last executing test programs: 1m12.098867287s ago: executing program 2 (id=645): stat(0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x100, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m12.095762597s ago: executing program 2 (id=646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0088a8132788a87c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 1m12.082341788s ago: executing program 2 (id=647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x100, 0x2}, {0x9}], r1}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') read(r2, &(0x7f0000000000)=""/211, 0xd3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020"], 0x0) ioctl$EVIOCRMFF(r7, 0x40085507, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1m11.367502778s ago: executing program 2 (id=651): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) open(&(0x7f0000000000)='./file2\x00', 0x2000, 0x2) (async) open(&(0x7f0000000000)='./file2\x00', 0x2000, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 1m11.319192098s ago: executing program 2 (id=652): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') (async) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x280001, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x280001, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x79) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 1m11.315125528s ago: executing program 2 (id=653): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000140)=ANY=[]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x5b) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs$pagemap(r1, &(0x7f0000000040)) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r3, 0x1, 0x9, &(0x7f0000000040), 0x29) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) close(0x5) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(0x5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000140)=ANY=[]) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read(r0, 0x0, 0x5b) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) (async) syz_open_procfs$pagemap(r1, &(0x7f0000000040)) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) (async) setsockopt(r3, 0x1, 0x9, &(0x7f0000000040), 0x29) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) close(0x5) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) close(0x5) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) (async) 1m11.289716989s ago: executing program 32 (id=653): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000140)=ANY=[]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x5b) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs$pagemap(r1, &(0x7f0000000040)) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r3, 0x1, 0x9, &(0x7f0000000040), 0x29) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) close(0x5) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(0x5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000140)=ANY=[]) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read(r0, 0x0, 0x5b) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) (async) syz_open_procfs$pagemap(r1, &(0x7f0000000040)) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) (async) setsockopt(r3, 0x1, 0x9, &(0x7f0000000040), 0x29) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) close(0x5) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) close(0x5) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) (async) 56.872225535s ago: executing program 3 (id=836): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x2, 0x4, 0xffffffffffffffc0, 0x10001}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040)=0x404, 0x4) close(0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000008e0ff3f000000000600800000000000"]) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="15002b0128bd7000fcdbdf250a0807000100506ac1000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 56.710926468s ago: executing program 3 (id=837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1fc}]}) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f00000000c0)=""/66) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x99b33000) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) 56.702220368s ago: executing program 3 (id=838): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3b7def187cceed45a126ff9bc6c7c5666b4eb3365548af01da99dba8a87c8bf87d84ebaa50d7c253f134732b18329e01bca8f8476d3519be9c9c0d0a93ce76d914ebc6004528f8930e6a2c600e4ea1a1c5981c72ea2085ce2a70cc84fc97aa", @ANYRES32=r0, @ANYBLOB="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"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, r3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3b7def187cceed45a126ff9bc6c7c5666b4eb3365548af01da99dba8a87c8bf87d84ebaa50d7c253f134732b18329e01bca8f8476d3519be9c9c0d0a93ce76d914ebc6004528f8930e6a2c600e4ea1a1c5981c72ea2085ce2a70cc84fc97aa", @ANYRES32=r0, @ANYBLOB="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"], 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) close_range(r1, r3, 0x2) (async) 53.690077971s ago: executing program 3 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb) ftruncate(r0, 0xffff) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x8a00, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c0000002990b3b9585dde83f7dd7862c7eedbc49bdd82c7dd000000000b09007a15b331"], 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r3, &(0x7f0000000340)="896102aecdfcc44f", 0xfdef, 0x2, 0x0, 0xf400}]) io_pgetevents(r4, 0x3ff, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)={&(0x7f0000000080)={[0x7]}, 0x8}) 51.925147956s ago: executing program 3 (id=873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x800000000000fff, 0x1ffffff}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xffffffdffffffff8]}}) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x40000000, 0x3}) fcntl$lock(r1, 0x6, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) fcntl$setlease(r0, 0x400, 0x3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) (async) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x800000000000fff, 0x1ffffff}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xffffffdffffffff8]}}) (async) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x40000000, 0x3}) (async) fcntl$lock(r1, 0x6, &(0x7f0000000000)) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) (async) 51.872634367s ago: executing program 3 (id=874): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000800), 0x3, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8e, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) (async) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(0x0, 0x84000) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003440)={'tunl0\x00', 0x0}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x8c800, &(0x7f0000000080)=ANY=[]) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x8c800, &(0x7f0000000080)=ANY=[]) 51.809768838s ago: executing program 33 (id=874): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000800), 0x3, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8e, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) (async) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(0x0, 0x84000) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003440)={'tunl0\x00', 0x0}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x8c800, &(0x7f0000000080)=ANY=[]) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x8c800, &(0x7f0000000080)=ANY=[]) 4.062375761s ago: executing program 5 (id=1784): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x100010, r0, 0xe8e80000) 4.058980112s ago: executing program 5 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @thr={&(0x7f0000000040)="4446ae803ea2ed109c080ed3718567ba24ab809fe811c9675fe3bb1c8b1c056385298999e5d40463374dfd36fb0cd62bfc428ff3ff58cdb1614a13876dd05fd62cfb558c0f3115b57aff075c91", &(0x7f0000000180)="41476d9a1d886aed33a60a06d5b14e66a1fef44933656ae615547ccdf67b92325e9bc309de24502b60ef5b8fbf40ecaf822045180e1dc3e031fca57652abdfca114c132a8f7d9f50080c7a39110446893c6ffdb58a42f3ae2797d5688abc30822019190f6ab5bf6e57948adfb715fb4bcaf283bb63f88fa97b5514867da36ad2dfbe69b591392efc72708b3a924c423f159703b67649756df9f044236a70f71c92993feb607e81dedef24227330173581e5fbd91774939d57e25027d20ffae6b1c"}}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) r4 = gettid() timer_getoverrun(r3) tkill(r4, 0x12) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 4.020433112s ago: executing program 5 (id=1787): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000240)='+#(.\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010117, 0x0, 0xffffffff80000001}]}) (async) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000800)=""/92) 3.896297624s ago: executing program 5 (id=1791): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async, rerun: 64) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) (async) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xd4d) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x20044800) renameat2(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x7) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000740), &(0x7f00000007c0)=0x6e, 0x800) recvmsg$unix(r4, 0x0, 0x100) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0x2f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x4, 0xd3}}}}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) (async) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, r3) 1.321614461s ago: executing program 1 (id=1820): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="67284a96d77a2039fa964e6b7f23f349ea595e00e80846f1d86d3db4cd211d246bab25620729c26770fb3f4bfc92dc5e3c305c5b2e1392ec8c45631e685e8e920d139f67747dbcd22fc4e5ccbff75dd1d507175290a4a48d10720d682fa4d79be251a72ed53133ac905f7cd61e9cb1783da6dfc0a7693a352a823cbc3c4e37bedb232b8c1e7b3a6b1233ca0fd5a947bc2b08e9177706cae11f2defc0c611a8f3d1a77f9b079879d97ec15a1be0893381013c03fced6250bae30663012e4ffc3fedc29b5ec3c6b0ec0135c2cb3b05b1daeaa3f759d2db9284bdc10cd1e56138cbf231b32bf88082ff388a3b92e82783f835f5ab7a322c39", 0xf7}, {&(0x7f0000000240)="68e69b4a791312c992c0095244db578e747f4b34117f5fc59cb448ed95d1644364414e24274306374a3b24f8ffac2cd88f3b3ee8c5669dc7828a2a40d05b57", 0x3f}, {&(0x7f00000002c0)="48409ab2700a3a0f5def8b18ce4a82285552c9add04368", 0x17}, {&(0x7f0000000440)="88a0bd4f4423b3ce82e01a9f0f4127bee5a639a3faf558209366ba1b941477b2d3bab04aaf783e366a6f8150917b24b7a977e9ed4b3f8ad0eb09b902fe6b88a4954818936fa01abb7cb5f93544aef101", 0x50}], 0x4, 0x8, 0x37) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = signalfd4(r0, &(0x7f0000000580)={[0x4]}, 0x8, 0x800) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0x8) dup3(r2, r3, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2000250700000008003a0008000000060032000100000005002e00010000000500300001000000050033000200"/55], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=[@exit_looper], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7000000009d6ed2b82920a14886fc0c"}) 1.152712813s ago: executing program 0 (id=1823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000280)={0xa3, 0x0, &(0x7f0000000100)}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x1802, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x17}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x0, 0x200, 0x800, {}, {0x0, 0xea60}, {0x3, 0x1, 0x1}, 0x1, @canfd={{0x3}, 0x19, 0x0, 0x0, 0x0, "ae10cab421cd37188263d1980c5ead56f502d07e4eaa2d2e565c2f94c513f11bfdb70fcd0d47c25bcb8c187ec4d289e1ddad2de0ba589d55afaae0337a1c49f6"}}, 0x80}}, 0x20000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async, rerun: 64) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000180), &(0x7f00000001c0)=@sha1={0x1, "da9458b3526e4e008a544f8b3054010ccffafb3c"}, 0x15, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x20) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xf9a3d000) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x3}, @fda={0x66646185, 0x2, 0x1, 0x34}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x0, 0x0, 0x0}) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) lseek(r4, 0xffffffffefff8001, 0x1) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 1.139786023s ago: executing program 4 (id=1824): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x800050000003) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x800050000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 1.131629874s ago: executing program 4 (id=1825): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001180)={0x5, {{0x2, 0x4e23, @multicast2}}}, 0x88) sendmmsg$unix(r2, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 1.078779804s ago: executing program 4 (id=1826): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) flock(r1, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x1a, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000040a4010902240001000000000904000001030000000921050000012205000905810300"], 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 1.038638765s ago: executing program 0 (id=1827): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x100000000a, 0x100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000100)=0x4, 0x4) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000540)="a6", 0x1}], 0x1, 0x8, 0x8000, 0x4) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00313005e7b0000009de2b7fb00ef9d3c298561edae7c01005000000000000000000000000000000000000000001700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 974.641016ms ago: executing program 0 (id=1828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}, r3}, 0x14) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x22, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 846.261078ms ago: executing program 5 (id=1829): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xc2081, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$UHID_INPUT(r0, &(0x7f0000000080)={0x8, {"b02d0d4957d0467e6cef2e7c0282415f39aaa993943bc3389744639a9ca669768c4d852c0fedc7d91ca15586d1ad7cd4208e1c2d746001121eecfdfe511d3e581270d74e1714576142ffb19994f197662064e63c741852fd4365a4b1e22cf47a69ee24737823b677d0c84585a469a0dbdf7c76f2ef201710641820d14d57f7bfc950df97206ff26cb0e742140a2077eaa6d52ce98c547e53a68ea69debe495dfd1f255e2502e7bc37f138325d5e7af4e3e0125efb785a0e26df6f5c9052caacfc62d030c7c488ea821cfdcca02373b0c1f8587cbbcecd8d93829524abac5a1b7d08d7b0d34081124c213deb9360d161b56e53390eebf88beaea80a2b6f80e25f0538f97a298aee3b97b9c9f566b9eb5cd574929311e4c012d577df5c0c9d5f950b9dcaaf4c64186f574ab3efdfc9c2d80be7204154cdc818bc460ad8fb3d727c88b3e4294743ee68a4dc4cd622935a2d533ddaf9659d69ef7f49488f83e8a16b5002772b2831fd5f531bcbe2583892e3404c1b58f1cfc98623bea9e06aa1470713a0b41fea2e1f8331f828921800daf0ab4d443ad86ca4bba0c45cab14251ce65e81d2557c0876670d5f4ec473e6e66356173cb07c38ad12d38e59f5c37a6e82b8bb148424af27668767eb0c5b7a4534b0fcf3854f31c5c1bf6136e20ce628d7af91a74d75a0af92fc47edd9a4ff5a8f8d27cecbe95301a1fe74395ab21299a68f660b27672d11f07c25262a9e602c31e46d32edb93c941efde50dba6f6ae56507e948d1815f4ab75497496f5521528e2841632f792f525fefb3508d8abea10ca784d04154e8a51af9daf12f34673e26fec51235c83de955efb9bc2f12350a0a5a618731caac1cd5deadc64a12c547da15f9950c67eb6a94a3b7b66789c2ae1e31c6782a46b9a9e52878457a8ee676689530cd2980ec413d6f2ef67ab05758ec60829b5b4f2fcde6bb525df09cac8c3d4a45bd476dcf06b9ccb21031f1686050517b8bb5d432b07dda1914fd5e63554efe2fad03a43bc08c7ea739386352390f84909413f5429d76a90275410384d0ceacdb7a33a1f3f45521a3e4d8bd39de2c81e2091ffa651680b4829a0f426161d7a8b456c3ad07107ee771ef2b574830f35fe779ae3648e4b5edd9b010f2ab7605ea8fb505be593982e0a7e10335f7d9221ba34f97388a541572ce6d869aa0daf8f2db14be01dca654c3030660af17c7435ef8403cc0b679800eb9ae22e9fd92e07fedf499168abef14dbd0ad2e8715b5278e0a8e1707f5ac1de56a796304c9bba055207ccf80ed2662b325040b80063ff1c7959146c6e54e61abb05190d0a84ac2a3b7c01f9b81e4c3003e2e1d93d17dc3fc270e5786a2e5ad59894696a834ca19c6dd47c849db9d33c84f97f9fa66b69eeb24f9832c4bff184a73a51393d43e55cc8ca6c7f9afe3e3a05ad8a66206a2f507f30f73c185b02b4706758bea49d3543be938558a878ea0f0e775d89b1e31a93bc397b73d46d98e6d27d4aa59c7de0ef526dc9e0fc09a41724bcbcf61a82269691dc2aa56deb35c9ce8085038f86664aea6f38ea392c528aac291f993347695efd037cec12cc2279e92ea4c1db49abb091e5f97955d577661c731d8ccf629ac9c8bf75f860411388962d60f43bff8394dc0f2211c3de4a752fe43155d258423ed5945cb59e29cb411c6185a8f62761c42faf215256c4449fd6eb174e1815df0db26d46ae158dfdfaf64ef4a620182cd6d5ced7d1e3ffd1118c001d2c19a27d6814981a362e82e14c81fe8766150f0199bbdbcf8474022e1f7b22eaa9912aa467f8241a9c4c80b99198f64a36f35db5740dc69ec642d227b4c5a158c01ff4eeb0ce7368b808265304240cd6c1dfffe14940c0deb73360ec401f0be19ddfab01708465630b7e73b2a68d65bf40c7e92f0211c57e1e9ac20dd8aea63ebfe1bb08495309699e01b9e1d524bb6b81fb0bef1eb5c0b083fc90b494681585ecf2cfa8932a401c415d0bc350162c65c902d44d297ecd7dce31e322ba699a6257cd5e1b26e37448ad65d85118e2b67ed22fcb4a1e539496385bf2eccf477d119c6f3a8659046b6fd8cbd7d3fd4df8d515e1f894cc014b83d06d06dbbb04c937660173910c7eb73f572ca4dd28b8223169c8d3a8d070e190290894ae139dc1b688c9142b7bf2d0483ed85a1cea249430f42e3d54dfe3fa1dd2bb99b0bd737acf874dcf9d77e5f33f08f49ca7c0482f0cdc0dc1915c854bf80571dc62d7fea3ab7c2c49ed9398d9f3a27624e5937a71441fe0c407ca3bf1e5fd09bdaeb85317cce0abf639af32080196799c777d400764e25c17ffc6dcd9621116ecc9ef4c81451c65159eac57303384f194768611b3bb2269d3befa01f321184b0222e70dd323804b296bdf05a972eaba67acf03aef9df1dd33a806951c5f81d9b862fd410250b21998294821cf80a8057e6cd6feeb3eede51beb183ffee5c4ad423eef716b85a5787bc25c8b7643e312808f72e865bd726684086e1ca1c8023676190d0ce97704c20a127e65cc962e52d4d5ca752269adb02bd95a2a14229e021df9f2d63ce3480a0d4b064c2aa83260b893a70c6820f0a07aa57246bcc42207c5ae34c1665c257e8a29a6f49f8226885228e3d58609c18c2ee2a86f685d67a4a54460b5641ad549842c00ee558d327ec34e46ae9d4ebf3d606b4775d0cf4368a1503c1f98c784d74bc8ce3944926a3769f0edfc2243251b465edf6c35e766e5ded49692f3519acd6b44436065ff9f8bfea8af4ccd14eb6a7b2b7da484c70dadc7405b9779af7fade57cfb10ffba603bbb8d87b9ad834bbe08b7df09d2537c39b913d5eb83d830bc8eaf15585b4043d07093551cd734887ac6a44129084575c6343af80c4abc8ad081abebe2644e2edb878ffcc38bbca7cf0d296512fb04f2213ea41c4787bfd9e73684dec69aedee76d51b47ebac51c4419eda4c52cffa16393b73987043ce2263328724298514f0c7e5ee6656f2d024f8275b9a8785c88bba3666c5a48c0fd2d6b7aad579b7a636c1c09069f4e65848139e640ffa0b2849cb2e80c2c07d259c8fdad8503bb5d9c3e01061996c2b75d44568a84d1a314a03469940ef90a79f6f6e09daf6b85fd75d8bca714e07d612315fd5367f344662085c39b6fbc718adbfe2a32a5e85a51a41a924458062fc5b0c97adac59d57211d14d04aada09ffcae8605cb40e0f3d574511b0402489a6a642047b88b0097a748b45f258a028405880b1e5a5aaea9cf300dd732575e8aa3c9abe7987410841e627e73e84d1ff133dd640f9564b3593a409718e15a2088674a5f5d24ec4ddac5f9a30b4c58cb37051ca4003fb65c395b30c96c8ad5cfd2db535a76ca0a3c5f2884a67e1f3fa50cef6932f0aa5c1661eb41b5f8f00dbe70e39bffdaf12d5ea9b56a953bbb367a5d82e63565ea5b03aa23e88015fd68d2be16dc616354c1e0dffd8e1898e4522ffc850f45f6f0f9dec9c57d2566e7c167599692b9e51b24a5e16c67c02cf2b27b221ac5bb68bd524d5c278e0ccab80649916d7ea204deba02e54e983e2f96164192a8033585f7ce59e67dc483b3df1a7fc4c24e52fbf3c2143f6a43c23e646d217da4173ae48bee915081a0089eda2a46e3d2bc2fbdc624a2eb2a9a0c81dcfbcee9729ea803a759841c3a221e274c63e7f835ffbdff7d85f1d880fddc384640026e0b73133a4e8a7201def2f0bc409e164e8f8cc90e444256e090b7a41d1c1baa7bab786b652588208132064d2f7ddb6850d76c5a05970b7bc6b11d65903ac4863a7e821f5828ed96fd789cc7f6f029e13f79d6f0130abf78034b978c475f746d0f903d1f89e5976a421f09fc677f59b15d0ed491bbb099622b5271208bc3421a3846c3fe348272b01054c883c93381f0d0b6ac0fa1a9bd030fd0b440f4d6d41e2bfb367c5f89e26550818ca944493cd908effc69c00ac9617e86b23e27c2c824e9cbc93ef0ab6f5801b542f0795344da92a0ba149e4c7f32f7811763a3fe96abd1bfc0d66263ae8ef49f353c50d9e31b84aa4c1972c944a0a5295ef268d4ecf3d496cbf589305e79c75cd218e03a9eda7cc23bbacbc55f22294a8342263653222bc69aab2358f2fc26209e8ee6746a964e35575ff3e9460c4ee3b07a357c8ddcac3e3b6bef7a4a54a607582646ea6b4ced74cddf444476b85cf71ba8144fcb60f65c1dd73fd966f8d34414f4071d1f573862fab3d98421f682d6c5881b972466a0b631c54c07c70b5d7d087a209981b30dd446aeff61d11c658aea043f0fadef83c6fc01e9fcbd5726f860da3e5da98235085c99c1217ab262ee9a259d9679396e0835f35ab9d99336ebbc1925f93a21bb7c75ae5a154150b479757ff32bde76f5586c22c1f089db6a759dd22baa4828095051d5b51c6693dd9ccd64d2672b85b387dfc20131232b2e79ad02d17344b1b622f9b7f95b549de40b2f107d4d6c1c7e940d1036ba56bfa3c943221c408d36f4d7e6486157fbde16c03d106bd2334418ecdd5b075d6d52466101e7c6995476029bfc2ad9656c22e5a3e3807c86fcc9585098082dcec678974fe7d7f8a26609e083152c1b723047898af8320022b79b02b0de5fe961b4a3288913e4f5f70f853e0d10475c47839dbc6ad2a8b4e51fbc319fe3aed7dcf8de850252e0f468f0dd695ac70f1ca964c0a2ce74a829b2baa9227217e68f588bbcd17cdb01a4f757c63832a9e1a3f42c04f5b80c47ec681362788f7aaa30ccc561a58cfd4ea3752cbf3d91580ddc8ef399bc2ec692a90fc864233fccb15f9781b7156a4611be0f402475bff1afccdaa291b1d0a7d4c5a9a83e8d8f61ea6358a3665326fb9863c227febd38a89b5cb5fd5e40cb3ce710a2fc5ee6c5be48ac1fd6f07d5bfc8dea4efdc7ee54f650244bfe127b95536accb38d390cce91756b37ef237fc7ccc3cb0b51798b940b63cd8ce0efb32a821e1e4bc481d07b2e48751e6e56781819dea66ab905c05a10d2492f6df396e903495183c3bbc369790fb1a69c39a50491299310320d310f7f37e34e9555c5a0ba6720bfc9e7397721f6e873923804c7b28bc54919f30c1d25f16aa14f1e93a6f4f6a8c95e088c6a07e5e97aff89720e222cd16e2b1146bf3e6a0c01d93afc9f913c4e4164b07629a341fa99e62a921cf904e04281fd6c7fd98dd2da59f4a5bf8fd3b82738ae3caba34c59a66dd97d7df9cdcdffcb53baf32dbbffa4a967dfd8a6fec432392d47195b7a9be68167d3de9d589168db05af489b636512a3b49d4ac0cef515d4b15fce26f79147772c8c289834ee1165435c06768ad0bfd5d33e9ed83a113717d00d88a4321e243c94a9064cae6e9b82c969c6c39f9070fc8516a53885b0e9bed1e2adb5282fb681a45498d0c9e2b5f9c647bf9442751dd971ed88950db09fd98a5dc9079cf6b9b73ca5bd88b31996c9ba7a5e934d7918bb1bc2fd09c2ae7cd42cb3ea7d0f532f4477a7a79beaedb85e8c15acb1542d7d08abf444b6d711f12a5cb12a5e064704e06e4d4f7085954f2ece0b4d38bfeb6f5a88e906c522b7aafbb46f846668e66e973b6170c124cb0ffd70e0e68d474085ab638189b5d625e16243e335ad6e78c5164ef4dd174a73f0e176beaf2737f99f804d869a61465869ccfe356bf9fb0af6d9c91ed35c7ede454a4a61416de3d233d938fd33fd6dde865fe2c2bde0e9d3841628fa3a373bfc4925d508a62400e81b827d5fd5fd6d415aea798f180f7faf676169e1133322d4aea1ad36d90dd9742dc8fd49b8039d7d6fef0684e934ff8a544", 0x1000}}, 0x1006) (async) lsm_get_self_attr(0x68, &(0x7f00000010c0)={0x0, 0x0, 0x71, 0x51, ""/81}, &(0x7f0000001140)=0x71, 0x1) lseek(0xffffffffffffffff, 0xe000000000000, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=@flushsa={0x28, 0x1c, 0x100, 0x70bd28, 0x25dfdbfd, {0xff}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000001280)={0xf000}) (async) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000012c0)=0x5) (async) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000001300)) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x800) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001480)={'\x00', 0x2, 0x0, 0x4, 0xfff, 0x5, 0x0}) ioprio_set$pid(0x1, r3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000001680)={&(0x7f0000001540), 0x6e, &(0x7f0000001600)=[{&(0x7f00000015c0)=""/58, 0x3a}], 0x1, &(0x7f0000001640)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x10100) ioctl$TCSETAW(r7, 0x5407, &(0x7f00000016c0)={0xfffe, 0xf, 0x67bf, 0x7, 0x12, "69c4cf9e3caebf36"}) connect$802154_dgram(r6, &(0x7f0000001700)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x2c, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) (async) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000001c40)={0x7, 0x0, [{0x4000, 0x1c, &(0x7f00000018c0)=""/28}, {0xd000, 0x88, &(0x7f0000001900)=""/136}, {0x4, 0x6a, &(0x7f00000019c0)=""/106}, {0xdddd0000, 0x25, &(0x7f0000001a40)=""/37}, {0x3000, 0xb8, &(0x7f0000001a80)=""/184}, {0xd000, 0xa3, &(0x7f0000001b40)=""/163}, {0xdddd0000, 0x25, &(0x7f0000001c00)=""/37}]}) r11 = syz_clone(0xa045080, &(0x7f0000001d40)="0d6949921dd47281a9b9889f475369f14b3aa033a1dcfd35baff6866eaaacd30f57b39a789c88e062822c96ba09d435827cc318f6df3518f0510deb22ebe9e8ea555a187bc94ebbaa1e28ba8c705c53a58205c88762b357b3c1ab2d2d62cd29ea1e0e5c53055297040178af58d0fee03ccf44a5b7aa66ec8e8775adc73c970d375e0a099a1189801ecc614fdc88b4df98dadb66cba4e99905c6c76109c9c5d0a0dbe2f040db3e7aee9d556229bb7662de73c475db8ad2e32acc062d3a044eddd1cafcd9d21fd9471cc743d596bd4125d4fb2acb09570f7b33c7d09b4cf4de1", 0xdf, &(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)="ad3810c799dc506dd8be8090c38bbbd62059713104cfd12fa13cf508c222ddcc717140e69413b65d2fa2861858a2f012efa49a9b4b477d1ef46a1237b81641f7aae5f34b70f185e4") r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r12, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x14, r13, 0x400, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002080)='./cgroup/syz0\x00', 0x1ff) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r10, 0x111, 0x4, 0x1, 0x4) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000020c0)={'\x00', 0x8, 0x8, 0x7, 0x0, 0x1, r3}) kcmp$KCMP_EPOLL_TFD(r11, r14, 0x7, r6, &(0x7f0000002140)={r8, r7, 0xf1}) 603.338351ms ago: executing program 4 (id=1830): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSETLED(r2, 0x4b32, 0x8000000000000001) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000021928350f70000000200820007000000"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x20000000) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x300, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 571.608871ms ago: executing program 4 (id=1831): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socket(0x2c, 0x1, 0x7) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000380)={[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) (async) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x69f1, 0x5, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x5005}, 0xd0) recvmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x3c) setreuid(0x0, r3) setresuid(r3, 0xee01, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 511.127292ms ago: executing program 4 (id=1832): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback, 0x2400}, 0x1c) 474.274533ms ago: executing program 1 (id=1833): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4fff, r1, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) 460.593033ms ago: executing program 1 (id=1834): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getdents64(0xffffffffffffff9c, &(0x7f0000000340)=""/240, 0xf0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0xe) lstat(&(0x7f0000004240)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r4) getresgid(&(0x7f0000003100)=0x0, &(0x7f0000003140), &(0x7f0000003180)) getresuid(&(0x7f00000031c0), &(0x7f0000003200)=0x0, &(0x7f0000003240)) r7 = getegid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003280)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000003380)=0xe8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file0\x00', r10, r11) statx(r2, &(0x7f0000005e80)='./file0\x00', 0x800, 0x40, &(0x7f0000005ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000005fc0), &(0x7f0000006000)=0x0, &(0x7f0000006040)) syz_fuse_handle_req(r2, &(0x7f0000000ac0)="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", 0x2000, &(0x7f00000061c0)={&(0x7f0000000440)={0x50, 0x0, 0xf, {0x7, 0x2b, 0xa, 0x8000008, 0x6, 0x9, 0x5, 0xff000, 0x0, 0x0, 0x80, 0x4}}, &(0x7f00000004c0)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000000540)={0x18, 0x0, 0x4, {0x200}}, &(0x7f0000000580)={0x18, 0x0, 0x6, {0x2db}}, &(0x7f00000005c0)={0x18, 0x0, 0x3013, {0x81}}, &(0x7f0000000600)={0x28, 0x0, 0x400f, {{0x0, 0x80000000}}}, &(0x7f0000000640)={0x60, 0x0, 0x1, {{0xffffffff, 0x3ff, 0x1000, 0x9, 0x4, 0x5, 0x42b, 0x2}}}, &(0x7f00000006c0)={0x18, 0xfffffffffffffffe, 0x8000000000000001, {0x7f}}, &(0x7f0000000700)=ANY=[@ANYBLOB="0c000000fefffbfff1fe0000000000002f6465762fe17368e30874fe"], &(0x7f0000000740)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x11}}, &(0x7f0000002bc0)={0x78, 0x0, 0x6, {0x5b6, 0x9, 0x0, {0x0, 0x80000001, 0x6, 0x8, 0x4, 0x1, 0x1, 0x101, 0x0, 0x4000, 0xfffffffe, 0x0, 0x0, 0x5, 0x4}}}, &(0x7f0000002c40)={0x90, 0x0, 0x96, {0x4, 0x1, 0x7, 0x8, 0x40, 0x7, {0x2, 0x90000000, 0x0, 0xfffffffffffffffe, 0x9, 0x7, 0x6, 0x6, 0x9, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x836}}}, &(0x7f0000000780)=ANY=[@ANYBLOB="3000000000000000ff01000900000000063500000000000003000000d2cfc15927437c473102990000000400000006000000272826bc1d000000"], &(0x7f0000004300)=ANY=[@ANYBLOB="30050000000000000000000000000048020000000000000001000000000000000100000000000000020000000000000004000000070000000100000000000000060000000000000001000000000000000001000000000000020000000000000008000000000000000400000008000000ff0000000060000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1606000000001000000000000500000000000000070000000000000001000000f90000002e000000000000000000000000000000030000000000000000010000000000000700000000000000070000000900000001000000000000000104000000000000010000000000000010000000000000000300000000000000040000000000000003000000000060c20400000000100000ce000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0500000001000000000000000400000000000000020000000000000004000000000000002e2b262d000000000200000000000000020000000000000047000000000000000100000000000000160700000100000002000000000000001000000000000000b40800000000000001000000000000000000000001000000060000000000000009000000e6030000060000000040000016ffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffff810000000000000005000000000000000000000000000000040000f0bf0000003a7d293a0000000003000000000000000200000000000000050000000000009e80000000000000004b00000009000000020000000000000078550000000000008000000000000000000000000100000052ca0000000000000071ffffffffffff0b200000fdffffff030000000020000004000000e7c5cd3d52a32c2628000bd1ce97446315b076553a3869bd18de69c13b04200faebf662af2dce081b0699ade6b61ed07e857502117a64c305cb0cd0e4be1781b939c41f6f740b2705c00"/240, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000008004000000000200000000000000ff000000000000000900000001000000636f6e666967667300000000000000000000000000000000020000000000000007000000000000000b0a00000000000008000000000000000500000000000000000000000000000008000000000000000400000000000000000000000000000000000080000000000080000004000000018000000070000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="81720000f8ffffff00000000050000000000000007000000000000000b00000004b5000026282d5d282d282624242500000000000300000000000000000000000000000003000000000000000300000000000000030000000600000006000000000000006d0000000000000007000000000000000700000000000000090000000000000007000000000000000900000003000000000020000080000000000005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500000030820000000000000500000000000000010000800000000013000000ffffff7f2e2f62696e64657266732f62696e64657231000000000000020000000000000001000000000000000600000000000000000800000000000000000000c1f6ffff000000000000000006000000000000004000000000000000fffffffffeffffff07000000000000000a0000000000000000100000030000000100000000a0000008000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="080000000b000000000000000100000000000000000000000000000004000000050000002d2b287d000000000600000000000000020000000000000002000000000000000300000000000000c50f000003000000feffffffffffffff80000000000000000300000000000000090000000000000000a00100000000000500000000000000ff00000004000000030000000010000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="e7750000f4ffffff00000000030000000000000069f800000000000003000000050000002321200000000000"], &(0x7f00000033c0)={0xa0, 0x0, 0x7f, {{0x2, 0x2, 0x5, 0x200, 0x0, 0xc, {0x0, 0xfffffffffffffffa, 0xaf5, 0xfffffffffffff800, 0x10, 0x3, 0x3, 0xb, 0xfff, 0xc000, 0x6, r8, r11, 0xfffffff8, 0x6}}}}, &(0x7f0000003480)={0x20, 0x0, 0x4, {0x1b14, 0x4, 0x0, 0x1}}, &(0x7f0000006080)={0x130, 0x0, 0x80000000, {0x8000, 0x35fc3e8d, 0x0, '\x00', {0x1000, 0x838e, 0x9, 0x3, r12, r13, 0x0, '\x00', 0x9, 0x0, 0x0, 0xdf4, {0x0, 0x9}, {0xc2, 0x3}, {0xa, 0x8}, {0x6000000000000000, 0x7}, 0xffffb316, 0x0, 0x9, 0x8}}}}) connect$unix(r3, &(0x7f0000004180)=@file={0x0, './file0\x00'}, 0x6e) fchdir(r3) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000)={0x7ff, {0x9, 0x8001, 0xb4ef, 0x1, 0xe69f}}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 354.968475ms ago: executing program 1 (id=1835): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @random="60c7f33f4fa9"}, 0x4a, {0x2, 0x0, @dev}}) r3 = socket$inet(0x2, 0x3, 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/219, 0xdb) writev(r4, &(0x7f0000003740)=[{&(0x7f0000001440)='deny', 0x4}], 0x1) io_setup(0x8, &(0x7f0000000000)=0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = eventfd(0x6) io_submit(r5, 0x2, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, r6, 0x0, 0x0, 0x1, 0x0, 0x1, r7}, 0x0]) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/38, 0x26, 0x0, 0xc}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/101, 0x65, 0x0, 0x25}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$rtc(&(0x7f0000000100), 0x3ff, 0x40) ioctl$RTC_EPOCH_SET(r8, 0x4008700e, 0xffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x3) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)) (async) socket$inet(0x2, 0x3, 0x6) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @random="60c7f33f4fa9"}, 0x4a, {0x2, 0x0, @dev}}) (async) socket$inet(0x2, 0x3, 0x6) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') (async) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/219, 0xdb) (async) writev(r4, &(0x7f0000003740)=[{&(0x7f0000001440)='deny', 0x4}], 0x1) (async) io_setup(0x8, &(0x7f0000000000)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) eventfd(0x6) (async) io_submit(r5, 0x2, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, r6, 0x0, 0x0, 0x1, 0x0, 0x1, r7}, 0x0]) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/38, 0x26, 0x0, 0xc}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/101, 0x65, 0x0, 0x25}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async) syz_open_dev$rtc(&(0x7f0000000100), 0x3ff, 0x40) (async) ioctl$RTC_EPOCH_SET(r8, 0x4008700e, 0xffff) (async) 338.883285ms ago: executing program 1 (id=1836): prlimit64(0x0, 0xe, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r0, 0x8b598a4c6d8f8fc9, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 328.741295ms ago: executing program 1 (id=1837): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='maps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000080030000000000000005000000180b000001000000000000000d000600000000000100000000000000010000000000000000000000000000000000000000000000000600000000000000000000000000003a6ebec2fade78662cdd9d9f1687ad886b7da4129640062e2461e5a335c6c2edc809dee4e5477900f3c8004db517662fd744842b8cd9e04ea8d4b39b61fc2bd6f2d8c55605804c4168b93cb2cf3b7a8ff0f3e8782366"]) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000080)={0x100000, 0x18000}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000001c0)={[{0x8, 0x2, 0xd5, 0x70, 0x5, 0x4, 0xb0, 0x8, 0x2, 0x9, 0x7, 0x6f, 0x2948}, {0x3, 0x0, 0x3, 0x3, 0xd, 0xf, 0x0, 0x0, 0x3, 0x9, 0xf9, 0x9, 0x10001}, {0x101, 0x7, 0x5, 0xc, 0x5, 0x76, 0x9, 0x8, 0x0, 0xfc, 0x3, 0x1, 0xdd}], 0xbda1}) 51.134519ms ago: executing program 0 (id=1838): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r0, 0x3, 0x3, 0x5) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}], 0x8) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 50.513609ms ago: executing program 0 (id=1839): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = eventfd(0x3) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={0x0, 0x6, 0x1, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000440)={r2, 0x1, 0x1, [0xbada, 0x7fffffff, 0x1, 0x2, 0x81b], [0x2, 0x4, 0x2, 0x80000000, 0x5, 0x734, 0x4, 0x42, 0x8, 0x200, 0x1, 0x2, 0x9, 0x1, 0x590, 0x7, 0x1, 0x6, 0x4, 0xb, 0x7, 0x7, 0x1ff, 0x7, 0xe747, 0x0, 0x3, 0xb7, 0x1ff, 0x7, 0x9, 0x3, 0x3, 0xd4, 0x2, 0x983, 0x1ff, 0x3, 0x101, 0x8, 0x1ff, 0x34b, 0x80000001, 0x3, 0xfffffffffffffff5, 0x1, 0x7, 0x6, 0x4, 0x2, 0x1000, 0x9, 0x0, 0x7, 0x4, 0x65, 0x1, 0x9, 0x4, 0x1, 0x6, 0xe6, 0x2, 0x302, 0xfff, 0x8001, 0x3, 0xfffffffffffff001, 0x3, 0xfff, 0x3, 0x1, 0x1, 0x4, 0x68167b9a, 0x6, 0x1, 0x5, 0x7e, 0x2, 0x3, 0x3, 0x9, 0x80, 0x626, 0xc8bd, 0x0, 0x100000000, 0x6, 0x8, 0xaa, 0x9, 0xfffffffffffffff8, 0x5, 0x69d, 0x100, 0x5f8, 0x139, 0x2, 0xba, 0x7, 0x401, 0x101, 0x7, 0xab, 0x3, 0x7, 0xff, 0x1f2d, 0x7fffffff, 0x0, 0x9, 0x320ff31f, 0x9, 0xd, 0x8, 0xfffffffffffffffa, 0x222, 0x7fffffffffffffff, 0x3, 0xfffffffffffffff8]}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000019c0)={0x2, 0x0, &(0x7f00000008c0)=""/108, &(0x7f0000000940)=""/78, &(0x7f00000009c0)=""/4096}) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000001a00)={0xa, 0x7f}, 0x2) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000001a40)) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000001a80)) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000001b00)={{0xdddd1000, 0xddddf000, 0xc, 0x3, 0x0, 0x0, 0x1, 0x7, 0x1, 0x7, 0x0, 0x6}, {0x3000, 0x100000, 0x10, 0x1, 0x7f, 0xb2, 0xf, 0x6, 0x99, 0x2f, 0x1, 0x3}, {0x4000, 0x4, 0x8, 0x0, 0x80, 0x8, 0x2, 0x3, 0xae, 0x2, 0x75, 0x9}, {0x100000, 0x2000, 0x4, 0x10, 0x8d, 0x8, 0xb, 0xa, 0x9, 0x6, 0x1}, {0xeeee0000, 0x1000, 0xb, 0x8, 0x52, 0xf9, 0xbb, 0x80, 0x1, 0xa, 0x70, 0x40}, {0xdddd1000, 0x1dddc0000, 0x8, 0xff, 0x1, 0xc, 0x8f, 0x10, 0xa, 0x7, 0x81, 0x7}, {0xeeef0000, 0x8080000, 0x4, 0x4, 0x2, 0x1, 0x3, 0x1, 0x8, 0x1, 0x10, 0x1}, {0xd000, 0x0, 0xb, 0x8, 0x82, 0x4, 0x1, 0xe, 0x6e, 0xe, 0x0, 0x6b}, {0x8000000, 0x7ff}, {0xeeee8000, 0x6}, 0x40000, 0x0, 0xdddd1000, 0x410, 0x6, 0x600, 0x80a0000, [0x2, 0xd, 0x8, 0x8b]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000001c40)=0x4, 0x4) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000001d40)={0x1, &(0x7f0000001c80)=[{}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000001d80)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/74, 0x4a}, {&(0x7f0000001e80)=""/151, 0x97}], 0x2, &(0x7f0000001f80)=""/96, 0x60}, 0x58000000}, {{&(0x7f0000002000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002080)=""/5, 0x5}, {&(0x7f00000020c0)=""/97, 0x61}, {&(0x7f0000002140)=""/49, 0x31}], 0x3, &(0x7f00000021c0)=""/79, 0x4f}, 0x9}, {{&(0x7f0000002240)=@nfc, 0x80, &(0x7f0000002740)=[{&(0x7f00000022c0)=""/167, 0xa7}, {&(0x7f0000002380)=""/164, 0xa4}, {&(0x7f0000002440)=""/93, 0x5d}, {&(0x7f00000024c0)=""/142, 0x8e}, {&(0x7f0000002580)=""/220, 0xdc}, {&(0x7f0000002680)=""/138, 0x8a}], 0x6, &(0x7f00000027c0)=""/191, 0xbf}, 0x4}, {{&(0x7f0000002880)=@nl, 0x80, &(0x7f0000002980)=[{&(0x7f0000002900)=""/36, 0x24}, {&(0x7f0000002940)=""/31, 0x1f}], 0x2, &(0x7f00000029c0)=""/211, 0xd3}, 0x3}], 0x4, 0x0, &(0x7f0000002bc0)) (async) read$eventfd(r1, &(0x7f0000002c00), 0x8) read$watch_queue(0xffffffffffffffff, &(0x7f0000002c40)=""/170, 0xaa) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002d00)={0x2020, 0x0, 0x0}, 0x2020) (async) fstat(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000004dc0)='./file0\x00', 0x0, 0x20, &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = getuid() (async) r11 = getgid() (async) fstat(r5, &(0x7f0000004f00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004f80)='./file0\x00', &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000005040)='./file0\x00', &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000005100)='./file0\x00', &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) write$FUSE_DIRENTPLUS(r3, &(0x7f00000051c0)={0x340, 0x0, r7, [{{0x1, 0x1, 0xffff, 0x4, 0x9, 0xffffffff, {0x1, 0x400, 0x9, 0x6, 0x9c, 0x36e0, 0xf, 0x1, 0x9, 0x2000, 0xd3, r8, r9, 0x2, 0x1}}, {0x6, 0x2, 0x11, 0x6, '/dev/vhost-vsock\x00'}}, {{0x5, 0x1, 0xb01, 0x7, 0x2, 0x5, {0x6, 0xff, 0x8, 0x81, 0x79, 0xfffffffffffffff9, 0x2, 0x9, 0x4, 0xe000, 0x100, r10, r11, 0x4, 0xd6}}, {0x6, 0xe, 0x1, 0x4, '\x00'}}, {{0x3, 0x0, 0xffffffff00000000, 0x1d24c62f, 0x2, 0x8, {0x0, 0x3, 0x1, 0x80, 0x10, 0x7, 0x4, 0x3176, 0x8, 0xf0e91d33d46e637, 0xa1, r12, r13, 0x4, 0x4fb}}, {0x1, 0x7f, 0x1, 0x9, '\x00'}}, {{0x2, 0x1, 0x7, 0x4, 0x1, 0x1, {0x4, 0x8000000000000000, 0x9, 0x0, 0xfd, 0x5, 0x8, 0xffff, 0x62d, 0x4000, 0x1ff, 0xffffffffffffffff, r14, 0x8}}, {0x3, 0x7, 0x1, 0x9, '\x00'}}, {{0x2, 0x1, 0x80, 0x9, 0xe, 0x0, {0x0, 0x2, 0x3, 0x3, 0x1, 0x0, 0xffff6ef7, 0x9, 0xfffffff7, 0x1000, 0x2, 0x0, r15, 0xe1, 0x72c000}}, {0x5, 0x3, 0x1, 0xbe4e, '\x00'}}]}, 0x340) ptrace$setregset(0x4205, r0, 0x6, &(0x7f00000055c0)={&(0x7f0000005500)="bdc811652c4d38b3cf706a5876e97edd3bc77ff15de5a4cc25bb072fd3c66e09c374c2d819f3a8d81c53789df228df80cf2a7a6a6f65ba434b5addc087b41e26ca925edbf9cf75c501b18b91cf6453f51e0db8f11effb01744b3470e9a3dfc7f77b86434ec44dc8aa8468101964daa559f3425af486a84c25142b5f0eabd92c54797657694cc", 0x86}) 44.059649ms ago: executing program 5 (id=1840): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = gettid() ioprio_set$pid(0x1, r0, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) (async) gettid() (async) ioprio_set$pid(0x1, r0, 0x6000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) 0s ago: executing program 0 (id=1841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x148) openat$cgroup_ro(r4, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x40, 0x15a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): d allmulticast mode [ 72.777926][ T2078] veth1_to_bond: entered promiscuous mode [ 72.784936][ T2078] veth1_to_bond: left promiscuous mode [ 72.791099][ T2078] veth1_to_bond: left allmulticast mode [ 72.804786][ T444] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 72.943989][ T444] usb 2-1: device descriptor read/64, error -71 [ 73.183979][ T444] usb 2-1: device descriptor read/64, error -71 [ 73.404215][ T2109] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 73.411996][ T2109] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 73.420331][ T2109] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 73.428097][ T2109] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 73.434001][ T444] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 73.573994][ T444] usb 2-1: device descriptor read/64, error -71 [ 73.813968][ T444] usb 2-1: device descriptor read/64, error -71 [ 73.924140][ T444] usb usb2-port1: attempt power cycle [ 74.264009][ T444] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 74.285167][ T444] usb 2-1: device descriptor read/8, error -71 [ 74.415044][ T444] usb 2-1: device descriptor read/8, error -71 [ 74.654001][ T444] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 74.674974][ T444] usb 2-1: device descriptor read/8, error -71 [ 74.713806][ T36] audit: type=1400 audit(1750733857.940:325): avc: denied { create } for pid=2119 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.733463][ T36] audit: type=1400 audit(1750733857.960:326): avc: denied { ioctl } for pid=2119 comm="syz.3.616" path="socket:[12097]" dev="sockfs" ino=12097 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.804945][ T444] usb 2-1: device descriptor read/8, error -71 [ 74.822103][ T2124] rust_binder: 2123 RLIMIT_NICE not set [ 74.847956][ T2130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.914052][ T444] usb usb2-port1: unable to enumerate USB device [ 75.010701][ T36] audit: type=1326 audit(1750733858.240:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2131 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ee98e929 code=0x7ffc0000 [ 75.034308][ T36] audit: type=1326 audit(1750733858.240:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2131 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ee98e929 code=0x7ffc0000 [ 75.058576][ T36] audit: type=1326 audit(1750733858.270:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2131 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f91ee98e929 code=0x7ffc0000 [ 75.081954][ T36] audit: type=1326 audit(1750733858.270:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2133 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91ee9c11e5 code=0x7ffc0000 [ 75.105454][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 75.253982][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 75.260326][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 75.268559][ T10] usb 4-1: config 0 has no interface number 0 [ 75.274712][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 75.283070][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 75.292187][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.300319][ T10] usb 4-1: Product: syz [ 75.304531][ T10] usb 4-1: Manufacturer: syz [ 75.309154][ T10] usb 4-1: SerialNumber: syz [ 75.314485][ T10] usb 4-1: config 0 descriptor?? [ 75.320228][ T10] smsc75xx v1.0.0 [ 75.582272][ T2136] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 75.582627][ T2137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 75.921009][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 75.941484][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 75.951144][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 75.961379][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 76.473382][ T2154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:285 [ 76.494970][ T2160] netlink: 'syz.0.628': attribute type 5 has an invalid length. [ 76.766528][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 76.766547][ T36] audit: type=1400 audit(1750733860.000:357): avc: denied { ioctl } for pid=2183 comm="syz.2.637" path="socket:[12860]" dev="sockfs" ino=12860 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.814093][ T2189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.638'. [ 77.129708][ T2222] netlink: 4276 bytes leftover after parsing attributes in process `syz.0.649'. [ 77.854191][ T31] usb 4-1: USB disconnect, device number 16 [ 77.883033][ T36] audit: type=1400 audit(1750733861.110:358): avc: denied { mounton } for pid=2233 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.895069][ T2235] rust_binder: Write failure EINVAL in pid:290 [ 77.947307][ T2233] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.960570][ T2233] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.968988][ T2233] bridge_slave_0: entered allmulticast mode [ 77.975486][ T2233] bridge_slave_0: entered promiscuous mode [ 77.981792][ T2233] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.988842][ T2233] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.995950][ T2233] bridge_slave_1: entered allmulticast mode [ 78.002133][ T2233] bridge_slave_1: entered promiscuous mode [ 78.041114][ T2233] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.048209][ T2233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.055496][ T2233] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.062519][ T2233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.083438][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.090747][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.100114][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.107183][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.116229][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.123262][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.148212][ T2233] veth0_vlan: entered promiscuous mode [ 78.165355][ T2233] veth1_macvtap: entered promiscuous mode [ 78.180453][ T2249] batadv_slave_0: entered promiscuous mode [ 78.187102][ T2249] batadv_slave_0: left promiscuous mode [ 78.194958][ T36] audit: type=1400 audit(1750733861.430:359): avc: denied { mount } for pid=2233 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.232637][ T36] audit: type=1400 audit(1750733861.460:360): avc: denied { mount } for pid=2252 comm="syz.0.661" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.254835][ T2255] binder: Bad value for 'stats' [ 78.524068][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.675079][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 78.685245][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 78.699028][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.708179][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.716240][ T9] usb 5-1: SerialNumber: syz [ 78.721637][ T2259] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 78.729733][ T9] usb 5-1: bad CDC descriptors [ 78.932278][ T2259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.940798][ T2259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.952165][ T2259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 78.952582][ T10] usb 5-1: USB disconnect, device number 2 [ 78.970962][ T2271] FAT-fs (rnullb0): bogus number of reserved sectors [ 78.977832][ T2271] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 78.995036][ T2273] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 79.005795][ T36] audit: type=1400 audit(1750733862.240:361): avc: denied { relabelto } for pid=2272 comm="syz.3.668" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 79.033280][ T36] audit: type=1400 audit(1750733862.240:362): avc: denied { associate } for pid=2272 comm="syz.3.668" name="fuse" dev="devtmpfs" ino=23 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 79.062309][ T2274] xfrm0: mtu less than device minimum [ 79.074893][ T2274] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 79.085949][ T36] audit: type=1400 audit(1750733862.320:363): avc: denied { relabelto } for pid=2272 comm="syz.3.668" name="file0" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 79.112599][ T36] audit: type=1400 audit(1750733862.320:364): avc: denied { associate } for pid=2272 comm="syz.3.668" name="file0" dev="tmpfs" ino=544 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0" [ 79.162451][ T36] audit: type=1400 audit(1750733862.390:365): avc: denied { rmdir } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 79.173594][ T2277] fuseblk: Bad value for 'source' [ 79.197920][ T36] audit: type=1400 audit(1750733862.390:366): avc: denied { getopt } for pid=2275 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.216076][ T2280] fuse: Bad value for 'fd' [ 79.434035][ T45] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 79.587104][ T45] usb 4-1: config 1 interface 0 altsetting 89 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 79.601741][ T45] usb 4-1: config 1 interface 0 altsetting 89 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 79.613272][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 79.622513][ T45] usb 4-1: string descriptor 0 read error: -22 [ 79.637299][ T45] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.40 [ 79.649315][ T2306] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 79.659105][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.668846][ T2278] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.676487][ T2278] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.794692][ T2316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379 [ 79.886104][ T2278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313 [ 79.897920][ T45] usbhid 4-1:1.0: can't add hid device: -71 [ 79.916181][ T45] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 79.925217][ T45] usb 4-1: USB disconnect, device number 17 [ 79.953980][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.124142][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 80.130612][ T10] usb 5-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 80.141006][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.151313][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.160397][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.168450][ T10] usb 5-1: Product: syz [ 80.172605][ T10] usb 5-1: Manufacturer: syz [ 80.177232][ T10] usb 5-1: SerialNumber: syz [ 80.387783][ T10] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 80.397323][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 80.408451][ T10] usb 5-1: USB disconnect, device number 3 [ 80.417168][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.907685][ T2338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 80.907710][ T2338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:13 [ 80.917806][ T2338] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 80.929209][ T2338] rust_binder: Read failure Err(EFAULT) in pid:13 [ 80.938910][ T2339] rust_binder: Error while translating object. [ 80.945448][ T2339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.951619][ T2339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:325 [ 81.059145][ T2343] fuse: Unknown parameter 'us'ñï—û܌ù.ä½uÂñ;00000000000000000000' [ 81.263967][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.415043][ T45] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 81.425022][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.438685][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.447786][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.455975][ T45] usb 5-1: SerialNumber: syz [ 81.461506][ T2341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 81.669877][ T2341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 81.878292][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 81.878322][ T36] audit: type=1400 audit(1750733865.110:373): avc: denied { setattr } for pid=2340 comm="syz.4.693" name="RAWv6" dev="sockfs" ino=14496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.907159][ T36] audit: type=1326 audit(1750733865.110:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2340 comm="syz.4.693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5d738e929 code=0x0 [ 81.981556][ T2365] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 82.602502][ T36] audit: type=1400 audit(1750733865.830:375): avc: denied { write } for pid=2373 comm="syz.3.704" path="socket:[13667]" dev="sockfs" ino=13667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.632465][ T36] audit: type=1400 audit(1750733865.860:376): avc: denied { load_policy } for pid=2373 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 82.633271][ T2374] SELinux: failed to load policy [ 82.663027][ T2374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 82.663066][ T2374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:336 [ 82.913962][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 82.997161][ T2391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8286 sclass=netlink_route_socket pid=2391 comm=syz.1.708 [ 83.083996][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 83.094641][ T9] usb 4-1: config index 0 descriptor too short (expected 31, got 27) [ 83.102753][ T9] usb 4-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 83.124197][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 83.132322][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 83.141522][ T9] usb 4-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 83.149761][ T9] usb 4-1: Product: syz [ 83.154016][ T9] usb 4-1: Manufacturer: syz [ 83.158660][ T9] usb 4-1: SerialNumber: syz [ 83.165740][ T2376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 83.253964][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 83.414934][ T10] usb 2-1: device descriptor read/64, error -71 [ 83.653989][ T10] usb 2-1: device descriptor read/64, error -71 [ 83.775913][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 83.893984][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 83.977298][ C0] usblp0: nonzero write bulk status received: -71 [ 83.987089][ T9] usb 4-1: USB disconnect, device number 18 [ 83.993713][ T9] usblp0: removed [ 84.023963][ T10] usb 2-1: device descriptor read/64, error -71 [ 84.035030][ T45] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 84.046406][ T45] usb 5-1: USB disconnect, device number 4 [ 84.274014][ T10] usb 2-1: device descriptor read/64, error -71 [ 84.384033][ T45] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 84.394028][ T10] usb usb2-port1: attempt power cycle [ 84.499693][ T36] audit: type=1400 audit(1750733867.730:377): avc: denied { remount } for pid=2414 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.535236][ T45] usb 5-1: descriptor type invalid, skip [ 84.540914][ T45] usb 5-1: No LPM exit latency info found, disabling LPM. [ 84.549212][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 84.560223][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.569255][ T2424] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 84.580032][ T45] usb 5-1: string descriptor 0 read error: -22 [ 84.594569][ T45] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 84.603752][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.612619][ T2403] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.733983][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 84.754976][ T10] usb 2-1: device descriptor read/8, error -71 [ 84.830408][ T36] audit: type=1400 audit(1750733868.060:378): avc: denied { accept } for pid=2402 comm="syz.4.713" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.850748][ T444] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 84.861956][ T45] usbhid 5-1:1.0: can't add hid device: -71 [ 84.870137][ T45] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 84.879276][ T45] usb 5-1: USB disconnect, device number 5 [ 84.884993][ T10] usb 2-1: device descriptor read/8, error -71 [ 84.990846][ T36] audit: type=1400 audit(1750733868.220:379): avc: denied { create } for pid=2435 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.013239][ T444] usb 4-1: Using ep0 maxpacket: 8 [ 85.020381][ T444] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.029059][ T444] usb 4-1: config 9 has an invalid interface number: 201 but max is 1 [ 85.037349][ T444] usb 4-1: config 9 has no interface number 0 [ 85.043587][ T444] usb 4-1: config 9 interface 1 altsetting 1 endpoint 0xF has an invalid bInterval 194, changing to 11 [ 85.054709][ T444] usb 4-1: config 9 interface 1 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 85.065771][ T444] usb 4-1: config 9 interface 1 altsetting 1 bulk endpoint 0xE has invalid maxpacket 8 [ 85.075658][ T444] usb 4-1: config 9 interface 1 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 85.086441][ T444] usb 4-1: config 9 interface 1 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 85.097328][ T444] usb 4-1: config 9 interface 1 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 85.108278][ T444] usb 4-1: config 9 interface 1 has no altsetting 0 [ 85.116622][ T444] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a5.78 [ 85.127817][ T444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.136170][ T444] usb 4-1: Product: 쌢ç£á©»å²›ïŒ˜èž‚ቌ蕇ëˆîŠ³ë–½ì¦â¼â¿•å¯£î¿Œï·«à®®ã°’艇誮⮠﹌ᥬ㢃랙㲜Ꟊ怔扽倚ê¶â“䌌ꢻࡌ⦥᷹隤緸è´ë€³äº‰ï¸™ìŠ¤é¢… [ 85.155660][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 85.163482][ T444] usb 4-1: Manufacturer: ïµì¬†å•›è˜‚â±…êè¸Ð„ì„㶫㾅㱾䥆뉆教쒦䘜欖鬢몊å椫ä¥âƒ¾è³¹á¸ŒÕ™ã¯‚׀ﲙ㨳䩋㘇逇ꆲ꾨鰈붖êŒá…¤î£žå·„ា醧醜㫽셾㎳ï¸ç°¡ì¬›ê„±ìœ†íž·ê¸¢æ‚»ã¡ï˜”岿탮䥸齼颴愷啡ሳ뵀⺇按∈뛟歊쵨é¿æ‰Œéœ•è£‚è«¥é½é§è·‘臿ꗫ췚슴ۂëžå®±á©ŽÇŠäŽ²á½à­›ï†”攴៥ᖷᘋᶹåŒïºžë¬© [ 85.195204][ T444] usb 4-1: SerialNumber: П [ 85.200625][ T2427] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 85.215135][ T10] usb 2-1: device descriptor read/8, error -71 [ 85.345913][ T10] usb 2-1: device descriptor read/8, error -71 [ 85.414803][ T444] usb 4-1: USB disconnect, device number 19 [ 85.428759][ T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.454422][ T10] usb usb2-port1: unable to enumerate USB device [ 85.693971][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.843958][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 85.850305][ T45] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 85.858762][ T45] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 85.867456][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 85.876431][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.886193][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.895864][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.908853][ T45] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 85.917974][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.926737][ T45] usb 5-1: config 0 descriptor?? [ 85.952170][ T36] audit: type=1400 audit(1750733869.180:380): avc: denied { mounton } for pid=2462 comm="syz.3.736" path="/108/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 86.007680][ T2465] SELinux: security policydb version 17 (MLS) not backwards compatible [ 86.016588][ T2465] SELinux: failed to load policy [ 86.121504][ T36] audit: type=1400 audit(1750733869.350:381): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.151803][ T45] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 86.235560][ T2492] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 86.298355][ T36] audit: type=1326 audit(1750733869.530:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.1.749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38b818e929 code=0x0 [ 86.329386][ T2499] SELinux: security_context_str_to_sid () failed with errno=-22 [ 86.330023][ T2500] SELinux: security_context_str_to_sid () failed with errno=-22 [ 86.346263][ T45] usb 5-1: USB disconnect, device number 6 [ 86.357192][ T45] usblp0: removed [ 86.362364][ T2502] netlink: 'syz.1.751': attribute type 4 has an invalid length. [ 86.413970][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 86.563975][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 86.570612][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.579342][ T31] usb 4-1: config 9 has an invalid interface number: 201 but max is 1 [ 86.587612][ T31] usb 4-1: config 9 has no interface number 0 [ 86.593889][ T31] usb 4-1: config 9 interface 1 altsetting 1 endpoint 0xF has an invalid bInterval 194, changing to 11 [ 86.605414][ T31] usb 4-1: config 9 interface 1 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 86.617009][ T31] usb 4-1: config 9 interface 1 altsetting 1 bulk endpoint 0xE has invalid maxpacket 8 [ 86.626804][ T31] usb 4-1: config 9 interface 1 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 86.637394][ T31] usb 4-1: config 9 interface 1 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 86.648261][ T31] usb 4-1: config 9 interface 1 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 86.659086][ T31] usb 4-1: config 9 interface 1 has no altsetting 0 [ 86.667287][ T31] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a5.78 [ 86.676544][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.684645][ T31] usb 4-1: Product: syz [ 86.688869][ T31] usb 4-1: Manufacturer: syz [ 86.693531][ T31] usb 4-1: SerialNumber: syz [ 86.699306][ T2483] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 86.885611][ T2513] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 86.915299][ T31] usb 4-1: USB disconnect, device number 20 [ 86.926912][ T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.047826][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 87.047844][ T36] audit: type=1400 audit(1750733870.280:385): avc: denied { attach_queue } for pid=2515 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 87.192242][ T2531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.759'. [ 87.201591][ T2531] binder: Binderfs stats mode cannot be changed during a remount [ 87.286294][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.288453][ T2541] input: syz0 as /devices/virtual/input/input9 [ 87.292743][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.356074][ T36] audit: type=1326 audit(1750733870.590:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d738e929 code=0x7ffc0000 [ 87.379409][ T36] audit: type=1326 audit(1750733870.590:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d738e929 code=0x7ffc0000 [ 87.402782][ T36] audit: type=1326 audit(1750733870.610:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5d738e929 code=0x7ffc0000 [ 87.430802][ T36] audit: type=1326 audit(1750733870.610:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d738e929 code=0x7ffc0000 [ 87.454219][ T36] audit: type=1326 audit(1750733870.610:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d738e929 code=0x7ffc0000 [ 87.477579][ T36] audit: type=1326 audit(1750733870.610:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d738e929 code=0x7ffc0000 [ 87.501016][ T36] audit: type=1326 audit(1750733870.610:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5d738e52b code=0x7ffc0000 [ 87.524517][ T36] audit: type=1326 audit(1750733870.610:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d738e929 code=0x7ffc0000 [ 87.548000][ T36] audit: type=1326 audit(1750733870.610:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d738e929 code=0x7ffc0000 [ 88.395479][ T2574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:367 [ 88.404552][ T2576] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 88.413774][ T2576] rust_binder: Read failure Err(EFAULT) in pid:370 [ 88.463144][ T2576] can: request_module (can-proto-4) failed. [ 88.476142][ T2576] syzkaller0: entered promiscuous mode [ 88.481629][ T2576] syzkaller0: entered allmulticast mode [ 88.803986][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 88.953991][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 88.960128][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.971180][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.980941][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.993758][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 89.002814][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.011487][ T9] usb 4-1: config 0 descriptor?? [ 89.064413][ T2589] 9pnet_fd: Insufficient options for proto=fd [ 89.323968][ T945] Bluetooth: hci0: command 0x1003 tx timeout [ 89.323973][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.419197][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 89.426532][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 89.433565][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 89.440658][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 89.447801][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 89.454897][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 89.462024][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 89.469084][ T9] hid-rmi 0003:06CB:81A7.0006: unbalanced collection at end of report description [ 89.478435][ T9] hid-rmi 0003:06CB:81A7.0006: parse failed [ 89.484406][ T9] hid-rmi 0003:06CB:81A7.0006: probe with driver hid-rmi failed with error -22 [ 89.540709][ T2605] exFAT-fs (rnullb0): invalid boot record signature [ 89.547383][ T2605] exFAT-fs (rnullb0): failed to read boot sector [ 89.553724][ T2605] exFAT-fs (rnullb0): failed to recognize exfat type [ 89.623440][ T2578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 89.623967][ T2578] rust_binder: Error while translating object. [ 89.633139][ T2578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.639504][ T2578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 89.650289][ T31] usb 4-1: USB disconnect, device number 21 [ 89.676588][ T2608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:431 [ 89.947047][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 89.963467][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 89.970606][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 89.977642][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 89.984477][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 89.991504][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 89.995441][ T2623] overlayfs: failed to clone upperpath [ 89.998433][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 90.010605][ T2626] overlay: Unknown parameter 'mounts' [ 90.057555][ T2640] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 90.087190][ T2649] hub 6-0:1.0: USB hub found [ 90.092008][ T2649] hub 6-0:1.0: 1 port detected [ 90.143456][ T2659] 9pnet_fd: Insufficient options for proto=fd [ 90.158785][ T2663] can: request_module (can-proto-0) failed. [ 91.357877][ T2724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.875814][ T2730] tmpfs: Unknown parameter '³í#ÿ' [ 91.931130][ T2738] overlayfs: failed to resolve './file1': -2 [ 91.967531][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 91.974849][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 91.981908][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 92.086824][ T2744] FAT-fs (rnullb0): bogus number of reserved sectors [ 92.093541][ T2744] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 92.244545][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 92.244563][ T36] audit: type=1400 audit(1750733875.480:404): avc: denied { lock } for pid=2745 comm="syz.3.836" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.271543][ T2746] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 92.273409][ T2746] rust_binder: Read failure Err(EFAULT) in pid:395 [ 92.285683][ T2746] rust_binder: Write failure EINVAL in pid:395 [ 92.334019][ T337] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 92.495290][ T337] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.503360][ T337] usb 2-1: not running at top speed; connect to a high speed hub [ 92.511778][ T337] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 92.520045][ T337] usb 2-1: config 1 has no interface number 0 [ 92.526157][ T337] usb 2-1: config 1 interface 138 has no altsetting 0 [ 92.534447][ T337] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 92.543495][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.551540][ T337] usb 2-1: Product: syz [ 92.555822][ T337] usb 2-1: Manufacturer: syz [ 92.560402][ T337] usb 2-1: SerialNumber: syz [ 92.663983][ T45] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 92.793974][ T45] usb 4-1: device descriptor read/64, error -71 [ 93.034004][ T45] usb 4-1: device descriptor read/64, error -71 [ 93.274003][ T45] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 93.349818][ T2785] rust_binder: Write failure EINVAL in pid:455 [ 93.349829][ T2784] rust_binder: Write failure EINVAL in pid:455 [ 93.369982][ T2788] binder: Bad value for 'stats' [ 93.404219][ T45] usb 4-1: device descriptor read/64, error -71 [ 93.510833][ T2794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86 [ 93.524944][ T2796] FAT-fs (rnullb0): bogus number of reserved sectors [ 93.540849][ T2796] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 93.567038][ T36] audit: type=1400 audit(1750733876.800:405): avc: denied { write } for pid=2797 comm="syz.1.848" path="socket:[16200]" dev="sockfs" ino=16200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.644267][ T45] usb 4-1: device descriptor read/64, error -71 [ 93.666175][ T2806] overlayfs: failed to clone upperpath [ 93.735982][ T2814] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 93.754014][ T45] usb usb4-port1: attempt power cycle [ 93.762470][ T2812] tipc: Failed to remove unknown binding: 66,3,3/4:2467652534/2467652535 [ 93.805135][ T36] audit: type=1400 audit(1750733877.040:406): avc: denied { accept } for pid=2820 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 94.093959][ T45] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 94.115035][ T45] usb 4-1: device descriptor read/8, error -71 [ 94.245029][ T45] usb 4-1: device descriptor read/8, error -71 [ 94.484014][ T45] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 94.505020][ T45] usb 4-1: device descriptor read/8, error -71 [ 94.526263][ T2837] netlink: 60 bytes leftover after parsing attributes in process `syz.4.860'. [ 94.535742][ T36] audit: type=1400 audit(1750733877.770:407): avc: denied { mount } for pid=2836 comm="syz.4.860" name="/" dev="configfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 94.635110][ T45] usb 4-1: device descriptor read/8, error -71 [ 94.744079][ T45] usb usb4-port1: unable to enumerate USB device [ 94.854048][ T370] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.881986][ T2849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 94.907940][ T36] audit: type=1326 audit(1750733878.140:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2853 comm="syz.0.866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91ee98e929 code=0x0 [ 94.984082][ T370] usb 5-1: device descriptor read/64, error -71 [ 95.223958][ T370] usb 5-1: device descriptor read/64, error -71 [ 95.473098][ T36] audit: type=1400 audit(1750733878.700:409): avc: denied { map } for pid=2856 comm="syz.1.867" path="socket:[16649]" dev="sockfs" ino=16649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 95.573977][ T370] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.703986][ T370] usb 5-1: device descriptor read/64, error -71 [ 95.833943][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 95.943961][ T370] usb 5-1: device descriptor read/64, error -71 [ 95.983968][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 95.990222][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.001375][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.011159][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.024038][ T9] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 96.033069][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.041761][ T9] usb 4-1: config 0 descriptor?? [ 96.054039][ T370] usb usb5-port1: attempt power cycle [ 96.393956][ T370] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.414958][ T370] usb 5-1: device descriptor read/8, error -71 [ 96.449092][ T9] hid (null): unknown global tag 0xc [ 96.455562][ T9] hid-multitouch 0003:0457:07DA.0007: unknown global tag 0xc [ 96.462970][ T9] hid-multitouch 0003:0457:07DA.0007: item 0 4 1 12 parsing failed [ 96.471184][ T9] hid-multitouch 0003:0457:07DA.0007: probe with driver hid-multitouch failed with error -22 [ 96.545019][ T370] usb 5-1: device descriptor read/8, error -71 [ 96.783961][ T370] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 96.804994][ T370] usb 5-1: device descriptor read/8, error -71 [ 96.809298][ T9] usb 4-1: USB disconnect, device number 26 [ 96.935005][ T370] usb 5-1: device descriptor read/8, error -71 [ 97.044585][ T370] usb usb5-port1: unable to enumerate USB device [ 97.237404][ T59] bridge_slave_1: left allmulticast mode [ 97.243201][ T59] bridge_slave_1: left promiscuous mode [ 97.248902][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.257768][ T59] bridge_slave_0: left allmulticast mode [ 97.263477][ T59] bridge_slave_0: left promiscuous mode [ 97.269265][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.384443][ T2877] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.391563][ T2877] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.398671][ T2877] bridge_slave_0: entered allmulticast mode [ 97.405483][ T2877] bridge_slave_0: entered promiscuous mode [ 97.411803][ T59] tipc: Disabling bearer [ 97.417448][ T59] tipc: Left network mode [ 97.421853][ T2877] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.428961][ T2877] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.436218][ T2877] bridge_slave_1: entered allmulticast mode [ 97.442450][ T2877] bridge_slave_1: entered promiscuous mode [ 97.449308][ T59] veth1_macvtap: left promiscuous mode [ 97.454832][ T59] veth0_vlan: left promiscuous mode [ 97.528858][ T2877] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.535973][ T2877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.543205][ T2877] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.550248][ T2877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.571273][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.580723][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.592318][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.599418][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.611276][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.618371][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.645602][ T2877] veth0_vlan: entered promiscuous mode [ 97.676839][ T2877] veth1_macvtap: entered promiscuous mode [ 97.699007][ T36] audit: type=1400 audit(1750733880.930:410): avc: denied { ioctl } for pid=2881 comm="syz.4.876" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 97.700077][ T2882] fuse: Unknown parameter 'fd¨gÔM>mï' [ 97.777669][ T36] audit: type=1400 audit(1750733881.010:411): avc: denied { connect } for pid=2887 comm="syz.5.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.799958][ T36] audit: type=1400 audit(1750733881.030:412): avc: denied { bind } for pid=2887 comm="syz.5.878" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.820395][ T36] audit: type=1400 audit(1750733881.030:413): avc: denied { node_bind } for pid=2887 comm="syz.5.878" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 97.843778][ T36] audit: type=1400 audit(1750733881.030:414): avc: denied { name_bind } for pid=2887 comm="syz.5.878" src=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 97.931732][ T2875] overlayfs: statfs failed on './file0' [ 97.950284][ T2900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 97.959211][ T2900] bridge_slave_1: left allmulticast mode [ 97.965107][ T2900] bridge_slave_1: left promiscuous mode [ 97.970917][ T2900] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.979105][ T2900] bridge_slave_0: left allmulticast mode [ 97.984955][ T2900] bridge_slave_0: left promiscuous mode [ 97.990656][ T2900] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.001624][ T2908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.010325][ T2908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.033995][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 98.164038][ T9] usb 6-1: device descriptor read/64, error -71 [ 98.403984][ T9] usb 6-1: device descriptor read/64, error -71 [ 98.643995][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 98.667894][ T2923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.677057][ T2923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.739711][ T2924] rust_binder: Error while translating object. [ 98.739741][ T2924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 98.746087][ T2924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:502 [ 98.784015][ T9] usb 6-1: device descriptor read/64, error -71 [ 99.033968][ T9] usb 6-1: device descriptor read/64, error -71 [ 99.136839][ T2939] overlayfs: failed to clone upperpath [ 99.146907][ T9] usb usb6-port1: attempt power cycle [ 99.484142][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 99.504995][ T9] usb 6-1: device descriptor read/8, error -71 [ 99.635005][ T9] usb 6-1: device descriptor read/8, error -71 [ 99.873999][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 99.895072][ T9] usb 6-1: device descriptor read/8, error -71 [ 100.005256][ T2950] net_ratelimit: 29 callbacks suppressed [ 100.005271][ T2950] TCP: out of memory -- consider tuning tcp_mem [ 100.023993][ T2952] netlink: 'syz.0.901': attribute type 12 has an invalid length. [ 100.025017][ T9] usb 6-1: device descriptor read/8, error -71 [ 100.144042][ T9] usb usb6-port1: unable to enumerate USB device [ 101.666478][ T3007] binder: Unknown parameter '00000000000000000000003' [ 101.700215][ T3011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 101.731251][ T36] audit: type=1400 audit(1750733884.960:415): avc: denied { create } for pid=3020 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.731275][ T3019] FAT-fs (rnullb0): bogus number of reserved sectors [ 101.757878][ T3019] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 101.908145][ T3041] tap0: tun_chr_ioctl cmd 1074025677 [ 101.913532][ T3041] tap0: linktype set to 774 [ 101.918255][ T3042] tap0: tun_chr_ioctl cmd 1074025677 [ 101.923572][ T3042] tap0: linktype set to 774 [ 102.105808][ T36] audit: type=1400 audit(1750733885.340:416): avc: denied { ioctl } for pid=3048 comm="syz.1.939" path="socket:[18159]" dev="sockfs" ino=18159 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.276091][ T3062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.286303][ T3062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.570931][ T36] audit: type=1400 audit(1750733885.800:417): avc: denied { create } for pid=3103 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 102.591490][ T36] audit: type=1400 audit(1750733885.820:418): avc: denied { create } for pid=3103 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.657845][ T36] audit: type=1400 audit(1750733885.890:419): avc: denied { map } for pid=3107 comm="syz.5.960" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.121095][ T3119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.121127][ T3119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:543 [ 103.864006][ T444] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 104.009642][ T3155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.018205][ T3155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.027062][ T444] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.038160][ T444] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 104.038303][ T3156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.049363][ T444] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 104.059371][ T3156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.068698][ T444] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 104.094523][ T444] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.106971][ T444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.116412][ T444] usb 6-1: Product: syz [ 104.120906][ T444] usb 6-1: Manufacturer: syz [ 104.125631][ T444] usb 6-1: SerialNumber: syz [ 104.131621][ T3138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 104.340831][ T3138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 104.348133][ T3138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 104.956978][ T3138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 104.964324][ T3138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 105.099329][ T3184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.108000][ T3184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.117287][ T3184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.126175][ T3184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.172325][ T444] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 105.178934][ T444] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 105.186346][ T444] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 105.379653][ T3138] rust_binder: Write failure EINVAL in pid:39 [ 105.379988][ T444] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 105.394475][ T444] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 105.408928][ T444] usb 6-1: USB disconnect, device number 6 [ 105.423741][ T36] audit: type=1400 audit(1750733888.650:420): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 105.445007][ T444] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 105.457763][ T36] audit: type=1400 audit(1750733888.650:421): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.485030][ T36] audit: type=1400 audit(1750733888.650:422): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=3000 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.511805][ T36] audit: type=1400 audit(1750733888.650:423): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3000 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.558779][ T36] audit: type=1400 audit(1750733888.650:424): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3000 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.594359][ T36] audit: type=1400 audit(1750733888.720:425): avc: denied { read } for pid=3197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.629881][ T36] audit: type=1400 audit(1750733888.720:426): avc: denied { open } for pid=3197 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.672397][ T36] audit: type=1400 audit(1750733888.720:427): avc: denied { getattr } for pid=3197 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.698586][ T36] audit: type=1400 audit(1750733888.780:428): avc: denied { setopt } for pid=3206 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.719958][ T36] audit: type=1400 audit(1750733888.890:429): avc: denied { write } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.945188][ T3255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 105.967008][ T3257] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 105.983807][ T3257] rust_binder: Write failure EINVAL in pid:43 [ 106.004240][ T3259] rust_binder: Error while translating object. [ 106.010547][ T3259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 106.016970][ T3259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:45 [ 106.523143][ T3288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.544596][ T3288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.673942][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 106.826361][ T10] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 106.835662][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.843665][ T10] usb 6-1: Product: syz [ 106.857999][ T10] usb 6-1: Manufacturer: syz [ 106.862653][ T10] usb 6-1: SerialNumber: syz [ 106.872749][ T10] usb 6-1: config 0 descriptor?? [ 107.517250][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 107.533626][ T10] asix 6-1:0.0: probe with driver asix failed with error -32 [ 107.678885][ T3366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 108.224955][ T31] usb 6-1: USB disconnect, device number 7 [ 108.256451][ T3381] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 108.256481][ T3381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 108.264685][ T3381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:56 [ 108.345266][ T3398] netlink: 'syz.5.1051': attribute type 3 has an invalid length. [ 108.410552][ T3410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 108.410876][ T3410] rust_binder: Error while translating object. [ 108.420217][ T3410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.426578][ T3410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 108.528219][ T3439] exFAT-fs (rnullb0): invalid boot record signature [ 108.543944][ T3439] exFAT-fs (rnullb0): failed to read boot sector [ 108.550271][ T3439] exFAT-fs (rnullb0): failed to recognize exfat type [ 108.557951][ T3439] exFAT-fs (rnullb0): invalid boot record signature [ 108.564601][ T3439] exFAT-fs (rnullb0): failed to read boot sector [ 108.571168][ T3439] exFAT-fs (rnullb0): failed to recognize exfat type [ 108.862799][ T3468] overlayfs: failed to clone upperpath [ 108.862836][ T3469] overlayfs: failed to clone upperpath [ 109.160909][ T3501] overlayfs: failed to resolve './file0': -2 [ 109.883954][ T370] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 110.023973][ T370] usb 6-1: device descriptor read/64, error -71 [ 110.263949][ T370] usb 6-1: device descriptor read/64, error -71 [ 110.504026][ T370] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 110.633963][ T370] usb 6-1: device descriptor read/64, error -71 [ 110.838784][ T3577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3577 comm=syz.4.1111 [ 110.873968][ T370] usb 6-1: device descriptor read/64, error -71 [ 110.984159][ T370] usb usb6-port1: attempt power cycle [ 111.333974][ T370] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 111.354935][ T370] usb 6-1: device descriptor read/8, error -71 [ 111.363449][ T3595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.372095][ T3595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.485143][ T370] usb 6-1: device descriptor read/8, error -71 [ 111.493408][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 111.493425][ T36] audit: type=1326 audit(1750733894.720:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.0.1118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91ee98e929 code=0x0 [ 111.545198][ T3598] overlayfs: failed to resolve './file0': -2 [ 111.724266][ T370] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 111.745553][ T370] usb 6-1: device descriptor read/8, error -71 [ 111.802604][ T3623] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.810073][ T3623] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.884709][ T370] usb 6-1: device descriptor read/8, error -71 [ 111.994081][ T370] usb usb6-port1: unable to enumerate USB device [ 112.213780][ T3643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=3643 comm=syz.1.1135 [ 112.226523][ T3643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3643 comm=syz.1.1135 [ 112.239201][ T3643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=3643 comm=syz.1.1135 [ 112.252037][ T3643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=3643 comm=syz.1.1135 [ 112.336440][ T36] audit: type=1400 audit(1750733895.570:446): avc: denied { create } for pid=3645 comm="syz.0.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.369100][ T36] audit: type=1400 audit(1750733895.600:447): avc: denied { shutdown } for pid=3648 comm="syz.0.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.666191][ T3657] rust_binder: Error in use_page_slow: ESRCH [ 112.666210][ T3657] rust_binder: use_range failure ESRCH [ 112.672253][ T3657] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 112.677810][ T3657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 112.685753][ T3657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:83 [ 112.717775][ T3661] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1142'. [ 112.798582][ T36] audit: type=1326 audit(1750733896.030:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.5.1142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f774c98e929 code=0x0 [ 113.007386][ T3671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.015955][ T3671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.023822][ T3673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.032555][ T3673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.081930][ T3683] overlayfs: failed to clone upperpath [ 113.111816][ T3690] cgroup: subsys name conflicts with all [ 113.131021][ T3693] cgroup: subsys name conflicts with all [ 113.144814][ T3696] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1153'. [ 113.182176][ T3702] /dev/rnullb0: Can't lookup blockdev [ 113.196537][ T36] audit: type=1400 audit(1750733896.430:449): avc: denied { getopt } for pid=3703 comm="syz.4.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.216130][ T36] audit: type=1400 audit(1750733896.450:450): avc: denied { setopt } for pid=3703 comm="syz.4.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.243313][ T3708] bpf: Bad value for 'mode' [ 113.564200][ T3730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.572763][ T3730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.597412][ T36] audit: type=1400 audit(1750733896.830:451): avc: denied { write } for pid=3731 comm="syz.5.1168" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 113.597474][ T3732] random: crng reseeded on system resumption [ 113.620581][ T36] audit: type=1400 audit(1750733896.830:452): avc: denied { open } for pid=3731 comm="syz.5.1168" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 113.653149][ T36] audit: type=1400 audit(1750733896.880:453): avc: denied { ioctl } for pid=3731 comm="syz.5.1168" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 113.668433][ T3732] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 113.735113][ T36] audit: type=1400 audit(1750733896.970:454): avc: denied { create } for pid=3740 comm="syz.5.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 113.736298][ T3741] fuse: Unknown parameter 'fl' [ 114.010487][ T3816] overlay: Unknown parameter 'hash' [ 115.373925][ T3913] /dev/rnullb0: Can't lookup blockdev [ 115.388143][ T3918] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1230'. [ 115.540593][ T3927] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 115.628244][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.647247][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.667456][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.687670][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.703959][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.722008][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.730076][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.753953][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.761730][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.769577][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.777350][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.785325][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.793078][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.801092][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.809030][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.816994][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.824954][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.832773][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.840812][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.848806][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.856836][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.864825][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.872578][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.880649][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.900681][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.923482][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.940697][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.954120][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.973571][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 115.993943][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.001730][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.024136][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.031916][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.053967][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.061931][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.083950][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.091828][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.101704][ T3944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.111963][ T3944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.113961][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.142424][ T3948] fuse: Unknown parameter '' [ 116.143954][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.173945][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.189158][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.204125][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.211919][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.224110][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.231892][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.254780][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.262585][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.271548][ T3951] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 116.283983][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.300026][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.310103][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.318272][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.326318][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.334319][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.347081][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.354975][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.374012][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.381803][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.395479][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.403264][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.424121][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.431898][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.453956][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.461734][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.473960][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.481723][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.503596][ T3984] overlay: Unknown parameter 'func' [ 116.503973][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.524167][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.532105][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.540247][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.548265][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.556189][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.564152][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.571917][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.580082][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.588068][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.596422][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.614091][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.621881][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.629986][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.637984][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.645941][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.653723][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.661994][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.669981][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.678047][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.686013][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.693768][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.701764][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.709788][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.717737][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.725684][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.733454][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.741633][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.749770][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.757813][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.765832][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.773583][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.783281][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.791714][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.800532][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.808532][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.816519][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.824455][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.832472][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.841946][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.850492][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.858562][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.866547][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.874655][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.882731][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.891371][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.900138][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.908111][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.920522][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.929287][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.938758][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.947790][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.960541][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.968664][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.977225][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.985543][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 116.993557][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.001765][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.009860][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.019476][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.027628][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.035836][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.044123][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.051874][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.059857][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.067784][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.075708][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.083458][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.091484][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.099405][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.107177][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.114950][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.122684][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.130466][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.138261][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.146034][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.153762][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.161517][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.169272][ T10] hid-generic 0008:0000:FFFFFBFF.0008: unknown main item tag 0x0 [ 117.177546][ T10] hid-generic 0008:0000:FFFFFBFF.0008: hidraw0: HID v9.86 Device [syz0] on syz1 [ 117.195046][ T3999] fido_id[3999]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.294045][ T4008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 117.303149][ T4007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 117.340458][ T4019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.349029][ T4018] fuse: Bad value for 'fd' [ 117.353798][ T4019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.589084][ T4062] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1273'. [ 117.678220][ T4073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 117.688686][ T4073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 117.696694][ T4075] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 117.697810][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 117.697825][ T36] audit: type=1400 audit(1750733900.930:489): avc: denied { mounton } for pid=4074 comm="syz.5.1276" path="/50/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 117.750913][ T36] audit: type=1400 audit(1750733900.980:490): avc: denied { execute_no_trans } for pid=4077 comm="syz.5.1277" path="/51/file0" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.107201][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 118.119842][ T36] audit: type=1400 audit(1750733901.350:491): avc: denied { execute } for pid=4102 comm="syz.1.1287" path="/selinux/enforce" dev="selinuxfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 118.265066][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.276057][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.286185][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.299129][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.308180][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.316889][ T10] usb 6-1: config 0 descriptor?? [ 118.725396][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.732952][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.740398][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.747828][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.755273][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.762670][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.770128][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.777685][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.785131][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.792525][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 118.800148][ T10] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 118.808833][ T10] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 118.893074][ T313] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.035601][ T4138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.044282][ T4138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.170976][ T36] audit: type=1400 audit(1750733902.400:492): avc: denied { map } for pid=4139 comm="syz.0.1299" path="socket:[22312]" dev="sockfs" ino=22312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.194043][ T36] audit: type=1400 audit(1750733902.400:493): avc: denied { read } for pid=4139 comm="syz.0.1299" path="socket:[22312]" dev="sockfs" ino=22312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.333286][ T4159] overlayfs: failed to clone upperpath [ 120.268674][ T36] audit: type=1400 audit(1750733903.500:494): avc: denied { execute } for pid=4178 comm="syz.0.1311" name="file0" dev="ramfs" ino=22455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 120.311181][ T4182] overlayfs: failed to clone lowerpath [ 120.332386][ T4189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 120.349456][ T36] audit: type=1326 audit(1750733903.580:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.0.1315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91ee98e929 code=0x0 [ 120.804318][ T10] usb 6-1: USB disconnect, device number 12 [ 120.923968][ T945] Bluetooth: hci0: command 0x1003 tx timeout [ 120.923968][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.196074][ T4212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 121.360384][ T36] audit: type=1400 audit(1750733904.590:496): avc: denied { map } for pid=4224 comm="syz.4.1326" path="socket:[21376]" dev="sockfs" ino=21376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.488932][ T4245] binder: Unknown parameter 'm"EГ(K6e§Zò' [ 121.502736][ T4248] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 121.515728][ T4248] overlayfs: missing 'lowerdir' [ 121.531214][ T4248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.541615][ T4248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.551591][ T4253] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 121.551644][ T4253] rust_binder: Error while translating object. [ 121.568555][ T4253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 121.591655][ T4253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 121.644047][ T4259] rust_binder: Write failure EFAULT in pid:173 [ 121.662323][ T36] audit: type=1326 audit(1750733904.890:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.1.1338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38b818e929 code=0x0 [ 121.763443][ T4277] overlay: Unknown parameter 'smackfsroot' [ 121.774050][ T36] audit: type=1400 audit(1750733905.000:498): avc: denied { map } for pid=4276 comm="syz.5.1343" path="socket:[21450]" dev="sockfs" ino=21450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.819445][ T4286] input: syz0 as /devices/virtual/input/input12 [ 121.867153][ T4294] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 121.867180][ T4294] rust_binder: Error while translating object. [ 121.877880][ T4294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 121.884391][ T4294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 121.946993][ T4302] netlink: 'syz.5.1352': attribute type 8 has an invalid length. [ 121.975718][ T4304] syz.5.1353 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.076737][ T4316] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1358'. [ 122.287739][ T4330] overlayfs: failed to clone upperpath [ 122.294848][ T4330] can: request_module (can-proto-0) failed. [ 122.324436][ T4339] binder: Bad value for 'stats' [ 122.415158][ T4350] overlayfs: failed to resolve './file0': -2 [ 123.307702][ T4378] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 123.316257][ T4378] overlayfs: failed to clone upperpath [ 123.322727][ T4378] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 123.408862][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 123.408879][ T36] audit: type=1400 audit(1750733906.640:509): avc: denied { setopt } for pid=4384 comm="syz.5.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.409256][ T4402] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1381'. [ 123.420190][ T36] audit: type=1400 audit(1750733906.640:510): avc: denied { nlmsg_read } for pid=4384 comm="syz.5.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.230272][ T36] audit: type=1326 audit(1750733907.460:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774c98e929 code=0x7fc00000 [ 124.452857][ T4434] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1398'. [ 124.462469][ T4434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1398'. [ 124.574291][ T4443] overlayfs: failed to clone upperpath [ 124.773637][ T4458] lo: entered promiscuous mode [ 124.784054][ T4457] lo: left promiscuous mode [ 124.825478][ T36] audit: type=1400 audit(1750733908.060:512): avc: denied { ioctl } for pid=4462 comm="syz.1.1408" path="socket:[23994]" dev="sockfs" ino=23994 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.843222][ T4468] rust_binder: Got transaction with invalid offset. [ 124.850931][ T4468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.851851][ T36] audit: type=1400 audit(1750733908.090:513): avc: denied { map } for pid=4462 comm="syz.1.1408" path="pipe:[23066]" dev="pipefs" ino=23066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.857862][ T4468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 124.867492][ T36] audit: type=1400 audit(1750733908.090:514): avc: denied { execute } for pid=4462 comm="syz.1.1408" path="pipe:[23066]" dev="pipefs" ino=23066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.938153][ T4473] lo: entered promiscuous mode [ 124.943394][ T4473] lo: left promiscuous mode [ 125.008053][ T4477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4477 comm=syz.5.1413 [ 125.064452][ T36] audit: type=1400 audit(1750733908.300:515): avc: denied { write } for pid=4482 comm="syz.5.1416" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.085245][ T36] audit: type=1400 audit(1750733908.300:516): avc: denied { open } for pid=4482 comm="syz.5.1416" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.290866][ T4495] fuse: Bad value for 'user_id' [ 125.295904][ T4495] fuse: Bad value for 'user_id' [ 125.355127][ T4500] overlayfs: failed to clone upperpath [ 125.407766][ T4509] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.698282][ T36] audit: type=1400 audit(1750733908.930:517): avc: denied { write } for pid=4513 comm="syz.1.1429" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.896856][ T4532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4532 comm=syz.4.1433 [ 126.227309][ T4549] overlayfs: failed to clone upperpath [ 126.241288][ T4553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.250140][ T4553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.259028][ T4553] overlay: filesystem on ./bus not supported as upperdir [ 126.385890][ T4563] rust_binder: Error while translating object. [ 126.385909][ T4564] rust_binder: Error while translating object. [ 126.385970][ T4564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 126.392226][ T4563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 126.398456][ T4564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:277 [ 126.407695][ T4563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:277 [ 126.649016][ T4567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 126.658283][ T4567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:281 [ 126.677800][ T4572] exFAT-fs (rnullb0): invalid boot record signature [ 126.693809][ T4572] exFAT-fs (rnullb0): failed to read boot sector [ 126.700271][ T4572] exFAT-fs (rnullb0): failed to recognize exfat type [ 126.716405][ T4577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.775844][ T4591] /dev/rnullb0: Can't lookup blockdev [ 126.790686][ T4592] /dev/rnullb0: Can't lookup blockdev [ 126.821895][ T4597] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 126.821920][ T4597] rust_binder: Error while translating object. [ 126.851081][ T4597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.868139][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 126.869117][ T4597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 126.885018][ T4606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1456'. [ 126.907304][ T4608] fuse: Bad value for 'fd' [ 127.004044][ T4619] rust_binder: Write failure EINVAL in pid:310 [ 127.044466][ T305] hid (null): unknown global tag 0xd [ 127.061494][ T305] hid-generic 0000:007F:0004.000A: unknown global tag 0xd [ 127.073400][ T305] hid-generic 0000:007F:0004.000A: item 0 1 1 13 parsing failed [ 127.098342][ T305] hid-generic 0000:007F:0004.000A: probe with driver hid-generic failed with error -22 [ 127.110218][ T4629] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=4629 comm=syz.1.1465 [ 127.149992][ T4634] binder: Bad value for 'max' [ 127.198475][ T4637] /dev/rnullb0: Can't open blockdev [ 127.217409][ T36] audit: type=1400 audit(1750733910.450:518): avc: denied { search } for pid=4639 comm="syz.5.1468" name="/" dev="configfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.295044][ T4642] can0: slcan on ttyS3. [ 127.355952][ T4641] can0 (unregistered): slcan off ttyS3. [ 127.461918][ T4657] binder: Bad value for 'stats' [ 127.555101][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.574082][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.664619][ T4684] fuse: Bad value for 'group_id' [ 127.669616][ T4684] fuse: Bad value for 'group_id' [ 127.679907][ T4685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:326 [ 127.741689][ T4694] usb usb5: selecting invalid altsetting 2 [ 127.757436][ T4694] binder: Bad value for 'max' [ 127.843978][ T4697] netlink: 'syz.0.1479': attribute type 4 has an invalid length. [ 127.853503][ T4697] netlink: 'syz.0.1479': attribute type 4 has an invalid length. [ 127.976810][ T4725] overlay: Unknown parameter 'uid>00000000000000060928' [ 128.131241][ T4739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.140308][ T4739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.149829][ T4739] FAT-fs (rnullb0): bogus number of reserved sectors [ 128.156609][ T4739] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 128.652291][ T4781] rust_binder: Write failure EFAULT in pid:343 [ 128.670003][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 128.697127][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1513'. [ 128.713949][ T4790] bridge_slave_1: left allmulticast mode [ 128.723343][ T4790] bridge_slave_1: left promiscuous mode [ 128.729222][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.737034][ T4790] bridge_slave_0: left allmulticast mode [ 128.742751][ T4790] bridge_slave_0: left promiscuous mode [ 128.749702][ T4789] exFAT-fs (rnullb0): invalid boot record signature [ 128.765799][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.773368][ T4789] exFAT-fs (rnullb0): failed to read boot sector [ 128.784248][ T4789] exFAT-fs (rnullb0): failed to recognize exfat type [ 128.791865][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 128.791881][ T36] audit: type=1400 audit(1750733912.020:524): avc: denied { lock } for pid=4794 comm="syz.1.1515" path="socket:[24968]" dev="sockfs" ino=24968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.896426][ T36] audit: type=1400 audit(1750733912.130:525): avc: denied { mounton } for pid=4797 comm="syz.1.1516" path="/248/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 128.946590][ T4821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.955193][ T4821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.963041][ T4822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.972211][ T4822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.091897][ T4827] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1524'. [ 129.127200][ T4826] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 129.434947][ T4844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=4844 comm=syz.0.1528 [ 129.690417][ T9] hid (null): unknown global tag 0xd [ 129.695972][ T9] hid (null): global environment stack underflow [ 129.703181][ T9] hid-generic 0004:097D:0007.000B: unknown global tag 0xd [ 129.710416][ T9] hid-generic 0004:097D:0007.000B: item 0 0 1 13 parsing failed [ 129.718261][ T9] hid-generic 0004:097D:0007.000B: probe with driver hid-generic failed with error -22 [ 129.766399][ T4866] devtmpfs: Unknown parameter '^ *([%Ž' [ 129.820736][ T4875] syz.1.1542(4875): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 130.022076][ T4888] rust_binder: Write failure EINVAL in pid:365 [ 130.053795][ T36] audit: type=1400 audit(1750733913.280:526): avc: denied { setopt } for pid=4890 comm="syz.5.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.087440][ T36] audit: type=1400 audit(1750733913.320:527): avc: denied { read append } for pid=4893 comm="syz.5.1546" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.136055][ T4903] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 130.167419][ T4908] binder: Bad value for 'max' [ 130.188951][ T36] audit: type=1400 audit(1750733913.420:528): avc: denied { ioctl } for pid=4912 comm="syz.1.1553" path="net:[4026532311]" dev="nsfs" ino=4026532311 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 130.240155][ T36] audit: type=1400 audit(1750733913.470:529): avc: denied { map } for pid=4905 comm="syz.5.1550" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 130.605297][ T4932] fuse: Unknown parameter 'f' [ 131.071073][ T4951] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 131.081822][ T4951] rust_binder: Write failure EINVAL in pid:380 [ 131.101781][ T4957] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 131.123335][ T4961] lo: entered promiscuous mode [ 131.147558][ T36] audit: type=1326 audit(1750733914.380:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.1.1574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38b818e929 code=0x0 [ 131.172883][ T4960] lo: left promiscuous mode [ 131.202268][ T4973] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 131.236987][ T36] audit: type=1400 audit(1750733914.470:531): avc: denied { read } for pid=4981 comm="syz.0.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.495559][ T5011] overlayfs: failed to clone upperpath [ 131.542619][ T5024] /dev/rnullb0: Can't lookup blockdev [ 131.772619][ T5032] 9pnet_fd: Insufficient options for proto=fd [ 131.778925][ T5032] 9pnet_fd: Insufficient options for proto=fd [ 131.988303][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1601'. [ 132.932670][ T5076] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 132.975713][ T5081] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 133.099480][ T5083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.099515][ T5083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:410 [ 133.120704][ T5097] usb usb8: usbfs: process 5097 (syz.1.1622) did not claim interface 0 before use [ 133.155851][ T5103] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 133.155869][ T5103] rust_binder: Read failure Err(EFAULT) in pid:416 [ 133.183721][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 133.208997][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.239943][ T5112] fido_id[5112]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.393688][ T36] audit: type=1400 audit(1750733916.620:532): avc: denied { checkpoint_restore } for pid=5130 comm="syz.1.1633" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.393954][ T5136] binder: Bad value for 'stats' [ 133.563989][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 133.715115][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.725391][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.734927][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.744028][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.752026][ T9] usb 6-1: SerialNumber: syz [ 134.025729][ T9] usb 6-1: 0:2 : does not exist [ 134.033947][ T9] usb 6-1: unit 5 not found! [ 134.042956][ T9] usb 6-1: USB disconnect, device number 13 [ 134.073189][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 134.130759][ T5154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.144417][ T5154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.566813][ T36] audit: type=1326 audit(1750733917.800:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774c98e929 code=0x7ffc0000 [ 134.590240][ T36] audit: type=1326 audit(1750733917.800:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774c98e929 code=0x7ffc0000 [ 134.591140][ T5160] overlayfs: failed to clone upperpath [ 134.614497][ T36] audit: type=1326 audit(1750733917.800:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f774c990847 code=0x7ffc0000 [ 134.642683][ T36] audit: type=1326 audit(1750733917.800:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f774c9907bc code=0x7ffc0000 [ 134.667911][ T36] audit: type=1326 audit(1750733917.800:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f774c9906f4 code=0x7ffc0000 [ 134.691402][ T36] audit: type=1326 audit(1750733917.800:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f774c9906f4 code=0x7ffc0000 [ 134.714739][ T36] audit: type=1326 audit(1750733917.800:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f774c98d58a code=0x7ffc0000 [ 134.737898][ T36] audit: type=1326 audit(1750733917.800:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774c98e929 code=0x7ffc0000 [ 134.761362][ T36] audit: type=1326 audit(1750733917.800:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774c98e929 code=0x7ffc0000 [ 134.784676][ T36] audit: type=1326 audit(1750733917.800:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f774c98e929 code=0x7ffc0000 [ 134.813942][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 134.963922][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 134.970172][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 134.978336][ T9] usb 6-1: config 0 has no interface number 0 [ 134.986236][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 134.995394][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.003386][ T9] usb 6-1: Product: syz [ 135.007590][ T9] usb 6-1: Manufacturer: syz [ 135.012202][ T9] usb 6-1: SerialNumber: syz [ 135.020765][ T9] usb 6-1: config 0 descriptor?? [ 135.029615][ T9] smsc95xx v2.0.0 [ 135.369931][ T5198] futex_wake_op: syz.0.1654 tries to shift op by -1; fix this program [ 135.838544][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 136.051650][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 136.073971][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 136.085157][ T9] usb 6-1: USB disconnect, device number 14 [ 136.172352][ T5241] cgroup: fork rejected by pids controller in /syz1 [ 136.785876][ T5292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45050 sclass=netlink_route_socket pid=5292 comm=syz.0.1687 [ 136.874619][ T5295] netlink: 'syz.5.1688': attribute type 3 has an invalid length. [ 136.982708][ T9] usb 2-1: USB disconnect, device number 27 [ 137.079749][ T5300] rust_binder: Got transaction with invalid offset. [ 137.079799][ T5300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 137.086760][ T5300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 137.124146][ T313] veth1_macvtap: left promiscuous mode [ 137.154421][ T313] veth0_vlan: left promiscuous mode [ 137.253330][ T5307] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.260857][ T5307] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.271972][ T5307] bridge_slave_0: entered allmulticast mode [ 137.279179][ T5307] bridge_slave_0: entered promiscuous mode [ 137.285717][ T5307] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.292747][ T5307] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.299899][ T5307] bridge_slave_1: entered allmulticast mode [ 137.306244][ T5307] bridge_slave_1: entered promiscuous mode [ 137.347527][ T5307] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.354600][ T5307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.361876][ T5307] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.368929][ T5307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.388210][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.395617][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.405378][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.412435][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.421402][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.428514][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.452664][ T5307] veth0_vlan: entered promiscuous mode [ 137.463278][ T5307] veth1_macvtap: entered promiscuous mode [ 137.475000][ T31] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 137.634001][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 137.635423][ T5323] batadv_slave_0: entered promiscuous mode [ 137.640840][ T31] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 137.653578][ T5322] batadv_slave_0: left promiscuous mode [ 137.654148][ T31] usb 6-1: config 0 has no interface number 0 [ 137.669627][ T31] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 137.679059][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.688182][ T31] usb 6-1: Product: syz [ 137.692461][ T31] usb 6-1: Manufacturer: syz [ 137.697110][ T31] usb 6-1: SerialNumber: syz [ 137.702564][ T31] usb 6-1: config 0 descriptor?? [ 137.708562][ T31] smsc95xx v2.0.0 [ 137.745393][ T5326] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 137.745437][ T5326] rust_binder: Error while translating object. [ 137.756286][ T5326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 137.762492][ T5326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 137.865959][ T5328] rust_binder: Write failure EFAULT in pid:12 [ 137.909231][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 137.926279][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.031140][ T5338] rust_binder: Error while translating object. [ 138.031167][ T5338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 138.037428][ T5338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:22 [ 138.310531][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 138.331455][ T31] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 138.341717][ T31] usb 6-1: USB disconnect, device number 15 [ 138.642513][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'. [ 138.676128][ T5356] netlink: 'syz.4.1708': attribute type 5 has an invalid length. [ 138.698104][ T5358] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1709'. [ 138.876135][ T5365] rust_binder: Error while translating object. [ 138.876157][ T5365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 138.882322][ T5365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:459 [ 139.007044][ T5375] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 139.042151][ T5377] rust_binder: Write failure EINVAL in pid:471 [ 139.577292][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 139.577310][ T36] audit: type=1400 audit(1750733922.810:621): avc: denied { append } for pid=5391 comm="syz.5.1720" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 139.654354][ T5397] overlayfs: failed to clone upperpath [ 139.711316][ T5400] overlayfs: failed to clone upperpath [ 140.078178][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.089006][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.096419][ T5418] bridge_slave_0: entered allmulticast mode [ 140.102977][ T5418] bridge_slave_0: entered promiscuous mode [ 140.110469][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.117861][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.125737][ T5418] bridge_slave_1: entered allmulticast mode [ 140.132248][ T5418] bridge_slave_1: entered promiscuous mode [ 140.147953][ T313] bridge_slave_1: left allmulticast mode [ 140.153646][ T313] bridge_slave_1: left promiscuous mode [ 140.174025][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.182638][ T313] bridge_slave_0: left allmulticast mode [ 140.188417][ T313] bridge_slave_0: left promiscuous mode [ 140.194062][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.358513][ T313] tipc: Left network mode [ 140.365207][ T313] veth1_macvtap: left promiscuous mode [ 140.371182][ T313] veth0_vlan: left promiscuous mode [ 140.477417][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.484526][ T5418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.491961][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.499028][ T5418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.519238][ T36] audit: type=1400 audit(1750733923.750:622): avc: denied { mount } for pid=5422 comm="syz.5.1730" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 140.578579][ T5418] veth0_vlan: entered promiscuous mode [ 140.601095][ T5418] veth1_macvtap: entered promiscuous mode [ 140.608676][ T36] audit: type=1400 audit(1750733923.840:623): avc: denied { create } for pid=5426 comm="syz.4.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 140.819877][ T5442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:491 [ 140.820272][ T5442] netlink: 'syz.5.1736': attribute type 4 has an invalid length. [ 140.848286][ T5442] netlink: 'syz.5.1736': attribute type 4 has an invalid length. [ 140.888842][ T5442] rust_binder: Read failure Err(EFAULT) in pid:491 [ 140.890344][ T5442] rust_binder: Write failure EFAULT in pid:491 [ 140.903951][ T370] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.956996][ T5437] incfs: ino conflict with backing FS 1 [ 140.963359][ T5436] incfs: ino conflict with backing FS 1 [ 141.063982][ T370] usb 1-1: Using ep0 maxpacket: 32 [ 141.084016][ T370] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 141.097466][ T370] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.109382][ T370] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 141.127877][ T370] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.134987][ T5452] tc_dump_action: action bad kind [ 141.140275][ T370] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 141.150780][ T5452] tc_dump_action: action bad kind [ 141.156132][ T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.181001][ T370] usb 1-1: config 0 descriptor?? [ 141.226826][ T5463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:500 [ 141.227058][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.258088][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.274026][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.280545][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.303973][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.310935][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.318008][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.325910][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.332462][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.339797][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.346698][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.353292][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.360153][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.366929][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.373463][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.380291][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.387009][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.393581][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.400929][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.408088][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.414807][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.421453][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.428393][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.435117][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.441660][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.448693][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.455705][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.462298][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.469117][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.476034][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.483301][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.490835][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.493984][ T444] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 141.497968][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.511903][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.518663][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.525535][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.533450][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.540305][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.546981][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.554477][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.561612][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.569469][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.576195][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.582944][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.591047][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.597907][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.605866][ T370] zeroplus 0003:0C12:0030.000D: item fetching failed at offset 3/7 [ 141.623966][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.623994][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.632115][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.639052][ T370] zeroplus 0003:0C12:0030.000D: parse failed [ 141.652488][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.652515][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.655001][ T444] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.659331][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.667802][ T444] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 141.677458][ T370] zeroplus 0003:0C12:0030.000D: probe with driver zeroplus failed with error -22 [ 141.686954][ T444] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 141.694833][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.712522][ T444] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 141.720880][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.722118][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.732881][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.742264][ T5465] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.747851][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.760205][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.766726][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.773175][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.779692][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.786297][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.792833][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.799551][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.806482][ T5462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.811851][ T370] usb 1-1: USB disconnect, device number 2 [ 142.164005][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 142.276306][ T5486] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1750'. [ 142.285951][ T5486] tipc: Invalid UDP bearer configuration [ 142.285978][ T5486] tipc: Enabling of bearer rejected, failed to enable media [ 142.315134][ T10] usb 6-1: config 4 has an invalid interface number: 95 but max is 0 [ 142.323946][ T10] usb 6-1: config 4 has no interface number 0 [ 142.330142][ T10] usb 6-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 142.342050][ T10] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 142.348780][ T5489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.353519][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.368794][ T10] usb 6-1: Product: syz [ 142.372981][ T10] usb 6-1: Manufacturer: syz [ 142.377650][ T10] usb 6-1: SerialNumber: syz [ 142.384435][ T5476] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 142.455264][ T5487] cgroup: fork rejected by pids controller in /syz0 [ 142.567974][ T313] bridge_slave_1: left allmulticast mode [ 142.575155][ T313] bridge_slave_1: left promiscuous mode [ 142.583042][ T444] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 142.597052][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.644678][ T444] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input13 [ 142.654220][ T5476] mmap: syz.5.1747 (5476): VmData 29069312 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 142.667441][ T313] bridge_slave_0: left allmulticast mode [ 142.692105][ T313] bridge_slave_0: left promiscuous mode [ 142.713183][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.754232][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 142.780012][ T10] usb 6-1: USB disconnect, device number 16 [ 142.804924][ T5465] rust_binder: Write failure EINVAL in pid:34 [ 142.809921][ T31] usb 2-1: USB disconnect, device number 28 [ 142.816115][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 142.876227][ T313] veth1_macvtap: left promiscuous mode [ 142.881770][ T313] veth0_vlan: left promiscuous mode [ 143.000496][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.008137][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.015299][ T5599] bridge_slave_0: entered allmulticast mode [ 143.021555][ T5599] bridge_slave_0: entered promiscuous mode [ 143.028656][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.035975][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.043638][ T5599] bridge_slave_1: entered allmulticast mode [ 143.050464][ T5599] bridge_slave_1: entered promiscuous mode [ 143.091257][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.098557][ T5599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.105860][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.112904][ T5599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.132269][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.139732][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.150497][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.157595][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.167454][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.174566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.198533][ T5599] veth0_vlan: entered promiscuous mode [ 143.209201][ T5599] veth1_macvtap: entered promiscuous mode [ 143.354941][ T5622] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 143.403151][ T5628] overlayfs: failed to resolve '/êÇÎÜP®': -2 [ 143.490317][ T5633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37795 sclass=netlink_route_socket pid=5633 comm=syz.1.1762 [ 143.544142][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 143.566190][ T5637] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 143.566214][ T5637] rust_binder: Read failure Err(EFAULT) in pid:43 [ 143.625072][ T5643] serio: Serial port ttynull [ 143.701283][ T5646] fuse: Bad value for 'user_id' [ 143.706289][ T5646] fuse: Bad value for 'user_id' [ 143.714640][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 143.724880][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 143.727400][ T5648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 143.733793][ T5648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:54 [ 143.737692][ T10] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 143.744613][ T5648] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 143.753826][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.771977][ T5648] rust_binder: Read failure Err(EFAULT) in pid:54 [ 143.782985][ T10] usb 6-1: Product: syz [ 143.803133][ T10] usb 6-1: Manufacturer: syz [ 143.809274][ T10] usb 6-1: SerialNumber: syz [ 143.815355][ T10] usb 6-1: config 0 descriptor?? [ 143.824287][ T10] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 143.832539][ T10] usb 6-1: Detected FT232R [ 143.834647][ T5659] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 144.023524][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 144.063931][ T31] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 144.215391][ T31] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.226520][ T31] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 144.239789][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.246763][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 144.256137][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.258475][ T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.272773][ T31] usb 1-1: config 0 descriptor?? [ 144.285259][ T31] usbhid 1-1:0.0: can't add hid device: -22 [ 144.294334][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 144.459669][ T10] usb 6-1: USB disconnect, device number 17 [ 144.467623][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.477781][ T10] ftdi_sio 6-1:0.0: device disconnected [ 144.664107][ T36] audit: type=1400 audit(1750733927.890:624): avc: denied { mounton } for pid=5653 comm="syz.0.1771" path="/proc/19/cgroup" dev="proc" ino=30507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 145.009653][ T5699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.009684][ T5699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 145.065506][ T5703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1785'. [ 145.454033][ T31] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 145.594098][ T31] usb 6-1: device descriptor read/64, error -71 [ 145.844081][ T31] usb 6-1: device descriptor read/64, error -71 [ 146.083948][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 146.214005][ T31] usb 6-1: device descriptor read/64, error -71 [ 146.254055][ T337] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 146.405023][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.416172][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.425990][ T337] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 146.435082][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.443616][ T337] usb 2-1: config 0 descriptor?? [ 146.454070][ T31] usb 6-1: device descriptor read/64, error -71 [ 146.564065][ T31] usb usb6-port1: attempt power cycle [ 146.656449][ T337] usbhid 2-1:0.0: can't add hid device: -71 [ 146.663126][ T337] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 146.682906][ T337] usb 2-1: USB disconnect, device number 29 [ 146.716108][ T36] audit: type=1400 audit(1750733929.950:625): avc: denied { setattr } for pid=5742 comm="syz.1.1797" name="/" dev="incremental-fs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.758707][ T36] audit: type=1400 audit(1750733929.980:626): avc: denied { append } for pid=5744 comm="syz.1.1798" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.807803][ T5757] fuse: Bad value for 'user_id' [ 146.812819][ T5757] fuse: Bad value for 'user_id' [ 146.856152][ T370] usb 1-1: USB disconnect, device number 3 [ 146.856189][ T5765] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 146.880989][ T5765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 146.905759][ T5765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:101 [ 146.925750][ T31] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 146.965200][ T31] usb 6-1: device descriptor read/8, error -71 [ 147.095181][ T31] usb 6-1: device descriptor read/8, error -71 [ 147.343935][ T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 147.375460][ T31] usb 6-1: device descriptor read/8, error -71 [ 147.505273][ T31] usb 6-1: device descriptor read/8, error -71 [ 147.614065][ T31] usb usb6-port1: unable to enumerate USB device [ 148.076230][ T36] audit: type=1400 audit(1750733931.310:627): avc: denied { setattr } for pid=5824 comm="syz.0.1827" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.076968][ T5825] rust_binder: Write failure EINVAL in pid:41 [ 148.223414][ T5832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.229586][ T5832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 148.507590][ T5834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37409 sclass=netlink_route_socket pid=5834 comm=syz.4.1830 [ 148.538009][ T5836] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 148.712949][ T5848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:120 [ 148.714006][ T5849] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.116702][ T5870] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 149.116702][ T5870] null pointer dereference occurred [ 149.142090][ T5870] ------------[ cut here ]------------ [ 149.147661][ T5870] kernel BUG at rust/helpers/bug.c:7! [ 149.154855][ T5870] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 149.157658][ T36] audit: type=1400 audit(1750733932.380:628): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 149.161835][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz.0.1841 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 149.196963][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.207031][ T5870] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 149.212330][ T5870] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 35 7b c7 d3 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 7f bf 8e 5f 90 90 90 90 90 90 90 90 90 [ 149.217556][ T36] audit: type=1400 audit(1750733932.380:629): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.232026][ T5870] RSP: 0018:ffffc900013e71b0 EFLAGS: 00010246 [ 149.232049][ T5870] RAX: 000000000000005a RBX: 1ffff9200027ce38 RCX: 0b7c155cae663300 [ 149.232062][ T5870] RDX: ffffc90001631000 RSI: 0000000000005a95 RDI: 0000000000005a96 [ 149.232075][ T5870] RBP: ffffc900013e71b0 R08: ffffc900013e6ea7 R09: 1ffff9200027cdd4 [ 149.232088][ T5870] R10: dffffc0000000000 R11: fffff5200027cdd5 R12: 0000000000000000 [ 149.232100][ T5870] R13: dffffc0000000000 R14: ffffc900013e71e0 R15: ffffc900013e7210 [ 149.232114][ T5870] FS: 00007f41ce0136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 149.232130][ T5870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.292316][ T36] audit: type=1400 audit(1750733932.380:630): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.299828][ T5870] CR2: 00007f774cbb7bac CR3: 0000000129df6000 CR4: 00000000003526b0 [ 149.299851][ T5870] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 149.299863][ T5870] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 149.299877][ T5870] Call Trace: [ 149.331866][ T36] audit: type=1400 audit(1750733932.380:631): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.336691][ T5870] [ 149.336704][ T5870] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 149.336736][ T5870] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 149.336760][ T5870] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 149.336792][ T5870] ? p9pdu_vwritef+0x2720/0x2720 [ 149.336821][ T5870] ? radix_tree_node_alloc+0x1af/0x400 [ 149.336841][ T5870] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 149.362589][ T36] audit: type=1400 audit(1750733932.380:632): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.364055][ T5870] ? __asan_memcpy+0x5a/0x80 [ 149.364083][ T5870] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 149.412672][ T36] audit: type=1400 audit(1750733932.380:633): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.416914][ T5870] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 149.416952][ T5870] ? p9pdu_writef+0xdb/0x130 [ 149.504716][ T5870] ? p9pdu_vwritef+0x2720/0x2720 [ 149.509730][ T5870] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 149.518859][ T5870] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 149.527745][ T5870] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 149.535579][ T5870] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 149.543242][ T5870] ? p9_client_prepare_req+0x732/0xa10 [ 149.548751][ T5870] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 149.557015][ T5870] ? __kasan_check_write+0x18/0x20 [ 149.562137][ T5870] ? _raw_spin_lock+0x8c/0x120 [ 149.566917][ T5870] ? tun_chr_poll+0x127/0x770 [ 149.571600][ T5870] ? _raw_spin_lock+0x8c/0x120 [ 149.576384][ T5870] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 149.584648][ T5870] p9_fd_request+0x443/0x500 [ 149.589258][ T5870] p9_client_rpc+0x2f9/0xb40 [ 149.593863][ T5870] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 149.602119][ T5870] ? p9_fid_create+0x3d0/0x3d0 [ 149.606895][ T5870] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 149.615153][ T5870] ? p9_conn_create+0x4c9/0x570 [ 149.620030][ T5870] ? p9_fd_create+0x2f3/0x4c0 [ 149.624724][ T5870] p9_client_create+0x96a/0x1190 [ 149.629677][ T5870] ? __cfi_p9_client_create+0x10/0x10 [ 149.635049][ T5870] ? kasan_save_alloc_info+0x40/0x50 [ 149.640414][ T5870] ? __kasan_kmalloc+0x96/0xb0 [ 149.645174][ T5870] ? kstrdup+0x7b/0x140 [ 149.649325][ T5870] ? __kasan_check_write+0x18/0x20 [ 149.654467][ T5870] v9fs_session_init+0x1e1/0x1820 [ 149.659487][ T5870] ? __cfi_v9fs_session_init+0x10/0x10 [ 149.664948][ T5870] ? kasan_save_alloc_info+0x40/0x50 [ 149.670225][ T5870] ? __kasan_kmalloc+0x96/0xb0 [ 149.674985][ T5870] ? v9fs_mount+0xbd/0xa00 [ 149.679395][ T5870] v9fs_mount+0xd7/0xa00 [ 149.683634][ T5870] ? __cfi_v9fs_mount+0x10/0x10 [ 149.688479][ T5870] ? selinux_capable+0x38/0x50 [ 149.693237][ T5870] legacy_get_tree+0x103/0x1b0 [ 149.697994][ T5870] ? __cfi_v9fs_mount+0x10/0x10 [ 149.702854][ T5870] vfs_get_tree+0xa1/0x290 [ 149.707285][ T5870] do_new_mount+0x251/0xb40 [ 149.711791][ T5870] ? security_capable+0xcf/0xf0 [ 149.716636][ T5870] path_mount+0x688/0x1050 [ 149.721046][ T5870] ? putname+0x113/0x150 [ 149.725283][ T5870] __se_sys_mount+0x2bd/0x480 [ 149.729966][ T5870] ? __x64_sys_mount+0xf0/0xf0 [ 149.734730][ T5870] ? __kasan_check_write+0x18/0x20 [ 149.739933][ T5870] ? fpregs_restore_userregs+0x11d/0x260 [ 149.745563][ T5870] __x64_sys_mount+0xc3/0xf0 [ 149.750150][ T5870] x64_sys_call+0x2021/0x2ee0 [ 149.754822][ T5870] do_syscall_64+0x58/0xf0 [ 149.759234][ T5870] ? clear_bhb_loop+0x50/0xa0 [ 149.763951][ T5870] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.769837][ T5870] RIP: 0033:0x7f41cd18e929 [ 149.774250][ T5870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.793855][ T5870] RSP: 002b:00007f41ce013038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.802269][ T5870] RAX: ffffffffffffffda RBX: 00007f41cd3b5fa0 RCX: 00007f41cd18e929 [ 149.810247][ T5870] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 149.818211][ T5870] RBP: 00007f41cd210b39 R08: 0000200000000240 R09: 0000000000000000 [ 149.826175][ T5870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.834228][ T5870] R13: 0000000000000000 R14: 00007f41cd3b5fa0 R15: 00007ffd0c9eace8 [ 149.842196][ T5870] [ 149.845205][ T5870] Modules linked in: [ 149.849445][ T5870] ---[ end trace 0000000000000000 ]--- [ 149.862174][ T5873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 149.862585][ T5873] rust_binder: Error while translating object. [ 149.871924][ T5870] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 149.883607][ T5873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.883639][ T5873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 149.893300][ T5870] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 35 7b c7 d3 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 7f bf 8e 5f 90 90 90 90 90 90 90 90 90 [ 149.923475][ T5870] RSP: 0018:ffffc900013e71b0 EFLAGS: 00010246 [ 149.929789][ T5870] RAX: 000000000000005a RBX: 1ffff9200027ce38 RCX: 0b7c155cae663300 [ 149.938013][ T5870] RDX: ffffc90001631000 RSI: 0000000000005a95 RDI: 0000000000005a96 [ 149.946347][ T5870] RBP: ffffc900013e71b0 R08: ffffc900013e6ea7 R09: 1ffff9200027cdd4 [ 149.954667][ T5870] R10: dffffc0000000000 R11: fffff5200027cdd5 R12: 0000000000000000 [ 149.962719][ T5870] R13: dffffc0000000000 R14: ffffc900013e71e0 R15: ffffc900013e7210 [ 149.971643][ T5870] FS: 00007f41ce0136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 149.980835][ T5870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.987851][ T5870] CR2: 000000110c2ef24d CR3: 0000000129df6000 CR4: 00000000003526b0 [ 149.996053][ T5870] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 150.004305][ T5870] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 150.012339][ T5870] Kernel panic - not syncing: Fatal exception [ 150.019104][ T5870] Kernel Offset: disabled [ 150.023437][ T5870] Rebooting in 86400 seconds..