last executing test programs: 41.947989856s ago: executing program 0 (id=1): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup(0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000080)='./file0\x00', 0x2a) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES64=r4], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0xca, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0xb, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xd000, 0x3, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) 40.478799204s ago: executing program 0 (id=17): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000440)={0x1, 0x2, 0x7fffffffffffffff, 0x1000}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r1, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xfdef) sendto$inet6(r1, &(0x7f0000000280)="46a3864e29bf22939044d846d352770b", 0x10, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) getitimer(0x2, &(0x7f0000000000)) r7 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f0000000dc0)={0x5}) write(r8, &(0x7f0000000040)="3fe9d4792e2be9690ceb1ba62ad0c765a155cb0e91a3194e389546a2692350c5788f242daf989d77f1a8b8820195302a45676bfab8874e2f5f5f72d4ca1c0f738564367d6095a08884ed07719a4a7590148de8b82bb245f2b7b62ced3bf6477fcc", 0x61) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 40.420489189s ago: executing program 0 (id=18): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) ioprio_set$pid(0x1, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r0, &(0x7f0000000400)="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", 0x1f000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f00000000c0)={'\x00', 0x34, 0x2, 0x1}) syz_open_dev$mouse(&(0x7f0000000040), 0x7ff, 0x400000) 40.347390135s ago: executing program 0 (id=21): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x8800) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 40.268461121s ago: executing program 32 (id=21): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x8800) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 5.154971925s ago: executing program 1 (id=282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') close_range(r0, 0xffffffffffffffff, 0x0) 5.143803686s ago: executing program 1 (id=283): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003020100000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00ff0700000004031f05"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x83, 0x2, '~\''}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20840200003087ac"], 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="e300000009000000"], 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x890d, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000505000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000052d000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r3, &(0x7f0000002400)="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", 0x1000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="208102000000b822da28171d6bcfb87ea756c2d6ea046539b0560f9e7593444d9ed33b3458719ef6ee4ad26c75a3aea5dc275925c21c0d29e0d4fb4483cae2722f8b599b56c0df59d8e17899b25c7cb4d7b1f87be8d1da1da7b3a57f4b07721b50decb230fd22f0333a8e19d60ecec56047ca73dd44ce9a4340a000000000000008027dbec9891b72caaa1062b2e76690833"], 0x0, 0x0, 0x0, 0x0}) 4.84661168s ago: executing program 2 (id=287): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x557c4000) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0x1) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/dev/uinput\x00') ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000013c0)={{0x1, 0x100, 0x3, 0x9, 0x6, 0x8001}, 0x1b4, [0x6335e86a, 0x5, 0x2, 0xfffff800, 0x8, 0x8d8, 0x5, 0x8df, 0x94dc, 0x3, 0x8, 0x0, 0x12, 0x7, 0x959b, 0x8, 0x2, 0x7, 0x10, 0x8, 0x2, 0x9, 0xff, 0x2, 0x8, 0x0, 0x496c, 0x0, 0x7, 0x3, 0xc, 0x6, 0x8001, 0x9, 0x2, 0xffffffcd, 0x5, 0xfff, 0x6, 0x11c2, 0x2, 0x5b, 0x7, 0x8, 0x5, 0xfffffe3c, 0x3, 0x7fff, 0x22da, 0x9, 0x3, 0x85ae, 0x1, 0x8, 0x4, 0x1, 0x5, 0x88, 0x2, 0x0, 0x0, 0x7, 0xffffff7f, 0x2, 0x4, 0xdba, 0x5, 0x8000, 0x4000000, 0x5, 0x4, 0x7, 0x0, 0x113, 0x2, 0x5, 0x8, 0x2, 0x0, 0x4, 0x400, 0x5, 0xc09, 0x2c7, 0xfff, 0x519, 0x10000, 0x8, 0x10001, 0xed, 0x2, 0x8001, 0xf, 0x4, 0x4, 0x9, 0x0, 0x0, 0x76, 0x984095d, 0x4, 0x6, 0x8000, 0x10001, 0x0, 0x3, 0x101, 0x5, 0x3, 0xfffffffe, 0xc, 0x6, 0x5, 0x100, 0x6, 0x3, 0x0, 0x2, 0x1, 0x10000, 0x7, 0xee, 0xb5, 0x4, 0x2, 0x4, 0x3, 0x100, 0xfe31, 0x7, 0x7, 0x1000, 0x21, 0x0, 0x6, 0xfe10, 0x22d1, 0x5, 0x3ff, 0xfa, 0x20000, 0x1, 0x4, 0xb1, 0x6, 0x1, 0x0, 0x8001, 0x3, 0x2, 0xffff, 0x401, 0x6, 0x4, 0x8, 0xc, 0x8, 0x4, 0x0, 0xbfd, 0x6, 0x7, 0x2, 0x5, 0xd, 0x7, 0x641c, 0x4, 0x1ff, 0x9, 0x6, 0x3aca, 0x0, 0x6, 0x5, 0x1, 0x101, 0x8a3, 0x4f1, 0x3, 0xfffffffe, 0xfe00000, 0x4, 0x5, 0x4, 0x7f, 0x1e, 0x8, 0xffff, 0x6, 0x6, 0x35fc, 0x7, 0x5, 0x1ff, 0xf, 0x4eae097a, 0x6, 0xf, 0x40, 0x9, 0x1, 0x8, 0xce, 0xa, 0x0, 0x0, 0x4, 0x1, 0x4, 0x4, 0xc92, 0x9, 0xa0a2, 0x197, 0x8, 0x3, 0x5, 0xfffff001, 0xbe, 0x3, 0xfff, 0x3, 0x4, 0x3, 0x8001, 0x2, 0x7, 0x200, 0x52, 0x6, 0x0, 0x8000, 0x4, 0x1ff, 0x2, 0x1, 0x8, 0xf809, 0x6, 0xe6, 0x3, 0x9, 0x6, 0x3, 0x6, 0x8d3, 0x401, 0xfff, 0x7, 0x3, 0xffffff5e, 0x81, 0x8, 0x1, 0x2, 0x3, 0xfffffe00, 0x1, 0x7, 0x4, 0x3, 0x4d0, 0x6, 0x9, 0x4, 0xebf0, 0x17c, 0x2, 0xde, 0x9, 0x1, 0xffffffff, 0x1, 0x7, 0xa, 0x8001, 0x7ff, 0x3ff, 0xc, 0x1, 0x4, 0x1, 0x4, 0x81, 0x80000000, 0x7fffffff, 0x6, 0x124, 0x2, 0x5, 0x42, 0x0, 0x8, 0x80, 0x7, 0x925, 0x5, 0xe000000, 0x0, 0x8000, 0xfffffe00, 0x0, 0x4, 0x3, 0xffff, 0x0, 0x83aa, 0x9, 0x0, 0x30c, 0x10, 0x80, 0x0, 0x648, 0xfffffc01, 0x5, 0x200, 0x2, 0x8, 0x6, 0x7, 0x8b, 0x6, 0x9, 0x10000, 0x5, 0x5, 0xfffffffb, 0x9, 0x1, 0x4, 0x8, 0x84bc, 0x40, 0x8, 0x2, 0x43c23dbb, 0xffff8000, 0x4, 0xca4, 0x7, 0x3, 0xfffffff7, 0x3000, 0x11e, 0x40, 0x80000001, 0x6, 0xfffffe00, 0x3, 0x7, 0x7, 0x8, 0x7e3, 0x8, 0x4, 0x4, 0xfffff3f9, 0x3f, 0x271, 0x3, 0x1, 0xfffffffb, 0x81, 0xd8e, 0x4, 0x5, 0x3, 0xa4, 0x1000, 0xd, 0x8, 0x3, 0x7, 0xf53, 0x10, 0x16, 0x7, 0xdf, 0x80000001, 0x68de, 0x0, 0x1a, 0x3, 0x5, 0x0, 0x6, 0x5, 0x9, 0xf, 0x9, 0x1b1, 0x9, 0x3, 0x7, 0x10001, 0x4, 0x2, 0x9, 0x7ff, 0x8, 0x4, 0x5, 0x6, 0x257b, 0xd4b, 0x3ff, 0x5, 0xbb012c29, 0xd6, 0x1, 0x10001, 0xfffffffa, 0xc, 0x9, 0x9b8, 0xb7f, 0x2, 0x72, 0xfff, 0x3, 0x515b, 0xfff, 0x4, 0x6, 0x7, 0x8, 0x6, 0x3, 0x1, 0x2, 0x0, 0x5, 0x0, 0x7fffffff, 0x8e2b, 0x9, 0x10, 0x1, 0x132, 0x4, 0x0, 0x7ff, 0x2, 0x3, 0x5, 0x2, 0xfffffff9, 0x200, 0x81, 0x7, 0xfffffff7, 0x6, 0x3, 0x14000, 0x9, 0xee, 0x3, 0x70f6, 0x5dde5469, 0x7, 0x7, 0xc976, 0x58, 0x177, 0x5, 0x9, 0x6, 0xffffffff, 0x4, 0xb, 0x9, 0x5, 0x5b, 0x8, 0x7fff, 0x322, 0x1, 0xb6b, 0xffff40ef, 0x9, 0x73a0468c, 0x2, 0x1, 0x8, 0x10, 0x4, 0x2, 0x2, 0xfffffffb, 0x5da8, 0x3, 0x66, 0x6, 0x4, 0x9, 0x8, 0x9, 0xf0000000, 0x2, 0x4, 0x1, 0x40, 0x0, 0x5, 0x9, 0x3, 0x400, 0x1, 0x9, 0xffff5b2c, 0x7, 0x5d, 0x8, 0x951b, 0x0, 0x8, 0x0, 0x1, 0x1, 0x9, 0x2, 0x1, 0xb, 0x7, 0x4, 0x6, 0x0, 0x4, 0x2, 0x7, 0x8, 0x2, 0xf, 0xffffffff, 0x1, 0x101, 0x8, 0x7, 0x6753eddd, 0x2, 0x4e, 0x8724, 0x3, 0x7f, 0x7, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x6, 0x65ba, 0x10000, 0x5, 0x7f, 0x3, 0xfffff430, 0x0, 0x3, 0x8763, 0x741, 0x0, 0x9, 0x3, 0x80000000, 0x4, 0x2, 0x0, 0x0, 0x5, 0x5, 0x1ff, 0x9, 0x20, 0x101, 0xb, 0x9, 0x7ff, 0x5, 0x5d7b, 0x3f1, 0x1, 0xff, 0x800, 0x1ff, 0x1, 0x3, 0x9, 0x72d, 0x9, 0x8, 0x8, 0x5, 0x81, 0x5, 0x9, 0xe5d, 0x1, 0x2, 0x9, 0x7, 0xc8a, 0x2, 0x78, 0xf99d, 0x5, 0x0, 0xf0c, 0x4, 0x6, 0xffffffff, 0x0, 0x3, 0x5, 0x9, 0x7, 0x3, 0x0, 0x6, 0xfffffff9, 0x6, 0xfffffffb, 0x2, 0x4, 0x3, 0x9397, 0x0, 0x3, 0x92b, 0x4, 0x7, 0x401, 0x80000000, 0x6, 0x100, 0x1, 0x4, 0x0, 0x3, 0x2, 0xfffff3aa, 0x8, 0x7, 0xc, 0xffffffff, 0x0, 0x1c1d, 0x36, 0x3ff, 0x9, 0xd, 0x4, 0x72e7, 0x3, 0x8001, 0x3b, 0x400, 0x226d, 0xd21, 0x8, 0x3, 0x0, 0xdc9de28, 0xae58, 0x3, 0x6, 0x3, 0x8000, 0xfffffffe, 0x0, 0x3, 0x9, 0x1000, 0x9, 0x2, 0x3, 0xee17, 0x945, 0x5, 0x8, 0xfffffffa, 0x4, 0xf47, 0xf, 0x1, 0x4, 0x1, 0x4, 0xfff, 0x80000000, 0x1, 0x4, 0x0, 0x966, 0xf5666892, 0x401, 0x8, 0x1, 0x11c, 0x4, 0x6, 0x4, 0x8, 0x8, 0x2, 0x6, 0x3, 0x10001, 0x200, 0x49d8cb7e, 0x4, 0x1, 0x6dd, 0x100, 0x6, 0xf, 0xbf, 0x1, 0x1, 0x0, 0x6, 0x5, 0x2, 0x40000000, 0xc, 0x100, 0xc8a4, 0x1000, 0x5, 0x8, 0x260, 0x5, 0x6fe, 0x9, 0x7, 0x9, 0xff, 0x0, 0x7, 0x0, 0x4, 0x5, 0x7fff, 0x0, 0xef64, 0x3, 0x9, 0xffffff8b, 0x800, 0x194, 0x1, 0x4, 0x5, 0xe, 0x1, 0x8, 0x75dd, 0xfffffffd, 0xcf4, 0x9, 0xfffff4ad, 0xedb, 0x7, 0xd8fd, 0x5, 0x3, 0x1, 0x5, 0x0, 0x81, 0x9, 0x6, 0x7, 0x8, 0x7, 0xfffffff9, 0x0, 0x280, 0x80000001, 0x10001, 0x2, 0x3, 0x1f, 0x69, 0x4, 0x4, 0xc4, 0x0, 0x1000, 0x8b, 0x3ff, 0x10, 0x9, 0x51, 0x9, 0x10, 0x8, 0x62e, 0x3, 0x81, 0x8, 0x80000000, 0x7, 0x401, 0x7ff, 0xf4, 0x7, 0x8, 0xfffffffe, 0x20, 0xd925, 0xb21, 0x8, 0x4, 0x0, 0x4, 0x58000, 0x2, 0x100, 0x8, 0x2, 0x1ff, 0x7c, 0x6df1, 0x0, 0x6, 0x0, 0x3, 0xe13, 0xe411, 0x80, 0x6, 0x3, 0x8000, 0xfffff6d4, 0x0, 0x3, 0x9, 0x9, 0x6, 0x3, 0x8, 0x86, 0x10000, 0x3, 0xfff, 0x8000, 0xe5dc, 0x8, 0xf, 0x80000001, 0x7f, 0x9, 0xe, 0x9, 0x6, 0x9, 0x6, 0x3, 0xb, 0x0, 0x8, 0x101, 0x3, 0x1, 0xb4f4, 0xb, 0x20000000, 0x7, 0x100, 0x400, 0x4, 0xfffffffd, 0x401, 0x7, 0xfffffffc, 0xcbd, 0xb0ed, 0x7ff, 0x76, 0x0, 0x4, 0x1, 0x4, 0x23, 0x40, 0xb544, 0x5, 0x28fa, 0xffffffff, 0x3, 0x1994, 0x1, 0x3, 0x2, 0x5, 0x6, 0x7a4d, 0x9, 0x3, 0xe, 0x6, 0xfffffff7, 0x1, 0x2, 0x6, 0x1, 0x101, 0x1ff, 0xe979, 0x3, 0x100, 0x101, 0x5, 0xffffffb7, 0xc0b, 0xc2, 0x7, 0x3, 0x714b, 0x3833, 0x10001, 0x93, 0x2, 0xfffffff7, 0x6, 0x2, 0x9af9, 0x8000, 0x6, 0x2, 0x8, 0x6, 0xffff, 0x2, 0x3, 0x6, 0x8, 0x6, 0x0, 0x8, 0xb5, 0x2, 0x9, 0x100, 0x7, 0x6, 0xf, 0x80000000, 0x0, 0x4, 0x9, 0x9, 0x10, 0x9, 0x280000, 0x7f, 0x1, 0xfffffffa, 0x9, 0x2, 0x3, 0x8000, 0x0, 0x18000000, 0x200, 0x9, 0x9, 0x3, 0x5, 0x4, 0x5, 0x3, 0x40, 0x401, 0x343, 0x6, 0x68, 0xd, 0xc000000, 0x4, 0x81, 0x1, 0x6, 0x9, 0x6ce, 0x7, 0x9, 0x7f, 0x742, 0x3, 0x8, 0x2f, 0x1, 0x0, 0x4, 0x5, 0x5, 0xffffffff, 0xfffffffb, 0x6, 0x200, 0x0, 0x0, 0x3, 0x3b7b, 0x5, 0x100, 0x7ff, 0x9, 0xa, 0x1, 0x0, 0x400, 0x8, 0x2, 0xf, 0x4, 0x3, 0x8, 0x6]}) 2.826830853s ago: executing program 1 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=@v3={0x3000000, [{0x9, 0x7}, {0xc, 0x5}], r0}, 0x18, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010100ffd9f810f80600b0f97d0102030109021b0401000000020904000001ff615a000905880b"], 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040), &(0x7f0000000100)=@v2={0x2000000, [{0x81, 0x5}, {0x1, 0xc4}]}, 0x14, 0x1) 2.256752839s ago: executing program 4 (id=301): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x5de9b000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x40010, r0, 0xa8a50000) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x290676c2bf4b3d96) ioctl$FICLONE(r1, 0x40049409, r0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x80, &(0x7f0000000080)) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000180)=0x6) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='ubifs\x00', 0x884402, &(0x7f0000000280)='/dev/loop#\x00') process_vm_readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/67, 0x43}, {&(0x7f00000003c0)=""/252, 0xfc}], 0x3, &(0x7f0000000500), 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000540)={0x400, 0x6, 0x1}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0)={0x10040, 0x46, 0x4}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000600)="d2fdf207e8151a0355019a5ee30ac1e9c54ab3f79eacfcb3b1f0826b8c778db96f598f7818de7d55cb6c26282eede7d1fb313abc3f2b5dcc2e867cb6a36c5dedcfefeb7214f3a4915532e8efff48277c90956a860be8b155501a92eae12648e80d6f820aaf5fe342500477e1ff0b1a2365f5a1c03bc5", 0x76, 0x800, &(0x7f00000006c0)={0x11, 0xf5, r4, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x8040, 0x0) ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000000740)={'pimreg\x00', 0x600}) truncate(&(0x7f0000000780)='./file0/file0\x00', 0x401) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000001ac0)={&(0x7f00000007c0), 0xc, &(0x7f0000001a80)={&(0x7f0000000840)={0x1238, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x76}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x11cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4b, 0x4, "c445e08e40d8f3b58166533b97f36e3a08a759c175404cc7cfcfffcee9d5fde9d92af9c6503c74d2d1f6620d421864db933713edb1c8c7efebc376b31f11412f8a850093d90c36"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "2ceb9ee55e416f85abfd4fa22d219f19acf126b4810b02b98b5b7ca3194949fd147dc59a4d85fe1047f3baf61ae5d13c971689c88770505709d2cbe241bda90018ea0cc0a240d7a16fda7df5f6c1139651431190f51ecdb19ce228528a4eff3ed26050e52b89026ef3e2002ef9edceab385a80008131ee8621170a4fb5bc846192c38861c4b364bfb20f44a0bd8e4f07fe67585515dfe55c6ef3e090f6035a96d39f1da3e89a44c4621d7dd984cf2b1bd6869d1f983314e40d317df639f569db602d6feb569a127730d73cdcfdf6e8a61dfe56eb5df873536021730fb7dd6f51f3855ccd1c7afd3d323c7fedf55b57ae035329c21cc75c0c9f3e0246f6e5246bc8ab8540b08c67c494e2fb2d6744ea1e5bca9ece3dc383a8b5029bdfb401635995c20dae56eca846fc962a3f6c5e42cc3d8564a100fae5e7473dda7db1c09acbffae6ef222d582a1c7a2a9720b9b214b1f15cb39029550523877c5b784cc57c219f418d818672ae5b2d6ff8116e6893c67d952989fd742095835c4c6199f2a6d30e91615b47aa3d2684db90122aa7ba4540ef2d42f5f6695f9ab394f6564353b658ce4d0ff66898df8c5214709d50f48c469a6cb2c94c6b3ad00d12695fd9509352f39f92e8ece7532d770677da87f434ea7efcd4f7bef3eb10eab05e151fdb153766084e038fbdabb635f0710bf37f6901a182aa4b9b5edcc24ef53e7d5769f21c5202f50841ee91d378a28c0e6d33ee71070ca203ecc3fb849646180a3dbdd8c95d34628fe39c3f57cd16bdf82ea38567f9c38a71c3de4bacf6821a279a15b3118199bb5eeacaeae37299df364e0ac0c2e38f4f2b6ae8fd835cd033bebc84d36befb2a7b721afb50871af2d924e504b340a89ae31a21b5402f7919ca60e49db92d73a01d9de889fd132cdfabebdbc283b9b29e8604d2aca4342ffbbeccab948e61ce95140601d67077a1301179fa877f771ddaefcc1725702117ab960813e1a9144fd1552f02b996ad2eca1364a8ce63b62fba2a1d14f08d3c26262401091106d708b481b33ba14df5af68943159fc19abcb7564c69569ce9cf4560a6a550a96aebd00c4e97e180a4afd742312f14c25bfe5b96264692c1a9b2ec41d29c1346b56fbc76532b6fc17f52661586949f9dbe281303e9c519ae5688c89484ed4debeb34cb8b3a55970213abc5d7df928a4af5bdb356211fa4becb17d1f8318cfa957916fe8805a7b4272d362354825092318d48d39edfe1ad0fdec67cef43c7e7bc7c1eefe878c611d4c6b6ee5770d2c21231ece739b03852fc7d790dda046b6da70f2acd57309a6994e4da63b96e017caaa5a9bd12a6459394e352e25fc693b147c984f354119b1cafc70a22e9220457bbafcadeea997395bef5b7448693ed1d9b87acce335ceef7d3d463d48d09fa55d20f9ab3814e849344d874514ccc96dbe89fd7ccbdbed548e2ef0e4fd2b1ab31a733c7aea948b9c2b18dc709271b91b267c5fb9144731d99b048b02ab6c9c6d10db5b234a425570680bc2fa08b3561a9d6f3c67626939770dfd44709c487f4565f8d6def17268922694118da333f3994a69cf8a2bba81fa188377d93e065756b7b9c85c8f274d9a338cd635e3d8240296b9eb1ab53727c10f4dcf574651de75d5fa63f9951ac4711cecb48c105f18685d3a3cb9836147b23466f075844180f2c209a8e79f8b21987ece1c51e1265e2e4d88a58516434560aac06828084ae26eef542432335062cff2f975896d8e76beffa82e9ccb8c9121366e1b3a1f33450055926a1952e8077a93b16c41fc157b3434bfef8ec03f15bebaacefb8578dc751ec35a6d76b98f312c5af469c7a063ffc5d2fc20ed01a974532d947a783f61a877fddac19e4315b2166d82ab127ad76ae74e7e40fa4fe7ef7be5ebb2b8e390c5333483bb2cb29fea246aaf29a7a079e89dc14b5d6a2daf0809d709285b0b6243fbe094f88ec8f23ad15b3b13bf667c88cc20db58fc1c2de4ab128b3388e4c221dde793a1c595289c1a678d9589f9526bd3488471bac3b74359256a911090a87bd17b815711c945c939ee5e410f89c11294a53789168fa07640a51315199063082462216de73155d155d9628371c45c85d36b04223b9bfb1801b5d675b017aba98e11d77a138ce11c1e90dfef9da66e91f71483f408c5b8ea0c9e157a8d7dc2c46de8e5ac0b825994e0defdb14b4c0c8dccd8485dc198549be0e3652742e9b4bbbb759dcb1b86853f2358e4d8f11c2c8f340faa9904eb220d85ead157381c752d4ce6d931d238c48b34445a3d0f758a6cbdc31c4068db87d8cd1368eefc694bbb8fd188fa06b2e771c987ae024f769d24bbc1dc363cf1e69bfb2a1b65da893d5d9671e31ffd2163346567423bbebe467bf8d1ae09d8592c997bfebe876a11fdb8bb60a66388d15ce9ac9a3e44d44fca3d126e642412b9d8f741616be221650f3c8e312b007b9b5943af0e187142abd09c63b323dcb169ad66d622dee6f89fbba9d5899aad83e7e30cd6dcfe977ba1ae318d21dd6fa027f804527d982833a5b58ac281930dfcbaef40d6fe63238ce360a7acf84137003fe85430e7518e35e972fb831f2b6b82c7b543bb784bfc003a5594a64e5f5a73e4a8a896151c86dc356c21d86ab13fc78562db48acbee1188fdfb8693befb535c384b025f33fefa5ebfaa93018308309e81cb433b18d209f5069018e7c0275fba0374aaf6df21641b11f152286837a7942a3fd097dc52dd0a1f4249c04c2dd6fe500df1a4119fb2f5f8379a08c9ccacc684350f41b186637e3fa8b79f6ce109137e956c0b5b299503683c62db766e2fd04f4ba528c852b58adfdcb5d598a171c997004663a31915604ddbe73f764f961da05b7de63c858d05afb8ef259fb55714b2b3c32416e1f38241d7fad1e88ef38e5f131f2b0bea7b1f4b85a200a0ab98d9d312ff5fa038cc3fffb8519ce56286856113e3da37ad342827f5656873167078ddfc6f991fdfc13abe3e3a67db862e76500b7397604aa2d4ad753366c6eba05707f6f796e174c6edb543d915ed7eb478f68758f23a48b3bb279b7717865f21b6e83fda798e8d01a441c14771c372e0c80df6aa38436f3226e305324cd1f88659b5039e7dad50d4a55cf311b6546951634603523748e2970a9bc314cccdcf5a6543100746d0a04cf73af8a6d02f0c4d378b9a2ee6eb8021ffd6b4f8809ed93e4d3a0efd46df25fb485fb844d307987388fcde56ba875f05fac80c68012013d429e7371a69cfb327ace03b6ef98bd7436ce24d7d67086325ef2513fee11429b9901ed32a36e92e01cb131368b4b0a8644d6e0e03e0e6b4628948c5f483dab179215ccf7510c8a6362fe3c44dfe124c54eea8ab6a3f82979adb1ed610573ed589aef696324d1ae384fe2c599e4d96a5b74f4c1465ddc91a42fdf72f135e295e82b2fe3995ce0a1ea74aeadfcc6ace3f8b9d0a24f75e384e90a7fd8c262c676bb02a529757fb00b13288e9018bdd60cd71dc876a8d6a6cbed9d2a0e387cfb2a7c68aaf48638635434056b42ec597d4fd6edb30874c1f18d996538853e066f88ec650ac35900d07509b33f128dc61b8456e698d0ba6da98bd2f1a8ba8799001dd96c496ee83685a3954fd32621431cdcdd9595ef679cbef3331675598dbdbdb94ebc1014e58d8919e678e2c88ee745044fa08dcc3fcf2889fb8e0a8c8e900562272fc4eb571a7f9fc15af6430056ad271cf197cdab6b29656abe5e8d2e9ecb4696007a26cd080207619dcb318a8f9e53164e8c116c13e379502d083ce593ef92e7e8a614b730615955942b548ccf8c0b0e3e3c6e114cd7b3f46ce3f4f4740803eb7699a7abd163efa894ee537f401b395e10035c62eb746a385dffe1d6752c9002578d37e006fde33ab8e167af9744d6620bc11073b9dcfe8ff67f22c464bf6f6b3571b0b00daac1a7ed815cfc4a4d8d856d446566dd47c39777f382374ae593f9f246c2b89532a6d628c0e9c5fcdfa5341ddc7e925cb4af143f0c1462fe10128321d69653c4a6c3c2a6c5ffb690ae728cc765c2f344459b29d3d4225088d4e8e923417da0adb1883e81898ec9cf099caaa6fdaa46ff907fff6ddbccd31267da79ab65197438665bd038c2157cc75c4f8d643551fd3d9e446653eefb1f9bd229fc283bceb4cab6c386115e4eb8309e75e7ced98652b5aba781fa208a9cca6a93ad140b33cf1dc73b26e2a928c4e5a8dd42c601404ba40add8d6a725f68e32d73c44d8966813489bcaa2b2389c6bfdf78150718d395bc9892130a3be29d822d2cf191ef6a7d645bb7733e946bf96148b8193be7c126939293dc17c643bfc2c0f8802a96b9e526e86aec26080c401d57bca1c268efa95f612033f0370956b1175c1ddf0252a705b0f8a48f81f86dd03df700463a4b6855523038fb3bf3f626198ae7979abed3d3b95f5e58e661f86c0d2bdf71f40beb4a299479e73c1117d9ece308e415d5e0dc9325bfc2940d1fffff35700f8adcb6333b997245925fc32a709afb9d791aef864774cd592c7de2649011ca79f46b9ded54a251909deceecda2c595acaa20a0d2556d02884d20e149f1778544e1b6aee87331f9857fd7c7903c4eedccfcce585dbb6c6b489bfceef74643c2505ee57a64bde9e9b258192db652c760bb2bc013f715fe263e6ec8a2199d3b6b3df000a745284024572398dff165342ea2e393928a733b28ca7b3593dafc2f189386f9a5698120c8ec07ee716cbd6a143efa58e6a7329be92557d6909b878957eeff761c83f430ef13a2466d2d4f993c71f6ea5903170a2dca48384e43a3aef82c0d019c2b9750c741eb2dbcddf0072e1644bc912df10fbd4ac0f20df77f10f0d562a832957bb764cbe6f6fb3002726756a5eea15cf6fe40384548e0619d0d6261607c5f25117148a18b7cf6b74d89351bf795095f658323eb1f57bbe86a4d7c8356f120314244daee55104349247b22fa5e55ff0534536abb9aec9f13dfb9a3131ee9fbe6a211c05a43bb98b121327bfe1f13b03138340b47f11059cc2c3a863a417e85cfaea7e846b90b931cbd4a5f7671bf2e7e804f32dd8ff88e88deb80a2ff32f37ad6800a59b19e428c14ec06c91fa083e2f163b4bec75ceae50e4c2612d1280158f3955a61507e568cdc8891b47496cea684b676f837f9bb7a5d568d514332d7deba6f321e41e07fb1f3c33d99ed5e22884868376df4e3b3b049aa1c986f5fe1bf24e34ffe44417a325439cfff33819ade39e2036f6c444d7392712c891a20e33f39d3ff97c3c4b7f09fc7494fd20345018746fda3f0373e903e32d0b3917e2ef32e3ef6a600c3731a8db6331826937cdc36702176efb6510328e947aadc704892aaeb698fd0b5e171fbedb572c2dfe60435b6f7afcc8362038d2ebbc6059acf104d399c49924dfedfc81b1e7306ae250db3ca13035779a458494428f312d1097a1b079d4a2a54788bac7bc74f6fe5b7ce309c359419808db6f150110cb87747cec18fffda4059384f128457d8cfd36872b8d6f8414edba0f060933c70b57f0b202b87fce931c5f9d1cea041bb8b7d5a7f126cfbd9d29a1d2e73e44d750987b5bb9b55f7f8ebdcfa7e86eaee0b3dfec955e9e275a57cae4b33aaeab7bff79449da2147d43e94d217216d26394bf7bfb115b0dbafa41a47a8f22a8e4a0920ecc5ff7794ba1b55cc051e90b01334fe5b900d042a12a3b521a2eb0c9cc38943a9bdd497adbcdfe65e69512b4e5fb208c68618028eefeee45fbbfb41d113cb7988d2381b4a4110669beed7db"}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "c56980784e3f0e0c84849fe454e218b239310079f8545bae369ffb73cdd971c25dbf51b356f9f446b68646acf93d0ea3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x130, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\f\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(\'@)\xac\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@W){\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb5b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'ubifs\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x11}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',\xb1{-u\x82-\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#\xdf)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xc3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}]}]}]}, 0x1238}}, 0x20044000) syz_genetlink_get_family_id$fou(&(0x7f0000001b00), r6) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000001b40), 0x10) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000001b80)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001bc0)={0x4, r2, 'id1\x00'}) sendfile(r9, r5, 0x0, 0x9) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001c40)={0x0, 0x9, 0x3837, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000002040)={r10, 0x81, 0x2}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002480), r9) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000027c0)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002780)={&(0x7f00000024c0)={0x2c0, r11, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x104, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe21}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10c}]}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x90, 0x3, "d6d39b56751872ea8d9eab6780a192e5da7701658b91e8d938b686ce31f09cd51ec3ae62e426efac0da7c5756f6baf84f5157d55498dccf3562f3e64cf820905a4acd04d1e04db42aaa8a211b915a588de607cb8d5322cf68a4c81a68abe2f1ba074237b17ee14e1c4730c8b16045b03c5b91ed6e7b8bb3a8ec41c2e136ae3cb725ad80335446e672998f2cf"}, @TIPC_NLA_NODE_ID={0xd5, 0x3, "ea0eacb17afa56012e6cf64ac2fe6901e651bdfae53a7a68e3e2cbe9120d924593fc2f92df43fae62ff3efb609c48374da9f64421122b10495ac88ca89872e9b48260a7e0fc37e5db61fcfc6a949b082372f18e9fb00cd1e81972066023d5163328a42cc9e8947a6b8b1002fdda0b67ea254a0c32f292e0ab90e74f9ed07d5b300b7cfb77193240da69cc046c5db26580f1265d442b615d42fa76e07df226fb351d83ed81e338d1fecc2f9b50ed535e5ffb2a2c329585c7dceb31858c176a8551bb95a0bb09d527e9defebf5b291b093f0"}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x404}, 0x404c000) 2.243353009s ago: executing program 4 (id=302): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x40010, r0, 0x2000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x1) r3 = dup2(r2, r2) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='source', 0x0, r2) write(r0, &(0x7f0000000400)="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", 0x1f000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x40010, r0, 0x2000) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) close(r1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) fsopen(&(0x7f00000000c0)='bpf\x00', 0x1) (async) dup2(r2, r2) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='source', 0x0, r2) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) (async) 2.192526164s ago: executing program 4 (id=303): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) (async) 2.191956264s ago: executing program 4 (id=304): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, r0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = accept$inet6(0xffffffffffffffff, &(0x7f00000020c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000002100)=0x1c) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000002140)={0x5, 0xcd1, 0xa, 0x6, 0xfffffffd}) setsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000002180)="cb69eca94e691dc88dd3777dc62b8ffab65e559ef9cfad64315763b24a34c569a476c5c5a97b237b3aa3f05afeea01cee3594b7139c866b3d28f5515d81a9a3796b55f4c574a1bb102e22450d268c91847d24482693e44d12d2282ddccf1ac8544d79bc2ed4666bbf182c32180bbcfb7f00c8b92d5b3653bfba7ce1d19e163172fff6298093b5b65c18c86a308644750c4771d9f2cc4a2bb668f965b902b82710f71e82e8833d173907e2b766227b98408dc8b", 0xb3) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000002240)=0x5, 0x4) timer_create(0x3, &(0x7f0000002280)={0x0, 0x35, 0x1, @tid=r5}, &(0x7f00000022c0)=0x0) clock_gettime(0x0, &(0x7f0000002300)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f0000002340)={{r8, r9+10000000}}, &(0x7f0000002380)) timer_settime(r7, 0x0, &(0x7f00000023c0)={{0x0, 0x989680}}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002400), 0x80880, 0x0) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000002440)={0x6, 0x6, 0x8, 0x5, 0x12, "d036fb4098129c1aae688d3d3a128c3c917751"}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000002480)) mount$fuse(0x0, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500), 0xa34a8553145187, &(0x7f0000002540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7fff}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@smackfshat={'smackfshat', 0x3d, '/dev/fuse\x00'}}, {@obj_type={'obj_type', 0x3d, '-:-}%$@,'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}]}}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000004840)=0x0) statx(0xffffffffffffffff, &(0x7f0000004a00)='./file0\x00', 0x6000, 0x0, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000026c0)="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", 0x2000, &(0x7f0000005040)={&(0x7f00000046c0)={0x50, 0x0, 0x12000000000, {0x7, 0x2b, 0x100, 0x20008, 0x2, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x40, 0xc7e}}, &(0x7f0000004740)={0x18, 0x0, 0x7, {0x4}}, &(0x7f0000004780)={0x18, 0xfffffffffffffffe, 0x7, {0x6}}, &(0x7f00000047c0)={0x18, 0x0, 0x10001, {0xba}}, &(0x7f0000004800)={0x18, 0x0, 0x0, {0x1}}, &(0x7f0000004880)={0x28, 0x0, 0x5, {{0x746e, 0x1ff, 0x1, r11}}}, &(0x7f00000048c0)={0x60, 0x0, 0x6, {{0x7ff, 0x8001, 0x7, 0xffffffff, 0x7fffffff, 0xfffffffb, 0x4, 0x8b0}}}, &(0x7f0000004940)={0x18, 0xfffffffffffffffe, 0xc, {0x3}}, &(0x7f0000004980)={0x12, 0x0, 0x9d, {':\x00'}}, &(0x7f00000049c0)={0x20, 0xfffffffffffffffe, 0x4}, &(0x7f0000004b40)={0x78, 0x0, 0x7, {0x3a4a, 0x2, 0x0, {0x2, 0xfffffffffffffffe, 0x5, 0x7fffffffffffffff, 0xff, 0xfe00000000000000, 0x0, 0x1173, 0x0, 0x8000, 0xbb, r3, r12, 0x6, 0x80000000}}}, &(0x7f0000004bc0)={0x90, 0x0, 0x6, {0x6, 0x2, 0x3, 0x7f, 0xffff3f70, 0x80, {0x2, 0x7, 0x5b, 0x2, 0x2, 0x1, 0x1000000, 0xfffffffb, 0x0, 0x2000, 0x3, r3, r4, 0x5, 0x2}}}, &(0x7f0000004c80)={0x30, 0x0, 0x1, [{0x4, 0x4, 0x8, 0x4, 'max_read'}]}, &(0x7f0000004d40)={0xb0, 0x0, 0xa, [{{0x3, 0x3, 0xd, 0x1ff, 0x8000, 0x7, {0x2, 0x8000, 0x100000001, 0x200000000000000, 0x3, 0xec7, 0x855cf8b7, 0x6a49, 0xc, 0x6000, 0x60023be9, r13, r4, 0x4, 0x8}}, {0x3, 0x6, 0x7, 0x5, 'blksize'}}]}, &(0x7f0000004e00)={0xa0, 0x0, 0x2, {{0x3, 0x3, 0x2, 0x3, 0x54, 0x1, {0x2, 0xfff, 0x6, 0x7, 0x6, 0x2, 0x80, 0xa0f, 0xf, 0x6000, 0x4, r3, r4, 0x4, 0x8}}, {0x0, 0x9}}}, &(0x7f0000004ec0)={0x20, 0x0, 0x1, {0xffffffff, 0x0, 0x8, 0x3}}, &(0x7f0000004f00)={0x130, 0xfffffffffffffff5, 0x3, {0x7, 0xfffffffb, 0x0, '\x00', {0x200, 0x4, 0x8, 0x4, r3, r4, 0x6000, '\x00', 0x8, 0x4000000000000, 0x8, 0x6, {0x6}, {0x6f77, 0x8}, {0x80000001, 0x5}, {0x8f83, 0x100}, 0x10001, 0xc, 0x1, 0x3}}}}) r14 = openat2$dir(0xffffffffffffff9c, &(0x7f0000005100)='./file0\x00', &(0x7f0000005140)={0x440000, 0x104}, 0x18) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r14, 0x40189429, &(0x7f0000005180)={0x1, 0x8000000000000000, 0x31}) recvmmsg(r1, &(0x7f0000007840)=[{{&(0x7f00000051c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000005880)=[{&(0x7f0000005240)=""/162, 0xa2}, {&(0x7f0000005300)=""/159, 0x9f}, {&(0x7f00000053c0)=""/251, 0xfb}, {&(0x7f00000054c0)=""/18, 0x12}, {&(0x7f0000005500)=""/146, 0x92}, {&(0x7f00000055c0)=""/176, 0xb0}, {&(0x7f0000005680)=""/102, 0x66}, {&(0x7f0000005700)=""/191, 0xbf}, {&(0x7f00000057c0)=""/34, 0x22}, {&(0x7f0000005800)=""/87, 0x57}], 0xa, &(0x7f0000005940)=""/22, 0x16}, 0x6}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000005980)=""/177, 0xb1}, {&(0x7f0000005a40)=""/130, 0x82}, {&(0x7f0000005b00)=""/23, 0x17}, {&(0x7f0000005b40)=""/77, 0x4d}, {&(0x7f0000005bc0)=""/114, 0x72}, {&(0x7f0000005c40)=""/178, 0xb2}], 0x6, &(0x7f0000005d80)=""/54, 0x36}, 0x4}, {{&(0x7f0000005dc0)=@nfc, 0x80, &(0x7f0000006180)=[{&(0x7f0000005e40)=""/67, 0x43}, {&(0x7f0000005ec0)=""/91, 0x5b}, {&(0x7f0000005f40)=""/135, 0x87}, {&(0x7f0000006000)=""/212, 0xd4}, {&(0x7f0000006100)=""/71, 0x47}], 0x5, &(0x7f0000006200)=""/120, 0x78}, 0x639c}, {{&(0x7f0000006280)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000007740)=[{&(0x7f0000006300)=""/79, 0x4f}, {&(0x7f0000006380)=""/77, 0x4d}, {&(0x7f0000006400)=""/185, 0xb9}, {&(0x7f00000064c0)=""/151, 0x97}, {&(0x7f0000006580)=""/114, 0x72}, {&(0x7f0000006600)=""/32, 0x20}, {&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/194, 0xc2}], 0x8, &(0x7f00000077c0)=""/117, 0x75}}], 0x4, 0x220, &(0x7f0000007940)) r15 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000007980)='devices.allow\x00', 0x2, 0x0) close_range(r10, r15, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000007b00)={&(0x7f00000079c0)={0x10, 0x0, 0x0, 0x102200}, 0xc, &(0x7f0000007ac0)={&(0x7f0000007a00)={0x9c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48c4}, 0x0) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000007b40)=0x2, 0x4) r16 = openat$cgroup_ro(r0, &(0x7f0000007b80)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000007bc0)='./binderfs2/binder-control\x00', 0x2, 0x0) sendto$inet6(r16, &(0x7f0000007c00)="75674ab3c74c33c629d5d6936a5fc261fb0b715c87e420c4d784cd432e8613850c6136d3b32ef0b58132abeb8d5417acb3799fa486c1cf3f5337da11a3613795b466a01c052385330552558f9b6e546e1eff53eb", 0x54, 0x0, 0x0, 0x0) 1.835664712s ago: executing program 2 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create(&(0x7f0000000b80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) close(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, 0x0, &(0x7f0000000dc0)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x100000000, 0x0, 0x1, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffa, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2], 0xeeef0000, 0x42240}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000140)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000001a80)={@my=0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000080)={0x40000, 0x0, [0x8, 0x5, 0x0, 0x1, 0x100000000, 0x2, 0x3, 0x1]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 1.592857092s ago: executing program 1 (id=306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008000080"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080"]) r3 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x7c}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000100)=[{r3, 0x3028}], 0x1, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x6}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7, 0x10, 0x484, 0x10000, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x66, 0x0, 0xe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x6a, [@loopback, @local, @private=0xa010100, @multicast2]}, @noop, @ra={0x94, 0x4}]}}}}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x6, 0x0, [{0xbb4, 0x0, 0x8}, {0x841, 0x0, 0x100000001}, {0xb33, 0x0, 0x7fffffff}, {0x833, 0x0, 0xbdc0}, {0x95b, 0x0, 0x6}, {0x40000097, 0x0, 0x800}]}) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000240)={0x1, 0x1, 0x0, r7, 0x9}, 0xc) 1.466895052s ago: executing program 2 (id=307): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)={0x6, 0x6, 0x4, 0x1, 0xe, "626587f147559178"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf250b0000006c00058024000280080001001b000000080001000100000008000400b3000000080004000a0000000800"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000540)={[&(0x7f0000000340)='/dev/kvm\x00', &(0x7f0000000400)='/dev/vga_arbiter\x00']}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000001580)=""/246, 0xf6, 0x2, 0xd}, @fda={0x66646185, 0x1, 0x0, 0x800000036}, @flat=@weak_handle}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000580)={{r0}, "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"}) 1.447366183s ago: executing program 1 (id=308): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0x0, 0x8, "edf958e7e942"}}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) setns(r6, 0x10000000) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) pread64(r7, &(0x7f0000002040)=""/152, 0x98, 0xb9) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000d, 0x12, r2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x4}) (async) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 1.408787457s ago: executing program 2 (id=309): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000900)={0x6, 0x3f60b569, 0x3ff, 0x200, 0x5, "cf17bc00", 0x5}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r2, 0x29, 0x6, 0xfe, 0x5c0, 0x49, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, 0x700, 0x2c7abe937a9be59c, 0x0, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x5f875000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) msync(&(0x7f00002ff000/0x2000)=nil, 0x2000, 0x0) 1.336001792s ago: executing program 4 (id=310): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01006cc0c9a2918b4ea503000000580011800d0001007564703a73797a3d0000000044000400200001"], 0x6c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'bridge0\x00', @remote}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r8, &(0x7f0000001040), 0x0, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000001600)={0x1, 0x0, 0x5f, r7, 0x7c}, 0xc) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000001580), &(0x7f00000015c0)=0x30) sendto$packet(r5, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r5, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="30010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000800"], 0x130}}, 0x0) symlink(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x1b) ioctl$TCSETA(r9, 0x5406, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) 1.335536663s ago: executing program 2 (id=311): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="4a616363d62e215aae7df0a86596c240778961f1fdbd05a43ade737308", @ANYRESDEC=0x0, @ANYBLOB=',directio,\x00']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x70d8404c81d343d4, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x80000000) 1.298554256s ago: executing program 2 (id=312): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pwrite64(r0, &(0x7f0000000440)="67c729c29d3db6c122236ba6b419826f9773856e095f3bf7ee44243e34387dc8556b73508ca0c3798dd505d8f269a206c5b6db5f999f6569f1d11ac4dfbdad0cfdf3b4efbb665924e765095008080a892e5849c6578e111779ee6113c34fd9cd4daacea3f4b5a30b71a3bdfad66feda92921dcff77a3ead430526bf57059555cf4dd4d8abab95a85", 0x88, 0x8001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xffffffffffffff4e, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x10}, @ptr={0x70742a85, 0x1, 0x0, 0xffffffffffffffe4, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x6, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x49, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xf6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0xff, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x78b}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x408, 0x9, 0xa, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x5, 0x3, 0x10, 0x9}, 0x15, &(0x7f0000000200)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x800, 0xf00, 0x1, [0x3f00]}]}, 0x2, [{0x78, &(0x7f0000000380)=@string={0x78, 0x3, "8323fa3c34f5d1b65bc011b65aac175bd62faec19a486d8fb9a6468dc9d84a68e6bff7ad000b499eccdff7b8cf2b3d5e3c0f03f8db1168a3f3077f21e61daff7cea3ce7550174c5076b8cf5e875fe633985b83998c90b3a22d39a4f19b870fe087e0ef029d5ed5cbd21a4899dab36fbe79874dd52cff"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44e}}]}) syz_usb_control_io(r1, &(0x7f0000000840)={0x2c, &(0x7f00000005c0)={0x40, 0x10, 0x7e, {0x7e, 0x9, "e30849063e03005e36654b6c1e4310bcfafd4c1c14c219992fb3d229db05b2fe1d26d66e6709f7ae5d3bb46bfe8665f740105c48e57d94e9ebe49c66e8ab4133c38a668b8d5444d12651c2376ec67baa202ae6ebea16824f63785184f6d6d9337b071d13ddf8dedf6fc97e1862a951e120281697634689c2d0a592a6"}}, &(0x7f0000000680)={0x0, 0x3, 0x25, @string={0x25, 0x3, "85e8a362e1a84831e885a617276adb421221acde38b84bc8a1b756103557a442c6ac7c"}}, &(0x7f00000006c0)={0x0, 0xf, 0xf5, {0x5, 0xf, 0xf5, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "c441cffb59137ef1a1043244a26aaa69"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d145f49adb317129e4318fd254e17e4f"}, @generic={0xb5, 0x10, 0x2, "a8b91cd69c62d1df9132240b0fd59890492fcf56421ad0275f08e462c56b356f62ea1d6ba9c82e1e38b26043a497aee27bc3b7ffa5ddc3e3d5c3ce8c727005e4562b21dc5085a8a7145852ab81f9f50a2581e7631df0c83b0f9f2623fd8092d4e1376f52b3b9e119c7fd70fb5dbaf71f0b2c45dc5862af136556bd1aad8b27763f0f0bb5d6ebf8140bc8319d5dc745121caea97a1a17f04731732d14054062326438d5f579b3791f44a5efec614bd156bbb8"}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x5, 0xf00, 0x1, [0x3fc0]}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x45, 0x4, 0x6, 0xf, "6be2b27f", "f23fe77a"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x1, 0xcd, 0x4, 0x9, 0x10, 0x6}}}, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x20, 0x5, 0xea, "38c7abd769448c1c8d12e2ec0f783d7f358503d7fb74f6354262f74f5a29774f738866fbc51762a06b650ba9bd3f874605e92425c5c992d0be944061eb6ac5f53bc737b7c9d9da57d355b7d9ac827ffe5e09d43edd6f48530313764c1a5c620e4acba12a38f09ce3703c5b28ca98059144be9b5b79627a4430428417e1230f9ea46c2899128ca65a7274941ddaf748620b284156d40c8c041a451fc6ee28fb7ec683a2dd27d4e7ac449c3c7333352d0d673567638403cf803c22ba2b4e64bba097f7042cf0ca210b4815eb96a31eca915985ebf10032866346a2ac9a55208fc2630228a1688157c20ee8"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x9d5}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "2a1f"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "4da3"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x89}}) 1.273751628s ago: executing program 4 (id=313): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x557c4000) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0x1) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/dev/uinput\x00') ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000013c0)={{0x1, 0x100, 0x3, 0x9, 0x6, 0x8001}, 0x1b4, [0x6335e86a, 0x5, 0x2, 0xfffff800, 0x8, 0x8d8, 0x5, 0x8df, 0x94dc, 0x3, 0x8, 0x0, 0x12, 0x7, 0x959b, 0x8, 0x2, 0x7, 0x10, 0x8, 0x2, 0x9, 0xff, 0x2, 0x8, 0x0, 0x496c, 0x0, 0x7, 0x3, 0xc, 0x6, 0x8001, 0x9, 0x2, 0xffffffcd, 0x5, 0xfff, 0x6, 0x11c2, 0x2, 0x5b, 0x7, 0x8, 0x5, 0xfffffe3c, 0x3, 0x7fff, 0x22da, 0x9, 0x3, 0x85ae, 0x1, 0x8, 0x4, 0x1, 0x5, 0x88, 0x2, 0x0, 0x0, 0x7, 0xffffff7f, 0x2, 0x4, 0xdba, 0x5, 0x8000, 0x4000000, 0x5, 0x4, 0x7, 0x0, 0x113, 0x2, 0x5, 0x8, 0x2, 0x0, 0x4, 0x400, 0x5, 0xc09, 0x2c7, 0xfff, 0x519, 0x10000, 0x8, 0x10001, 0xed, 0x2, 0x8001, 0xf, 0x4, 0x4, 0x9, 0x0, 0x0, 0x76, 0x984095d, 0x4, 0x6, 0x8000, 0x10001, 0x0, 0x3, 0x101, 0x5, 0x3, 0xfffffffe, 0xc, 0x6, 0x5, 0x100, 0x6, 0x3, 0x0, 0x2, 0x1, 0x10000, 0x7, 0xee, 0xb5, 0x4, 0x2, 0x4, 0x3, 0x100, 0xfe31, 0x7, 0x7, 0x1000, 0x21, 0x0, 0x6, 0xfe10, 0x22d1, 0x5, 0x3ff, 0xfa, 0x20000, 0x1, 0x4, 0xb1, 0x6, 0x1, 0x0, 0x8001, 0x3, 0x2, 0xffff, 0x401, 0x6, 0x4, 0x8, 0xc, 0x8, 0x4, 0x0, 0xbfd, 0x6, 0x7, 0x2, 0x5, 0xd, 0x7, 0x641c, 0x4, 0x1ff, 0x9, 0x6, 0x3aca, 0x0, 0x6, 0x5, 0x1, 0x101, 0x8a3, 0x4f1, 0x3, 0xfffffffe, 0xfe00000, 0x4, 0x5, 0x4, 0x7f, 0x1e, 0x8, 0xffff, 0x6, 0x6, 0x35fc, 0x7, 0x5, 0x1ff, 0xf, 0x4eae097a, 0x6, 0xf, 0x40, 0x9, 0x1, 0x8, 0xce, 0xa, 0x0, 0x0, 0x4, 0x1, 0x4, 0x4, 0xc92, 0x9, 0xa0a2, 0x197, 0x8, 0x3, 0x5, 0xfffff001, 0xbe, 0x3, 0xfff, 0x3, 0x4, 0x3, 0x8001, 0x2, 0x7, 0x200, 0x52, 0x6, 0x0, 0x8000, 0x4, 0x1ff, 0x2, 0x1, 0x8, 0xf809, 0x6, 0xe6, 0x3, 0x9, 0x6, 0x3, 0x6, 0x8d3, 0x401, 0xfff, 0x7, 0x3, 0xffffff5e, 0x81, 0x8, 0x1, 0x2, 0x3, 0xfffffe00, 0x1, 0x7, 0x4, 0x3, 0x4d0, 0x6, 0x9, 0x4, 0xebf0, 0x17c, 0x2, 0xde, 0x9, 0x1, 0xffffffff, 0x1, 0x7, 0xa, 0x8001, 0x7ff, 0x3ff, 0xc, 0x1, 0x4, 0x1, 0x4, 0x81, 0x80000000, 0x7fffffff, 0x6, 0x124, 0x2, 0x5, 0x42, 0x0, 0x8, 0x80, 0x7, 0x925, 0x5, 0xe000000, 0x0, 0x8000, 0xfffffe00, 0x0, 0x4, 0x3, 0xffff, 0x0, 0x83aa, 0x9, 0x0, 0x30c, 0x10, 0x80, 0x0, 0x648, 0xfffffc01, 0x5, 0x200, 0x2, 0x8, 0x6, 0x7, 0x8b, 0x6, 0x9, 0x10000, 0x5, 0x5, 0xfffffffb, 0x9, 0x1, 0x4, 0x8, 0x84bc, 0x40, 0x8, 0x2, 0x43c23dbb, 0xffff8000, 0x4, 0xca4, 0x7, 0x3, 0xfffffff7, 0x3000, 0x11e, 0x40, 0x80000001, 0x6, 0xfffffe00, 0x3, 0x7, 0x7, 0x8, 0x7e3, 0x8, 0x4, 0x4, 0xfffff3f9, 0x3f, 0x271, 0x3, 0x1, 0xfffffffb, 0x81, 0xd8e, 0x4, 0x5, 0x3, 0xa4, 0x1000, 0xd, 0x8, 0x3, 0x7, 0xf53, 0x10, 0x16, 0x7, 0xdf, 0x80000001, 0x68de, 0x0, 0x1a, 0x3, 0x5, 0x0, 0x6, 0x5, 0x9, 0xf, 0x9, 0x1b1, 0x9, 0x3, 0x7, 0x10001, 0x4, 0x2, 0x9, 0x7ff, 0x8, 0x4, 0x5, 0x6, 0x257b, 0xd4b, 0x3ff, 0x5, 0xbb012c29, 0xd6, 0x1, 0x10001, 0xfffffffa, 0xc, 0x9, 0x9b8, 0xb7f, 0x2, 0x72, 0xfff, 0x3, 0x515b, 0xfff, 0x4, 0x6, 0x7, 0x8, 0x6, 0x3, 0x1, 0x2, 0x0, 0x5, 0x0, 0x7fffffff, 0x8e2b, 0x9, 0x10, 0x1, 0x132, 0x4, 0x0, 0x7ff, 0x2, 0x3, 0x5, 0x2, 0xfffffff9, 0x200, 0x81, 0x7, 0xfffffff7, 0x6, 0x3, 0x14000, 0x9, 0xee, 0x3, 0x70f6, 0x5dde5469, 0x7, 0x7, 0xc976, 0x58, 0x177, 0x5, 0x9, 0x6, 0xffffffff, 0x4, 0xb, 0x9, 0x5, 0x5b, 0x8, 0x7fff, 0x322, 0x1, 0xb6b, 0xffff40ef, 0x9, 0x73a0468c, 0x2, 0x1, 0x8, 0x10, 0x4, 0x2, 0x2, 0xfffffffb, 0x5da8, 0x3, 0x66, 0x6, 0x4, 0x9, 0x8, 0x9, 0xf0000000, 0x2, 0x4, 0x1, 0x40, 0x0, 0x5, 0x9, 0x3, 0x400, 0x1, 0x9, 0xffff5b2c, 0x7, 0x5d, 0x8, 0x951b, 0x0, 0x8, 0x0, 0x1, 0x1, 0x9, 0x2, 0x1, 0xb, 0x7, 0x4, 0x6, 0x0, 0x4, 0x2, 0x7, 0x8, 0x2, 0xf, 0xffffffff, 0x1, 0x101, 0x8, 0x7, 0x6753eddd, 0x2, 0x4e, 0x8724, 0x3, 0x7f, 0x7, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x6, 0x65ba, 0x10000, 0x5, 0x7f, 0x3, 0xfffff430, 0x0, 0x3, 0x8763, 0x741, 0x0, 0x9, 0x3, 0x80000000, 0x4, 0x2, 0x0, 0x0, 0x5, 0x5, 0x1ff, 0x9, 0x20, 0x101, 0xb, 0x9, 0x7ff, 0x5, 0x5d7b, 0x3f1, 0x1, 0xff, 0x800, 0x1ff, 0x1, 0x3, 0x9, 0x72d, 0x9, 0x8, 0x8, 0x5, 0x81, 0x5, 0x9, 0xe5d, 0x1, 0x2, 0x9, 0x7, 0xc8a, 0x2, 0x78, 0xf99d, 0x5, 0x0, 0xf0c, 0x4, 0x6, 0xffffffff, 0x0, 0x3, 0x5, 0x9, 0x7, 0x3, 0x0, 0x6, 0xfffffff9, 0x6, 0xfffffffb, 0x2, 0x4, 0x3, 0x9397, 0x0, 0x3, 0x92b, 0x4, 0x7, 0x401, 0x80000000, 0x6, 0x100, 0x1, 0x4, 0x0, 0x3, 0x2, 0xfffff3aa, 0x8, 0x7, 0xc, 0xffffffff, 0x0, 0x1c1d, 0x36, 0x3ff, 0x9, 0xd, 0x4, 0x72e7, 0x3, 0x8001, 0x3b, 0x400, 0x226d, 0xd21, 0x8, 0x3, 0x0, 0xdc9de28, 0xae58, 0x3, 0x6, 0x3, 0x8000, 0xfffffffe, 0x0, 0x3, 0x9, 0x1000, 0x9, 0x2, 0x3, 0xee17, 0x945, 0x5, 0x8, 0xfffffffa, 0x4, 0xf47, 0xf, 0x1, 0x4, 0x1, 0x4, 0xfff, 0x80000000, 0x1, 0x4, 0x0, 0x966, 0xf5666892, 0x401, 0x8, 0x1, 0x11c, 0x4, 0x6, 0x4, 0x8, 0x8, 0x2, 0x6, 0x3, 0x10001, 0x200, 0x49d8cb7e, 0x4, 0x1, 0x6dd, 0x100, 0x6, 0xf, 0xbf, 0x1, 0x1, 0x0, 0x6, 0x5, 0x2, 0x40000000, 0xc, 0x100, 0xc8a4, 0x1000, 0x5, 0x8, 0x260, 0x5, 0x6fe, 0x9, 0x7, 0x9, 0xff, 0x0, 0x7, 0x0, 0x4, 0x5, 0x7fff, 0x0, 0xef64, 0x3, 0x9, 0xffffff8b, 0x800, 0x194, 0x1, 0x4, 0x5, 0xe, 0x1, 0x8, 0x75dd, 0xfffffffd, 0xcf4, 0x9, 0xfffff4ad, 0xedb, 0x7, 0xd8fd, 0x5, 0x3, 0x1, 0x5, 0x0, 0x81, 0x9, 0x6, 0x7, 0x8, 0x7, 0xfffffff9, 0x0, 0x280, 0x80000001, 0x10001, 0x2, 0x3, 0x1f, 0x69, 0x4, 0x4, 0xc4, 0x0, 0x1000, 0x8b, 0x3ff, 0x10, 0x9, 0x51, 0x9, 0x10, 0x8, 0x62e, 0x3, 0x81, 0x8, 0x80000000, 0x7, 0x401, 0x7ff, 0xf4, 0x7, 0x8, 0xfffffffe, 0x20, 0xd925, 0xb21, 0x8, 0x4, 0x0, 0x4, 0x58000, 0x2, 0x100, 0x8, 0x2, 0x1ff, 0x7c, 0x6df1, 0x0, 0x6, 0x0, 0x3, 0xe13, 0xe411, 0x80, 0x6, 0x3, 0x8000, 0xfffff6d4, 0x0, 0x3, 0x9, 0x9, 0x6, 0x3, 0x8, 0x86, 0x10000, 0x3, 0xfff, 0x8000, 0xe5dc, 0x8, 0xf, 0x80000001, 0x7f, 0x9, 0xe, 0x9, 0x6, 0x9, 0x6, 0x3, 0xb, 0x0, 0x8, 0x101, 0x3, 0x1, 0xb4f4, 0xb, 0x20000000, 0x7, 0x100, 0x400, 0x4, 0xfffffffd, 0x401, 0x7, 0xfffffffc, 0xcbd, 0xb0ed, 0x7ff, 0x76, 0x0, 0x4, 0x1, 0x4, 0x23, 0x40, 0xb544, 0x5, 0x28fa, 0xffffffff, 0x3, 0x1994, 0x1, 0x3, 0x2, 0x5, 0x6, 0x7a4d, 0x9, 0x3, 0xe, 0x6, 0xfffffff7, 0x1, 0x2, 0x6, 0x1, 0x101, 0x1ff, 0xe979, 0x3, 0x100, 0x101, 0x5, 0xffffffb7, 0xc0b, 0xc2, 0x7, 0x3, 0x714b, 0x3833, 0x10001, 0x93, 0x2, 0xfffffff7, 0x6, 0x2, 0x9af9, 0x8000, 0x6, 0x2, 0x8, 0x6, 0xffff, 0x2, 0x3, 0x6, 0x8, 0x6, 0x0, 0x8, 0xb5, 0x2, 0x9, 0x100, 0x7, 0x6, 0xf, 0x80000000, 0x0, 0x4, 0x9, 0x9, 0x10, 0x9, 0x280000, 0x7f, 0x1, 0xfffffffa, 0x9, 0x2, 0x3, 0x8000, 0x0, 0x18000000, 0x200, 0x9, 0x9, 0x3, 0x5, 0x4, 0x5, 0x3, 0x40, 0x401, 0x343, 0x6, 0x68, 0xd, 0xc000000, 0x4, 0x81, 0x1, 0x6, 0x9, 0x6ce, 0x7, 0x9, 0x7f, 0x742, 0x3, 0x8, 0x2f, 0x1, 0x0, 0x4, 0x5, 0x5, 0xffffffff, 0xfffffffb, 0x6, 0x200, 0x0, 0x0, 0x3, 0x3b7b, 0x5, 0x100, 0x7ff, 0x9, 0xa, 0x1, 0x0, 0x400, 0x8, 0x2, 0xf, 0x4, 0x3, 0x8, 0x6]}) 1.152482037s ago: executing program 1 (id=315): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x80010, r2, 0x1e7d3000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a08538b3"], 0x0}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x77, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="0025ac0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r5, &(0x7f000000c340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 184.402785ms ago: executing program 3 (id=318): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0x0, 0x8, "edf958e7e942"}}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) r2 = dup(r1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 184.142905ms ago: executing program 3 (id=319): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB="6d610900301b0100b52a6165253030302f300000000000000400000000"]) 173.665146ms ago: executing program 3 (id=320): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89, 0x4, 0x0, @loopback, @local}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @remote, @empty}}}}) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x2, 0x54a240) ioctl$HIDIOCGRAWPHYS(r3, 0x4004480d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 102.483342ms ago: executing program 3 (id=321): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) (async) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x7, 0x0, 0x4, 0x86cc, 0x81, 0xf4, 0x4, 0x4, 0xc0, 0x14, 0x2, 0xa5, 0xa, 0x6, 0x5, 0xcc, [0xf6000000, 0x6]}}) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020) 32.404777ms ago: executing program 3 (id=322): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40) (rerun: 32) getdents64(r0, &(0x7f0000000480)=""/145, 0x91) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000100)=ANY=[@ANYBLOB="b6048846be99d296fd3aa256a57413c13fa7e0f515e980dc2ee19ee3c05171280425c956839d4ec0b392f1280779759488e04c40247035f96300f25a22a52cd3543e1b23417b522a847b734e3be5d0cce5c932fe4bec76aa93719ba53142412b9a978d1332dc28ada5373d6e48623204f23dddf0f76cb826f3799615c9bb91513ba677fd3bf34c2aa0ca2efa849ea92aa088cb90281d7e2de605318f07969927f72735ab635914c1f84029b39a85503ebc1ff02be147088b1bf69d2db451d1b965dedeb0368e61d074ce55fcb7d586306ba003a9d40498ffd40000000000000000"]) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @register_looper], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=323): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async, rerun: 64) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000002, &(0x7f0000001400)={[{@none}]}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x14000, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x9, 0x7}, 0x8) kernel console output (not intermixed with test programs): [ 13.988372][ T36] audit: type=1400 audit(1756468597.330:62): avc: denied { rlimitinh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.991501][ T36] audit: type=1400 audit(1756468597.330:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 21.028356][ T36] audit: type=1400 audit(1756468604.370:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.029356][ T281] cgroup: Unknown subsys name 'net' [ 21.051063][ T36] audit: type=1400 audit(1756468604.370:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.078469][ T36] audit: type=1400 audit(1756468604.400:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.078609][ T281] cgroup: Unknown subsys name 'devices' [ 21.260877][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.266473][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.457682][ T36] audit: type=1400 audit(1756468604.800:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.480868][ T36] audit: type=1400 audit(1756468604.800:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.498656][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.506624][ T36] audit: type=1400 audit(1756468604.800:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.538121][ T36] audit: type=1400 audit(1756468604.860:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.563478][ T36] audit: type=1400 audit(1756468604.860:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.583679][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.589043][ T36] audit: type=1400 audit(1756468604.930:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.623365][ T36] audit: type=1400 audit(1756468604.930:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.433481][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.440606][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.448107][ T289] bridge_slave_0: entered allmulticast mode [ 22.454479][ T289] bridge_slave_0: entered promiscuous mode [ 22.460840][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.467862][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.474960][ T289] bridge_slave_1: entered allmulticast mode [ 22.481273][ T289] bridge_slave_1: entered promiscuous mode [ 22.506975][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.514061][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.521131][ T288] bridge_slave_0: entered allmulticast mode [ 22.527237][ T288] bridge_slave_0: entered promiscuous mode [ 22.534700][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.541768][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.548815][ T288] bridge_slave_1: entered allmulticast mode [ 22.555141][ T288] bridge_slave_1: entered promiscuous mode [ 22.589715][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.596769][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.603888][ T291] bridge_slave_0: entered allmulticast mode [ 22.610067][ T291] bridge_slave_0: entered promiscuous mode [ 22.620701][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.627732][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.634955][ T291] bridge_slave_1: entered allmulticast mode [ 22.641168][ T291] bridge_slave_1: entered promiscuous mode [ 22.678334][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.685438][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.692553][ T290] bridge_slave_0: entered allmulticast mode [ 22.698678][ T290] bridge_slave_0: entered promiscuous mode [ 22.704892][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.711982][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.719034][ T290] bridge_slave_1: entered allmulticast mode [ 22.725564][ T290] bridge_slave_1: entered promiscuous mode [ 22.847410][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.854490][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.861762][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.868779][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.893415][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.900495][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.907790][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.914886][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.922819][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.929871][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.937131][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.944161][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.954212][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.961273][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.968495][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.975538][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.030509][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.037812][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.045155][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.053105][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.060427][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.067655][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.074998][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.082352][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.101347][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.108405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.116004][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.123040][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.130746][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.137803][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.145669][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.152720][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.167254][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.174294][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.188741][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.195817][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.203586][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.210650][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.225211][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.232295][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.265913][ T288] veth0_vlan: entered promiscuous mode [ 23.292955][ T291] veth0_vlan: entered promiscuous mode [ 23.302805][ T289] veth0_vlan: entered promiscuous mode [ 23.311673][ T288] veth1_macvtap: entered promiscuous mode [ 23.334853][ T291] veth1_macvtap: entered promiscuous mode [ 23.347685][ T289] veth1_macvtap: entered promiscuous mode [ 23.368988][ T290] veth0_vlan: entered promiscuous mode [ 23.390970][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.391651][ T290] veth1_macvtap: entered promiscuous mode [ 23.485899][ T339] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.518660][ T347] exFAT-fs (rnullb0): invalid boot record signature [ 23.525967][ T347] exFAT-fs (rnullb0): failed to read boot sector [ 23.532443][ T347] exFAT-fs (rnullb0): failed to recognize exfat type [ 23.699287][ T335] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.729236][ T340] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 23.759273][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.849235][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 23.855417][ T335] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 23.865859][ T335] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.876931][ T335] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.886744][ T335] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 23.899856][ T335] usb 3-1: config 7 interface 0 has no altsetting 0 [ 23.906768][ T335] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 23.915913][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.924454][ T340] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 23.933604][ T340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 23.944703][ T340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 23.955942][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.966350][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.976386][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 23.985908][ T340] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 23.995101][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.003170][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 24.011318][ T340] usb 2-1: Product: syz [ 24.015563][ T340] usb 2-1: Manufacturer: syz [ 24.020471][ T10] usb 1-1: SerialNumber: syz [ 24.025314][ T340] usb 2-1: SerialNumber: syz [ 24.032164][ T340] usb 2-1: config 0 descriptor?? [ 24.126822][ T363] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 24.126844][ T363] rust_binder: Error while translating object. [ 24.137443][ T363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.143914][ T363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 24.163359][ T363] SELinux: failed to load policy [ 24.196346][ T363] rust_binder: Error in use_page_slow: ESRCH [ 24.196362][ T363] rust_binder: use_range failure ESRCH [ 24.202572][ T363] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 24.208041][ T363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 24.215832][ T363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:21 [ 24.249682][ T329] usb 2-1: USB disconnect, device number 2 [ 24.280400][ T10] usb 1-1: 0:2 : does not exist [ 24.291745][ T10] usb 1-1: USB disconnect, device number 2 [ 24.317594][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.399416][ T369] syz.3.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 24.555999][ T335] usbhid 3-1:7.0: can't add hid device: -71 [ 24.569672][ T335] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 24.589319][ T335] usb 3-1: USB disconnect, device number 2 [ 24.830324][ T373] rust_binder: Error while translating object. [ 24.830358][ T373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 24.836604][ T373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 24.885058][ T379] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 24.894262][ T379] rust_binder: Error while translating object. [ 24.903514][ T379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.909812][ T379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 24.968259][ T386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.984310][ T386] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 24.991100][ T386] rust_binder: Error while translating object. [ 25.001789][ T386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.007976][ T386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 25.033118][ T386] SELinux: failed to load policy [ 25.061682][ T13] bridge_slave_1: left allmulticast mode [ 25.078880][ T13] bridge_slave_1: left promiscuous mode [ 25.092177][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.108139][ T13] bridge_slave_0: left allmulticast mode [ 25.120629][ T13] bridge_slave_0: left promiscuous mode [ 25.131632][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.271845][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.278889][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.286349][ T396] bridge_slave_0: entered allmulticast mode [ 25.292607][ T396] bridge_slave_0: entered promiscuous mode [ 25.298833][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.306021][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.313194][ T396] bridge_slave_1: entered allmulticast mode [ 25.320462][ T396] bridge_slave_1: entered promiscuous mode [ 25.353078][ T404] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.393666][ T13] veth1_macvtap: left promiscuous mode [ 25.399241][ T13] veth0_vlan: left promiscuous mode [ 25.434784][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.441841][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.449095][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.456163][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.492249][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.514485][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.521580][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.559286][ T396] veth0_vlan: entered promiscuous mode [ 25.572512][ T396] veth1_macvtap: entered promiscuous mode [ 25.583095][ T426] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 25.583122][ T426] rust_binder: Error while translating object. [ 25.593851][ T426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.600153][ T329] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.602909][ T426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 25.643888][ T426] SELinux: failed to load policy [ 25.676258][ T435] rust_binder: 8: no such ref 2 [ 25.682930][ T426] rust_binder: Error in use_page_slow: ESRCH [ 25.682949][ T426] rust_binder: use_range failure ESRCH [ 25.688939][ T426] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 25.694650][ T426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 25.702541][ T426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:29 [ 25.759386][ T335] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.770359][ T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.786014][ T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.795692][ T329] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 25.804882][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.812925][ T329] usb 3-1: SerialNumber: syz [ 25.842665][ T439] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 25.842689][ T439] rust_binder: Read failure Err(EFAULT) in pid:32 [ 25.863246][ T441] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 25.919246][ T335] usb 4-1: Using ep0 maxpacket: 16 [ 25.925487][ T335] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 25.935916][ T335] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.947759][ T335] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.957572][ T335] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 25.958178][ T448] binder: Bad value for 'stats' [ 25.970890][ T335] usb 4-1: config 7 interface 0 has no altsetting 0 [ 25.983327][ T335] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 25.993054][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.092365][ T329] usb 3-1: 0:2 : does not exist [ 26.099695][ T329] usb 3-1: USB disconnect, device number 3 [ 26.108882][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.519075][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 26.519091][ T36] audit: type=1326 audit(1756468609.860:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.4.38" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f868e58ebe9 code=0x0 [ 26.606057][ T335] usbhid 4-1:7.0: can't add hid device: -71 [ 26.612070][ T335] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 26.623505][ T335] usb 4-1: USB disconnect, device number 2 [ 26.674265][ T454] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.686540][ T36] audit: type=1400 audit(1756468610.030:165): avc: denied { write } for pid=453 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.687148][ T454] Zero length message leads to an empty skb [ 26.714506][ T36] audit: type=1400 audit(1756468610.060:166): avc: denied { mount } for pid=453 comm="syz.2.39" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 26.737726][ T36] audit: type=1400 audit(1756468610.080:167): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 26.757667][ T456] rust_binder: Error in use_page_slow: ESRCH [ 26.757683][ T456] rust_binder: use_range failure ESRCH [ 26.768776][ T456] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 26.774518][ T456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 26.782930][ T456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:43 [ 26.783131][ T36] audit: type=1400 audit(1756468610.130:168): avc: denied { read write } for pid=458 comm="syz.2.40" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.815304][ T462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'. [ 26.825543][ T36] audit: type=1400 audit(1756468610.130:169): avc: denied { open } for pid=458 comm="syz.2.40" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.856555][ T36] audit: type=1400 audit(1756468610.140:170): avc: denied { ioctl } for pid=458 comm="syz.2.40" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.948073][ T463] Unsupported ieee802154 address type: 0 [ 26.948885][ T36] audit: type=1400 audit(1756468610.290:171): avc: denied { create } for pid=461 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.974341][ T36] audit: type=1400 audit(1756468610.290:172): avc: denied { ioctl } for pid=461 comm="syz.1.42" path="socket:[3998]" dev="sockfs" ino=3998 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.999684][ T36] audit: type=1400 audit(1756468610.290:173): avc: denied { bind } for pid=461 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 27.071618][ T466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=466 comm=syz.2.43 [ 27.083957][ T466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=466 comm=syz.2.43 [ 27.098885][ T466] exFAT-fs (rnullb0): invalid boot record signature [ 27.105956][ T466] exFAT-fs (rnullb0): failed to read boot sector [ 27.112679][ T466] exFAT-fs (rnullb0): failed to recognize exfat type [ 27.136584][ T468] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 27.136604][ T468] rust_binder: Error while translating object. [ 27.147283][ T468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.153477][ T468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 27.170660][ T468] SELinux: failed to load policy [ 27.201830][ T468] rust_binder: Error in use_page_slow: ESRCH [ 27.201845][ T468] rust_binder: use_range failure ESRCH [ 27.207856][ T468] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 27.213608][ T468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 27.221536][ T468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:34 [ 27.285049][ T471] tipc: Started in network mode [ 27.299082][ T471] tipc: Node identity d6cf03e9495a, cluster identity 4711 [ 27.306298][ T471] tipc: Enabled bearer , priority 0 [ 27.313822][ T471] exFAT-fs (rnullb0): invalid boot record signature [ 27.320453][ T471] exFAT-fs (rnullb0): failed to read boot sector [ 27.326898][ T471] exFAT-fs (rnullb0): failed to recognize exfat type [ 27.334666][ T470] tipc: Disabling bearer [ 27.699199][ T63] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.860308][ T63] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.876734][ T63] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.896812][ T63] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 27.909775][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 27.924365][ T63] usb 4-1: SerialNumber: syz [ 28.015670][ T494] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 28.015697][ T494] rust_binder: Error while translating object. [ 28.026381][ T494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.032688][ T494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 28.057949][ T494] SELinux: failed to load policy [ 28.113215][ T494] rust_binder: Error in use_page_slow: ESRCH [ 28.113243][ T494] rust_binder: use_range failure ESRCH [ 28.119425][ T494] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 28.125059][ T494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 28.129215][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.132971][ T494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:23 [ 28.205568][ T63] usb 4-1: 0:2 : does not exist [ 28.223573][ T63] usb 4-1: USB disconnect, device number 3 [ 28.239546][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.290188][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 28.304137][ T10] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 28.329357][ T10] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.350453][ T10] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.376798][ T10] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 28.399194][ T10] usb 2-1: config 7 interface 0 has no altsetting 0 [ 28.405856][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 28.420696][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.853961][ T524] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 28.853989][ T524] rust_binder: Error while translating object. [ 28.865057][ T524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.871376][ T524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 28.914556][ T524] SELinux: failed to load policy [ 28.969486][ T524] rust_binder: Error in use_page_slow: ESRCH [ 28.969513][ T524] rust_binder: use_range failure ESRCH [ 28.976289][ T524] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 28.982210][ T524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 28.991610][ T524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:45 [ 29.033910][ T10] usbhid 2-1:7.0: can't add hid device: -71 [ 29.050992][ T10] usbhid 2-1:7.0: probe with driver usbhid failed with error -71 [ 29.066124][ T10] usb 2-1: USB disconnect, device number 3 [ 29.520051][ T532] rust_binder: Error while translating object. [ 29.520099][ T532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.539314][ T532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 29.604054][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.649802][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 29.684260][ T542] fido_id[542]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 29.718058][ T397] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.772448][ T551] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 29.772475][ T551] rust_binder: Error while translating object. [ 29.783538][ T551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.789984][ T551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 29.813255][ T551] SELinux: failed to load policy [ 29.849196][ T551] rust_binder: Error in use_page_slow: ESRCH [ 29.849233][ T551] rust_binder: use_range failure ESRCH [ 29.855248][ T551] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 29.860811][ T551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.868647][ T551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:44 [ 29.902897][ T555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.912284][ T555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:56 [ 29.940891][ T329] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.097670][ T575] rust_binder: 72: no such ref 3 [ 30.102973][ T573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.110299][ T329] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.111559][ T575] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 30.121538][ T329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.130565][ T573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.139651][ T329] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.155646][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.163692][ T329] usb 5-1: SerialNumber: syz [ 30.239211][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.339222][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.389335][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 30.395725][ T10] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 30.406226][ T10] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.417270][ T10] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.427082][ T10] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 30.439997][ T10] usb 3-1: config 7 interface 0 has no altsetting 0 [ 30.446638][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 30.455853][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.473678][ T329] usb 5-1: 0:2 : does not exist [ 30.483188][ T329] usb 5-1: USB disconnect, device number 2 [ 30.489196][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 30.495927][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.509657][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.525601][ T45] usb 4-1: config 143 has an invalid interface number: 213 but max is 1 [ 30.533991][ T45] usb 4-1: config 143 has an invalid interface number: 2 but max is 1 [ 30.542733][ T45] usb 4-1: config 143 has an invalid descriptor of length 53, skipping remainder of the config [ 30.553163][ T45] usb 4-1: config 143 has no interface number 0 [ 30.559459][ T45] usb 4-1: config 143 has no interface number 1 [ 30.565793][ T45] usb 4-1: config 143 interface 213 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 30.579255][ T45] usb 4-1: config 143 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 30.592310][ T45] usb 4-1: config 143 interface 213 has no altsetting 0 [ 30.599377][ T45] usb 4-1: config 143 interface 2 has no altsetting 0 [ 30.607699][ T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 30.616885][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.625251][ T45] usb 4-1: Product: syz [ 30.629505][ T45] usb 4-1: Manufacturer: syz [ 30.634116][ T45] usb 4-1: SerialNumber: syz [ 30.842703][ T45] asix 4-1:143.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 30.853139][ T45] asix 4-1:143.213: probe with driver asix failed with error -71 [ 30.861997][ T45] asix 4-1:143.2 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 30.872161][ T45] asix 4-1:143.2: probe with driver asix failed with error -71 [ 30.882332][ T45] usb 4-1: USB disconnect, device number 4 [ 30.885622][ T10] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0002/input/input6 [ 30.911303][ T10] kye 0003:0458:5010.0002: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 31.086639][ T580] rust_binder: 35: no such ref 2 [ 31.499391][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.589194][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.629257][ T45] usb 5-1: device descriptor read/64, error -71 [ 31.739219][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.739371][ T548] Bluetooth: hci0: command 0x1003 tx timeout [ 31.753294][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 31.761898][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 31.772245][ T10] usb 4-1: config 220 has no interface number 2 [ 31.778516][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 31.791670][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 31.798452][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 31.805331][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 31.813578][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 31.822678][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.830703][ T10] usb 4-1: Product: syz [ 31.834848][ T10] usb 4-1: Manufacturer: syz [ 31.839445][ T10] usb 4-1: SerialNumber: syz [ 31.879262][ T45] usb 5-1: device descriptor read/64, error -71 [ 31.919266][ C0] kye 0003:0458:5010.0002: usb_submit_urb(ctrl) failed: -1 [ 32.046833][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 32.046853][ T36] audit: type=1400 audit(1756468615.390:207): avc: denied { append } for pid=584 comm="syz.3.86" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.076885][ T10] usb 4-1: selecting invalid altsetting 0 [ 32.082685][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 32.089022][ T10] usb 4-1: No valid video chain found. [ 32.097883][ T10] usb 4-1: USB disconnect, device number 5 [ 32.119206][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.249215][ T45] usb 5-1: device descriptor read/64, error -71 [ 32.287707][ T36] audit: type=1400 audit(1756468615.630:208): avc: denied { nlmsg_read } for pid=586 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.305819][ T587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.87'. [ 32.317495][ T36] audit: type=1400 audit(1756468615.660:209): avc: denied { read write } for pid=586 comm="syz.1.87" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 32.318928][ T587] 9pnet_fd: Insufficient options for proto=fd [ 32.341792][ T36] audit: type=1400 audit(1756468615.660:210): avc: denied { open } for pid=586 comm="syz.1.87" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 32.387411][ T591] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 32.387432][ T591] rust_binder: Error while translating object. [ 32.399064][ T591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.405352][ T591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 32.422422][ T591] SELinux: failed to load policy [ 32.464374][ T591] rust_binder: Error in use_page_slow: ESRCH [ 32.464391][ T591] rust_binder: use_range failure ESRCH [ 32.471507][ T591] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 32.477071][ T591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.485176][ T591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:64 [ 32.499209][ T45] usb 5-1: device descriptor read/64, error -71 [ 32.532080][ T36] audit: type=1400 audit(1756468615.880:211): avc: denied { ioctl } for pid=601 comm="syz.2.91" path="socket:[5759]" dev="sockfs" ino=5759 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.619498][ T45] usb usb5-port1: attempt power cycle [ 32.628309][ T36] audit: type=1400 audit(1756468615.970:212): avc: denied { append } for pid=610 comm="syz.1.94" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.689715][ T576] usb 3-1: USB disconnect, device number 4 [ 32.859288][ T63] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.959240][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 32.980291][ T45] usb 5-1: device descriptor read/8, error -71 [ 33.010230][ T63] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.020426][ T63] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.030029][ T63] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 33.039116][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 33.047139][ T63] usb 4-1: SerialNumber: syz [ 33.110223][ T45] usb 5-1: device descriptor read/8, error -71 [ 33.255711][ T63] usb 4-1: 0:2 : does not exist [ 33.264070][ T63] usb 4-1: USB disconnect, device number 6 [ 33.274020][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.359249][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 33.380216][ T45] usb 5-1: device descriptor read/8, error -71 [ 33.411084][ T36] audit: type=1400 audit(1756468616.760:213): avc: denied { name_bind } for pid=616 comm="syz.2.95" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.432508][ T36] audit: type=1400 audit(1756468616.760:214): avc: denied { node_bind } for pid=616 comm="syz.2.95" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.510546][ T45] usb 5-1: device descriptor read/8, error -71 [ 33.534707][ T397] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.619336][ T45] usb usb5-port1: unable to enumerate USB device [ 33.659260][ T335] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 33.810466][ T335] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 33.818688][ T335] usb 3-1: config 16 has no interface number 0 [ 33.826440][ T335] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 33.837946][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.852391][ T335] usb 3-1: Product: syz [ 33.857480][ T335] usb 3-1: Manufacturer: syz [ 33.862740][ T335] usb 3-1: SerialNumber: syz [ 34.076470][ T335] usb 3-1: USB disconnect, device number 5 [ 34.086369][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.358325][ T36] audit: type=1400 audit(1756468617.700:215): avc: denied { write } for pid=627 comm="syz.4.100" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.441618][ T36] audit: type=1400 audit(1756468617.790:216): avc: denied { append } for pid=632 comm="syz.4.101" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.479705][ T638] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 34.479730][ T638] rust_binder: Error while translating object. [ 34.490410][ T638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.496598][ T638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 34.513683][ T638] SELinux: failed to load policy [ 34.550759][ T638] rust_binder: Error in use_page_slow: ESRCH [ 34.550776][ T638] rust_binder: use_range failure ESRCH [ 34.556792][ T638] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 34.563080][ T638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.570874][ T638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:51 [ 34.869231][ T63] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 34.889198][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.019213][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.030151][ T63] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.040284][ T63] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.049968][ T63] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 35.059197][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 35.067191][ T63] usb 4-1: SerialNumber: syz [ 35.174560][ T658] rust_binder: Error while translating object. [ 35.174590][ T658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 35.180883][ T658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61 [ 35.247817][ T660] rust_binder: Error while translating object. [ 35.256935][ T660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 35.263414][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.269899][ T660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:63 [ 35.281221][ T63] usb 4-1: 0:2 : does not exist [ 35.297560][ T63] usb 4-1: USB disconnect, device number 7 [ 35.305037][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.382795][ T662] ======================================================= [ 35.382795][ T662] WARNING: The mand mount option has been deprecated and [ 35.382795][ T662] and is ignored by this kernel. Remove the mand [ 35.382795][ T662] option from the mount to silence this warning. [ 35.382795][ T662] ======================================================= [ 35.417927][ T662] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 35.509222][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.579196][ T548] Bluetooth: hci0: command 0x1003 tx timeout [ 35.579195][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.649183][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.839223][ T335] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.852321][ T671] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 35.852342][ T671] rust_binder: Error while translating object. [ 35.863087][ T671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.869326][ T671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 35.886530][ T671] SELinux: failed to load policy [ 35.900837][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.951044][ T671] rust_binder: Error in use_page_slow: ESRCH [ 35.951064][ T671] rust_binder: use_range failure ESRCH [ 35.957055][ T671] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 35.962681][ T671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.970471][ T671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:94 [ 36.000294][ T335] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 36.018685][ T10] usb usb3-port1: attempt power cycle [ 36.024081][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.033425][ T335] usb 2-1: config 0 descriptor?? [ 36.061927][ T676] rust_binder: Write failure EFAULT in pid:99 [ 36.369189][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.400190][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.441089][ T335] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 36.448797][ T335] hid-multitouch 0003:0EEF:72C4.0003: item fetching failed at offset 3/5 [ 36.457427][ T335] hid-multitouch 0003:0EEF:72C4.0003: probe with driver hid-multitouch failed with error -22 [ 36.530181][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.589919][ T683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=683 comm=syz.3.121 [ 36.769230][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 36.790226][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.889201][ T335] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 36.920323][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.992918][ T685] pim6reg1: entered promiscuous mode [ 36.998226][ T685] pim6reg1: entered allmulticast mode [ 37.019287][ T335] usb 4-1: device descriptor read/64, error -71 [ 37.029447][ T10] usb usb3-port1: unable to enumerate USB device [ 37.123152][ T687] fuseblk: Bad value for 'user_id' [ 37.128356][ T687] fuseblk: Bad value for 'user_id' [ 37.259205][ T335] usb 4-1: device descriptor read/64, error -71 [ 37.291606][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 37.291623][ T36] audit: type=1400 audit(1756468620.640:230): avc: denied { execute } for pid=686 comm="syz.4.122" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.499203][ T335] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 37.629210][ T335] usb 4-1: device descriptor read/64, error -71 [ 37.869209][ T335] usb 4-1: device descriptor read/64, error -71 [ 37.979741][ T335] usb usb4-port1: attempt power cycle [ 38.319222][ T335] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 38.340178][ T335] usb 4-1: device descriptor read/8, error -71 [ 38.470334][ T335] usb 4-1: device descriptor read/8, error -71 [ 38.610256][ T9] usb 2-1: USB disconnect, device number 4 [ 38.629061][ T700] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 38.629118][ T700] rust_binder: Error while translating object. [ 38.639963][ T700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.646113][ T700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 38.663322][ T700] SELinux: failed to load policy [ 38.703742][ T700] rust_binder: Error in use_page_slow: ESRCH [ 38.703759][ T700] rust_binder: use_range failure ESRCH [ 38.710194][ T335] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 38.723304][ T700] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 38.723323][ T700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.731075][ T700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:76 [ 38.760606][ T335] usb 4-1: device descriptor read/8, error -71 [ 38.824314][ T705] binder: Unknown parameter 'defcoex' [ 38.832460][ T705] fuse: Bad value for 'fd' [ 38.832638][ T36] audit: type=1400 audit(1756468622.180:231): avc: denied { setopt } for pid=704 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.856936][ T36] audit: type=1400 audit(1756468622.180:232): avc: denied { setopt } for pid=704 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.878426][ T36] audit: type=1400 audit(1756468622.180:233): avc: denied { listen } for pid=704 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.900183][ T335] usb 4-1: device descriptor read/8, error -71 [ 38.906495][ T710] netlink: 'syz.1.129': attribute type 16 has an invalid length. [ 38.914411][ T710] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.129'. [ 39.019375][ T335] usb usb4-port1: unable to enumerate USB device [ 39.036979][ T715] rust_binder: Error while translating object. [ 39.037003][ T715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 39.043228][ T715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:89 [ 39.169421][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.299238][ T335] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 39.309347][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.449235][ T335] usb 5-1: Using ep0 maxpacket: 32 [ 39.455392][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.466311][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.476058][ T335] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.485088][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.493679][ T335] usb 5-1: config 0 descriptor?? [ 39.501642][ T335] hub 5-1:0.0: USB hub found [ 39.549217][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.629471][ T719] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 39.629497][ T719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 39.637506][ T719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:106 [ 39.665461][ T723] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 39.674655][ T723] rust_binder: Error while translating object. [ 39.685388][ T723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.691597][ T723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 39.702154][ T335] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 39.726874][ T723] SELinux: failed to load policy [ 39.771017][ T723] rust_binder: Error in use_page_slow: ESRCH [ 39.771048][ T723] rust_binder: use_range failure ESRCH [ 39.777043][ T723] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 39.782644][ T723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.790417][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.807253][ T723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:110 [ 39.929539][ T335] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 39.959192][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.965722][ T335] hid-generic 0003:046D:C31C.0004: probe with driver hid-generic failed with error -22 [ 40.199248][ T10] usb 2-1: device descriptor read/64, error -71 [ 40.229316][ T335] usb 5-1: USB disconnect, device number 7 [ 40.309317][ T10] usb usb2-port1: attempt power cycle [ 40.404842][ T731] rust_binder: Error in use_page_slow: ESRCH [ 40.404859][ T731] rust_binder: use_range failure ESRCH [ 40.410883][ T731] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 40.416788][ T731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.424839][ T731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:116 [ 40.504747][ T36] audit: type=1400 audit(1756468623.850:234): avc: denied { read write } for pid=736 comm="syz.3.140" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.536971][ T36] audit: type=1400 audit(1756468623.850:235): avc: denied { open } for pid=736 comm="syz.3.140" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.560132][ T36] audit: type=1400 audit(1756468623.850:236): avc: denied { ioctl } for pid=736 comm="syz.3.140" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.585373][ T36] audit: type=1400 audit(1756468623.850:237): avc: denied { execute } for pid=736 comm="syz.3.140" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 40.621883][ T36] audit: type=1400 audit(1756468623.970:238): avc: denied { create } for pid=738 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 40.663382][ T744] binder: Unknown parameter 'fscontext?}' [ 40.669280][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.677495][ T36] audit: type=1400 audit(1756468624.020:239): avc: denied { relabelfrom } for pid=738 comm="syz.3.141" name="" dev="pipefs" ino=6937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 40.692304][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.708888][ T748] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 40.708917][ T748] rust_binder: Error while translating object. [ 40.719778][ T748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.725977][ T748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 40.750006][ T748] SELinux: failed to load policy [ 40.790995][ T748] rust_binder: Error in use_page_slow: ESRCH [ 40.791015][ T748] rust_binder: use_range failure ESRCH [ 40.797051][ T748] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 40.802580][ T748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.810371][ T748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:101 [ 40.850124][ T10] usb 2-1: device descriptor read/8, error -71 [ 41.109523][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.119193][ T45] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 41.130250][ T10] usb 2-1: device descriptor read/8, error -71 [ 41.260417][ T10] usb 2-1: device descriptor read/8, error -71 [ 41.270385][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 41.281153][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 41.292752][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.307130][ T45] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 41.316192][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.324190][ T45] usb 3-1: Product: syz [ 41.328345][ T45] usb 3-1: Manufacturer: syz [ 41.332945][ T45] usb 3-1: SerialNumber: syz [ 41.337981][ T45] usb 3-1: config 0 descriptor?? [ 41.369356][ T10] usb usb2-port1: unable to enumerate USB device [ 41.429218][ T63] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 41.481141][ T765] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 41.489857][ T765] rust_binder: Write failure EINVAL in pid:128 [ 41.579214][ T63] usb 5-1: device descriptor read/64, error -71 [ 41.606959][ T335] usb 3-1: USB disconnect, device number 10 [ 41.829239][ T63] usb 5-1: device descriptor read/64, error -71 [ 41.948480][ T774] rust_binder: Error while translating object. [ 41.948523][ T774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.954851][ T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 42.069221][ T63] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 42.209206][ T63] usb 5-1: device descriptor read/64, error -71 [ 42.329228][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 42.459209][ T63] usb 5-1: device descriptor read/64, error -71 [ 42.480306][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 42.491277][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.502487][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.512532][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 42.526984][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 42.536349][ T45] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 42.544669][ T45] usb 2-1: Manufacturer: syz [ 42.550341][ T45] usb 2-1: config 0 descriptor?? [ 42.569389][ T63] usb usb5-port1: attempt power cycle [ 42.774890][ T789] capability: warning: `syz.3.156' uses deprecated v2 capabilities in a way that may be insecure [ 42.788155][ T790] rust_binder: Write failure EFAULT in pid:141 [ 42.797963][ T793] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 42.804290][ T793] rust_binder: Error while translating object. [ 42.814848][ T793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.821158][ T793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 42.839756][ T793] SELinux: failed to load policy [ 42.901614][ T793] rust_binder: Error in use_page_slow: ESRCH [ 42.901636][ T793] rust_binder: use_range failure ESRCH [ 42.907665][ T793] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 42.913224][ T793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 42.921520][ T793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:145 [ 42.929220][ T63] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 42.957636][ T45] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 42.964987][ T45] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 42.973578][ T63] usb 5-1: device descriptor read/8, error -71 [ 42.981144][ T45] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 43.110394][ T63] usb 5-1: device descriptor read/8, error -71 [ 43.159502][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 43.159518][ T36] audit: type=1400 audit(1756468626.510:243): avc: denied { create } for pid=781 comm="syz.1.154" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.161220][ T10] usb 2-1: USB disconnect, device number 9 [ 43.165580][ T36] audit: type=1400 audit(1756468626.510:244): avc: denied { execute } for pid=781 comm="syz.1.154" path="/32/cpu.stat" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.269219][ T335] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 43.359234][ T63] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 43.380475][ T63] usb 5-1: device descriptor read/8, error -71 [ 43.420321][ T335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.430504][ T335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.440101][ T335] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.449195][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.457216][ T335] usb 4-1: SerialNumber: syz [ 43.510283][ T63] usb 5-1: device descriptor read/8, error -71 [ 43.619394][ T63] usb usb5-port1: unable to enumerate USB device [ 43.665064][ T335] usb 4-1: 0:2 : does not exist [ 43.673995][ T335] usb 4-1: USB disconnect, device number 12 [ 43.681616][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.712097][ T36] audit: type=1400 audit(1756468627.060:245): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.129237][ T335] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.215756][ T813] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 44.259216][ T335] usb 3-1: device descriptor read/64, error -71 [ 44.281031][ T826] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 44.281052][ T826] rust_binder: Error while translating object. [ 44.291747][ T826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.298080][ T826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 44.316064][ T826] SELinux: failed to load policy [ 44.342688][ T828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 44.351616][ T828] netlink: 'syz.4.164': attribute type 3 has an invalid length. [ 44.361650][ T826] rust_binder: Error in use_page_slow: ESRCH [ 44.361672][ T826] rust_binder: use_range failure ESRCH [ 44.367717][ T826] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 44.373238][ T826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.381041][ T826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:155 [ 44.467394][ T36] audit: type=1400 audit(1756468627.810:246): avc: denied { setopt } for pid=830 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.495740][ T36] audit: type=1400 audit(1756468627.820:247): avc: denied { read } for pid=830 comm="syz.3.167" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.518393][ T335] usb 3-1: device descriptor read/64, error -71 [ 44.524754][ T36] audit: type=1400 audit(1756468627.820:248): avc: denied { open } for pid=830 comm="syz.3.167" path="/57/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.548226][ T36] audit: type=1400 audit(1756468627.820:249): avc: denied { setattr } for pid=830 comm="syz.3.167" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.752189][ T845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 44.761069][ T335] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 44.788167][ T36] audit: type=1400 audit(1756468628.130:250): avc: denied { mount } for pid=847 comm="syz.3.173" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.857465][ T854] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 44.857485][ T854] rust_binder: Error while translating object. [ 44.868219][ T854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.874500][ T854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 44.891375][ T854] SELinux: failed to load policy [ 44.905517][ T335] usb 3-1: device descriptor read/64, error -71 [ 44.931617][ T854] rust_binder: Error in use_page_slow: ESRCH [ 44.931634][ T854] rust_binder: use_range failure ESRCH [ 44.937676][ T854] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 44.943333][ T854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.951194][ T854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:174 [ 45.049226][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 45.070155][ T36] audit: type=1400 audit(1756468628.420:251): avc: denied { ioctl } for pid=856 comm="syz.3.177" path="socket:[8158]" dev="sockfs" ino=8158 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.169204][ T335] usb 3-1: device descriptor read/64, error -71 [ 45.221862][ T36] audit: type=1326 audit(1756468628.570:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=867 comm="syz.4.179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f868e58ebe9 code=0x0 [ 45.250166][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.260271][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.269791][ T45] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 45.278825][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 45.279913][ T335] usb usb3-port1: attempt power cycle [ 45.286851][ T45] usb 2-1: SerialNumber: syz [ 45.498895][ T45] usb 2-1: 0:2 : does not exist [ 45.507195][ T45] usb 2-1: USB disconnect, device number 10 [ 45.519485][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.639246][ T335] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 45.660291][ T335] usb 3-1: device descriptor read/8, error -71 [ 45.790260][ T335] usb 3-1: device descriptor read/8, error -71 [ 46.029245][ T335] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 46.052735][ T335] usb 3-1: device descriptor read/8, error -71 [ 46.190143][ T335] usb 3-1: device descriptor read/8, error -71 [ 46.299240][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 46.300146][ T335] usb usb3-port1: unable to enumerate USB device [ 46.429195][ T45] usb 4-1: device descriptor read/64, error -71 [ 46.669252][ T45] usb 4-1: device descriptor read/64, error -71 [ 46.669953][ T884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.677141][ T884] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 46.683672][ T884] rust_binder: Error while translating object. [ 46.694319][ T884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.700509][ T884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 46.716866][ T884] SELinux: failed to load policy [ 46.771046][ T884] rust_binder: Error in use_page_slow: ESRCH [ 46.771063][ T884] rust_binder: use_range failure ESRCH [ 46.777062][ T884] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 46.782543][ T884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.790342][ T884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:115 [ 46.909206][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 46.919497][ T890] rust_binder: Error in use_page_slow: ESRCH [ 46.926029][ T890] rust_binder: use_range failure ESRCH [ 46.937965][ T890] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 46.937992][ T890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.946497][ T890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:118 [ 46.960523][ T890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.186'. [ 46.975148][ T890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 47.099245][ T45] usb 4-1: device descriptor read/64, error -71 [ 47.289189][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 47.339214][ T45] usb 4-1: device descriptor read/64, error -71 [ 47.440334][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.449323][ T45] usb usb4-port1: attempt power cycle [ 47.450558][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.465424][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 47.474482][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 47.482484][ T9] usb 3-1: SerialNumber: syz [ 47.689463][ T9] usb 3-1: 0:2 : does not exist [ 47.705269][ T9] usb 3-1: USB disconnect, device number 15 [ 47.718941][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.761084][ T905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.193'. [ 47.800318][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 47.823848][ T912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.824651][ T912] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 47.831216][ T912] rust_binder: Error while translating object. [ 47.841798][ T912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.842615][ T45] usb 4-1: device descriptor read/8, error -71 [ 47.847971][ T912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 47.871995][ T912] SELinux: failed to load policy [ 47.901404][ T912] rust_binder: Error in use_page_slow: ESRCH [ 47.901420][ T912] rust_binder: use_range failure ESRCH [ 47.907405][ T912] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 47.912972][ T912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 47.920713][ T912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:130 [ 47.980500][ T45] usb 4-1: device descriptor read/8, error -71 [ 48.229204][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 48.244467][ T919] binder: Unknown parameter 's~cl' [ 48.250860][ T45] usb 4-1: device descriptor read/8, error -71 [ 48.262365][ T335] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 48.276746][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 48.276764][ T36] audit: type=1400 audit(1756468631.620:257): avc: denied { create } for pid=923 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.302078][ T36] audit: type=1400 audit(1756468631.620:258): avc: denied { read } for pid=923 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.380644][ T45] usb 4-1: device descriptor read/8, error -71 [ 48.449201][ T335] usb 2-1: device descriptor read/64, error -71 [ 48.489295][ T45] usb usb4-port1: unable to enumerate USB device [ 48.689236][ T335] usb 2-1: device descriptor read/64, error -71 [ 48.929211][ T335] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 49.059202][ T335] usb 2-1: device descriptor read/64, error -71 [ 49.124573][ T36] audit: type=1400 audit(1756468632.470:259): avc: denied { append } for pid=929 comm="syz.2.203" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.156782][ T930] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 49.158714][ T934] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 49.168140][ T934] rust_binder: Error while translating object. [ 49.178875][ T934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.185794][ T934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 49.209478][ T934] SELinux: failed to load policy [ 49.221653][ T10] rust_binder: 931: removing orphan mapping 0:4120 [ 49.232931][ T36] audit: type=1400 audit(1756468632.580:260): avc: denied { mounton } for pid=943 comm="syz.4.207" path="/46/file0" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 49.281493][ T934] rust_binder: Error in use_page_slow: ESRCH [ 49.281509][ T934] rust_binder: use_range failure ESRCH [ 49.287508][ T934] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 49.293187][ T934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 49.300933][ T934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:189 [ 49.319186][ T335] usb 2-1: device descriptor read/64, error -71 [ 49.439271][ T335] usb usb2-port1: attempt power cycle [ 49.599253][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 49.750330][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.760476][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.769959][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 49.779057][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.787107][ T335] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 49.794736][ T10] usb 5-1: SerialNumber: syz [ 49.820248][ T335] usb 2-1: device descriptor read/8, error -71 [ 49.937812][ T967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 49.985472][ T335] usb 2-1: device descriptor read/8, error -71 [ 50.003952][ T10] usb 5-1: 0:2 : does not exist [ 50.010910][ T10] usb 5-1: USB disconnect, device number 12 [ 50.018355][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.231415][ T335] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 50.243647][ T982] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 50.243668][ T982] rust_binder: Error while translating object. [ 50.254309][ T982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.261023][ T982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 50.272320][ T335] usb 2-1: device descriptor read/8, error -71 [ 50.295067][ T982] SELinux: failed to load policy [ 50.332128][ T982] rust_binder: Error in use_page_slow: ESRCH [ 50.332154][ T982] rust_binder: use_range failure ESRCH [ 50.338206][ T982] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 50.343906][ T982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.351713][ T982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:206 [ 50.410569][ T335] usb 2-1: device descriptor read/8, error -71 [ 50.463731][ T36] audit: type=1400 audit(1756468633.810:261): avc: denied { bind } for pid=995 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.479642][ T996] rust_binder: Write failure EFAULT in pid:220 [ 50.484755][ T36] audit: type=1400 audit(1756468633.830:262): avc: denied { setopt } for pid=995 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.512089][ T1000] rust_binder: Error while translating object. [ 50.512119][ T1000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.518482][ T1000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 50.529291][ T335] usb usb2-port1: unable to enumerate USB device [ 50.602025][ T1004] usb usb8: usbfs: process 1004 (syz.3.226) did not claim interface 0 before use [ 50.610708][ T1005] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 50.611212][ T1005] rust_binder: Error while translating object. [ 50.616637][ T335] rust_binder: 1001: removing orphan mapping 0:8 [ 50.622518][ T1005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.634393][ T1005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 50.649446][ T1009] rust_binder: 231: no such ref 0 [ 50.669524][ T1005] SELinux: failed to load policy [ 50.710930][ T1005] rust_binder: Error in use_page_slow: ESRCH [ 50.710947][ T1005] rust_binder: use_range failure ESRCH [ 50.717018][ T1005] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 50.722502][ T1005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.730268][ T1005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:151 [ 50.989914][ T36] audit: type=1400 audit(1756468634.340:263): avc: denied { unlink } for pid=1017 comm="syz.2.232" name="#5" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.021915][ T1018] binder: Unknown parameter 'binder' [ 51.022266][ T36] audit: type=1400 audit(1756468634.340:264): avc: denied { mount } for pid=1017 comm="syz.2.232" name="/" dev="overlay" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.050443][ T36] audit: type=1400 audit(1756468634.340:265): avc: denied { unmount } for pid=1017 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.068544][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 51.109243][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 51.249222][ T45] usb 4-1: device descriptor read/64, error -71 [ 51.389198][ T329] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 51.489239][ T45] usb 4-1: device descriptor read/64, error -71 [ 51.540251][ T329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.550415][ T329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.560002][ T329] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 51.569079][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.577100][ T329] usb 2-1: SerialNumber: syz [ 51.634501][ T1031] rust_binder: Error while translating object. [ 51.634541][ T1031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.641001][ T1031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 51.728462][ T1036] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 51.737693][ T1036] rust_binder: Error while translating object. [ 51.748499][ T1036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.749249][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 51.754884][ T1036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 51.782755][ T1036] SELinux: failed to load policy [ 51.794064][ T329] usb 2-1: 0:2 : does not exist [ 51.807222][ T329] usb 2-1: USB disconnect, device number 15 [ 51.816719][ T1036] rust_binder: Error in use_page_slow: ESRCH [ 51.816745][ T1036] rust_binder: use_range failure ESRCH [ 51.819070][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.822988][ T1036] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 51.849013][ T1036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.856974][ T1036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:162 [ 51.879903][ T36] audit: type=1400 audit(1756468635.230:266): avc: denied { connect } for pid=1038 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.899730][ T45] usb 4-1: device descriptor read/64, error -71 [ 51.932396][ T1041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.241'. [ 51.956167][ T1041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.241'. [ 51.982112][ T1045] 9pnet: Could not find request transport: rdma [ 52.159265][ T45] usb 4-1: device descriptor read/64, error -71 [ 52.189243][ T63] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 52.269297][ T45] usb usb4-port1: attempt power cycle [ 52.319244][ T63] usb 5-1: device descriptor read/64, error -71 [ 52.560002][ T63] usb 5-1: device descriptor read/64, error -71 [ 52.599236][ T329] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 52.609300][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 52.633617][ T45] usb 4-1: device descriptor read/8, error -71 [ 52.637310][ T1055] No source specified [ 52.751637][ T329] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 52.771038][ T329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.781854][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 52.799481][ T45] usb 4-1: device descriptor read/8, error -71 [ 52.805763][ T329] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 52.815017][ T63] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 52.824219][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.837456][ T329] usb 2-1: config 0 descriptor?? [ 52.845016][ T329] usb-storage 2-1:0.0: USB Mass Storage device detected [ 52.859870][ T329] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 52.969188][ T63] usb 5-1: device descriptor read/64, error -71 [ 53.039209][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 53.062469][ T9] usb 2-1: USB disconnect, device number 16 [ 53.070271][ T45] usb 4-1: device descriptor read/8, error -71 [ 53.200241][ T45] usb 4-1: device descriptor read/8, error -71 [ 53.209186][ T63] usb 5-1: device descriptor read/64, error -71 [ 53.309341][ T45] usb usb4-port1: unable to enumerate USB device [ 53.319484][ T63] usb usb5-port1: attempt power cycle [ 53.659209][ T63] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 53.700181][ T63] usb 5-1: device descriptor read/8, error -71 [ 53.794605][ T1070] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.794631][ T1070] rust_binder: Read failure Err(EFAULT) in pid:237 [ 53.802873][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 53.802891][ T36] audit: type=1400 audit(1756468637.140:269): avc: denied { read } for pid=1069 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.841731][ T63] usb 5-1: device descriptor read/8, error -71 [ 53.842601][ T1073] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 53.848112][ T1073] rust_binder: Error while translating object. [ 53.863136][ T36] audit: type=1400 audit(1756468637.140:270): avc: denied { write } for pid=1069 comm="syz.3.253" path="socket:[10551]" dev="sockfs" ino=10551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.892829][ T1073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.892870][ T1073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 53.918342][ T1073] SELinux: failed to load policy [ 53.955797][ T1073] rust_binder: Error in use_page_slow: ESRCH [ 53.955813][ T1073] rust_binder: use_range failure ESRCH [ 53.961950][ T1073] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 53.967436][ T1073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 53.975194][ T1073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:145 [ 54.079220][ T63] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 54.110176][ T63] usb 5-1: device descriptor read/8, error -71 [ 54.189230][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 54.250242][ T63] usb 5-1: device descriptor read/8, error -71 [ 54.289194][ T613] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 54.340269][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.350399][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.360076][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 54.369187][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.369323][ T63] usb usb5-port1: unable to enumerate USB device [ 54.377171][ T10] usb 2-1: SerialNumber: syz [ 54.459975][ T613] usb 3-1: Using ep0 maxpacket: 16 [ 54.466327][ T613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 54.477192][ T613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 54.490111][ T613] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 54.499356][ T613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.507894][ T613] usb 3-1: config 0 descriptor?? [ 54.513889][ T613] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 54.559209][ T45] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 54.584238][ T10] usb 2-1: 0:2 : does not exist [ 54.591076][ T10] usb 2-1: USB disconnect, device number 17 [ 54.601886][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.689237][ T45] usb 4-1: device descriptor read/64, error -71 [ 54.929216][ T45] usb 4-1: device descriptor read/64, error -71 [ 55.151528][ T1090] overlayfs: conflicting lowerdir path [ 55.169549][ T45] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 55.299215][ T45] usb 4-1: device descriptor read/64, error -71 [ 55.359195][ T613] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 55.399213][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 55.509183][ T613] usb 5-1: Invalid ep0 maxpacket: 16 [ 55.539210][ T45] usb 4-1: device descriptor read/64, error -71 [ 55.559190][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 55.565572][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 55.576103][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 55.585271][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.593428][ T10] usb 2-1: Product: syz [ 55.597670][ T10] usb 2-1: Manufacturer: syz [ 55.602351][ T10] usb 2-1: SerialNumber: syz [ 55.607348][ T10] usb 2-1: config 0 descriptor?? [ 55.614017][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 55.621839][ T10] usb 2-1: Detected FT232B [ 55.639194][ T613] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 55.649336][ T45] usb usb4-port1: attempt power cycle [ 55.789197][ T613] usb 5-1: Invalid ep0 maxpacket: 16 [ 55.794671][ T613] usb usb5-port1: attempt power cycle [ 55.814300][ T1094] fuse: Bad value for 'fd' [ 55.820135][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 55.829581][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 55.837889][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 55.849719][ T10] usb 2-1: USB disconnect, device number 18 [ 55.857232][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 55.866847][ T10] ftdi_sio 2-1:0.0: device disconnected [ 55.999187][ T45] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 56.020313][ T45] usb 4-1: device descriptor read/8, error -71 [ 56.149257][ T613] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 56.157547][ T45] usb 4-1: device descriptor read/8, error -71 [ 56.169542][ T613] usb 5-1: Invalid ep0 maxpacket: 16 [ 56.299210][ T613] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 56.319530][ T613] usb 5-1: Invalid ep0 maxpacket: 16 [ 56.324903][ T613] usb usb5-port1: unable to enumerate USB device [ 56.399248][ T45] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 56.420268][ T45] usb 4-1: device descriptor read/8, error -71 [ 56.550230][ T45] usb 4-1: device descriptor read/8, error -71 [ 56.649686][ T36] audit: type=1400 audit(1756468640.000:271): avc: denied { ioctl } for pid=1108 comm="syz.1.265" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.679404][ T45] usb usb4-port1: unable to enumerate USB device [ 56.801802][ T1109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.810342][ T1109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.045700][ T9] usb 3-1: USB disconnect, device number 17 [ 57.379191][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 57.509188][ T9] usb 3-1: device descriptor read/64, error -71 [ 57.709206][ T45] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 57.749177][ T9] usb 3-1: device descriptor read/64, error -71 [ 57.839189][ T45] usb 4-1: device descriptor read/64, error -71 [ 57.989183][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 57.993253][ T1119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:169 [ 58.079405][ T45] usb 4-1: device descriptor read/64, error -71 [ 58.129339][ T9] usb 3-1: device descriptor read/64, error -71 [ 58.141473][ T36] audit: type=1400 audit(1756468641.490:272): avc: denied { connect } for pid=1124 comm="syz.4.272" lport=57 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.196992][ T36] audit: type=1400 audit(1756468641.540:273): avc: denied { listen } for pid=1126 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.216579][ T36] audit: type=1400 audit(1756468641.540:274): avc: denied { accept } for pid=1126 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.349209][ T45] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 58.379245][ T9] usb 3-1: device descriptor read/64, error -71 [ 58.479273][ T45] usb 4-1: device descriptor read/64, error -71 [ 58.489361][ T9] usb usb3-port1: attempt power cycle [ 58.539213][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 58.690215][ T10] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 58.700664][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.710308][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 58.719212][ T45] usb 4-1: device descriptor read/64, error -71 [ 58.719480][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 58.733737][ T10] usb 5-1: SerialNumber: syz [ 58.829298][ T45] usb usb4-port1: attempt power cycle [ 58.829837][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 58.860085][ T9] usb 3-1: device descriptor read/8, error -71 [ 58.940793][ T10] usb 5-1: 0:2 : does not exist [ 58.948667][ T10] usb 5-1: unit 255 not found! [ 58.956095][ T10] usb 5-1: USB disconnect, device number 21 [ 58.965818][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.990177][ T9] usb 3-1: device descriptor read/8, error -71 [ 59.038843][ T1133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.039315][ T1132] rust_binder: Error in use_page_slow: ESRCH [ 59.045747][ T1132] rust_binder: use_range failure ESRCH [ 59.052011][ T1132] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 59.059366][ T1132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.067708][ T1132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180 [ 59.169226][ T45] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 59.200279][ T45] usb 4-1: device descriptor read/8, error -71 [ 59.229257][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 59.250152][ T9] usb 3-1: device descriptor read/8, error -71 [ 59.329216][ T335] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 59.330211][ T45] usb 4-1: device descriptor read/8, error -71 [ 59.380311][ T9] usb 3-1: device descriptor read/8, error -71 [ 59.479229][ T335] usb 2-1: Using ep0 maxpacket: 32 [ 59.485562][ T335] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 59.493944][ T335] usb 2-1: config 0 has no interface number 0 [ 59.500171][ T9] usb usb3-port1: unable to enumerate USB device [ 59.506614][ T335] usb 2-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 59.517076][ T335] usb 2-1: config 0 interface 214 has no altsetting 0 [ 59.525359][ T335] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 59.534418][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.542551][ T335] usb 2-1: Product: syz [ 59.546705][ T335] usb 2-1: Manufacturer: syz [ 59.551306][ T335] usb 2-1: SerialNumber: syz [ 59.556566][ T335] usb 2-1: config 0 descriptor?? [ 59.561944][ T1136] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 59.589237][ T45] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 59.612956][ T45] usb 4-1: device descriptor read/8, error -71 [ 59.620651][ T1140] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 59.750202][ T45] usb 4-1: device descriptor read/8, error -71 [ 59.769716][ T1136] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 59.859274][ T45] usb usb4-port1: unable to enumerate USB device [ 60.076188][ T1144] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 60.089035][ T1145] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 60.109025][ T1147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 60.110380][ T1149] incfs: mount failed -22 [ 60.122306][ T1149] incfs: mount failed -22 [ 60.126683][ T1149] incfs: mount failed -22 [ 60.131158][ T1149] incfs: mount failed -22 [ 60.135561][ T1149] incfs: mount failed -22 [ 60.140032][ T1149] incfs: mount failed -22 [ 60.144432][ T1149] incfs: mount failed -22 [ 60.148832][ T1149] incfs: mount failed -22 [ 60.153296][ T1149] incfs: mount failed -22 [ 60.157702][ T1149] incfs: mount failed -22 [ 60.162241][ T1149] incfs: mount failed -22 [ 60.166666][ T1149] incfs: mount failed -22 [ 60.171703][ T1149] incfs: mount failed -22 [ 60.176113][ T1149] incfs: mount failed -22 [ 60.180816][ T1149] incfs: mount failed -22 [ 60.185310][ T1149] incfs: mount failed -22 [ 60.190747][ T1149] incfs: mount failed -22 [ 60.195220][ T1149] incfs: mount failed -22 [ 60.199905][ T1149] incfs: mount failed -22 [ 60.204397][ T1149] incfs: mount failed -22 [ 60.208875][ T1149] incfs: mount failed -22 [ 60.213726][ T1149] incfs: mount failed -22 [ 60.218201][ T1149] incfs: mount failed -22 [ 60.222888][ T1149] incfs: mount failed -22 [ 60.225306][ T1156] input: syz1 as /devices/virtual/input/input9 [ 60.227359][ T1149] incfs: mount failed -22 [ 60.238258][ T1149] incfs: mount failed -22 [ 60.242802][ T1149] incfs: mount failed -22 [ 60.247445][ T1149] incfs: mount failed -22 [ 60.252069][ T1149] incfs: mount failed -22 [ 60.256675][ T1149] incfs: mount failed -22 [ 60.261717][ T1149] incfs: mount failed -22 [ 60.266195][ T1149] incfs: mount failed -22 [ 60.270726][ T1149] incfs: mount failed -22 [ 60.275136][ T1149] incfs: mount failed -22 [ 60.279634][ T1149] incfs: mount failed -22 [ 60.284051][ T1149] incfs: mount failed -22 [ 60.288459][ T1149] incfs: mount failed -22 [ 60.292889][ T1149] incfs: mount failed -22 [ 60.297301][ T1149] incfs: mount failed -22 [ 60.301774][ T1149] incfs: mount failed -22 [ 60.306225][ T1149] incfs: mount failed -22 [ 60.310745][ T1149] incfs: mount failed -22 [ 60.315125][ T1149] incfs: mount failed -22 [ 60.319602][ T1149] incfs: mount failed -22 [ 60.323993][ T1149] incfs: mount failed -22 [ 60.328453][ T1149] incfs: mount failed -22 [ 60.333081][ T1149] incfs: mount failed -22 [ 60.337715][ T1149] incfs: mount failed -22 [ 60.342691][ T1149] incfs: mount failed -22 [ 60.344942][ T1160] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 60.347179][ T1149] incfs: mount failed -22 [ 60.359621][ T1149] incfs: mount failed -22 [ 60.364125][ T1149] incfs: mount failed -22 [ 60.368728][ T1149] incfs: mount failed -22 [ 60.373443][ T1149] incfs: mount failed -22 [ 60.377930][ T1149] incfs: mount failed -22 [ 60.380523][ T36] audit: type=1326 audit(1756468643.720:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1159 comm="syz.3.284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31fc78ebe9 code=0x0 [ 60.382768][ T1149] incfs: mount failed -22 [ 60.409450][ T1149] incfs: mount failed -22 [ 60.413926][ T1149] incfs: mount failed -22 [ 60.418411][ T1149] incfs: mount failed -22 [ 60.422858][ T1149] incfs: mount failed -22 [ 60.427370][ T1149] incfs: mount failed -22 [ 60.431850][ T1149] incfs: mount failed -22 [ 60.436239][ T1149] incfs: mount failed -22 [ 60.479453][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.699471][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 60.710663][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 60.721505][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 60.732386][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 60.743552][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 60.754631][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.765521][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 60.773362][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.784669][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.795812][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.806703][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 60.814619][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 60.825764][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.836881][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 60.847950][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 60.858953][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 60.870026][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.881170][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 60.892275][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 60.903322][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 60.914507][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 60.925592][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 60.936742][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 60.947991][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 60.959047][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 60.969956][ T9] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 60.980294][ T10] usb 3-1: device descriptor read/64, error -71 [ 60.986572][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.995463][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 61.006665][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 61.017978][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 61.018057][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 61.038495][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 61.046604][ T335] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 61.057374][ T9] usb 5-1: SerialNumber: syz [ 61.063273][ T335] ax88179_178a 2-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 16:8e:7b:22:c0:8e [ 61.082083][ T335] usb 2-1: USB disconnect, device number 20 [ 61.088368][ T335] ax88179_178a 2-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 61.124584][ T36] audit: type=1400 audit(1756468644.470:276): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 61.197894][ T36] audit: type=1400 audit(1756468644.540:277): avc: denied { write } for pid=1170 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.229226][ T10] usb 3-1: device descriptor read/64, error -71 [ 61.281215][ T9] usb 5-1: 0:2 : does not exist [ 61.286089][ T9] usb 5-1: unit 255 not found! [ 61.295241][ T9] usb 5-1: USB disconnect, device number 22 [ 61.302871][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.429245][ T335] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 61.469276][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 61.479195][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 61.580447][ T335] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 61.589225][ T335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.599498][ T10] usb 3-1: device descriptor read/64, error -71 [ 61.606206][ T335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.616658][ T335] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.625711][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.633698][ T335] usb 2-1: Product: syz [ 61.637919][ T335] usb 2-1: Manufacturer: syz [ 61.642585][ T335] usb 2-1: SerialNumber: syz [ 61.649212][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 61.655584][ T45] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 61.663795][ T45] usb 4-1: config 0 has no interface number 0 [ 61.669943][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.680892][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.690688][ T45] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.703479][ T45] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 61.712535][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.721405][ T45] usb 4-1: config 0 descriptor?? [ 61.839248][ T10] usb 3-1: device descriptor read/64, error -71 [ 61.863499][ T1185] rust_binder: Write failure EFAULT in pid:191 [ 61.877663][ T1187] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227) [ 61.883944][ T1187] rust_binder: Error while translating object. [ 61.894577][ T1187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.900797][ T1187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 61.942263][ T1187] rust_binder: Error in use_page_slow: ESRCH [ 61.951484][ T1187] rust_binder: use_range failure ESRCH [ 61.957510][ T1187] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 61.963182][ T10] usb usb3-port1: attempt power cycle [ 61.971025][ T1187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.976456][ T1187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:193 [ 62.068361][ T335] usb 2-1: 0:2 : does not exist [ 62.075102][ T36] audit: type=1400 audit(1756468645.420:278): avc: denied { accept } for pid=1189 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.130528][ T45] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 62.138071][ T45] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 62.145579][ T45] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 62.153191][ T45] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 62.161442][ T45] holtek_mouse 0003:04D9:A072.0006: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.3-1/input1 [ 62.220302][ T335] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 62.232174][ T335] usb 2-1: USB disconnect, device number 21 [ 62.309207][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 62.309206][ T63] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 62.330222][ T10] usb 3-1: device descriptor read/8, error -71 [ 62.337100][ T36] audit: type=1400 audit(1756468645.680:279): avc: denied { mounton } for pid=1177 comm="syz.3.290" path="/syzcgroup/unified/syz3" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 62.337941][ T9] usb 4-1: USB disconnect, device number 29 [ 62.460300][ T10] usb 3-1: device descriptor read/8, error -71 [ 62.470641][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 62.478765][ T63] usb 5-1: not running at top speed; connect to a high speed hub [ 62.487349][ T63] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 62.495576][ T63] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 62.505692][ T63] usb 5-1: config 4 has no interface number 0 [ 62.513879][ T63] usb 5-1: string descriptor 0 read error: -22 [ 62.520134][ T63] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 62.529203][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.541212][ T63] usb 5-1: Found UVC 0.00 device (04f2:b746) [ 62.548136][ T63] usb 5-1: No valid video chain found. [ 62.699249][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 62.720377][ T10] usb 3-1: device descriptor read/8, error -71 [ 62.742851][ T1190] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 62.756199][ T63] usb 5-1: USB disconnect, device number 23 [ 62.819232][ T9] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 62.850704][ T10] usb 3-1: device descriptor read/8, error -71 [ 62.959298][ T10] usb usb3-port1: unable to enumerate USB device [ 62.979533][ T9] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 62.987832][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 62.999332][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 62.999785][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 63.019970][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 63.028760][ T1217] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 63.044030][ T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 63.050088][ T1213] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 63.054080][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.070221][ T9] usb 2-1: Product: syz [ 63.074409][ T9] usb 2-1: Manufacturer: syz [ 63.079014][ T9] usb 2-1: SerialNumber: syz [ 63.084626][ T9] usb 2-1: config 0 descriptor?? [ 63.249180][ T63] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 63.291801][ T9] usb 2-1: USB disconnect, device number 22 [ 63.400203][ T63] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.410324][ T63] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.419940][ T63] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.428983][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.437015][ T63] usb 4-1: SerialNumber: syz [ 63.646556][ T63] usb 4-1: 0:2 : does not exist [ 63.669304][ T63] usb 4-1: USB disconnect, device number 30 [ 63.683909][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.825747][ T1236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.826298][ T1236] rust_binder: Error in use_page_slow: ESRCH [ 63.833129][ T1236] rust_binder: use_range failure ESRCH [ 63.839456][ T1236] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 63.845004][ T1236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 63.853291][ T1236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:199 [ 63.891145][ T1239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 63.910088][ T36] audit: type=1400 audit(1756468647.260:280): avc: denied { execute_no_trans } for pid=1238 comm="syz.2.307" path="/61/file1" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.914802][ T1239] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 246) [ 63.933339][ T1239] rust_binder: Error while translating object. [ 63.943995][ T1239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.952729][ T1239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 63.960844][ T36] audit: type=1400 audit(1756468647.300:281): avc: denied { create } for pid=1240 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 63.997726][ T36] audit: type=1400 audit(1756468647.340:282): avc: denied { sys_admin } for pid=1240 comm="syz.1.308" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.027482][ T1247] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.034503][ T1247] rust_binder: Error in use_page_slow: ESRCH [ 64.034529][ T1247] rust_binder: use_range failure ESRCH [ 64.040740][ T1247] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 64.046228][ T1247] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 64.054820][ T1247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:232 [ 64.066234][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.078481][ T1251] 9pnet_fd: Insufficient options for proto=fd [ 64.082535][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.095915][ T1249] bridge0: entered allmulticast mode [ 64.107964][ T1247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 64.150078][ T1255] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 64.150107][ T1255] rust_binder: Error while translating object. [ 64.162764][ T1255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.169021][ T1255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 64.215707][ T36] audit: type=1400 audit(1756468647.560:283): avc: denied { create } for pid=1259 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 64.370653][ T1262] netlink: 'syz.3.314': attribute type 29 has an invalid length. [ 64.378466][ T1262] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.314'. [ 64.389353][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 64.419195][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 64.459210][ T335] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 64.539236][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 64.545476][ T9] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 64.555674][ T9] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 64.564779][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 64.573809][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.581901][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 64.588590][ T10] usb 3-1: config 1 interface 0 altsetting 73 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 64.600455][ T10] usb 3-1: config 1 interface 0 altsetting 73 endpoint 0x82 has invalid maxpacket 1032, setting to 1024 [ 64.611692][ T10] usb 3-1: config 1 interface 0 altsetting 73 bulk endpoint 0x82 has invalid maxpacket 1024 [ 64.621793][ T10] usb 3-1: config 1 interface 0 altsetting 73 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 64.634765][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 64.639910][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 64.647616][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.658569][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.668420][ T335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.681263][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.690319][ T335] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.699622][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.707623][ T10] usb 3-1: Product: syz [ 64.711846][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.719851][ T10] usb 3-1: Manufacturer: ю [ 64.724335][ T10] usb 3-1: SerialNumber: syz [ 64.729837][ T335] usb 2-1: config 0 descriptor?? [ 64.735349][ T1255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 64.742595][ T1255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 64.951187][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 65.100502][ T36] audit: type=1400 audit(1756468648.450:284): avc: denied { wake_alarm } for pid=1268 comm="syz.3.317" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.102109][ T1269] input: syz1 as /devices/virtual/input/input10 [ 65.140664][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.147874][ T335] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 65.157692][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.171660][ T10] usb 3-1: USB disconnect, device number 26 [ 65.178365][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.188560][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.196724][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.204045][ T1279] binder: Unknown parameter 'ma ' [ 65.209161][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.216385][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.226135][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.233580][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.241873][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 65.249332][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.256523][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.264156][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.274221][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.281894][ T1283] fido_id[1283]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.286243][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.304417][ T335] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.339615][ T1261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.348291][ T1261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.372918][ T1290] tmpfs: Unknown parameter 'FҖ:Vt?.Qq(%VN(yuL@$p5c' [ 65.376386][ T335] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 65.399384][ T335] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 65.411007][ T335] microsoft 0003:045E:07DA.0007: no inputs found [ 65.411195][ T291] ------------[ cut here ]------------ [ 65.417357][ T335] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 65.420254][ T335] usb 2-1: USB disconnect, device number 23 [ 65.422889][ T291] WARNING: CPU: 1 PID: 291 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 65.438773][ T1292] fido_id[1292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 65.446794][ T291] Modules linked in: [ 65.446814][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 65.446845][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.446858][ T291] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 65.492755][ T291] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 65.512580][ T291] RSP: 0018:ffffc9000b70fb68 EFLAGS: 00010293 [ 65.518664][ T291] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff888101f7df00 [ 65.526732][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.534808][ T291] RBP: ffffc9000b70fb90 R08: ffff88811b480f3f R09: 1ffff110236901e7 [ 65.542790][ T291] R10: dffffc0000000000 R11: ffffed10236901e8 R12: 0000000000000000 [ 65.550790][ T291] R13: dffffc0000000000 R14: ffff88811b480ea0 R15: ffff888113074aa0 [ 65.558758][ T291] FS: 0000555564297500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 65.567692][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.574291][ T291] CR2: 00007fe27b0c1b08 CR3: 000000010237e000 CR4: 00000000003526b0 [ 65.582282][ T291] Call Trace: [ 65.585567][ T291] [ 65.588479][ T291] ovl_do_remove+0x7b8/0xcf0 [ 65.593091][ T291] ? ovl_set_redirect+0x780/0x780 [ 65.598133][ T291] ? down_write+0xe9/0x2a0 [ 65.602556][ T291] ? __cfi_down_write+0x10/0x10 [ 65.607405][ T291] ovl_rmdir+0x1e/0x30 [ 65.611488][ T291] vfs_rmdir+0x3e0/0x560 [ 65.615727][ T291] incfs_kill_sb+0x109/0x230 [ 65.620335][ T291] deactivate_locked_super+0xd5/0x2a0 [ 65.625703][ T291] deactivate_super+0xb8/0xe0 [ 65.630387][ T291] cleanup_mnt+0x3f1/0x480 [ 65.634797][ T291] __cleanup_mnt+0x1d/0x40 [ 65.639246][ T291] task_work_run+0x1e3/0x250 [ 65.643834][ T291] ? __cfi_task_work_run+0x10/0x10 [ 65.648929][ T291] ? __x64_sys_umount+0x126/0x170 [ 65.653993][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 65.659387][ T291] ? __kasan_check_read+0x15/0x20 [ 65.664406][ T291] resume_user_mode_work+0x36/0x50 [ 65.669531][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 65.674986][ T291] do_syscall_64+0x64/0xf0 [ 65.679431][ T291] ? clear_bhb_loop+0x50/0xa0 [ 65.684138][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.690112][ T291] RIP: 0033:0x7f31fc78ff17 [ 65.694631][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 65.714280][ T291] RSP: 002b:00007ffdec599108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 65.722716][ T291] RAX: 0000000000000000 RBX: 00007f31fc811c05 RCX: 00007f31fc78ff17 [ 65.730726][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdec5991c0 [ 65.738711][ T291] RBP: 00007ffdec5991c0 R08: 0000000000000000 R09: 0000000000000000 [ 65.746686][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdec59a250 [ 65.754690][ T291] R13: 00007f31fc811c05 R14: 000000000000ff53 R15: 00007ffdec59a290 [ 65.762685][ T291] [ 65.765722][ T291] ---[ end trace 0000000000000000 ]--- [ 65.771468][ T291] ------------[ cut here ]------------ [ 65.777015][ T291] WARNING: CPU: 0 PID: 291 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 65.786338][ T291] Modules linked in: [ 65.790250][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 65.803551][ T291] Tainted: [W]=WARN [ 65.807345][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.817419][ T291] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 65.823089][ T291] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 65.842740][ T291] RSP: 0018:ffffc9000b70fb68 EFLAGS: 00010293 [ 65.848823][ T291] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff888101f7df00 [ 65.856816][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.864799][ T291] RBP: ffffc9000b70fb90 R08: ffff88811b480f3f R09: 1ffff110236901e7 [ 65.872799][ T291] R10: dffffc0000000000 R11: ffffed10236901e8 R12: 0000000000000000 [ 65.880791][ T291] R13: dffffc0000000000 R14: ffff88811b480ea0 R15: ffff888113074aa0 [ 65.888751][ T291] FS: 0000555564297500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.897692][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.904329][ T291] CR2: 00007f5e8bf84198 CR3: 000000010237e000 CR4: 00000000003526b0 [ 65.912363][ T291] Call Trace: [ 65.915648][ T291] [ 65.918583][ T291] ovl_do_remove+0x7b8/0xcf0 [ 65.923178][ T291] ? ovl_set_redirect+0x780/0x780 [ 65.928204][ T291] ? down_write+0xe9/0x2a0 [ 65.932617][ T291] ? __cfi_down_write+0x10/0x10 [ 65.937458][ T291] ovl_rmdir+0x1e/0x30 [ 65.941524][ T291] vfs_rmdir+0x3e0/0x560 [ 65.945763][ T291] incfs_kill_sb+0x1a0/0x230 [ 65.950356][ T291] deactivate_locked_super+0xd5/0x2a0 [ 65.955723][ T291] deactivate_super+0xb8/0xe0 [ 65.960410][ T291] cleanup_mnt+0x3f1/0x480 [ 65.964841][ T291] __cleanup_mnt+0x1d/0x40 [ 65.969273][ T291] task_work_run+0x1e3/0x250 [ 65.973867][ T291] ? __cfi_task_work_run+0x10/0x10 [ 65.979003][ T291] ? __x64_sys_umount+0x126/0x170 [ 65.984090][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 65.989492][ T291] ? __kasan_check_read+0x15/0x20 [ 65.994510][ T291] resume_user_mode_work+0x36/0x50 [ 65.999648][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 66.005104][ T291] do_syscall_64+0x64/0xf0 [ 66.009528][ T291] ? clear_bhb_loop+0x50/0xa0 [ 66.014201][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.020101][ T291] RIP: 0033:0x7f31fc78ff17 [ 66.024512][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 66.044139][ T291] RSP: 002b:00007ffdec599108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 66.052572][ T291] RAX: 0000000000000000 RBX: 00007f31fc811c05 RCX: 00007f31fc78ff17 [ 66.060736][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdec5991c0 [ 66.068708][ T291] RBP: 00007ffdec5991c0 R08: 0000000000000000 R09: 0000000000000000 [ 66.076865][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdec59a250 [ 66.084946][ T291] R13: 00007f31fc811c05 R14: 000000000000ff53 R15: 00007ffdec59a290 [ 66.092992][ T291] [ 66.096004][ T291] ---[ end trace 0000000000000000 ]--- [ 67.137010][ T9] usb 5-1: USB disconnect, device number 24