363] usb 4-1: device descriptor read/64, error -71 [ 157.869289][ T363] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 157.999262][ T363] usb 4-1: device descriptor read/64, error -71 [ 158.145734][ T373] usb 6-1: USB disconnect, device number 45 [ 158.239319][ T363] usb 4-1: device descriptor read/64, error -71 [ 158.349424][ T363] usb usb4-port1: attempt power cycle [ 158.689273][ T363] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 158.710509][ T363] usb 4-1: device descriptor read/8, error -71 [ 158.840380][ T363] usb 4-1: device descriptor read/8, error -71 [ 159.079308][ T363] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 159.100327][ T363] usb 4-1: device descriptor read/8, error -71 [ 159.192761][ T36] audit: type=1326 audit(1759868446.276:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="syz.6.1394" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06ca58eec9 code=0x0 [ 159.230543][ T363] usb 4-1: device descriptor read/8, error -71 [ 159.339378][ T366] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 159.347071][ T363] usb usb4-port1: unable to enumerate USB device [ 159.499256][ T366] usb 6-1: Using ep0 maxpacket: 8 [ 159.505425][ T366] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 159.514680][ T366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.523554][ T366] usb 6-1: config 0 descriptor?? [ 159.931576][ T366] magicmouse 0003:05AC:0324.000D: item fetching failed at offset 3/5 [ 159.940230][ T366] magicmouse 0003:05AC:0324.000D: magicmouse hid parse failed [ 159.947770][ T366] magicmouse 0003:05AC:0324.000D: probe with driver magicmouse failed with error -22 [ 160.005046][ T36] audit: type=1400 audit(1759868447.086:645): avc: denied { connect } for pid=4401 comm="syz.3.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 160.009927][ T4402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:946 [ 160.026577][ T36] audit: type=1400 audit(1759868447.096:646): avc: denied { setattr } for pid=4401 comm="syz.3.1396" name="IEEE-802.15.4-MAC" dev="sockfs" ino=28212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 160.132613][ T4393] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 160.133094][ T366] usb 6-1: USB disconnect, device number 46 [ 160.181712][ T4416] rust_binder: 4415 RLIMIT_NICE not set [ 160.889510][ T373] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 160.923790][ T4420] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 161.059279][ T373] usb 6-1: Using ep0 maxpacket: 32 [ 161.074313][ T373] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.084687][ T373] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.094108][ T373] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 161.103250][ T373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.111911][ T373] usb 6-1: config 0 descriptor?? [ 161.329283][ T366] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 161.479256][ T366] usb 4-1: Using ep0 maxpacket: 8 [ 161.485416][ T366] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 161.493733][ T366] usb 4-1: config 0 has no interface number 0 [ 161.501316][ T366] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 161.510411][ T366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.518405][ T366] usb 4-1: Product: syz [ 161.522688][ T366] usb 4-1: Manufacturer: syz [ 161.527299][ T366] usb 4-1: SerialNumber: syz [ 161.532845][ T366] usb 4-1: config 0 descriptor?? [ 161.742279][ T366] usb 4-1: USB disconnect, device number 44 [ 162.489292][ T366] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 162.640367][ T366] usb 4-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 162.650697][ T366] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.664709][ T366] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.673816][ T366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.681865][ T366] usb 4-1: SerialNumber: syz [ 162.688330][ T366] cdc_ether 4-1:1.0: skipping garbage [ 162.693790][ T366] usb 4-1: bad CDC descriptors [ 162.894221][ T373] usb 4-1: USB disconnect, device number 45 [ 162.906559][ T4436] rust_binder: Error while translating object. [ 162.906602][ T4436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 162.912842][ T4436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:968 [ 162.934769][ T4438] rust_binder: Write failure EFAULT in pid:970 [ 163.087769][ T36] audit: type=1326 audit(1759868450.166:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.3.1411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe70d18eec9 code=0x0 [ 163.657989][ T366] usb 6-1: USB disconnect, device number 47 [ 163.717135][ T4456] netlink: 8540 bytes leftover after parsing attributes in process `syz.5.1413'. [ 163.726347][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1413'. [ 163.735254][ T4456] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1413'. [ 163.932609][ T4461] ------------[ cut here ]------------ [ 163.938142][ T4461] WARNING: CPU: 0 PID: 4461 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 163.939268][ T36] audit: type=1400 audit(1759868451.016:648): avc: denied { load_policy } for pid=4459 comm="syz.5.1415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 163.947628][ T4461] Modules linked in: [ 163.971623][ T4461] CPU: 0 UID: 0 PID: 4461 Comm: syz.5.1415 Not tainted syzkaller #0 5da94d7ae1382d011f9cc741e3f1db1eb2c4dbed [ 163.983248][ T4461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 163.993412][ T4461] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 163.999505][ T4461] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e2 1f ee 05 00 0f 85 be 00 00 00 c6 05 d5 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 164.019215][ T4461] RSP: 0018:ffffc9000114f540 EFLAGS: 00010246 [ 164.025318][ T4461] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 164.033363][ T4461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000114f5f8 [ 164.041381][ T4461] RBP: ffffc9000114f680 R08: ffffc9000114f5f7 R09: 0000000000000000 [ 164.049512][ T4461] R10: ffffc9000114f5e0 R11: fffff52000229ebf R12: ffffc9000114f580 [ 164.057558][ T4461] R13: dffffc0000000000 R14: 1ffff92000229eac R15: 0000000000000000 [ 164.065587][ T4461] FS: 00007f4a5de926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 164.074762][ T4461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.081402][ T4461] CR2: 000000110c27fe42 CR3: 0000000108738000 CR4: 00000000003526b0 [ 164.089471][ T4461] Call Trace: [ 164.092794][ T4461] [ 164.095760][ T4461] ? vfs_write+0x3c0/0xf30 [ 164.100256][ T4461] ? ksys_write+0x141/0x250 [ 164.104812][ T4461] ? x64_sys_call+0x271c/0x2ee0 [ 164.109745][ T4461] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 164.112486][ T36] audit: type=1400 audit(1759868451.196:649): avc: denied { create } for pid=4459 comm="syz.5.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 164.115507][ T4461] ? hashtab_init+0xdb/0x1f0 [ 164.140637][ T4461] ___kmalloc_large_node+0x81/0x220 [ 164.145879][ T4461] ? hashtab_init+0xdb/0x1f0 [ 164.150546][ T4461] __kmalloc_large_node_noprof+0x1e/0xe0 [ 164.156220][ T4461] ? hashtab_init+0xdb/0x1f0 [ 164.160882][ T4461] __kmalloc_noprof+0x336/0x530 [ 164.165779][ T4461] ? kasan_save_alloc_info+0x40/0x50 [ 164.171166][ T4461] hashtab_init+0xdb/0x1f0 [ 164.175610][ T4461] ? class_read+0x162/0x8a0 [ 164.180184][ T4461] symtab_init+0x44/0x70 [ 164.184452][ T4461] class_read+0x1df/0x8a0 [ 164.188818][ T4461] ? hashtab_init+0xdb/0x1f0 [ 164.193466][ T4461] ? __cfi_class_read+0x10/0x10 [ 164.198352][ T4461] ? hashtab_init+0x105/0x1f0 [ 164.203105][ T4461] policydb_read+0xaa8/0x28c0 [ 164.207824][ T4461] ? __kasan_kmalloc+0x96/0xb0 [ 164.212699][ T4461] ? __cfi_policydb_read+0x10/0x10 [ 164.217865][ T4461] ? security_load_policy+0x128/0x12f0 [ 164.223396][ T4461] security_load_policy+0x162/0x12f0 [ 164.223463][ T4462] __vm_enough_memory: pid: 4462, comm: syz.5.1415, bytes: 18014402804453376 not enough memory for the allocation [ 164.228709][ T4461] ? _raw_spin_unlock+0x45/0x60 [ 164.245524][ T4461] ? __check_object_size+0x50a/0x810 [ 164.250874][ T4461] ? __cfi_security_load_policy+0x10/0x10 [ 164.256633][ T4461] ? __kasan_check_write+0x18/0x20 [ 164.261919][ T4461] sel_write_load+0x298/0x5e0 [ 164.266637][ T4461] ? __cfi_sel_write_load+0x10/0x10 [ 164.271914][ T4461] ? bpf_lsm_file_permission+0xd/0x20 [ 164.277327][ T4461] ? __cfi_sel_write_load+0x10/0x10 [ 164.282611][ T4461] vfs_write+0x3c0/0xf30 [ 164.286883][ T4461] ? __cfi_vfs_write+0x10/0x10 [ 164.291709][ T4461] ? __kasan_check_write+0x18/0x20 [ 164.296875][ T4461] ? mutex_lock+0x92/0x1c0 [ 164.301367][ T4461] ? __cfi_mutex_lock+0x10/0x10 [ 164.306264][ T4461] ? __fget_files+0x2c5/0x340 [ 164.311020][ T4461] ksys_write+0x141/0x250 [ 164.315394][ T4461] ? xfd_validate_state+0x68/0x150 [ 164.320563][ T4461] ? __cfi_ksys_write+0x10/0x10 [ 164.325439][ T4461] ? __kasan_check_write+0x18/0x20 [ 164.330624][ T4461] ? fpregs_restore_userregs+0x11d/0x260 [ 164.336297][ T4461] __x64_sys_write+0x7f/0x90 [ 164.340928][ T4461] x64_sys_call+0x271c/0x2ee0 [ 164.345655][ T4461] do_syscall_64+0x58/0xf0 [ 164.350131][ T4461] ? clear_bhb_loop+0x50/0xa0 [ 164.354837][ T4461] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.360805][ T4461] RIP: 0033:0x7f4a5cf8eec9 [ 164.365255][ T4461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.384998][ T4461] RSP: 002b:00007f4a5de92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.393468][ T4461] RAX: ffffffffffffffda RBX: 00007f4a5d1e6090 RCX: 00007f4a5cf8eec9 [ 164.401513][ T4461] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000006 [ 164.409721][ T4461] RBP: 00007f4a5d011f91 R08: 0000000000000000 R09: 0000000000000000 [ 164.417726][ T4461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.425748][ T4461] R13: 00007f4a5d1e6128 R14: 00007f4a5d1e6090 R15: 00007ffe5442a648 [ 164.433796][ T4461] [ 164.436847][ T4461] ---[ end trace 0000000000000000 ]--- [ 164.442673][ T4461] SELinux: failed to load policy