last executing test programs: 37.611837843s ago: executing program 0 (id=101): io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000180)="1a41195a7e666cbf7633f5c2913497cc1f0c7f6ca5cfe0cb58e16bc23ff6f53de7c4f5956b42557bd78f21569a71f2ee17ca408c34c2610f10515bbd77c14168772a4b707c473bcd3503bb940249ea58c869cb0c54db93fbca57b88a0bdbd4f327070d319fb37a09b43ffab6c9c1b7e9ba985fc4e00156512696d9e2c14db73a1203f0445afd7515f9cbfaf06c0b", 0x8e, 0x1, 0x0, 0x1}]) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB='max=0000000\"000000000000000,\x00']) 37.609666733s ago: executing program 0 (id=102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x804, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x804, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) 37.601180943s ago: executing program 0 (id=103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xbc, 0x0, &(0x7f00000002c0)=[@acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/78, 0x4e, 0x2, 0x25}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x5, 0x1, 0x3b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}, @acquire_done={0x40106309, 0x1}, @register_looper, @register_looper], 0x0, 0x0, 0x0}) 37.584509183s ago: executing program 0 (id=104): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x2) 37.575096284s ago: executing program 0 (id=105): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x60000009, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mmap(&(0x7f0000aae000/0x2000)=nil, 0x2000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x142, 0x0, &(0x7f0000000580)="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"}) r0 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) madvise(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x12) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000004c40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x3, @loopback, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="180000370000006200000000000000"], 0x18}}], 0x1, 0x80040c4) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f737761702c0057eae6bb318c7b6bee5748952a8f4039003b76f36f17b11422fa3b60ea232a26bfd4c74a59861578665b351333125a92e2a47941e5211b9fc2858e17c8ab52f0514aa360ac0f1df7f91f3ecc8d5acb11ff2208b894be56fa346aae282b70c732f50df47c6f810fdba83d3d715998a131080e4c60cb66a67bf1c379024d11c2e3ef3b92b4c864388ab6f692abe63a0c0b161824cab1e4bd6ea3001aa3d8043cdba28f89b0301da9f992b27bf0f2b0af5a3e7efe25"]) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) preadv(r3, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 37.431166625s ago: executing program 0 (id=106): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x99b33000) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, &(0x7f0000000100)}) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'rose0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) bind$bt_hci(r3, &(0x7f00000002c0)={0x1f, 0x2}, 0x6) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000000)={0x4, [0xb, 0x6], 0x7}, 0x10) (async, rerun: 32) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg$unix(r3, &(0x7f0000000680)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000640)=""/24, 0x18}], 0x5, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x400000000000078, 0x30342, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10005}, 0x40c0) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x2e, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYRESOCT=r0, @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYRES64=r5], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async, rerun: 64) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0c000010", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf255a00000008000300", @ANYRES32, @ANYBLOB="0c009900020000002d000000"], 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 37.420746066s ago: executing program 32 (id=106): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x99b33000) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, &(0x7f0000000100)}) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'rose0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) bind$bt_hci(r3, &(0x7f00000002c0)={0x1f, 0x2}, 0x6) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000000)={0x4, [0xb, 0x6], 0x7}, 0x10) (async, rerun: 32) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg$unix(r3, &(0x7f0000000680)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000640)=""/24, 0x18}], 0x5, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x400000000000078, 0x30342, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10005}, 0x40c0) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x2e, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYRESOCT=r0, @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYRES64=r5], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async, rerun: 64) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0c000010", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf255a00000008000300", @ANYRES32, @ANYBLOB="0c009900020000002d000000"], 0x28}, 0x1, 0x0, 0x0, 0x48045}, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 19.23511474s ago: executing program 2 (id=306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x6, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x4, 0x0, 0x3}, 0xc) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) creat(0x0, 0x4) (async) close_range(0xffffffffffffffff, r0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x802, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async) bind$bt_l2cap(r2, &(0x7f0000000dc0)={0x1f, 0x4, @any, 0x9ffe}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x6000000}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r7, 0x0, 0xee01) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000900)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000fddbdf2500000000000000000000000000000000ac1414390000000000000000000000004e22000b4e2300040a00000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x800, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 18.063301297s ago: executing program 2 (id=315): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x10000, 0x10046, 0x1, 0x101, 0x0, 0x4, 0x0, 0x0, 0x2, 0x20004004}}, 0x50) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001300e999010000a7da00000000000000000000000000000000000000ac1e010100000000000000000000000000000000030000000a003030"], 0xb8}}, 0x20004010) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x32001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dd85a61ea545ac026d2833ec9ef20de9b45", @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setuid(0xee01) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="c000000000e500008489e4575621fd57b59f7ef438cc7b4f0d388c8938afdfbb66951d3109d88453789f89db520cf9fd5996d731a29b3a72f91241e87522dd04ed85b8a5fcf4f5c506d94d5dcdad2f7482b7a017cc79221cf223e6fce98b365a57e5193f357e979bdeceb2424315262211dbf293ccb7ab54b6ddd77f5a088f7b8c8f1ba4a4844fc87340ac078715cf49fb1cf2eb8530d5ede783f243c1a31127a3fff023e52684d27270364ce9d1961bfbe229f262903c7c238cc5103ad8a463fd", @ANYRES64=r6, @ANYBLOB="0300000000000000030000000000000008000000000000000700000000000000c0000000090000000000000000000000040000000000000008000000000000000300000000000000060000000000000008000000000000000200000006000000040000000010000000000080", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0002000005000000000000000400000000000000080000000000000013000000060000002e2f62696e64657266732f62696e64657230000000000000"], 0xc0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r10, @ANYRES16=r13, @ANYRESHEX=r9], 0x4c}}, 0x0) 18.062910267s ago: executing program 2 (id=316): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x9c, 0x0, &(0x7f0000000780)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/165, 0xa5, 0x2, 0x39}, @fda={0x66646185, 0x9, 0x2, 0xc}, @fda={0x66646185, 0x7, 0x0, 0x16}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/129, 0x81, 0x1, 0x16}, @flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000740)={0x0, 0x28, 0x40}}, 0x1200}], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0x40000023, 0x0, 0x80}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) close(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x19) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) setreuid(r5, 0xffffffffffffffff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/226, 0xe2, 0x1, 0x2f}, @fda={0x66646185, 0x0, 0x1, 0x9}, @flat=@handle={0x73682a85, 0x1000}}, &(0x7f0000000080)={0x0, 0x28, 0xfffffd82}}, 0x1000}], 0x0, 0x0, 0x0}) 17.935772679s ago: executing program 2 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a000d03"], 0x1c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x7, 0xfffffffc, 0x80, {{0x2b, 0x4, 0x3, 0x39, 0xac, 0x68, 0x0, 0x8, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x1c, 0x1d, 0x0, 0x8, [0xfffffe01, 0x5, 0x1, 0x25, 0x8, 0x3]}, @rr={0x7, 0x13, 0x7e, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xe1, 0x3, 0x3, [{@multicast2, 0x940}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x9}, {@private=0xa010100, 0x9}]}, @cipso={0x86, 0x15, 0x1, [{0x2, 0xf, "920191f394f0e01b848d2bbc9b"}]}, @timestamp_prespec={0x44, 0x2c, 0x2b, 0x3, 0x7, [{@private=0xa010100, 0x6}, {@local, 0x80000000}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xd9ac}, {@private=0xa010101, 0x7ade}]}, @generic={0x94, 0x9, "022902413352e2"}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b2, 0x0, 0x74d}]}) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5b0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) r8 = epoll_create1(0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r9, 0x4004556b, 0x8000000000000003) splice(r8, &(0x7f0000000080)=0x2000000000000000, 0xffffffffffffffff, &(0x7f0000000140)=0xcebc0000, 0x40, 0x5) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x4004000000000}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x80) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000000)={r10, 0x5, 0x0, 0xfffffffffffffffb}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000480)={0x5c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630e}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/209, 0xd1, 0x1, 0x29}, @fd={0x66642a85, 0x0, r12}, @flat=@binder={0x73622a85, 0x1001, 0x3}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 17.808063831s ago: executing program 2 (id=318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x2e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x4, &(0x7f00000001c0)=""/64, 0x40, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 17.663421333s ago: executing program 2 (id=319): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)={[{@noswap}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 5.114010806s ago: executing program 4 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0xf, 0x7, 0x9fc, 0x7ff, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0xa8, 0x4, 0x0, @private=0xa010100, @local, {[@timestamp_prespec={0x44, 0x14, 0xfb, 0x3, 0xc, [{@local, 0x1000}, {@multicast2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x8, 0x31, {{0x10, 0x4, 0x1, 0x9, 0x40, 0x66, 0x0, 0x8, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}, {[@lsrr={0x83, 0x1f, 0xb7, [@empty, @private=0xa010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @broadcast]}, @rr={0x7, 0xb, 0x1d, [@broadcast, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000010) r4 = syz_usb_connect$uac1(0x4, 0x9c, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xf7, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x2}, [@feature_unit={0x13, 0x24, 0x6, 0x5, 0x6, 0x6, [0x2, 0xa, 0x7, 0x3, 0x2, 0x8], 0xd2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x7, 0x4, "80d422b73f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xbc, 0x4, 0x10, {0x7, 0x25, 0x1, 0x2, 0x8, 0x3000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x1, 0x6, 0x6, "74db"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x1, 0x7, {0x7, 0x25, 0x1, 0x83, 0xc, 0xe6d9}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x2, 0x94, 0x4, 0x40, 0x8}, 0x19, &(0x7f0000000500)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xa3, "7e2546f21545290a81dbea68e4ed6027"}]}, 0x8, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x813}}, {0x67, &(0x7f0000000580)=@string={0x67, 0x3, "6a150d61119019017ade012bfd553ed07340af9133a1829eee258b1c201e2b481390e01d5114b0ec8418796141f8affc6f0ae06c898292f5d84f21ee843def31c5fc0fdc7273ed58eb43c492e56eeae63196f747dcccbc56a08198783b2758bcf2a79cdb4c"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x424}}, {0xe5, &(0x7f0000000640)=@string={0xe5, 0x3, "c13ff0978f864bc35d298fa294d92d1178c5a2c8bb210699353be5a4f4c4a3e742a3e694cd78020bd033a96b2c8d14ffef2b159d9adc66cdbb77c29e1097f84210383584791813b1f4ded62827ae5f320da7513bfae85f9da61517d1e8439038a06aed4b2d34af5546a6d1ab7e769b0a63b8f047c0b0226f819f07c5fa125d8b235d4f97d87d4d2ed126e873ea7bba112f5609f5732715b84a5f39277376171fbcce353689e269725a25d40b7f9d555ec61c1f2524959bf50fb035fa6940adc14921cd17dff98b530d2f0d7045a7c37a09304538646ba9d6d92494f91f152dcdfb8d53"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f00000008c0)={0x20, 0x7, 0xef, {0xef, 0x1, "01adee48bfd69b4becc22e655babad2883bd13a909e92e26f4420e3d7614275ecb4615bb6645770af9e29796fad45c2ef5c9f34428daa6ec213f4cdf3f720adc87c086925f096f373930e1b82d4766487b18374aa66d8cfdfec6c9e03c5fa4efeb840e46208666af1a52be43f4bb5e74d16fe436f1d26b25d794f1fc945748b2e1b851364a1c87904cc745f9288941432389d96fd1990c8feb614e5519bc4cb034205cc5499ae7d023865a09b8586c3ea276d52e3e9949c2fa3ffa1da622546c65a79ce5009954446d98861fe28a0979532122b56eb24555f4982926c492697603337cac2e88061265a360ad17"}}, &(0x7f00000009c0)={0x0, 0x3, 0x55, @string={0x55, 0x3, "82dcc977f861bafb02efe9fcdcb277750fe723b231c59c8e4b7c3e8b00a55b1a264f8ab78697bbf6a39beedd3ea200d2de022e46d95fecf152eab0ea0180490f0aa7a0d4305e3b8fdade72c690b3ce76626c80"}}, &(0x7f0000000a40)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0x7, 0x5}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x5, 0xf9, "46ff8b91", "724bf1c1"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x0, 0x5, 0x5, 0x5, 0x80, 0x9}}}, &(0x7f0000001000)={0x84, &(0x7f0000000b40)={0x20, 0x15, 0xe5, "b38fb80d9f12104ef54cc948fc02b34100aa3f16a3f4742ba1ae428cbcb1930471046c115b3061c70b9e7080e19b5fe90b513b7dddc8b02ba6f2c44e44d5479b2c431689faac5ed0fd1f32273d1581e020978adf0c8de771df4f95e4fb5393b46e4508929830b2cc5fcd1204c1b7dcf45a0f44c5b66336faf2f32ffc4267b338f761583835a100fada2c61311bebb199453538854fe0379979f673fdd831cd3eb65278e5022f5387bbb93b30b4b67155361b13b019284cecc8b6fba6dfdb94ad04f8fe0e345f26ea4bdf196112c2ec2c441a0aa32d805b1281c44cf2dde2d588556d416d3e"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x4, 0x3}}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x4, 0x20}}, &(0x7f0000000d40)={0x40, 0x7, 0x2}, &(0x7f0000000d80)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "79d9"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0x7053}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @random="fdad3f250e88"}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "ab1e"}, &(0x7f0000000f00)={0x40, 0x1a, 0x2}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000fc0)={0x40, 0x21, 0x1, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001200)={'syztnl0\x00', &(0x7f0000001100)={'syztnl1\x00', r2, 0x8000, 0x7, 0x5, 0x4, {{0x2a, 0x4, 0x3, 0xa, 0xa8, 0x67, 0x0, 0x2e, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@cipso={0x86, 0x51, 0x3, [{0x7, 0x3, 'N'}, {0x2, 0x9, "02fa17e6630e0f"}, {0x1, 0x2}, {0x1, 0x3, '6'}, {0x5, 0x5, "f9a7d6"}, {0x5, 0x9, "e0cba949c574a0"}, {0x0, 0x8, "9079f98ae1d8"}, {0x1, 0x12, "cb6bc206e1de30f1f458e4f4db71eaf5"}, {0x5, 0x12, "dbd60f315df23b95d9ec1880c884b67e"}]}, @timestamp_addr={0x44, 0x3c, 0xd1, 0x1, 0x9, [{@broadcast, 0x3}, {@multicast1, 0x5}, {@multicast1, 0x3ff}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@empty, 0xfffffbff}, {@rand_addr=0x64010102, 0x2}]}, @rr={0x7, 0x7, 0x2e, [@local]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001380)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xe8, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x94, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xe8}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000013c0)={'wg0\x00'}) pipe2$watch_queue(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001500)={'tunl0\x00', &(0x7f0000001440)={'syztnl1\x00', r5, 0x700, 0x40, 0x5, 0x27, {{0x20, 0x4, 0x1, 0x3a, 0x80, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x4e, 0x22c1f36e8d36193b, [{0x0, 0x8, "e624d6938a1f"}, {0x6, 0x9, "930577fdfebd57"}, {0x7, 0xc, "6f53e120cb25210ebb46"}, {0x6, 0x5, "2c96ed"}, {0x0, 0x11, "70d2940e82eea42fea5fa386fc9f30"}, {0x6, 0xb, "6408825f521d155a34"}, {0x0, 0xa, "dab858e03d0ee1e7"}]}, @ssrr={0x89, 0x1b, 0x60, [@dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @multicast1, @local, @loopback, @multicast1]}, @end, @end]}}}}}) read$FUSE(r6, &(0x7f00000036c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000005880)='./file0\x00', &(0x7f00000058c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) read$FUSE(r6, &(0x7f0000005940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000007b40)=0x0) read$FUSE(r6, &(0x7f0000007b80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000009c80)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@dev}}, &(0x7f0000009d80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000009ec0)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000009fc0)=0xe8) syz_fuse_handle_req(r6, &(0x7f0000001540)="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", 0x2000, &(0x7f000000a140)={&(0x7f0000003540)={0x50, 0x0, 0x4, {0x7, 0x2b, 0xe61, 0x880000, 0xbdf, 0xc, 0x7, 0x4, 0x0, 0x0, 0x80, 0x1}}, &(0x7f00000035c0)={0x18, 0x0, 0x7, {0x4}}, &(0x7f0000003600)={0x18, 0x0, 0xfffffffffffffffe, {0xfffffffffffffff9}}, &(0x7f0000003640)={0x18, 0x0, 0xbc, {0x3}}, &(0x7f0000003680)={0x18, 0xfffffffffffffffe, 0x0, {0x6}}, &(0x7f0000005700)={0x28, 0x0, 0x5, {{0x7, 0x8, 0x1, r7}}}, &(0x7f0000005740)={0x60, 0x0, 0xfffffffffffffff7, {{0x4, 0xaef38b5, 0xb59, 0x9, 0x0, 0x0, 0x2, 0x7}}}, &(0x7f00000057c0)={0x18, 0x0, 0x7, {0x6}}, &(0x7f0000005800)={0x18, 0x0, 0x1, {'syztnl1\x00'}}, &(0x7f0000005840)={0x20, 0x0, 0x9, {0x0, 0xf}}, &(0x7f0000007980)={0x78, 0xffffffffffffffda, 0x100000001, {0x4, 0x8e, 0x0, {0x5, 0x8001, 0x80, 0x1958bacf, 0x6, 0x9, 0x1, 0x200, 0x81, 0x8000, 0x3, r8, r9, 0x0, 0x10001}}}, &(0x7f0000007a00)={0x90, 0xfffffffffffffff5, 0x4f8, {0x5, 0x2, 0xd, 0x2, 0x1, 0x6, {0x4, 0x933, 0x40, 0x8, 0x6f10b97b, 0x79, 0x9, 0x100, 0x674, 0x8000, 0x7fffffff, 0x0, 0xee01, 0x0, 0x44a0}}}, &(0x7f0000007ac0)={0x70, 0xfffffffffffffffe, 0x8000, [{0x2, 0x1, 0x7, 0x9, '\'/%.z$#'}, {0x0, 0x5, 0x7, 0x2, 'TIPCv2\x00'}, {0x5, 0x0, 0x5, 0x1000000, '\xaa\xaa\xaa\xaa\xaa'}]}, &(0x7f0000009bc0)={0xb8, 0x0, 0x9, [{{0x6, 0x1, 0x5, 0x8, 0x1, 0x1ff, {0x5, 0xfffffffffffff801, 0x1, 0x9, 0x7, 0x3806, 0x8, 0x4, 0x2, 0x6000, 0x20, r10, r11, 0x30, 0x100}}, {0x4, 0xff, 0xb, 0x8, '&#,\'}$R^+\xdc#'}}]}, &(0x7f0000009dc0)={0xa0, 0x0, 0xeece, {{0x5, 0x3, 0x6, 0x8ed, 0x5, 0x0, {0x4, 0x100000000, 0x8, 0xb, 0x992f, 0x0, 0x81, 0x0, 0x7a7, 0x8000, 0x20bc, r12, 0xffffffffffffffff, 0x6, 0x100}}, {0x0, 0x2}}}, &(0x7f0000009e80)={0x20, 0xffffffffffffffda, 0x7, {0x4, 0x4, 0x7f}}, &(0x7f000000a000)={0x130, 0x0, 0x8, {0x4, 0xb, 0x0, '\x00', {0x10000, 0x5, 0x5, 0xffffddeb, r13, 0xffffffffffffffff, 0x8000, '\x00', 0x8, 0x1, 0x2, 0x0, {0x2000000, 0x5}, {0x10000, 0x8}, {0x6, 0x9}, {0x3, 0x8}, 0x2, 0x4, 0x4, 0x7}}}}) chdir(&(0x7f000000a200)='./file0\x00') lstat(&(0x7f000000a240)='./file0\x00', &(0x7f000000a280)) syz_usb_connect$cdc_ecm(0x3, 0x19e, &(0x7f000000a300)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18c, 0x1, 0x1, 0x3, 0x90, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xe, {{0xb, 0x24, 0x6, 0x0, 0x0, "0aaaeabc92d4"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0x8000, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x8, 0x8000}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x2b}, @mdlm_detail={0x51, 0x24, 0x13, 0x8, "e491a45e31304967de0fef0c402aa03210c5c29378743cff3db8b4432c1dc5c9074332aee18490f51ec03104df9e5d06bf8244bee82760af4620eb9c69cf2fc4667a62eee2734ee289c86d4ede"}, @mdlm_detail={0xe3, 0x24, 0x13, 0x8, "6f2478772d781688b5dcc2858c6f2a0b6041a4416c49d04ceec94e2ad76c341114b389a99dd045acbb9f71335950423b91c88444d961ef69588eb7a83704f2e03207098f4d33364fc6a66d8a73ada342ef755e334fa3f1ff7b1dab5cfe37a38a99e252b5c3969ae089fdf42c3b561eaf32c6937cffe37d580ef277a3d57e39eabaf318d756011f90c279cc197455db604632e0ee766cfd7835bcd0b1d2561abceb08b68cef5f3f05e8b185fe86ed67072c6ae8fea65ff7efb363daaf08505affdcd982dc76343dfc1d4ad01904c4bd42cf7d32d31a79bfd37e6be3177caa02"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x7, 0xc}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x7, 0xff}}}}}]}}]}}, &(0x7f000000a5c0)={0xa, &(0x7f000000a4c0)={0xa, 0x6, 0x310, 0xc, 0x9, 0xf3, 0x40}, 0x4b, &(0x7f000000a500)={0x5, 0xf, 0x4b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x3, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0x9, 0xff00, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xa1, "6c39c3e139b826a420d4c9e7715df518"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x30, 0x8b, 0x2, 0x54aa, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0b68bf550d6d2162b9784608d4bdba04"}]}, 0x1, [{0x4, &(0x7f000000a580)=@lang_id={0x4, 0x3, 0x418}}]}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000f) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f000000a600), 0x2, 0x0) read$FUSE(r14, &(0x7f000000a640)={0x2020}, 0x2020) syz_clone(0x40000000, &(0x7f000000c680)="471ad8a1df82365ec47fc0aae2db51f9759d66140e26bb2f11fd", 0x1a, &(0x7f000000c6c0), &(0x7f000000c700), &(0x7f000000c740)="e3b7d7e179ead1f61e9381dbc7e7ce8f0a6cf4010f5510836170740a5b012c6896bfd84467f3dc6397d79e243ff6e228d67c717d647cec2a5859769671c1c60396509e5f2329036d82ff49a7196aab88e63848611cf551b654bd7bfe72013c6a7d82c3334000149d5008051a645e6c1e5c1fccc4a4e5d8b7bab6f8c89d6af3afa070d00896522c2e6e1b85cb8c781a4bb60ab9a4712a271049861587888d32aa64efe51864ffe5c43838b231c2c8d6915a19f1869971b52f0ca7cf54de") timer_settime(0x0, 0x0, &(0x7f000000e880)={{}, {0x77359400}}, &(0x7f000000e8c0)) 3.48306713s ago: executing program 1 (id=478): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (fail_nth: 4) 3.198001394s ago: executing program 1 (id=480): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6958, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000016c0)=ANY=[@ANYBLOB="0120000000000000180100"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x3, 0x0, 0x4, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x4, 0x8, 0x1e, 0x7f, 0x4, 0x2f, 0x9e, 0xf3, 0x1, 0xd4, 0x9, 0x3, 0xd, 0x6, 0x14}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000001fc0)={{r1}, 0x0, 0x8, @unused=[0x7, 0x3, 0x5], @devid}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)="205b6579ed8703d2ac3b53c59fa30f677bebdadfbff784542f5d77da7bd4c351d54cdb75cda23cd4f9e82141c68ac384d9023dfd5d510cd762bffdf8d0ade13a5815b83f4ccc1bbfc300b9d1afd0372bf8758fae5c01f9bc544b4770e03efdb82bc6b4e300ac10ea053f65250a3f7cd690035569328221a76ffffc737f65de4dba1172b8a8695576557f78cdcf9684eba068221a5bd31681470cf706895ccf0fdba7da607411270715d723ff52cc6718a458e3548d1063", 0xb7}, {&(0x7f0000000040)="3068e62647d47ca39a2bdfc677ec4650c56a9b4de53ab562649996049988b63a13", 0x21}, {&(0x7f0000000100)="e10a677f796ed2fb11f5589bf1eaabd3a32b04c728ac035624c9c1641a6e14c5a7022f5dc2563b5a1fac2230ed65ce63e674b09860dbfc3e56e3f41ca489a8e7a7ffcb1d42", 0x45}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="8ff7d9895dfc54f7878d2609dd6f530b78c6eea4507f03630cd2b2c55a437800bee6ee1b0959ecbe426f3b31267ab0c78574346f97d21efdbf3219e64ce2f9934bd53e542bb0bb4173082202ef1901aa4a93afaadffb24ca38662d7fac07f565cf67280e176da2de5e907b78286afd97cad46d06fe74c1973cabc3c3c3176acef4ee45bc0559509c73c3476f706d42949406498b9128fd2d68f03ac01cc0a38ece32d998b020b61acc76bfa04e833c5448cd42ba467091c16ce3b66293b0bafbc33a5818674a49582c2f9264", 0xcc}], 0x5, &(0x7f0000001780)=ANY=[@ANYBLOB="48000000000000000000000007000000891b147f000001ad1414bb64010102ac1414bbffffffffac1414bb9404faf9d5e0d98e47500d00a5000000000100006a826fa9e7f4d0b4f95a00000000000000000000000100800000000000000000004f0a316987f21e3c039d112be415aa5e8b2e0cbac23e"], 0x60}, 0x8000) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 2.683178381s ago: executing program 33 (id=319): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)={[{@noswap}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 2.370853326s ago: executing program 4 (id=485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x0, 0x10, 0x80}]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000000000000001900"], 0x14}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4028af11, &(0x7f00000001c0)) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x108a3000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000045000000188f264980f23d4c2415f6b762a0b650b5f7c7c5e58e0fc4ab2cabae9f8ff00a2394468e41514235944e2eece6008496523089cc0f8921c92c42a585a5b2af1e4b86437ad00000000000"], &(0x7f0000000080)=0x69) 2.284101267s ago: executing program 4 (id=486): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x0, 0x2, 0x3, 0x4}}, 0x26) socket$inet(0x2, 0x1, 0x5) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) read$FUSE(r1, 0x0, 0x0) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x201400, 0x0) 2.194012898s ago: executing program 4 (id=487): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) syz_init_net_socket$bt_l2cap(0xffffffffffffffff, 0x3, 0x0) 2.193520448s ago: executing program 4 (id=488): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (fail_nth: 5) 2.192979548s ago: executing program 4 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = fcntl$dupfd(r0, 0x406, r1) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x100000) ioctl$TIOCGPTPEER(r5, 0x5441, 0x36f) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00'], 0x38}, 0xc804) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x200c1, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x2, 0x7b}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$mouse(&(0x7f0000000100), 0x100, 0x4000) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, &(0x7f00000001c0)=""/204, &(0x7f00000002c0)=""/42, &(0x7f0000000300)=""/42, 0xdddd0000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000180)={0x4, 0x1, 0x1c, 0x3, 0x7, "294d6ac8560c1cc2"}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x802, 0x0) r11 = creat(&(0x7f0000000500)='./file0\x00', 0x110) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000001780)={0x88, 0x0, &(0x7f00000006c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r11}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_handle={0x77682a85, 0xb}, @flat=@weak_binder={0x77622a85, 0x102, 0x1}, @fd}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}], 0x1000, 0x0, &(0x7f0000000780)="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"}) syz_usb_control_io(r8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) 2.123058559s ago: executing program 1 (id=490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f00000001c0)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.815897693s ago: executing program 1 (id=491): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x0, 0x40) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x7fffe, @mcast2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xc8}, 0x810) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x0, 0x40) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x7fffe, @mcast2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xc8}, 0x810) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) 1.755188445s ago: executing program 1 (id=492): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdir(0x0, 0x104) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) removexattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)=@known='user.incfs.id\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7f03) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={0x4, 0x0, 0x20000}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) 1.671057826s ago: executing program 3 (id=493): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r3, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f00000046c0)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20200) close_range(r0, 0xffffffffffffffff, 0x0) 1.572039097s ago: executing program 3 (id=494): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{0xfffd, 0xffff}, 'syz0\x00', 0x15}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r4, &(0x7f00000000c0)="e383ad0e4a", 0x5) read(r4, 0x0, 0x5d) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x801) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f0000000100)=0x4, 0x4) ioctl$RTC_AIE_OFF(r0, 0x7002) 1.3794598s ago: executing program 3 (id=495): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000004680)={0x3, {{0xa, 0x1ff, 0x100, @mcast1, 0x2}}, 0x4000}, 0x90) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}, {0x0, 0xea60}}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3b8, 0x8002, 0x3e60, 0x1}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x486, 0x0, 0x40000000}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000240), 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0xfffffffffffffefb}}, 0x40}], 0x0, 0x0, &(0x7f00000002c0)}) 882.962597ms ago: executing program 3 (id=499): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) (async) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 721.76798ms ago: executing program 3 (id=501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 655.17454ms ago: executing program 5 (id=502): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}}, 0x20000090) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008810}, 0x4000000) (async) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0x7, 0x3, 0xcf}) (async) sendfile(r1, r1, &(0x7f0000000300)=0x5, 0x7) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async, rerun: 32) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) (async, rerun: 32) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (rerun: 64) close_range(r4, r5, 0x2) (async) write$P9_RWALK(r3, &(0x7f00000003c0)={0x23, 0x6f, 0x2, {0x2, [{0x4, 0x4, 0x4}, {0x20, 0x1, 0x1}]}}, 0x23) lsetxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x3) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000004c0)={0x6, {{0xa, 0x4e23, 0x0, @local, 0x4}}}, 0x88) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000580)={0x4, {{0xa, 0x4e20, 0x8, @mcast2, 0x1000}}, {{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1800}}}, 0x108) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048000}, 0x2000c811) unlinkat(r1, &(0x7f00000007c0)='./file0\x00', 0x200) (async) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000800)={'\x00', 0xa, 0x1, 0x3}) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000880)) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000008c0)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) (async) r7 = geteuid() sendmsg$nl_generic(r1, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1e4, 0x31, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1f}, [@typed={0x8, 0x80, 0x0, 0x0, @uid=r7}, @typed={0xc, 0x116, 0x0, 0x0, @u64}, @nested={0x1ba, 0xb3, 0x0, 0x1, [@nested={0x4, 0xfb}, @nested={0x4, 0x7d}, @nested={0x4, 0xf2}, @typed={0xab, 0xc8, 0x0, 0x0, @binary="23cc43445fb8fdd886939f12510352b7e983d2c0ee45faea27786a34a23c39149112ee5b4bbd0731132b17d70eab030717cfa63b748f4a408ea2dd86d18e281d2a4d5e1219216114485856d5e11e3f40709fad66d5edeb373762c9ed03a45117b2b774c4ce7dd83c28e76b2b6e8873fc5b4d4cb28f5c9b91c0f0b518389a53464b9bcb51d57ab7600897c7ac3f2fae16dabdd94e5fab1aada0697e91b493bb02bdc95cca5165ac"}, @generic="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"]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, r9, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4004885) (async, rerun: 64) r11 = getegid() (rerun: 64) lchown(&(0x7f0000000dc0)='./file0\x00', r7, r11) 615.350201ms ago: executing program 5 (id=503): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (fail_nth: 7) 614.921031ms ago: executing program 3 (id=504): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 32) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) syz_usb_connect(0x7, 0x779, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x84, 0x45, 0x67, 0x40, 0x1b3d, 0x15a, 0xf131, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x767, 0x4, 0x8, 0xc, 0xa0, 0x1, [{{0x9, 0x4, 0x8c, 0x8, 0x2, 0xe9, 0xb9, 0x2b, 0x4, [@hid_hid={0x9, 0x21, 0xb, 0x7, 0x1, {0x22, 0x7cf}}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0xf, 0xbd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x1}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x2, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xd47}]}}]}}, {{0x9, 0x4, 0x63, 0x3, 0xd, 0x88, 0x7a, 0xf7, 0xce, [@generic={0x2e, 0xe, "22b9458f7fad0f0f820af91950a7480be81b37373486d519ea94e3b7f77048435f3c14a9e0f70194a1fed592"}], [{{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x9, 0xd, 0x3}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x6, 0xb, 0xd}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x3, 0x5, 0xfd, [@generic={0xea, 0x3, "fa95d64f75ffd9cd9209c7413adf87bae873bcd993ff5e72185edaee9f8c77f3aa807e65c5956d0f2e946050599ffc3ba25e4c69996d39c711890cf28699c8b7b27e3ff72fe78f2864dcda024ae9e6f401c3ec5eb9c2c6e0204417adf9f8fa3e3917221e38a3f87f861dfe3adeb5e4819f7e68feae92f90eed8543cd5c7eedcd0ba1cb624c067bff68254a64434a1ee42dbddf86e2241e88721af46a67de814d30b4dd8cd4254041f38bb3acd8086c5f2115748c2c40b34727554107d6497b7647b3a29bb06335a7c0610d7b98de5f116ba96eef5b63e44e6c69d9679a62cfb7863dab5b1592c823"}]}}, {{0x9, 0x5, 0xe, 0x965d4b5498481ddd, 0x0, 0x22, 0x6, 0x5, [@generic={0x9f, 0xb, "87a57aaa64757e7aa6dbb769a581502ef762eb98568bd701cfdda988ef487ffa9d1bb1e2abeb2f7deaa43540d303af53ae8fc7321e67c33fc04eb474881bb9aeecb16d08927bf7a3ef8ae4c66659b7ef610d486c4c3bac7cd54f06f44c9cc12444c318d87a7e5e01e835131a9e3c645ef55aa86fb931181143fa4d977124dede80591bc2d79873cee8d291847712b22700538264988c8a6fa943ae581a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0xb8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x0, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x3800}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x8, 0x9, 0x5, [@generic={0x9f, 0x4, "18ef1e47fd8bd7e6321ba09456c8436bfd8f3320e3cf23bbd310d1079df7aac267f96bac05d31f77a0c2617c7b798d3188dbfcdbf82a6b7ec8dbdfe55dbcc2dcd40327514718ee63b2586f21f82940940354c0f78610d4ae790dab76afc4d13a0b82fafdc3c77da32349329db5b79456e311187e81abb03314a8fb31d1641921d37555d76afdcf61bae953edb471ea3a76665b78e9286c098e785fe800"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x7, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x2, 0x0, 0x9}}, {{0x9, 0x5, 0x84, 0x10, 0x400, 0x6, 0x4, 0x6}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x2, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xda07ffcbdc9e5ec1, 0x0, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x5, 0x3, 0x31}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x7, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xea, 0xfff6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0x1}}]}}, {{0x9, 0x4, 0x8c, 0x3, 0x7, 0x25, 0xd7, 0xf6, 0x2, [@generic={0x16, 0x21, "630e1ebb673dc1c8fc185c4e2d8cac8d72c6ba25"}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0xfe, 0x2, 0x1, 0x4}]}], [{{0x9, 0x5, 0xa, 0x29, 0x10, 0xa, 0x9, 0x86}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x7, 0x3, [@generic={0x74, 0x23, "7ee54f5c5f91802ccf090272a9c7ff665cc612681eaf0f91ea1f8d6d6fc92b9cbe8cdead51a3b84b07e09d80d8a37400d97508a27226ce81aa4e28009b15c066e05fa625daa0b411b55995ee3735986d8e56beaa47aa99e823e6a86e02a1e849fefe893f436aa08cbdeaf26f8427b91ba375"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x5, 0xe9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}]}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0x3, 0x3, 0xd}}, {{0x9, 0x5, 0x8, 0x8, 0x387, 0x6, 0xff, 0x3, [@generic={0x36, 0x7, "c08cd756f38303c2baa4e9e8a617c818b79c8784a04a4bb52e6c8c5b721a54dfe0f0d8d3f6ebc8d91b8b3ea1f722c3f0916fe996"}, @generic={0xdd, 0x2, "52aa22b0e8fac141f794ac6ec648f5e2bdaf5f23e8ef969d8214b3083ba7cd615bf483c39d4da0f0a77c98d6e10d62c898d54ef38267414dd60a71fda380846afba7b5b3c0b2e581f2bb5208887b611a680b73fd9b6beaea4ead7e1a07ed4c933831fbe1a9028e46d3cc182002a7c71afbb57da3be42bb5b2e7f21602c727f0fd443007524eaac713ad4aa4edb7233f5a0947be8590dd70cd1a3b1b5872a5f80d8bb4df939f1a14763d5cf4692af97642f4cb495b8625e1f2b54b2d15c1e01ece48a414affb10875f948370cb084f2787196b34b1d18499b4e2be9"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x81, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0xb, 0x207}, @generic={0x70, 0x3, "e772a91a6492ebe6fd524e04fc717a4075c91697e6af93e92c2201a9ecaaff8127a967dfe47f0b90973babb994d05ffce69c5b1d30eef433264473409e603624aa0659e925fc3abddc0b4c73a30d5d101c2f286930eee8a9f997db404f2769e787decd7a9796ff5094220cf97cec"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x1, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x1}]}}]}}, {{0x9, 0x4, 0xae, 0x5, 0x6, 0x4b, 0xe0, 0x18, 0x7, [], [{{0x9, 0x5, 0xa, 0x3, 0x40, 0x2, 0xf7, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x3, 0xc, 0x7f}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x5, 0x8b, 0xdb, [@generic={0x81, 0x30, "f282c0a1eb4a01c4f21e86772e5487cc1ba22b045d28ee90311cb8409e55d72c6e01e057cbd118cca2df08bae91d00f43c0a419071c4246bd0369149dd2cbc3429e03fcfe57f5dc0dadd602ed49e87a5743ac9c30d76c60bc4cc3edc2965704cb1592f1cab2ee3e9e399e84ac390574b8a48e3d5dbcb365168927d39185918"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xd, 0x0, 0x5, [@generic={0xdd, 0x8, "ed637a5ffffefeda0b1b1585194f0584302ee9c2a87e878626bb33dda82fb939cab10dd4159663daa14a8bdc35ecbea96495bb2f4fcd8bfe35a24e27506db883a82e12e9ebf41b17e647e13e5dabd4af3f64916b25f3e41dfb6b6bf60971c4b8f3f91cf28632fa5cb6a92d7efcd5e570bdb4034ac3b507d576e58f3f3d7a333134caeeb73b6b04f0ad8481063bdabc5180ca7b76ff2e6521d3e0c1f78ee63da45ae9f1c60f4940394499c6aaaad1e33cb2c072036dd9b0eb118f54c6b187cc0edfd3a526ceddcbee97a6f3f20af49f81567a2732af35588b58cd5f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x5}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x2, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xeb23}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x7, 0x3, 0x3}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x9, 0x80, 0x5, 0x10, 0x6}, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x800, 0xf0f, 0x5, [0x3f00, 0xc030, 0x0, 0x30, 0xffdf40, 0x3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x2a, 0x4, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1f, 0x4, 0x81, 0x9}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}]}) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x210, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "39db3a550f0420921586a79ec5b64093e6072fc889bea60bdd24beacd802"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="d6c0105d02ce", @loopback, @empty, 0x8, 0x1}}}, {{@arp={@loopback, @rand_addr=0x64010100, 0xff000000, 0x0, 0x5, 0xd, {@mac, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x5, 0x0, 0x6, 0x40, 0x12, 'veth1_to_bridge\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @broadcast, @rand_addr=0x64010100, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000003) (async, rerun: 64) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)=@keyring={'key_or_keyring:', r4}) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) (async) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3000001, 0x50, r3, 0x40152000) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0) 319.012116ms ago: executing program 5 (id=505): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) read(r0, &(0x7f0000000040)=""/123, 0x7b) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000}) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/249, 0xf9}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) openat$cgroup_type(r3, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 301.353045ms ago: executing program 5 (id=506): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) syz_init_net_socket$bt_l2cap(0xffffffffffffffff, 0x3, 0x0) 291.678006ms ago: executing program 5 (id=507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) syz_clone3(0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f0000001440)={0x2020}, 0x2020) socket$key(0xf, 0x3, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x2, 0x7fff, 0x5, 0x8f, 0x43, "c0056264b42ba36fe32e80df9ccfac0ffca493"}) 203.575837ms ago: executing program 5 (id=508): clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000240)={0x800, 0xe, 0x6, 0x4, 0x6}) 0s ago: executing program 1 (id=509): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0xff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_getevents(r5, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 21.005259][ T36] audit: type=1400 audit(1750730953.430:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.006361][ T282] cgroup: Unknown subsys name 'net' [ 21.027917][ T36] audit: type=1400 audit(1750730953.430:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.055233][ T36] audit: type=1400 audit(1750730953.460:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.055422][ T282] cgroup: Unknown subsys name 'devices' [ 21.163582][ T282] cgroup: Unknown subsys name 'hugetlb' [ 21.169187][ T282] cgroup: Unknown subsys name 'rlimit' [ 21.260781][ T36] audit: type=1400 audit(1750730953.680:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.284003][ T36] audit: type=1400 audit(1750730953.680:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.308774][ T36] audit: type=1400 audit(1750730953.680:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.317160][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.340630][ T36] audit: type=1400 audit(1750730953.760:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.366098][ T36] audit: type=1400 audit(1750730953.760:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.396193][ T36] audit: type=1400 audit(1750730953.820:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.421838][ T36] audit: type=1400 audit(1750730953.820:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.422009][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.125924][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.141409][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.151374][ T289] bridge_slave_0: entered allmulticast mode [ 22.157731][ T289] bridge_slave_0: entered promiscuous mode [ 22.166977][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.174064][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.181116][ T289] bridge_slave_1: entered allmulticast mode [ 22.187458][ T289] bridge_slave_1: entered promiscuous mode [ 22.318234][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.325449][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.332549][ T295] bridge_slave_0: entered allmulticast mode [ 22.338693][ T295] bridge_slave_0: entered promiscuous mode [ 22.347689][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.354746][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.361943][ T295] bridge_slave_1: entered allmulticast mode [ 22.368083][ T295] bridge_slave_1: entered promiscuous mode [ 22.386675][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.393740][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.400798][ T294] bridge_slave_0: entered allmulticast mode [ 22.407210][ T294] bridge_slave_0: entered promiscuous mode [ 22.422973][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.430014][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.437227][ T294] bridge_slave_1: entered allmulticast mode [ 22.443431][ T294] bridge_slave_1: entered promiscuous mode [ 22.449606][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.456661][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.463771][ T293] bridge_slave_0: entered allmulticast mode [ 22.469915][ T293] bridge_slave_0: entered promiscuous mode [ 22.476315][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.483362][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.490410][ T293] bridge_slave_1: entered allmulticast mode [ 22.496732][ T293] bridge_slave_1: entered promiscuous mode [ 22.509371][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.516429][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.523703][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.530718][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.658777][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.665846][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.673129][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.680143][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.688313][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.695353][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.702617][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.709629][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.723143][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.730393][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.738201][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.745440][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.752689][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.759827][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.778019][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.785090][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.822531][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.829565][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.837255][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.844298][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.852993][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.860020][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.869421][ T295] veth0_vlan: entered promiscuous mode [ 22.880638][ T295] veth1_macvtap: entered promiscuous mode [ 22.909981][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.917072][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.929476][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.936535][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.960041][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.967106][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.974864][ T289] veth0_vlan: entered promiscuous mode [ 22.982091][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.989131][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.015531][ T289] veth1_macvtap: entered promiscuous mode [ 23.027769][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.068748][ T294] veth0_vlan: entered promiscuous mode [ 23.080385][ T293] veth0_vlan: entered promiscuous mode [ 23.100001][ T310] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.103196][ T294] veth1_macvtap: entered promiscuous mode [ 23.125517][ T293] veth1_macvtap: entered promiscuous mode [ 23.176417][ T316] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 23.209763][ T322] rust_binder: Write failure EFAULT in pid:2 [ 23.252036][ T323] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 23.271447][ T331] capability: warning: `syz.2.9' uses deprecated v2 capabilities in a way that may be insecure [ 23.332258][ T333] syzkaller0: entered promiscuous mode [ 23.337764][ T333] syzkaller0: entered allmulticast mode [ 23.346047][ T329] virtio-fs: tag not found [ 23.441258][ T342] netlink: 'syz.3.12': attribute type 15 has an invalid length. [ 23.486194][ T346] rust_binder: Error while translating object. [ 23.486233][ T346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.492504][ T347] rust_binder: Error while translating object. [ 23.501958][ T346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 23.508163][ T347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.517230][ T347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 23.539421][ T349] input: syz0 as /devices/virtual/input/input4 [ 23.557182][ T349] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 23.557216][ T349] rust_binder: Error while translating object. [ 23.567772][ T349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.574156][ T349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 23.677928][ T353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 23.687764][ T357] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 23.761375][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.911325][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 23.917896][ T10] usb 2-1: config 241 has an invalid interface number: 25 but max is 3 [ 23.926374][ T10] usb 2-1: config 241 has an invalid descriptor of length 0, skipping remainder of the config [ 23.936688][ T10] usb 2-1: config 241 has 1 interface, different from the descriptor's value: 4 [ 23.945798][ T10] usb 2-1: config 241 has no interface number 0 [ 23.952286][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.957110][ T10] usb 2-1: config 241 interface 25 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 23.973411][ T10] usb 2-1: config 241 interface 25 has no altsetting 0 [ 23.983257][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=c82b, bcdDevice= 3.90 [ 23.992334][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.000329][ T10] usb 2-1: Product: ࠉ [ 24.009704][ T10] usb 2-1: Manufacturer: ﳿ [ 24.016949][ T10] usb 2-1: SerialNumber: ﯥ윿斊䲥珫㥞骦䰵Ԁ熩겛ᝂ躝텟똍㫞냔䪞膝둶⎗̖槍ꙶ挂糁꒚睚㬞漼鯙䁽略닿䁖簡캌㬤ው좿ꃞ䍋ꌜ㎰黛䯢깑䱸㞠喳㠚˺ꂓ恫졙䇊圽Ⅹ [ 24.101366][ T45] usb 1-1: device descriptor read/64, error -71 [ 24.246803][ T10] usb 2-1: USB disconnect, device number 2 [ 24.251347][ T315] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.341370][ T45] usb 1-1: device descriptor read/64, error -71 [ 24.391664][ T315] usb 3-1: device descriptor read/64, error -71 [ 24.535660][ T368] netlink: 112 bytes leftover after parsing attributes in process `syz.3.21'. [ 24.581476][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.631398][ T315] usb 3-1: device descriptor read/64, error -71 [ 24.721434][ T45] usb 1-1: device descriptor read/64, error -71 [ 24.871403][ T315] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.961609][ T45] usb 1-1: device descriptor read/64, error -71 [ 25.001384][ T315] usb 3-1: device descriptor read/64, error -71 [ 25.071493][ T45] usb usb1-port1: attempt power cycle [ 25.091377][ T365] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.241439][ T315] usb 3-1: device descriptor read/64, error -71 [ 25.249328][ T365] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 25.256963][ T365] usb 2-1: can't read configurations, error -61 [ 25.351515][ T315] usb usb3-port1: attempt power cycle [ 25.371374][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.391373][ T365] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 25.411380][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 25.432567][ T45] usb 1-1: device descriptor read/8, error -71 [ 25.522531][ T10] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 25.535078][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.545746][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 25.552732][ T365] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 25.558702][ T10] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 25.567097][ T365] usb 2-1: can't read configurations, error -61 [ 25.575669][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.582269][ T365] usb usb2-port1: attempt power cycle [ 25.590750][ T10] usb 4-1: config 0 descriptor?? [ 25.600144][ T45] usb 1-1: device descriptor read/8, error -71 [ 25.603953][ T10] usb-storage 4-1:0.0: USB Mass Storage device detected [ 25.614144][ T10] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 25.691407][ T315] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 25.712333][ T315] usb 3-1: device descriptor read/8, error -71 [ 25.841388][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 25.849888][ T315] usb 3-1: device descriptor read/8, error -71 [ 25.862449][ T45] usb 1-1: device descriptor read/8, error -71 [ 25.931351][ T365] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 25.952893][ T365] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 25.960487][ T365] usb 2-1: can't read configurations, error -61 [ 25.992481][ T45] usb 1-1: device descriptor read/8, error -71 [ 26.091356][ T315] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 26.098880][ T365] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 26.106517][ T45] usb usb1-port1: unable to enumerate USB device [ 26.132470][ T315] usb 3-1: device descriptor read/8, error -71 [ 26.139320][ T365] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 26.147120][ T365] usb 2-1: can't read configurations, error -61 [ 26.153519][ T365] usb usb2-port1: unable to enumerate USB device [ 26.262373][ T315] usb 3-1: device descriptor read/8, error -71 [ 26.371444][ T315] usb usb3-port1: unable to enumerate USB device [ 26.690401][ T383] Zero length message leads to an empty skb [ 27.026133][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 27.026150][ T36] audit: type=1400 audit(1750730959.450:168): avc: denied { append } for pid=385 comm="syz.2.27" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.054856][ T36] audit: type=1400 audit(1750730959.460:169): avc: denied { getopt } for pid=385 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.103142][ T36] audit: type=1400 audit(1750730959.530:170): avc: denied { map } for pid=389 comm="syz.2.28" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.134054][ T36] audit: type=1400 audit(1750730959.560:171): avc: denied { create } for pid=391 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.153746][ T36] audit: type=1400 audit(1750730959.580:172): avc: denied { connect } for pid=391 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.204716][ T36] audit: type=1400 audit(1750730959.630:173): avc: denied { shutdown } for pid=391 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.543221][ T395] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 27.550373][ T395] rust_binder: Write failure EINVAL in pid:12 [ 27.865292][ T36] audit: type=1400 audit(1750730960.290:174): avc: denied { write } for pid=398 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 27.890195][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 27.903880][ T401] fuse: Unknown parameter '000000000000000000000060x00000000000000064UFZ!>-Xz^>UxjL%Alomvv[j+"LD bHMD|ZfWd1*)L^OlNB:eǘMț6KsogKڈǐ2qiܼl;@NkAQ6;UY9dTi2qzL\;' [ 28.061935][ T10] usb 1-1: device descriptor read/64, error -71 [ 28.069461][ T36] audit: type=1400 audit(1750730960.490:175): avc: denied { create } for pid=402 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.153255][ T36] audit: type=1400 audit(1750730960.580:176): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.179966][ T408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.179997][ T408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32 [ 28.189953][ T36] audit: type=1400 audit(1750730960.610:177): avc: denied { bind } for pid=407 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.220300][ T365] usb 4-1: USB disconnect, device number 2 [ 28.271329][ T315] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 28.272894][ T412] kvm: Disabled LAPIC found during irq injection [ 28.290547][ T412] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.303065][ T10] usb 1-1: device descriptor read/64, error -71 [ 28.431320][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 28.437525][ T315] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 28.445744][ T315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.455847][ T315] usb 2-1: config 0 has no interface number 0 [ 28.463848][ T315] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 28.473100][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.482687][ T315] usb 2-1: Product: syz [ 28.486882][ T315] usb 2-1: Manufacturer: syz [ 28.496852][ T315] usb 2-1: SerialNumber: syz [ 28.504653][ T315] usb 2-1: config 0 descriptor?? [ 28.521359][ T378] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 28.542073][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 28.661591][ T378] usb 3-1: device descriptor read/64, error -71 [ 28.691317][ T10] usb 1-1: device descriptor read/64, error -71 [ 28.725453][ T315] usb 2-1: USB disconnect, device number 7 [ 28.911343][ T378] usb 3-1: device descriptor read/64, error -71 [ 28.951495][ T10] usb 1-1: device descriptor read/64, error -71 [ 29.061423][ T10] usb usb1-port1: attempt power cycle [ 29.161336][ T378] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 29.291373][ T378] usb 3-1: device descriptor read/64, error -71 [ 29.305185][ T423] PM: Enabling pm_trace changes system date and time during resume. [ 29.305185][ T423] PM: Correct system time has to be restored manually after resume. [ 29.321776][ T423] rust_binder: Write failure EINVAL in pid:26 [ 29.431361][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 29.486598][ T10] usb 1-1: device descriptor read/8, error -71 [ 29.531354][ T378] usb 3-1: device descriptor read/64, error -71 [ 29.622822][ T10] usb 1-1: device descriptor read/8, error -71 [ 29.641430][ T378] usb usb3-port1: attempt power cycle [ 29.731362][ T365] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.861339][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 29.882461][ T10] usb 1-1: device descriptor read/8, error -71 [ 29.882537][ T365] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 29.896866][ T365] usb 4-1: config 0 has no interface number 0 [ 29.902977][ T365] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 29.913851][ T365] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 29.924900][ T365] usb 4-1: config 0 interface 230 has no altsetting 0 [ 29.933108][ T365] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 29.942198][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.950181][ T365] usb 4-1: Product: syz [ 29.954349][ T365] usb 4-1: Manufacturer: syz [ 29.958935][ T365] usb 4-1: SerialNumber: syz [ 29.964123][ T365] usb 4-1: config 0 descriptor?? [ 29.969378][ T429] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.976710][ T429] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.984439][ T365] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 29.991436][ T378] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 29.999538][ T365] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 30.012349][ T10] usb 1-1: device descriptor read/8, error -71 [ 30.022304][ T378] usb 3-1: device descriptor read/8, error -71 [ 30.121503][ T10] usb usb1-port1: unable to enumerate USB device [ 30.162272][ T378] usb 3-1: device descriptor read/8, error -71 [ 30.198433][ T433] input: syz0 as /devices/virtual/input/input5 [ 30.401345][ T378] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 30.422337][ T378] usb 3-1: device descriptor read/8, error -71 [ 30.552441][ T378] usb 3-1: device descriptor read/8, error -71 [ 30.581378][ T315] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 30.661477][ T378] usb usb3-port1: unable to enumerate USB device [ 30.718130][ T451] netlink: 184 bytes leftover after parsing attributes in process `syz.0.53'. [ 30.735078][ T315] usb 2-1: config 4 has an invalid interface number: 95 but max is 0 [ 30.743318][ T315] usb 2-1: config 4 has no interface number 0 [ 30.749554][ T315] usb 2-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 30.764028][ T315] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 30.773170][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.786630][ T460] process 'syz.0.56' launched './file0' with NULL argv: empty string added [ 30.795329][ T315] usb 2-1: Product: syz [ 30.799571][ T315] usb 2-1: Manufacturer: syz [ 30.804206][ T315] usb 2-1: SerialNumber: syz [ 30.809923][ T439] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 30.895233][ T471] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.017991][ T439] raw_sendmsg: syz.1.49 forgot to set AF_INET. Fix it! [ 31.026816][ T315] usb 2-1: MIDIStreaming interface descriptor not found [ 31.038418][ T315] usb 2-1: USB disconnect, device number 8 [ 31.084313][ T477] SELinux: failed to load policy [ 31.313604][ T486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 31.341349][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 31.501407][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 31.508011][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.519038][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.528887][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 31.535527][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 31.544654][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.553426][ T10] usb 1-1: config 0 descriptor?? [ 31.646933][ T490] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 31.646966][ T490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 31.655726][ T490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:39 [ 31.675448][ T492] rust_binder: Error while translating object. [ 31.684558][ T492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.690725][ T492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 31.731530][ T500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 31.748437][ T500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.758039][ T500] rust_binder: Error while translating object. [ 31.764871][ T500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 31.771056][ T500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:50 [ 31.781020][ T500] rust_binder: got new transaction with bad transaction stack [ 31.790019][ T500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 32.176467][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 32.192226][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 32.200823][ T10] usb 1-1: USB disconnect, device number 10 [ 32.252630][ T365] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 32.401362][ T364] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 32.551353][ T364] usb 3-1: Using ep0 maxpacket: 8 [ 32.558723][ T364] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 32.567947][ T364] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 32.576066][ T364] usb 3-1: Product: syz [ 32.580220][ T364] usb 3-1: Manufacturer: syz [ 32.584826][ T364] usb 3-1: SerialNumber: syz [ 32.589888][ T364] usb 3-1: config 0 descriptor?? [ 32.672242][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 32.672258][ T36] audit: type=1400 audit(1750730965.100:212): avc: denied { ioctl } for pid=513 comm="syz.1.71" path="socket:[6158]" dev="sockfs" ino=6158 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.704469][ T36] audit: type=1400 audit(1750730965.100:213): avc: denied { ioctl } for pid=513 comm="syz.1.71" path="socket:[6158]" dev="sockfs" ino=6158 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.841138][ T519] random: crng reseeded on system resumption [ 32.841182][ T36] audit: type=1400 audit(1750730965.260:214): avc: denied { append } for pid=518 comm="syz.1.73" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.870109][ T36] audit: type=1400 audit(1750730965.260:215): avc: denied { open } for pid=518 comm="syz.1.73" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.889015][ T519] rust_binder: Failed copying remainder into alloc: EFAULT [ 32.893294][ T519] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 32.900611][ T519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.908933][ T519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:61 [ 32.930369][ T36] audit: type=1400 audit(1750730965.350:216): avc: denied { bind } for pid=520 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.959013][ T36] audit: type=1400 audit(1750730965.370:217): avc: denied { ioctl } for pid=520 comm="syz.1.74" path="socket:[5405]" dev="sockfs" ino=5405 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.051450][ T365] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 33.084214][ T528] rust_binder: Error while translating object. [ 33.084236][ T528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.090474][ T528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 33.202328][ T365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 33.221444][ T365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 33.233169][ T365] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 33.242299][ T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.250308][ T365] usb 1-1: Product: syz [ 33.254713][ T365] usb 1-1: Manufacturer: syz [ 33.259469][ T365] usb 1-1: SerialNumber: syz [ 33.267194][ T365] usb 1-1: config 0 descriptor?? [ 33.272506][ T517] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.279668][ T36] audit: type=1400 audit(1750730965.700:218): avc: denied { name_bind } for pid=532 comm="syz.1.78" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 33.301406][ T517] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.301701][ T533] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 33.308681][ T36] audit: type=1400 audit(1750730965.730:219): avc: denied { transfer } for pid=532 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 33.309182][ T533] rust_binder: Error while translating object. [ 33.338515][ T533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.344789][ T533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 33.365774][ T537] rust_binder: Write failure EINVAL in pid:78 [ 33.451416][ T364] usb 4-1: USB disconnect, device number 3 [ 33.470296][ T36] audit: type=1400 audit(1750730965.890:220): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 33.511986][ T517] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.519204][ T517] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.611389][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 33.761339][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 33.767650][ T10] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 33.777719][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 33.787394][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 33.796400][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.807576][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.817570][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.824254][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 33.833346][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.842298][ T10] usb 2-1: config 0 descriptor?? [ 33.875948][ T36] audit: type=1400 audit(1750730966.300:221): avc: denied { lock } for pid=555 comm="syz.3.85" path="socket:[6401]" dev="sockfs" ino=6401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 33.928304][ T365] Error reading MAC address [ 33.937223][ T365] usb 1-1: USB disconnect, device number 11 [ 34.255513][ T10] hid (null): unknown global tag 0x12 [ 34.261215][ T10] hid (null): report_id 660415670 is invalid [ 34.271431][ T10] hid (null): unknown global tag 0xd [ 34.276779][ T10] hid (null): report_id 3636381312 is invalid [ 34.284058][ T10] hid (null): unknown global tag 0xe [ 34.289962][ T10] hid (null): global environment stack underflow [ 34.296400][ T10] hid (null): invalid report_size 15733 [ 34.302057][ T10] hid (null): global environment stack underflow [ 34.308458][ T10] hid (null): invalid report_size 59091 [ 34.314399][ T10] hid (null): unknown global tag 0xe [ 34.319924][ T10] hid (null): invalid report_size 659322949 [ 34.325912][ T10] hid (null): invalid report_size 40509 [ 34.331573][ T10] hid (null): report_id 49840 is invalid [ 34.343847][ T570] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 34.343871][ T570] rust_binder: Error while translating object. [ 34.352690][ T570] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.358873][ T570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 34.510107][ T378] usb 2-1: USB disconnect, device number 9 [ 34.624506][ T604] binder: Bad value for 'max' [ 34.687961][ T608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 34.771394][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.803686][ T305] bridge_slave_1: left allmulticast mode [ 34.809482][ T305] bridge_slave_1: left promiscuous mode [ 34.815203][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.823026][ T305] bridge_slave_0: left allmulticast mode [ 34.828742][ T305] bridge_slave_0: left promiscuous mode [ 34.834494][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.931413][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 34.942030][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 34.950388][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 34.972957][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 34.982790][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.992516][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 35.002787][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 35.016048][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 35.025183][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.038352][ T305] veth1_macvtap: left promiscuous mode [ 35.045130][ T305] veth0_vlan: left promiscuous mode [ 35.053278][ T10] usb 4-1: config 0 descriptor?? [ 35.092222][ T612] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.099368][ T612] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.106557][ T612] bridge_slave_0: entered allmulticast mode [ 35.114233][ T612] bridge_slave_0: entered promiscuous mode [ 35.121419][ T612] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.128475][ T612] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.135895][ T612] bridge_slave_1: entered allmulticast mode [ 35.142574][ T612] bridge_slave_1: entered promiscuous mode [ 35.195771][ T612] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.202874][ T612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.210145][ T612] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.217203][ T612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.221566][ T63] usb 3-1: USB disconnect, device number 10 [ 35.240359][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.252274][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.262935][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 35.278720][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.285831][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.295132][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.302203][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.317131][ T623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54 [ 35.328363][ T612] veth0_vlan: entered promiscuous mode [ 35.349198][ T612] veth1_macvtap: entered promiscuous mode [ 35.413050][ T631] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 35.464466][ T10] usb 4-1: USB disconnect, device number 4 [ 35.477530][ T10] usblp0: removed [ 35.486344][ T633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.538443][ T634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 35.641437][ T365] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.670440][ T636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 35.723214][ T637] fuse: Unknown parameter '' [ 35.801407][ T365] usb 5-1: Using ep0 maxpacket: 32 [ 35.808100][ T365] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 35.816511][ T365] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 35.825164][ T365] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 35.834168][ T365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 35.843843][ T365] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 35.853558][ T365] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 35.866569][ T365] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 35.875672][ T365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.884376][ T365] usb 5-1: config 0 descriptor?? [ 36.090697][ T365] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 36.292652][ T10] usb 5-1: USB disconnect, device number 2 [ 36.303998][ T10] usblp0: removed [ 36.388836][ T645] rust_binder: Error while translating object. [ 36.388859][ T645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 36.395098][ T645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63 [ 36.416630][ T647] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 36.731424][ T541] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 36.739084][ T662] netlink: 9 bytes leftover after parsing attributes in process `syz.1.125'. [ 36.756022][ T662] gretap0: entered promiscuous mode [ 36.761878][ T662] netlink: 5 bytes leftover after parsing attributes in process `syz.1.125'. [ 36.770847][ T662] 0{X: renamed from gretap0 [ 36.776672][ T662] 0{X: left promiscuous mode [ 36.781897][ T662] 0{X: entered allmulticast mode [ 36.787645][ T662] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 36.893050][ T541] usb 3-1: Using ep0 maxpacket: 32 [ 36.909106][ T541] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 36.921330][ T541] usb 3-1: config 0 has no interface number 0 [ 36.932961][ T541] usb 3-1: config 0 interface 184 has no altsetting 0 [ 36.952447][ T541] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 36.961658][ T541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.972616][ T541] usb 3-1: Product: syz [ 36.976819][ T541] usb 3-1: Manufacturer: syz [ 36.991312][ T541] usb 3-1: SerialNumber: syz [ 37.001803][ T541] usb 3-1: config 0 descriptor?? [ 37.012374][ T541] smsc75xx v1.0.0 [ 37.061333][ T365] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 37.243819][ T365] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 37.253081][ T365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.261145][ T365] usb 2-1: Product: syz [ 37.265891][ T365] usb 2-1: Manufacturer: syz [ 37.270573][ T365] usb 2-1: SerialNumber: syz [ 37.280138][ T365] usb 2-1: config 0 descriptor?? [ 37.355954][ T705] binder: Bad value for 'stats' [ 37.523749][ T720] rust_binder: Write failure EFAULT in pid:39 [ 37.528348][ T365] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.555484][ T365] asix 2-1:0.0: probe with driver asix failed with error -71 [ 37.574659][ T365] usb 2-1: USB disconnect, device number 10 [ 37.597577][ T724] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 37.608180][ T541] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 37.619777][ T729] tipc: Started in network mode [ 37.631369][ T541] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.631444][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.647715][ T729] tipc: Node identity , cluster identity 4711 [ 37.670907][ T735] ======================================================= [ 37.670907][ T735] WARNING: The mand mount option has been deprecated and [ 37.670907][ T735] and is ignored by this kernel. Remove the mand [ 37.670907][ T735] option from the mount to silence this warning. [ 37.670907][ T735] ======================================================= [ 37.711324][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 37.711378][ T36] audit: type=1400 audit(1750730970.130:244): avc: denied { accept } for pid=723 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 38.065017][ T747] binder: Unknown parameter '18446744073709551615' [ 38.065024][ T36] audit: type=1400 audit(1750730970.490:245): avc: denied { remount } for pid=746 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.449339][ T541] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 38.460276][ T541] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 38.470001][ T541] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 38.479554][ T541] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 38.885693][ T762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=762 comm=syz.1.153 [ 38.916058][ T766] netlink: 'syz.1.155': attribute type 4 has an invalid length. [ 38.923817][ T766] netlink: 3393 bytes leftover after parsing attributes in process `syz.1.155'. [ 38.942681][ T768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.943225][ T768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.949892][ T768] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 38.963520][ T768] rust_binder: Write failure EINVAL in pid:132 [ 39.078523][ T773] rust_binder: Write failure EFAULT in pid:134 [ 39.331359][ T541] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.491341][ T541] usb 5-1: Using ep0 maxpacket: 32 [ 39.497539][ T541] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 39.505906][ T541] usb 5-1: config 0 has no interface number 0 [ 39.512128][ T541] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.523035][ T541] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.532811][ T541] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 39.541893][ T541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.550424][ T541] usb 5-1: config 0 descriptor?? [ 39.660550][ T10] usb 3-1: USB disconnect, device number 11 [ 39.661332][ T730] Bluetooth: hci0: command 0x1003 tx timeout [ 39.670795][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.776907][ T36] audit: type=1400 audit(1750730972.200:246): avc: denied { lock } for pid=786 comm="syz.3.161" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 39.802900][ T36] audit: type=1400 audit(1750730972.220:247): avc: denied { write } for pid=786 comm="syz.3.161" name="vlan0" dev="proc" ino=4026532800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.825567][ T36] audit: type=1400 audit(1750730972.230:248): avc: denied { write } for pid=786 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.852872][ T793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.853318][ T793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.863576][ T793] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 39.877460][ T793] rust_binder: Write failure EINVAL in pid:81 [ 39.890758][ T36] audit: type=1400 audit(1750730972.310:249): avc: denied { getopt } for pid=796 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.939616][ T36] audit: type=1400 audit(1750730972.360:250): avc: denied { create } for pid=794 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 39.959676][ T36] audit: type=1400 audit(1750730972.390:251): avc: denied { sys_admin } for pid=794 comm="syz.1.165" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 40.041443][ T365] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.163502][ T541] uclogic 0003:28BD:0094.0002: failed retrieving string descriptor #100: -71 [ 40.172653][ T541] uclogic 0003:28BD:0094.0002: failed retrieving pen parameters: -71 [ 40.181147][ T541] uclogic 0003:28BD:0094.0002: pen probing failed: -71 [ 40.188114][ T541] uclogic 0003:28BD:0094.0002: failed probing parameters: -71 [ 40.195776][ T541] uclogic 0003:28BD:0094.0002: probe with driver uclogic failed with error -71 [ 40.204919][ T365] usb 4-1: Using ep0 maxpacket: 32 [ 40.209251][ T541] usb 5-1: USB disconnect, device number 3 [ 40.211386][ T365] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 40.226243][ T365] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.236565][ T365] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.245703][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.253704][ T365] usb 4-1: Product: 姜폐䯿蛧곔籖惃谸¦귮Ⱛឭ㒿䚡꘹ꭒ첺ῂ聕կ廤ꑠ匮集豊Ⴢ屠뻨脤逖較攮껽罛谚辘ᆉ헄뀬嵛௧톞ꚳ⑷ᖑ塇竑⃡䁽ꟆⅣ薀剰퍤浠ؚ鍡뤐穮ꊛ狘聝Ṻ㞣맀৙䔩䰜匤鄪㍏듽﵉剂䰕覘틗ڻ옂㩐顐蕉ﰿ몱῱隝춱ᢝ钃考╝䚏宛ꥸ霤쩬嘆䀫컻൹ [ 40.286248][ T365] usb 4-1: Manufacturer: Б [ 40.290948][ T365] usb 4-1: SerialNumber: А [ 40.484779][ T36] audit: type=1400 audit(1750730972.910:252): avc: denied { mounton } for pid=802 comm="syz.2.168" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 40.484799][ T803] exFAT-fs (rnullb0): invalid boot record signature [ 40.484810][ T803] exFAT-fs (rnullb0): failed to read boot sector [ 40.521488][ T803] exFAT-fs (rnullb0): failed to recognize exfat type [ 40.525141][ T365] usb 4-1: 0:2 : does not exist [ 40.544798][ T365] usb 4-1: USB disconnect, device number 5 [ 40.553416][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.591780][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.591827][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.599398][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.604778][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.611315][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.617733][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.625967][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.630704][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.656119][ T36] audit: type=1400 audit(1750730973.080:253): avc: denied { setopt } for pid=809 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.718739][ T814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.719051][ T814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 40.725788][ T814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:142 [ 40.981436][ T365] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 41.152497][ T365] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.166375][ T365] usb 2-1: config 1 has no interface number 1 [ 41.172584][ T365] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 41.185539][ T365] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 41.198064][ T365] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.207313][ T365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.218258][ T365] usb 2-1: Product: syz [ 41.222520][ T365] usb 2-1: Manufacturer: syz [ 41.227160][ T365] usb 2-1: SerialNumber: syz [ 41.274582][ T828] rust_binder: Error while translating object. [ 41.274618][ T828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 41.280942][ T828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116 [ 41.437827][ T817] rust_binder: Write failure EINVAL in pid:144 [ 41.483238][ T365] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 41.497990][ T365] usb 2-1: 2:1 : sample bitwidth 189 in over sample bytes 3 [ 41.505824][ T365] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 41.516545][ T835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.517160][ T365] usb 2-1: USB disconnect, device number 11 [ 41.534906][ T837] rust_binder: Error in use_page_slow: ESRCH [ 41.534931][ T837] rust_binder: use_range failure ESRCH [ 41.543716][ T837] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 41.549313][ T837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 41.558382][ T837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:99 [ 41.661355][ T364] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.783965][ T848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 41.812604][ T850] cgroup: Unknown subsys name 'obj_type' [ 41.832032][ T850] /dev/rnullb0: Can't open blockdev [ 41.841327][ T364] usb 4-1: Using ep0 maxpacket: 32 [ 41.856955][ T364] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 41.867520][ T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.883031][ T364] usb 4-1: config 0 descriptor?? [ 41.941381][ T857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.942336][ T857] netlink: 'syz.2.186': attribute type 11 has an invalid length. [ 42.016571][ T860] netlink: 'syz.1.187': attribute type 4 has an invalid length. [ 42.027873][ T860] netlink: 'syz.1.187': attribute type 27 has an invalid length. [ 42.035908][ T860] netlink: 3609 bytes leftover after parsing attributes in process `syz.1.187'. [ 42.047729][ T860] incfs: mount failed -22 [ 42.137433][ T867] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 42.162159][ T867] rust_binder: Write failure EINVAL in pid:116 [ 42.296314][ T364] input: HID 28bd:1903 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:1903.0003/input/input7 [ 42.364605][ T364] uclogic 0003:28BD:1903.0003: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.3-1/input0 [ 42.492792][ T832] rust_binder: Write failure EINVAL in pid:120 [ 42.494750][ T315] usb 4-1: USB disconnect, device number 6 [ 42.667232][ T874] TCP: out of memory -- consider tuning tcp_mem [ 42.686053][ T877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 42.696285][ T879] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 42.709903][ T879] SELinux: failed to load policy [ 42.971362][ T364] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.990060][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 42.990076][ T36] audit: type=1400 audit(1750730975.410:266): avc: denied { read write } for pid=895 comm="syz.1.198" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.991956][ T541] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 42.996414][ T36] audit: type=1400 audit(1750730975.410:267): avc: denied { open } for pid=895 comm="syz.1.198" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 43.055210][ T541] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.117516][ T36] audit: type=1400 audit(1750730975.540:268): avc: denied { setopt } for pid=905 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.136758][ T364] usb 5-1: Using ep0 maxpacket: 32 [ 43.151545][ T364] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 43.152259][ T36] audit: type=1400 audit(1750730975.560:269): avc: denied { connect } for pid=905 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.179322][ T364] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 43.192818][ T364] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 43.205101][ T364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.220001][ T364] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 43.231426][ T364] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 43.245024][ T364] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 43.256728][ T364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.265602][ T364] usb 5-1: config 0 descriptor?? [ 43.454457][ T920] rust_binder: Failed copying remainder into alloc: EFAULT [ 43.454475][ T920] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 43.461784][ T920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.470051][ T920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:138 [ 43.471776][ T364] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 43.479986][ T920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.509085][ T36] audit: type=1400 audit(1750730975.930:270): avc: denied { unlink } for pid=924 comm="syz.3.207" name="#1" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.651526][ T938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 43.689887][ T378] usb 5-1: USB disconnect, device number 4 [ 43.712261][ T378] usblp0: removed [ 44.197782][ T942] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.228522][ T13] tipc: Subscription rejected, illegal request [ 44.228585][ T36] audit: type=1400 audit(1750730976.650:271): avc: denied { read } for pid=946 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.297441][ T36] audit: type=1400 audit(1750730976.660:272): avc: denied { create } for pid=948 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 44.321465][ T36] audit: type=1400 audit(1750730976.720:273): avc: denied { associate } for pid=951 comm="syz.1.216" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 44.342416][ T36] audit: type=1400 audit(1750730976.720:274): avc: denied { append } for pid=951 comm="syz.1.216" dev="proc" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.529514][ T36] audit: type=1400 audit(1750730976.950:275): avc: denied { read write } for pid=963 comm="syz.3.219" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 44.611430][ T541] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 44.750848][ T978] binder: Binderfs stats mode cannot be changed during a remount [ 44.772733][ T541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 235, changing to 11 [ 44.783984][ T541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50461, setting to 1024 [ 44.795744][ T541] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 44.804816][ T541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.813713][ T541] usb 5-1: config 0 descriptor?? [ 44.819058][ T957] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 44.901332][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 45.051306][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 45.057503][ T10] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 45.065828][ T10] usb 2-1: config 0 has no interface number 0 [ 45.072032][ T10] usb 2-1: config 0 interface 27 has no altsetting 0 [ 45.080120][ T10] usb 2-1: New USB device found, idVendor=04a5, idProduct=4027, bcdDevice=f2.12 [ 45.089379][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.097429][ T10] usb 2-1: Product: syz [ 45.101646][ T10] usb 2-1: Manufacturer: syz [ 45.106235][ T10] usb 2-1: SerialNumber: syz [ 45.111618][ T10] usb 2-1: config 0 descriptor?? [ 45.227892][ T541] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 45.238817][ T541] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input8 [ 45.307506][ T541] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 45.369729][ T541] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=541 comm=kworker/0:4 [ 45.429467][ T63] usb 5-1: USB disconnect, device number 5 [ 45.461338][ T315] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.591333][ T315] usb 4-1: device descriptor read/64, error -71 [ 45.831332][ T315] usb 4-1: device descriptor read/64, error -71 [ 45.975832][ T991] random: crng reseeded on system resumption [ 46.071333][ T315] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.198626][ T1002] mmap: syz.4.230 (1002): VmData 29077504 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 46.210964][ T315] usb 4-1: device descriptor read/64, error -71 [ 46.362814][ T1004] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 47.264260][ T315] usb 4-1: device descriptor read/64, error -71 [ 47.371886][ T315] usb usb4-port1: attempt power cycle [ 47.521358][ T983] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.669195][ T10] pl2303 2-1:0.27: required endpoints missing [ 47.681649][ T983] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 47.691005][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.699656][ T10] usb 2-1: USB disconnect, device number 12 [ 47.707812][ T983] usb 5-1: config 0 descriptor?? [ 47.915493][ T315] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 47.942329][ T315] usb 4-1: device descriptor read/8, error -71 [ 48.072437][ T315] usb 4-1: device descriptor read/8, error -71 [ 48.262497][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 48.262513][ T36] audit: type=1400 audit(1750730980.690:278): avc: denied { mounton } for pid=1024 comm="syz.3.239" path="/61/file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 48.361354][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 48.370315][ T36] audit: type=1400 audit(1750730980.790:279): avc: denied { bind } for pid=1029 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.390902][ T36] audit: type=1400 audit(1750730980.820:280): avc: denied { execute_no_trans } for pid=1029 comm="syz.3.240" path="/62/file0" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.415388][ T1030] rust_binder: Error in use_page_slow: ESRCH [ 48.415407][ T1030] rust_binder: use_range failure ESRCH [ 48.421561][ T1030] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 48.427121][ T1030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 48.434988][ T1030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:183 [ 48.511349][ T10] usb 2-1: device descriptor read/64, error -71 [ 48.664049][ T36] audit: type=1400 audit(1750730981.090:281): avc: denied { ioctl } for pid=1044 comm="syz.3.244" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 48.689472][ T36] audit: type=1400 audit(1750730981.110:282): avc: denied { watch } for pid=1044 comm="syz.3.244" path="/66/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 48.727735][ T983] usb 5-1: Cannot set autoneg [ 48.732776][ T983] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 48.745656][ T983] usb 5-1: USB disconnect, device number 6 [ 48.771394][ T10] usb 2-1: device descriptor read/64, error -71 [ 49.011358][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 49.151336][ T10] usb 2-1: device descriptor read/64, error -71 [ 49.298879][ T36] audit: type=1400 audit(1750730981.720:283): avc: denied { sqpoll } for pid=1052 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.325134][ T1058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.325158][ T1058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 49.392822][ T10] usb 2-1: device descriptor read/64, error -71 [ 49.493904][ T36] audit: type=1400 audit(1750730981.920:284): avc: denied { write } for pid=1069 comm="syz.3.251" path="socket:[9122]" dev="sockfs" ino=9122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.522033][ T10] usb usb2-port1: attempt power cycle [ 49.861401][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 49.882307][ T10] usb 2-1: device descriptor read/8, error -71 [ 50.012278][ T10] usb 2-1: device descriptor read/8, error -71 [ 50.066707][ T1083] rust_binder: Got transaction with invalid offset. [ 50.066736][ T1083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.073400][ T1083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 50.096451][ T36] audit: type=1400 audit(1750730982.520:285): avc: denied { nlmsg_read } for pid=1084 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.239653][ T36] audit: type=1400 audit(1750730982.660:286): avc: denied { bind } for pid=1097 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.258837][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 50.271471][ T36] audit: type=1400 audit(1750730982.660:287): avc: denied { node_bind } for pid=1097 comm="syz.4.261" saddr=172.20.20.17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 50.293130][ T10] usb 2-1: device descriptor read/8, error -71 [ 50.314373][ T1103] overlayfs: failed to resolve './file0': -2 [ 50.422303][ T10] usb 2-1: device descriptor read/8, error -71 [ 50.531417][ T10] usb usb2-port1: unable to enumerate USB device [ 50.561443][ T1120] tun0: tun_chr_ioctl cmd 1074025675 [ 50.566766][ T1120] tun0: persist enabled [ 50.594867][ T1127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.594891][ T1127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 50.614631][ T1129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:225 [ 50.631395][ T378] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 50.685532][ T1132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:225 [ 50.804377][ T378] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 50.823080][ T378] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 50.831436][ T378] usb 5-1: Product: syz [ 50.839235][ T1144] binder: Unknown parameter '0x00000000000000000xffffffffffffffff' [ 50.839700][ T378] usb 5-1: Manufacturer: syz [ 50.851845][ T378] usb 5-1: SerialNumber: syz [ 50.858164][ T378] usb 5-1: config 0 descriptor?? [ 50.901761][ T1146] netlink: 268 bytes leftover after parsing attributes in process `syz.3.275'. [ 51.244630][ T1158] binder: Bad value for 'max' [ 51.264696][ T378] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 51.466198][ T378] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 51.478209][ T378] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 51.499690][ T378] asix 5-1:0.0: probe with driver asix failed with error -71 [ 51.513127][ T378] usb 5-1: USB disconnect, device number 7 [ 51.631128][ T1174] rust_binder: 1171 RLIMIT_NICE not set [ 51.741322][ T315] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 51.832842][ T1189] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 51.911422][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 51.917751][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 51.928616][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 51.938399][ T315] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 51.948289][ T315] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.961354][ T315] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 51.970430][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.980383][ T315] usb 3-1: config 0 descriptor?? [ 52.052114][ T1210] binder: Unknown parameter 'ont_appraise' [ 52.207026][ T378] usb 3-1: USB disconnect, device number 12 [ 52.250641][ T1221] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.251128][ T1221] netlink: 1 bytes leftover after parsing attributes in process `syz.1.296'. [ 52.251427][ T315] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 52.258474][ T1221] rust_binder: Error in use_page_slow: ESRCH [ 52.274534][ T1221] rust_binder: use_range failure ESRCH [ 52.280553][ T1221] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 52.286115][ T1221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 52.294146][ T1221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:204 [ 52.315737][ T1224] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 52.332028][ T1224] rust_binder: Write failure EINVAL in pid:206 [ 52.341064][ T1226] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.399014][ T1227] rust_binder: got new transaction with bad transaction stack [ 52.405519][ T1227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 52.422952][ T1231] rust_binder: Write failure EFAULT in pid:214 [ 52.423603][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.449206][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.459099][ T315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.472864][ T315] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.481933][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.490474][ T315] usb 5-1: config 0 descriptor?? [ 52.671337][ T63] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 52.727084][ T1233] binder: Unknown parameter 'm00000000000' [ 52.821335][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 52.827596][ T63] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 52.835833][ T63] usb 2-1: config 0 has no interface number 0 [ 52.841980][ T63] usb 2-1: config 0 interface 184 has no altsetting 0 [ 52.850137][ T63] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 52.859220][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.867378][ T63] usb 2-1: Product: syz [ 52.873213][ T63] usb 2-1: Manufacturer: syz [ 52.877852][ T63] usb 2-1: SerialNumber: syz [ 52.883197][ T63] usb 2-1: config 0 descriptor?? [ 52.889717][ T63] smsc75xx v1.0.0 [ 52.893466][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 52.903635][ T63] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 52.912224][ T315] plantronics 0003:047F:FFFF.0006: report_id 0 is invalid [ 52.924448][ T315] plantronics 0003:047F:FFFF.0006: item 0 0 1 8 parsing failed [ 52.932438][ T315] plantronics 0003:047F:FFFF.0006: parse failed [ 52.938730][ T315] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 52.974957][ T1242] lo: entered promiscuous mode [ 52.979988][ T1241] lo: left promiscuous mode [ 53.112514][ T1202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.121152][ T1202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.241374][ T315] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 53.392378][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.402300][ T315] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 53.415119][ T315] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 53.424172][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.432857][ T315] usb 3-1: config 0 descriptor?? [ 53.439941][ T1255] rust_binder: Write failure EFAULT in pid:214 [ 53.444184][ T63] usb 2-1: USB disconnect, device number 17 [ 53.483304][ T1260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 53.831324][ T63] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 53.850744][ T315] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 53.874736][ T1273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.992574][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.011801][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.021646][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.034547][ T63] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.043623][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.043965][ T365] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 54.052301][ T63] usb 2-1: config 0 descriptor?? [ 54.064602][ T365] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 54.131319][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 54.139842][ T315] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 54.148332][ T315] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 54.156917][ T315] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -71 [ 54.171386][ T315] usb 3-1: USB disconnect, device number 13 [ 54.186032][ T1286] SELinux: failed to load policy [ 54.204481][ T1288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.204716][ T1288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 54.216368][ T1288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 54.293029][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 54.308831][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 54.317256][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 54.328981][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 54.338296][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.348068][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 54.357941][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.371030][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 54.380096][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.386379][ T1290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.389167][ T10] usb 4-1: config 0 descriptor?? [ 54.389444][ T1290] rust_binder: Write failure EINVAL in pid:153 [ 54.473089][ T1292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.479721][ T1292] rust_binder: Error in use_page_slow: ESRCH [ 54.486362][ T1292] rust_binder: use_range failure ESRCH [ 54.487545][ T63] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 54.494106][ T1292] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 54.498259][ T63] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 54.505378][ T1292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.513704][ T63] plantronics 0003:047F:FFFF.0009: item fetching failed at offset 12/15 [ 54.520835][ T1292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:155 [ 54.530433][ T63] plantronics 0003:047F:FFFF.0009: parse failed [ 54.554063][ T63] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 54.564287][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 54.564303][ T36] audit: type=1400 audit(1750730986.990:299): avc: denied { setattr } for pid=295 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.612058][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 54.625432][ T10] usb 4-1: USB disconnect, device number 11 [ 54.632329][ T10] usblp0: removed [ 54.704365][ T315] usb 2-1: USB disconnect, device number 18 [ 55.019266][ T378] usb 5-1: USB disconnect, device number 8 [ 55.073097][ T36] audit: type=1400 audit(1750730987.500:300): avc: denied { ioctl } for pid=1295 comm="syz.4.320" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.150491][ T36] audit: type=1400 audit(1750730987.570:301): avc: denied { mounton } for pid=1295 comm="syz.4.320" path="/file1/file0" dev="ramfs" ino=11984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 55.500813][ T1316] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 55.674391][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.674674][ T1332] rust_binder: Error in use_page_slow: ESRCH [ 55.691396][ T1332] rust_binder: use_range failure ESRCH [ 55.697416][ T1332] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 55.722273][ T1332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 55.731956][ T1337] syz.3.333: attempt to access beyond end of device [ 55.731956][ T1337] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 55.751334][ T1332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:247 [ 55.767034][ T1340] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 55.783284][ T36] audit: type=1400 audit(1750730988.210:302): avc: denied { map } for pid=1341 comm="syz.1.335" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 55.856873][ T36] audit: type=1400 audit(1750730988.280:303): avc: denied { name_bind } for pid=1348 comm="syz.3.338" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 55.859375][ T1355] netlink: 'syz.4.337': attribute type 1 has an invalid length. [ 55.886226][ T1352] SELinux: failed to load policy [ 55.921342][ T36] audit: type=1400 audit(1750730988.310:304): avc: denied { load_policy } for pid=1351 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.963286][ T1363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.963359][ T1363] rust_binder: inc_ref_done called when no active inc_refs [ 55.987555][ T63] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 56.021624][ T63] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.269692][ T1378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:267 [ 56.281369][ T36] audit: type=1400 audit(1750730988.700:305): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.297369][ T1380] rust_binder: Write failure EINVAL in pid:269 [ 56.831862][ T36] audit: type=1400 audit(1750730989.260:306): avc: denied { setopt } for pid=1390 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.859838][ T1391] kvm: user requested TSC rate below hardware speed [ 56.930463][ T36] audit: type=1400 audit(1750730989.350:307): avc: denied { mount } for pid=1390 comm="syz.4.350" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.015313][ T1398] binder: Bad value for 'max' [ 57.064068][ T1400] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.141321][ T63] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 57.301352][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 57.307638][ T63] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.316281][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 57.324793][ T63] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.335113][ T63] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.344698][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.354646][ T63] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.364504][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.377892][ T63] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.387642][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.396984][ T63] usb 4-1: config 0 descriptor?? [ 57.471326][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 57.483052][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 57.492219][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 57.503519][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 57.512393][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.531418][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.541898][ T10] usb 2-1: Product: ࠚ [ 57.546335][ T10] usb 2-1: Manufacturer: ఋ [ 57.550973][ T10] usb 2-1: SerialNumber: 稁뻻䨟뻸፭禭孢὞綹츽䎁㾽✫륭鋚猾롎਴쳊ൗꘌ䯕䄭쫤㯦忱댚Ȃㄥʦ뮙繯粺〿Ɲ걎䧓媪棫촿ㄪ惪Ԛ╓鑐鴚䘻ؕ﯑椩茰⏼嬏廰瑶ꀻᴅ厐슗뒴퇭툨䆌Ի቞㵺ퟳ繋掅魐﹭Ꭳ싾㭵⎭镳ྗ蕕⫦㒖荾㺤푓㪑奨൩⒡퐫乨㲟︧ﯕᗂ膊騉列뜩頗َ臊漷圵薲皰烞㱸庱麿修⇕틔뺚뾩ﶜ [ 57.611431][ T63] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.632887][ T1408] kvm: user requested TSC rate below hardware speed [ 57.711500][ T63] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 57.741489][ T63] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.791111][ T1401] rust_binder: inc_ref_done called when no active inc_refs [ 57.812402][ T378] usb 4-1: USB disconnect, device number 12 [ 57.830277][ T378] usblp0: removed [ 57.902026][ T1416] binder: Bad value for 'stats' [ 58.191685][ T10] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 58.247043][ T1428] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 58.621336][ T378] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 58.792457][ T378] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 58.800807][ T378] usb 4-1: config 0 has no interface number 0 [ 58.808665][ T378] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 58.817906][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.826219][ T378] usb 4-1: Product: syz [ 58.830536][ T378] usb 4-1: Manufacturer: syz [ 58.835415][ T378] usb 4-1: SerialNumber: syz [ 58.842344][ T378] usb 4-1: config 0 descriptor?? [ 59.204911][ T36] audit: type=1400 audit(1750730991.630:308): avc: denied { getopt } for pid=1444 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.521387][ T63] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 59.691328][ T63] usb 5-1: config 0 has no interfaces? [ 59.712343][ T63] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 59.721460][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 59.729545][ T63] usb 5-1: Product: syz [ 59.734015][ T63] usb 5-1: Manufacturer: syz [ 59.738628][ T63] usb 5-1: SerialNumber: syz [ 59.751877][ T63] usb 5-1: config 0 descriptor?? [ 59.959309][ T45] usb 5-1: USB disconnect, device number 9 [ 60.071484][ T63] usb 2-1: USB disconnect, device number 19 [ 60.559514][ T1460] overlayfs: missing 'lowerdir' [ 60.611331][ T63] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 60.782368][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.801411][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.811173][ T63] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.824254][ T63] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.833546][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.851600][ T63] usb 2-1: config 0 descriptor?? [ 61.258339][ T63] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 61.270501][ T63] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 61.286390][ T63] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 61.296746][ T36] audit: type=1326 audit(1750730993.720:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.1.374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f263e58e929 code=0x0 [ 61.299064][ T63] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 61.327173][ T63] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 61.334785][ T63] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 61.342397][ T63] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 61.350591][ T63] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 61.358270][ T63] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 61.366113][ T63] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 61.382192][ T63] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 61.415810][ T63] usb 2-1: USB disconnect, device number 20 [ 61.438913][ T1471] kvm: kvm [1469]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 61.453157][ T1468] fido_id[1468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 61.525519][ T378] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 61.550631][ T378] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 61.560519][ T378] asix 4-1:0.251: probe with driver asix failed with error -5 [ 61.585253][ T378] usb 4-1: USB disconnect, device number 13 [ 61.586532][ T1477] rust_binder: Got transaction with invalid offset. [ 61.602058][ T1477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.608702][ T1477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 61.670722][ T1491] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 61.693618][ T1491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 61.713492][ T1491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:361 [ 61.764513][ T1498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 61.834122][ T1503] rust_binder: Write failure EINVAL in pid:363 [ 62.697550][ T36] audit: type=1400 audit(1750730995.120:310): avc: denied { write } for pid=1528 comm="syz.4.394" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.738085][ T1531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.757739][ T36] audit: type=1400 audit(1750730995.120:311): avc: denied { remove_name } for pid=1528 comm="syz.4.394" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.840595][ T36] audit: type=1400 audit(1750730995.120:312): avc: denied { unlink } for pid=1528 comm="syz.4.394" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.881387][ T36] audit: type=1400 audit(1750730995.260:313): avc: denied { create } for pid=1545 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.939832][ T36] audit: type=1400 audit(1750730995.310:314): avc: denied { bpf } for pid=1550 comm="syz.3.403" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.946458][ T1564] rust_binder: Write failure EINVAL in pid:381 [ 63.027152][ T1570] veth1_to_bond: entered allmulticast mode [ 63.042121][ T1571] veth1_to_bond: entered promiscuous mode [ 63.062255][ T1570] veth1_to_bond: left promiscuous mode [ 63.070444][ T1573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:283 [ 63.070944][ T1570] veth1_to_bond: left allmulticast mode [ 63.211765][ T36] audit: type=1400 audit(1750730995.640:315): avc: denied { accept } for pid=1580 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 63.359923][ T1591] rust_binder: Write failure EFAULT in pid:322 [ 63.380194][ T1594] rust_binder: Write failure EFAULT in pid:324 [ 63.409078][ T1598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.420558][ T1598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 63.430786][ T1598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:327 [ 63.440477][ T1602] rust_binder: Write failure EINVAL in pid:394 [ 63.443112][ T1598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.458812][ T1598] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 63.460502][ T1602] binder: Bad value for 'stats' [ 63.465301][ T1598] rust_binder: Error while translating object. [ 63.465351][ T1598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.486883][ T1598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 63.541412][ T1608] SELinux: security_context_str_to_sid () failed with errno=-22 [ 63.602378][ T1615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:334 [ 63.661335][ T378] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 63.717438][ T1627] binder: Bad value for 'max' [ 63.719907][ T36] audit: type=1400 audit(1750730996.140:316): avc: denied { listen } for pid=1623 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.767695][ T1633] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 63.840142][ T1646] tap0: tun_chr_ioctl cmd 1074025677 [ 63.853595][ T378] usb 5-1: Using ep0 maxpacket: 8 [ 63.859172][ T1646] tap0: linktype set to 774 [ 63.864743][ T378] usb 5-1: config 14 has an invalid interface number: 26 but max is 3 [ 63.876006][ T378] usb 5-1: config 14 has an invalid interface number: 191 but max is 3 [ 63.886825][ T1646] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.886905][ T1646] rust_binder: Write failure EINVAL in pid:351 [ 63.893676][ T378] usb 5-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 63.912879][ T378] usb 5-1: config 14 has 2 interfaces, different from the descriptor's value: 4 [ 63.923095][ T378] usb 5-1: config 14 has no interface number 0 [ 63.929263][ T378] usb 5-1: config 14 has no interface number 1 [ 63.941327][ T378] usb 5-1: config 14 interface 26 altsetting 6 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 63.967930][ T378] usb 5-1: config 14 interface 26 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.978728][ T378] usb 5-1: config 14 interface 26 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.988623][ T378] usb 5-1: config 14 interface 26 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 64.005555][ T378] usb 5-1: config 14 interface 26 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 64.021926][ T378] usb 5-1: config 14 interface 26 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 64.032946][ T378] usb 5-1: config 14 interface 191 altsetting 27 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.048030][ T378] usb 5-1: config 14 interface 26 has no altsetting 0 [ 64.051340][ T983] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 64.056575][ T378] usb 5-1: config 14 interface 191 has no altsetting 0 [ 64.070814][ T378] usb 5-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=57.9f [ 64.080059][ T378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.088207][ T378] usb 5-1: Product: syz [ 64.092496][ T378] usb 5-1: Manufacturer: 䐊 [ 64.097174][ T378] usb 5-1: SerialNumber: syz [ 64.157832][ T1654] FAT-fs (rnullb0): bogus number of reserved sectors [ 64.164695][ T1654] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 64.187300][ T1656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.187509][ T1656] rust_binder: Write failure EINVAL in pid:361 [ 64.208416][ T1658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 64.222699][ T983] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.240424][ T983] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.260597][ T983] usb 4-1: config 0 interface 0 has no altsetting 0 [ 64.280818][ T983] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 64.292036][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.295060][ T1663] FAULT_INJECTION: forcing a failure. [ 64.295060][ T1663] name failslab, interval 1, probability 0, space 0, times 1 [ 64.313277][ T983] usb 4-1: config 0 descriptor?? [ 64.313578][ T1600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.330409][ T1663] CPU: 1 UID: 0 PID: 1663 Comm: syz.1.446 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 64.330444][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.330462][ T1663] Call Trace: [ 64.330468][ T1663] [ 64.330475][ T1663] __dump_stack+0x21/0x30 [ 64.330508][ T1663] dump_stack_lvl+0x10c/0x190 [ 64.330527][ T1663] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.330548][ T1663] dump_stack+0x19/0x20 [ 64.330575][ T1663] should_fail_ex+0x3d9/0x530 [ 64.330595][ T1663] should_failslab+0xac/0x100 [ 64.330617][ T1663] kmem_cache_alloc_noprof+0x42/0x3a0 [ 64.330638][ T1663] ? getname_flags+0xc6/0x710 [ 64.330660][ T1663] getname_flags+0xc6/0x710 [ 64.330680][ T1663] ? build_open_flags+0x487/0x600 [ 64.330699][ T1663] getname+0x1b/0x30 [ 64.330719][ T1663] do_sys_openat2+0xcb/0x1c0 [ 64.330736][ T1663] ? fput+0x1a5/0x240 [ 64.330751][ T1663] ? do_sys_open+0x100/0x100 [ 64.330768][ T1663] ? ksys_write+0x1ef/0x250 [ 64.330789][ T1663] ? __cfi_ksys_write+0x10/0x10 [ 64.330810][ T1663] __x64_sys_openat+0x13a/0x170 [ 64.330829][ T1663] x64_sys_call+0xe69/0x2ee0 [ 64.330850][ T1663] do_syscall_64+0x58/0xf0 [ 64.330872][ T1663] ? clear_bhb_loop+0x50/0xa0 [ 64.330890][ T1663] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.330909][ T1663] RIP: 0033:0x7f263e58d290 [ 64.330933][ T1663] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 64.330948][ T1663] RSP: 002b:00007f263cbf6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 64.330975][ T1663] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f263e58d290 [ 64.330989][ T1663] RDX: 0000000000000000 RSI: 00007f263e610c51 RDI: 00000000ffffff9c [ 64.331002][ T1663] RBP: 00007f263e610c51 R08: 0000000000000000 R09: 0000000000000000 [ 64.331014][ T1663] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 64.331025][ T1663] R13: 0000000000000000 R14: 00007f263e7b5fa0 R15: 00007ffc74b92018 [ 64.331041][ T1663] [ 64.361525][ T1600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.547637][ T1599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.557553][ T1599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.580240][ T378] usb 5-1: invalid MIDI in EP 0 [ 64.594339][ T378] snd-usb-audio 5-1:14.26: probe with driver snd-usb-audio failed with error -22 [ 64.613160][ T378] snd-usb-audio 5-1:14.191: probe with driver snd-usb-audio failed with error -2 [ 64.641527][ T378] usb 5-1: USB disconnect, device number 10 [ 64.652927][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:14.191/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.672730][ T36] audit: type=1400 audit(1750730997.100:317): avc: denied { ioctl } for pid=1670 comm="syz.1.449" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 64.808534][ T36] audit: type=1400 audit(1750730997.230:318): avc: denied { ioctl } for pid=1641 comm="syz.3.436" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.808923][ T1642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.852291][ T1642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.921316][ T63] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 65.071392][ T63] usb 2-1: Invalid ep0 maxpacket: 32 [ 65.211354][ T63] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 65.371320][ T63] usb 2-1: Invalid ep0 maxpacket: 32 [ 65.377299][ T983] usbhid 4-1:0.0: can't add hid device: -71 [ 65.383675][ T983] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 65.391507][ T63] usb usb2-port1: attempt power cycle [ 65.401383][ T983] usb 4-1: USB disconnect, device number 14 [ 65.731333][ T63] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 65.751698][ T63] usb 2-1: Invalid ep0 maxpacket: 32 [ 65.801733][ T1679] lo: entered promiscuous mode [ 65.807893][ T1678] lo: left promiscuous mode [ 65.835555][ T1683] option changes via remount are deprecated (pid=1682 comm=syz.4.453) [ 65.881338][ T63] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 65.921645][ T63] usb 2-1: Invalid ep0 maxpacket: 32 [ 65.931328][ T63] usb usb2-port1: unable to enumerate USB device [ 66.305542][ T1694] FAULT_INJECTION: forcing a failure. [ 66.305542][ T1694] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.341323][ T1694] CPU: 0 UID: 0 PID: 1694 Comm: syz.4.457 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 66.341353][ T1694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.341364][ T1694] Call Trace: [ 66.341370][ T1694] [ 66.341377][ T1694] __dump_stack+0x21/0x30 [ 66.341401][ T1694] dump_stack_lvl+0x10c/0x190 [ 66.341416][ T1694] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.341428][ T1694] dump_stack+0x19/0x20 [ 66.341445][ T1694] should_fail_ex+0x3d9/0x530 [ 66.341458][ T1694] should_fail+0xf/0x20 [ 66.341471][ T1694] should_fail_usercopy+0x1e/0x30 [ 66.341483][ T1694] strncpy_from_user+0x28/0x270 [ 66.341494][ T1694] ? getname_flags+0xc6/0x710 [ 66.341507][ T1694] getname_flags+0x102/0x710 [ 66.341519][ T1694] ? build_open_flags+0x487/0x600 [ 66.341530][ T1694] getname+0x1b/0x30 [ 66.341542][ T1694] do_sys_openat2+0xcb/0x1c0 [ 66.341551][ T1694] ? fput+0x1a5/0x240 [ 66.341560][ T1694] ? do_sys_open+0x100/0x100 [ 66.341569][ T1694] ? ksys_write+0x1ef/0x250 [ 66.341581][ T1694] ? __cfi_ksys_write+0x10/0x10 [ 66.341594][ T1694] __x64_sys_openat+0x13a/0x170 [ 66.341604][ T1694] x64_sys_call+0xe69/0x2ee0 [ 66.341616][ T1694] do_syscall_64+0x58/0xf0 [ 66.341630][ T1694] ? clear_bhb_loop+0x50/0xa0 [ 66.341641][ T1694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.341651][ T1694] RIP: 0033:0x7f54c218d290 [ 66.341662][ T1694] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 66.341671][ T1694] RSP: 002b:00007f54c2f48f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 66.341683][ T1694] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f54c218d290 [ 66.341691][ T1694] RDX: 0000000000000000 RSI: 00007f54c2210c51 RDI: 00000000ffffff9c [ 66.341698][ T1694] RBP: 00007f54c2210c51 R08: 0000000000000000 R09: 0000000000000000 [ 66.341704][ T1694] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 66.341714][ T1694] R13: 0000000000000000 R14: 00007f54c23b5fa0 R15: 00007ffd1164a748 [ 66.341727][ T1694] [ 66.600055][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 66.600070][ T36] audit: type=1400 audit(1750730999.020:322): avc: denied { shutdown } for pid=1703 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.646028][ T36] audit: type=1400 audit(1750730999.050:323): avc: denied { create } for pid=1703 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 66.686520][ T1712] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 66.711423][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.722396][ T36] audit: type=1400 audit(1750730999.090:324): avc: denied { write } for pid=1709 comm="syz.3.463" name="tcp6" dev="proc" ino=4026532458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 66.862299][ T1725] FAULT_INJECTION: forcing a failure. [ 66.862299][ T1725] name failslab, interval 1, probability 0, space 0, times 0 [ 66.883554][ T1725] CPU: 1 UID: 0 PID: 1725 Comm: syz.4.467 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 66.883587][ T1725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.883599][ T1725] Call Trace: [ 66.883606][ T1725] [ 66.883613][ T1725] __dump_stack+0x21/0x30 [ 66.883640][ T1725] dump_stack_lvl+0x10c/0x190 [ 66.883659][ T1725] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.883681][ T1725] dump_stack+0x19/0x20 [ 66.883700][ T1725] should_fail_ex+0x3d9/0x530 [ 66.883721][ T1725] should_failslab+0xac/0x100 [ 66.883744][ T1725] kmem_cache_alloc_noprof+0x42/0x3a0 [ 66.883764][ T1725] ? alloc_empty_file+0xbf/0x280 [ 66.883782][ T1725] alloc_empty_file+0xbf/0x280 [ 66.883799][ T1725] path_openat+0xf8/0x34b0 [ 66.883815][ T1725] ? _parse_integer+0x2e/0x40 [ 66.883833][ T1725] ? kasan_save_track+0x4f/0x80 [ 66.883855][ T1725] ? kasan_save_alloc_info+0x40/0x50 [ 66.883873][ T1725] ? __kasan_slab_alloc+0x73/0x90 [ 66.883895][ T1725] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 66.883914][ T1725] ? getname_flags+0xc6/0x710 [ 66.883936][ T1725] ? do_sys_openat2+0xcb/0x1c0 [ 66.883954][ T1725] ? __x64_sys_openat+0x13a/0x170 [ 66.883971][ T1725] ? x64_sys_call+0xe69/0x2ee0 [ 66.883992][ T1725] ? do_syscall_64+0x58/0xf0 [ 66.884016][ T1725] ? do_filp_open+0x3e0/0x3e0 [ 66.884035][ T1725] do_filp_open+0x1c6/0x3e0 [ 66.884051][ T1725] ? __cfi_do_filp_open+0x10/0x10 [ 66.884070][ T1725] ? alloc_fd+0x4e7/0x5a0 [ 66.884093][ T1725] do_sys_openat2+0x12c/0x1c0 [ 66.884110][ T1725] ? fput+0x1a5/0x240 [ 66.884125][ T1725] ? do_sys_open+0x100/0x100 [ 66.884142][ T1725] ? ksys_write+0x1ef/0x250 [ 66.884163][ T1725] ? __cfi_ksys_write+0x10/0x10 [ 66.884184][ T1725] __x64_sys_openat+0x13a/0x170 [ 66.884202][ T1725] x64_sys_call+0xe69/0x2ee0 [ 66.884224][ T1725] do_syscall_64+0x58/0xf0 [ 66.884245][ T1725] ? clear_bhb_loop+0x50/0xa0 [ 66.884263][ T1725] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.884281][ T1725] RIP: 0033:0x7f54c218d290 [ 66.884297][ T1725] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 66.884312][ T1725] RSP: 002b:00007f54c2f48f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 66.884339][ T1725] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f54c218d290 [ 66.884353][ T1725] RDX: 0000000000000000 RSI: 00007f54c2210c51 RDI: 00000000ffffff9c [ 66.884365][ T1725] RBP: 00007f54c2210c51 R08: 0000000000000000 R09: 0000000000000000 [ 66.884377][ T1725] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 66.884389][ T1725] R13: 0000000000000000 R14: 00007f54c23b5fa0 R15: 00007ffd1164a748 [ 66.884405][ T1725] [ 67.231318][ T983] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 67.371334][ T983] usb 5-1: device descriptor read/64, error -71 [ 67.631311][ T983] usb 5-1: device descriptor read/64, error -71 [ 67.881323][ T983] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 68.021353][ T983] usb 5-1: device descriptor read/64, error -71 [ 68.261373][ T983] usb 5-1: device descriptor read/64, error -71 [ 68.371442][ T983] usb usb5-port1: attempt power cycle [ 68.701402][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.703019][ T730] Bluetooth: hci0: command 0x1003 tx timeout [ 68.728408][ T983] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 68.771722][ T1756] FAULT_INJECTION: forcing a failure. [ 68.771722][ T1756] name failslab, interval 1, probability 0, space 0, times 0 [ 68.784548][ T983] usb 5-1: device descriptor read/8, error -71 [ 68.804673][ T1756] CPU: 1 UID: 0 PID: 1756 Comm: syz.1.478 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 68.804705][ T1756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.804716][ T1756] Call Trace: [ 68.804723][ T1756] [ 68.804730][ T1756] __dump_stack+0x21/0x30 [ 68.804755][ T1756] dump_stack_lvl+0x10c/0x190 [ 68.804775][ T1756] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.804795][ T1756] dump_stack+0x19/0x20 [ 68.804810][ T1756] should_fail_ex+0x3d9/0x530 [ 68.804830][ T1756] should_failslab+0xac/0x100 [ 68.804853][ T1756] kmem_cache_alloc_noprof+0x42/0x3a0 [ 68.804872][ T1756] ? alloc_empty_file+0xbf/0x280 [ 68.804887][ T1756] alloc_empty_file+0xbf/0x280 [ 68.804903][ T1756] path_openat+0xf8/0x34b0 [ 68.804921][ T1756] ? kasan_save_track+0x4f/0x80 [ 68.804941][ T1756] ? kasan_save_alloc_info+0x40/0x50 [ 68.804957][ T1756] ? __kasan_slab_alloc+0x73/0x90 [ 68.804978][ T1756] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 68.804997][ T1756] ? getname_flags+0xc6/0x710 [ 68.805017][ T1756] ? do_sys_openat2+0xcb/0x1c0 [ 68.805042][ T1756] ? __x64_sys_openat+0x13a/0x170 [ 68.805059][ T1756] ? x64_sys_call+0xe69/0x2ee0 [ 68.805081][ T1756] ? do_syscall_64+0x58/0xf0 [ 68.805106][ T1756] ? do_filp_open+0x3e0/0x3e0 [ 68.805124][ T1756] do_filp_open+0x1c6/0x3e0 [ 68.805139][ T1756] ? __cfi_do_filp_open+0x10/0x10 [ 68.805158][ T1756] ? alloc_fd+0x4e7/0x5a0 [ 68.805180][ T1756] do_sys_openat2+0x12c/0x1c0 [ 68.805195][ T1756] ? fput+0x1a5/0x240 [ 68.805209][ T1756] ? do_sys_open+0x100/0x100 [ 68.805224][ T1756] ? ksys_write+0x1ef/0x250 [ 68.805240][ T1756] ? __cfi_ksys_write+0x10/0x10 [ 68.805259][ T1756] __x64_sys_openat+0x13a/0x170 [ 68.805276][ T1756] x64_sys_call+0xe69/0x2ee0 [ 68.805295][ T1756] do_syscall_64+0x58/0xf0 [ 68.805317][ T1756] ? clear_bhb_loop+0x50/0xa0 [ 68.805335][ T1756] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.805353][ T1756] RIP: 0033:0x7f263e58d290 [ 68.805369][ T1756] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 68.805384][ T1756] RSP: 002b:00007f263cbf6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 68.805405][ T1756] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f263e58d290 [ 68.805419][ T1756] RDX: 0000000000000000 RSI: 00007f263e610c51 RDI: 00000000ffffff9c [ 68.805431][ T1756] RBP: 00007f263e610c51 R08: 0000000000000000 R09: 0000000000000000 [ 68.805442][ T1756] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 68.805452][ T1756] R13: 0000000000000000 R14: 00007f263e7b5fa0 R15: 00007ffc74b92018 [ 68.805465][ T1756] [ 69.091097][ T1760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.100583][ T1760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.110449][ T983] usb 5-1: device descriptor read/8, error -71 [ 69.311800][ T1767] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 69.351334][ T983] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 69.385316][ T983] usb 5-1: device descriptor read/8, error -71 [ 69.532323][ T983] usb 5-1: device descriptor read/8, error -71 [ 69.651403][ T983] usb usb5-port1: unable to enumerate USB device [ 69.783890][ T13] bridge_slave_1: left allmulticast mode [ 69.789577][ T13] bridge_slave_1: left promiscuous mode [ 69.795246][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.811449][ T13] bridge_slave_0: left allmulticast mode [ 69.817120][ T13] bridge_slave_0: left promiscuous mode [ 69.823070][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.836706][ T1778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 69.943661][ T13] veth1_macvtap: left promiscuous mode [ 69.961014][ T13] veth0_vlan: left promiscuous mode [ 70.035714][ T1794] FAULT_INJECTION: forcing a failure. [ 70.035714][ T1794] name failslab, interval 1, probability 0, space 0, times 0 [ 70.036170][ T1780] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.048473][ T1794] CPU: 0 UID: 0 PID: 1794 Comm: syz.4.488 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 70.048501][ T1794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.048512][ T1794] Call Trace: [ 70.048517][ T1794] [ 70.048525][ T1794] __dump_stack+0x21/0x30 [ 70.048548][ T1794] dump_stack_lvl+0x10c/0x190 [ 70.048567][ T1794] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.048585][ T1794] ? stack_depot_save_flags+0x38/0x800 [ 70.048607][ T1794] dump_stack+0x19/0x20 [ 70.048625][ T1794] should_fail_ex+0x3d9/0x530 [ 70.048644][ T1794] should_failslab+0xac/0x100 [ 70.048666][ T1794] __kmalloc_cache_noprof+0x41/0x3c0 [ 70.048686][ T1794] ? proc_self_get_link+0x11a/0x290 [ 70.048703][ T1794] proc_self_get_link+0x11a/0x290 [ 70.048719][ T1794] ? security_inode_follow_link+0x74/0x140 [ 70.048740][ T1794] ? __cfi_proc_self_get_link+0x10/0x10 [ 70.048756][ T1794] pick_link+0x6d5/0xe80 [ 70.048776][ T1794] step_into+0xc58/0xf50 [ 70.048794][ T1794] ? __kasan_check_read+0x15/0x20 [ 70.048812][ T1794] ? read_word_at_a_time+0x1a/0x40 [ 70.048834][ T1794] ? set_root+0x420/0x420 [ 70.048853][ T1794] ? lookup_fast+0x167/0x530 [ 70.048871][ T1794] ? inode_permission+0xf3/0x4c0 [ 70.048899][ T1794] link_path_walk+0x753/0xec0 [ 70.048920][ T1794] path_openat+0x281/0x34b0 [ 70.048938][ T1794] ? kasan_save_alloc_info+0x40/0x50 [ 70.048955][ T1794] ? getname_flags+0xc6/0x710 [ 70.048974][ T1794] ? do_sys_openat2+0xcb/0x1c0 [ 70.048991][ T1794] ? __x64_sys_openat+0x13a/0x170 [ 70.049009][ T1794] ? asm_sysvec_call_function_single+0x1f/0x30 [ 70.049028][ T1794] ? do_filp_open+0x3e0/0x3e0 [ 70.049045][ T1794] do_filp_open+0x1c6/0x3e0 [ 70.049059][ T1794] ? __cfi_do_filp_open+0x10/0x10 [ 70.049077][ T1794] ? alloc_fd+0x4e7/0x5a0 [ 70.049099][ T1794] do_sys_openat2+0x12c/0x1c0 [ 70.049115][ T1794] ? fput+0x1a5/0x240 [ 70.049129][ T1794] ? do_sys_open+0x100/0x100 [ 70.049145][ T1794] ? ksys_write+0x1ef/0x250 [ 70.049164][ T1794] ? __cfi_ksys_write+0x10/0x10 [ 70.049184][ T1794] __x64_sys_openat+0x13a/0x170 [ 70.049201][ T1794] x64_sys_call+0xe69/0x2ee0 [ 70.049222][ T1794] do_syscall_64+0x58/0xf0 [ 70.049243][ T1794] ? clear_bhb_loop+0x50/0xa0 [ 70.049260][ T1794] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.049276][ T1794] RIP: 0033:0x7f54c218d290 [ 70.049291][ T1794] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 70.049305][ T1794] RSP: 002b:00007f54c2f48f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 70.049325][ T1794] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f54c218d290 [ 70.049338][ T1794] RDX: 0000000000000000 RSI: 00007f54c2210c51 RDI: 00000000ffffff9c [ 70.049350][ T1794] RBP: 00007f54c2210c51 R08: 0000000000000000 R09: 0000000000000000 [ 70.049362][ T1794] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 70.049373][ T1794] R13: 0000000000000000 R14: 00007f54c23b5fa0 R15: 00007ffd1164a748 [ 70.049387][ T1794] [ 70.117329][ T36] audit: type=1400 audit(1750731002.540:325): avc: denied { create } for pid=1795 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 70.144304][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.166087][ T36] audit: type=1400 audit(1750731002.590:326): avc: denied { setopt } for pid=1798 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.169151][ T1780] bridge_slave_0: entered allmulticast mode [ 70.219595][ T1799] kvm: emulating exchange as write [ 70.223314][ T1780] bridge_slave_0: entered promiscuous mode [ 70.417949][ T1780] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.426584][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.435068][ T1780] bridge_slave_1: entered allmulticast mode [ 70.441809][ T1780] bridge_slave_1: entered promiscuous mode [ 70.483886][ T378] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 70.500539][ T378] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.545584][ T1780] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.552673][ T1780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.559969][ T1780] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.567031][ T1780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.593803][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.603091][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.617434][ T36] audit: type=1400 audit(1750731003.040:327): avc: denied { create } for pid=1809 comm="syz.3.493" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.638427][ T36] audit: type=1400 audit(1750731003.040:328): avc: denied { mounton } for pid=1809 comm="syz.3.493" path="/144/file0" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.663695][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.670742][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.685918][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.692984][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.706461][ T36] audit: type=1400 audit(1750731003.130:329): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.712663][ T1813] input: syz0 as /devices/virtual/input/input11 [ 70.745236][ T1780] veth0_vlan: entered promiscuous mode [ 70.758474][ T1780] veth1_macvtap: entered promiscuous mode [ 70.778806][ T36] audit: type=1400 audit(1750731003.200:330): avc: denied { mounton } for pid=1780 comm="syz-executor" path="/root/syzkaller.NW1o8m/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.831365][ T378] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 70.982337][ T378] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.992524][ T378] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.002293][ T378] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.016455][ T378] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.025578][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.033622][ T378] usb 2-1: Product: syz [ 71.037782][ T378] usb 2-1: Manufacturer: syz [ 71.042425][ T378] usb 2-1: SerialNumber: syz [ 71.331636][ T1822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 71.393251][ T1830] input: syz1 as /devices/virtual/input/input12 [ 71.421023][ T36] audit: type=1400 audit(1750731003.840:331): avc: denied { map } for pid=1825 comm="syz.5.498" path="socket:[16738]" dev="sockfs" ino=16738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.457528][ T378] cdc_ncm 2-1:1.0: bind() failure [ 71.463587][ T378] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 71.471918][ T378] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 71.481047][ T378] usb 2-1: USB disconnect, device number 25 [ 71.530339][ T1836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 71.532262][ T1836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.541558][ T1836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 71.553805][ T1840] rust_binder: Failed copying remainder into alloc: EFAULT [ 71.565728][ T1840] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 71.573256][ T1840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 71.582940][ T1840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:481 [ 71.610116][ T1847] FAULT_INJECTION: forcing a failure. [ 71.610116][ T1847] name failslab, interval 1, probability 0, space 0, times 0 [ 71.631936][ T1847] CPU: 0 UID: 0 PID: 1847 Comm: syz.5.503 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 71.631965][ T1847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.631977][ T1847] Call Trace: [ 71.631983][ T1847] [ 71.631989][ T1847] __dump_stack+0x21/0x30 [ 71.632012][ T1847] dump_stack_lvl+0x10c/0x190 [ 71.632028][ T1847] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.632046][ T1847] dump_stack+0x19/0x20 [ 71.632061][ T1847] should_fail_ex+0x3d9/0x530 [ 71.632080][ T1847] should_failslab+0xac/0x100 [ 71.632101][ T1847] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 71.632121][ T1847] ? __d_alloc+0x42/0x8e0 [ 71.632139][ T1847] __d_alloc+0x42/0x8e0 [ 71.632156][ T1847] ? kfree_link+0x19/0x30 [ 71.632171][ T1847] ? link_path_walk+0x724/0xec0 [ 71.632186][ T1847] ? path_openat+0x281/0x34b0 [ 71.632201][ T1847] ? do_filp_open+0x1c6/0x3e0 [ 71.632216][ T1847] d_alloc_parallel+0xde/0x1240 [ 71.632236][ T1847] ? avc_has_perm_noaudit+0x268/0x360 [ 71.632255][ T1847] ? __cfi_d_alloc_parallel+0x10/0x10 [ 71.632275][ T1847] ? __kasan_check_write+0x18/0x20 [ 71.632294][ T1847] ? rwsem_read_trylock+0x2b1/0x660 [ 71.632312][ T1847] ? downgrade_write+0x440/0x440 [ 71.632327][ T1847] __lookup_slow+0x142/0x400 [ 71.632348][ T1847] ? lookup_one_len+0x2f0/0x2f0 [ 71.632369][ T1847] ? down_read+0x79/0xe0 [ 71.632389][ T1847] lookup_slow+0x57/0x80 [ 71.632409][ T1847] link_path_walk+0x990/0xec0 [ 71.632426][ T1847] path_openat+0x281/0x34b0 [ 71.632441][ T1847] ? kasan_save_alloc_info+0x40/0x50 [ 71.632457][ T1847] ? getname_flags+0xc6/0x710 [ 71.632477][ T1847] ? do_sys_openat2+0xcb/0x1c0 [ 71.632494][ T1847] ? __x64_sys_openat+0x13a/0x170 [ 71.632511][ T1847] ? do_filp_open+0x3e0/0x3e0 [ 71.632529][ T1847] do_filp_open+0x1c6/0x3e0 [ 71.632543][ T1847] ? __cfi_do_filp_open+0x10/0x10 [ 71.632558][ T1847] ? __cfi_kfree_link+0x10/0x10 [ 71.632573][ T1847] ? alloc_fd+0x4e7/0x5a0 [ 71.632594][ T1847] do_sys_openat2+0x12c/0x1c0 [ 71.632609][ T1847] ? fput+0x1a5/0x240 [ 71.632624][ T1847] ? do_sys_open+0x100/0x100 [ 71.632639][ T1847] ? ksys_write+0x1ef/0x250 [ 71.632658][ T1847] ? __cfi_ksys_write+0x10/0x10 [ 71.632676][ T1847] __x64_sys_openat+0x13a/0x170 [ 71.632691][ T1847] x64_sys_call+0xe69/0x2ee0 [ 71.632711][ T1847] do_syscall_64+0x58/0xf0 [ 71.632732][ T1847] ? clear_bhb_loop+0x50/0xa0 [ 71.632748][ T1847] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.632764][ T1847] RIP: 0033:0x7f58a4b8d290 [ 71.632778][ T1847] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 71.632793][ T1847] RSP: 002b:00007f58a5a7df60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 71.632811][ T1847] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58a4b8d290 [ 71.632823][ T1847] RDX: 0000000000000000 RSI: 00007f58a4c10c51 RDI: 00000000ffffff9c [ 71.632833][ T1847] RBP: 00007f58a4c10c51 R08: 0000000000000000 R09: 0000000000000000 [ 71.632844][ T1847] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 71.632856][ T1847] R13: 0000000000000000 R14: 00007f58a4db5fa0 R15: 00007ffdd63f04b8 [ 71.632871][ T1847] [ 71.988461][ T1858] rust_binder: Error in use_page_slow: ESRCH [ 71.988474][ T1858] rust_binder: use_range failure ESRCH [ 71.994537][ T1858] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 72.000196][ T1858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 72.008057][ T1858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:30 [ 72.141354][ T730] Bluetooth: hci0: command 0x1003 tx timeout [ 72.141352][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.273325][ T289] ------------[ cut here ]------------ [ 72.279021][ T289] WARNING: CPU: 1 PID: 289 at fs/overlayfs/util.c:600 ovl_dir_modified+0x15a/0x190 [ 72.288400][ T289] Modules linked in: [ 72.292341][ T289] CPU: 1 UID: 0 PID: 289 Comm: syz-executor Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 72.305933][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.316103][ T289] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 72.321772][ T289] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 79 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 59 45 03 cc e8 36 86 43 ff <0f> 0b e9 3e ff ff ff e8 2a 86 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 72.341433][ T289] RSP: 0018:ffffc900066afb68 EFLAGS: 00010293 [ 72.347491][ T289] RAX: ffffffff8242169a RBX: 0000000000000000 RCX: ffff888125ba8000 [ 72.355571][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.363569][ T289] RBP: ffffc900066afb90 R08: ffff88813409d67f R09: 1ffff11026813acf [ 72.371581][ T289] R10: dffffc0000000000 R11: ffffed1026813ad0 R12: 0000000000000000 [ 72.379560][ T289] R13: dffffc0000000000 R14: ffff88813409d5e0 R15: ffff88811adae770 [ 72.387558][ T289] FS: 000055557edfd500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 72.396516][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.403200][ T289] CR2: 00007ffc74b8ffe8 CR3: 0000000129426000 CR4: 00000000003526b0 [ 72.411210][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.419208][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.427206][ T289] Call Trace: [ 72.430478][ T289] [ 72.433425][ T289] ovl_do_remove+0x7b8/0xcf0 [ 72.438019][ T289] ? ovl_set_redirect+0x780/0x780 [ 72.443069][ T289] ? down_write+0xe9/0x2a0 [ 72.447490][ T289] ? __cfi_down_write+0x10/0x10 [ 72.452358][ T289] ovl_rmdir+0x1e/0x30 [ 72.456426][ T289] vfs_rmdir+0x3e0/0x560 [ 72.460655][ T289] incfs_kill_sb+0x109/0x230 [ 72.465308][ T289] deactivate_locked_super+0xd5/0x2a0 [ 72.470681][ T289] deactivate_super+0xb8/0xe0 [ 72.475397][ T289] cleanup_mnt+0x3f1/0x480 [ 72.479846][ T289] __cleanup_mnt+0x1d/0x40 [ 72.484332][ T289] task_work_run+0x1e0/0x250 [ 72.488957][ T289] ? __cfi_task_work_run+0x10/0x10 [ 72.494146][ T289] ? __x64_sys_umount+0x126/0x170 [ 72.499177][ T289] ? __cfi___x64_sys_umount+0x10/0x10 [ 72.504609][ T289] ? __kasan_check_read+0x15/0x20 [ 72.509658][ T289] resume_user_mode_work+0x36/0x50 [ 72.514839][ T289] syscall_exit_to_user_mode+0x64/0xb0 [ 72.520323][ T289] do_syscall_64+0x64/0xf0 [ 72.524820][ T289] ? clear_bhb_loop+0x50/0xa0 [ 72.529505][ T289] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.535425][ T289] RIP: 0033:0x7f263e58fc57 [ 72.539836][ T289] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 72.559520][ T289] RSP: 002b:00007ffc74b901b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 72.567969][ T289] RAX: 0000000000000000 RBX: 00007f263e610925 RCX: 00007f263e58fc57 [ 72.575976][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc74b90270 [ 72.583995][ T289] RBP: 00007ffc74b90270 R08: 0000000000000000 R09: 0000000000000000 [ 72.592019][ T289] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc74b91360 [ 72.599988][ T289] R13: 00007f263e610925 R14: 00000000000118fc R15: 00007ffc74b92430 [ 72.607987][ T289] [ 72.611001][ T289] ---[ end trace 0000000000000000 ]--- [ 72.616751][ T289] ------------[ cut here ]------------ [ 72.622389][ T289] WARNING: CPU: 0 PID: 289 at fs/overlayfs/util.c:600 ovl_dir_modified+0x15a/0x190 [ 72.631749][ T289] Modules linked in: [ 72.635648][ T289] CPU: 0 UID: 0 PID: 289 Comm: syz-executor Tainted: G W 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 72.650691][ T289] Tainted: [W]=WARN [ 72.654516][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.664607][ T289] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 72.670255][ T289] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 79 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 59 45 03 cc e8 36 86 43 ff <0f> 0b e9 3e ff ff ff e8 2a 86 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 72.689897][ T289] RSP: 0018:ffffc900066afb68 EFLAGS: 00010293 [ 72.695997][ T289] RAX: ffffffff8242169a RBX: 0000000000000000 RCX: ffff888125ba8000 [ 72.704069][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.712072][ T289] RBP: ffffc900066afb90 R08: ffff88813409d67f R09: 1ffff11026813acf [ 72.720047][ T289] R10: dffffc0000000000 R11: ffffed1026813ad0 R12: 0000000000000000 [ 72.728055][ T289] R13: dffffc0000000000 R14: ffff88813409d5e0 R15: ffff88811adae770 [ 72.736057][ T289] FS: 000055557edfd500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 72.745017][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.751647][ T289] CR2: 00007feee5581178 CR3: 0000000129426000 CR4: 00000000003526b0 [ 72.759632][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.767631][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.775634][ T289] Call Trace: [ 72.778922][ T289] [ 72.781895][ T289] ovl_do_remove+0x7b8/0xcf0 [ 72.786493][ T289] ? ovl_set_redirect+0x780/0x780 [ 72.791544][ T289] ? down_write+0xe9/0x2a0 [ 72.796096][ T289] ? __cfi_down_write+0x10/0x10 [ 72.800947][ T289] ovl_rmdir+0x1e/0x30 [ 72.805056][ T289] vfs_rmdir+0x3e0/0x560 [ 72.809304][ T289] incfs_kill_sb+0x1a0/0x230 [ 72.813932][ T289] deactivate_locked_super+0xd5/0x2a0 [ 72.819313][ T289] deactivate_super+0xb8/0xe0 [ 72.824020][ T289] cleanup_mnt+0x3f1/0x480 [ 72.828443][ T289] __cleanup_mnt+0x1d/0x40 [ 72.832878][ T289] task_work_run+0x1e0/0x250 [ 72.837466][ T289] ? __cfi_task_work_run+0x10/0x10 [ 72.842602][ T289] ? __x64_sys_umount+0x126/0x170 [ 72.847630][ T289] ? __cfi___x64_sys_umount+0x10/0x10 [ 72.853023][ T289] ? __kasan_check_read+0x15/0x20 [ 72.858050][ T289] resume_user_mode_work+0x36/0x50 [ 72.863222][ T289] syscall_exit_to_user_mode+0x64/0xb0 [ 72.868693][ T289] do_syscall_64+0x64/0xf0 [ 72.873135][ T289] ? clear_bhb_loop+0x50/0xa0 [ 72.877820][ T289] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.883736][ T289] RIP: 0033:0x7f263e58fc57 [ 72.888148][ T289] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 72.907793][ T289] RSP: 002b:00007ffc74b901b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 72.916241][ T289] RAX: 0000000000000000 RBX: 00007f263e610925 RCX: 00007f263e58fc57 [ 72.924239][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc74b90270 [ 72.932227][ T289] RBP: 00007ffc74b90270 R08: 0000000000000000 R09: 0000000000000000 [ 72.940190][ T289] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc74b91360 [ 72.948190][ T289] R13: 00007f263e610925 R14: 00000000000118fc R15: 00007ffc74b92430 [ 72.956186][ T289] [ 72.959196][ T289] ---[ end trace 0000000000000000 ]---