last executing test programs: 1m45.267465121s ago: executing program 1 (id=429): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getrandom(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x100000000) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r5 = getpid() syz_pidfd_open(r5, 0x0) syz_open_procfs(r5, &(0x7f0000000080)='net/rfcomm\x00') 1m45.233883772s ago: executing program 1 (id=430): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000feffffff90ffffffff00"/112], 0xb8}}, 0x0) 1m45.222423672s ago: executing program 1 (id=431): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.6678926s ago: executing program 1 (id=432): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000052c0)={0x368, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x304, 0x5, 0x0, 0x1, [@nested={0x300, 0x124, 0x0, 0x1, [@generic="e52cfdc68ae361504fb4c62b8d9ac5e3dbef730cb2cf00eac243342b13b4b2783e39f91b", @nested={0xc1, 0x95, 0x0, 0x1, [@nested={0x4, 0x151}, @generic="9f04e2e04c5e100d9e58807b0096f337701f7abd7496b5b3ca4cc3c940ca62110404496d613fb09e1b288a498db87682d4352c7b0bdf2c65590cd71a73eb0e7784562bf1f677c65ddb15175cb931cab7a37a62f6e4c9c52327f48dd9952d429bb2a199dc6ddee341de7a400bdd0e6928657e2de5a6d05869fb6773ae19db71894e2711b8864a9b1d9178a18d0e0329ae717bc4892619efe6e32e57f3b248aab32dbf6abddece7fa450210297ee", @typed={0x8, 0xac, 0x0, 0x0, @uid}, @nested={0x4, 0xd7}]}, @typed={0x4, 0x138}, @nested={0x20d, 0x110, 0x0, 0x1, [@typed={0x14, 0x67, 0x0, 0x0, @ipv6=@mcast1}, @generic="11277c096e5b2d7552ca4f113df5e2b9cb2c8a2aedb1ac80f4027491f90f75b0286a2340c5a0f49430ed6ffe7c03ece4148486d5976f0ae19577fbfc7a8d2ca4f725832d", @generic="037e1ee9f7b0a4220dd524d682cc8cbbbdea4835ea4084f3a42b8263beaacbb438155fb626b5605be64b919ff93802c1e5e24c6193c4198fee8b119e011113f8920122e3b4fffc8efce6031d349a3848fc3126e8aeb1d282b47c74f6e6648e6179a4be3bd11a2c4b84623e4129c26e0c4a7b9293fb5b2598cd45c43ab1910968bb4aff9c74ad264076f3134d86dc36948a4daa60062b27cb2fefcf86572d37bcd40a7ed907bb11a98cea45381165f55a6fe6bd1897874865ab2987ae36390edcc29f987d98c534e2", @generic="081b173ca8c2c3138757b83f4768f5a0e07d1416eb8cc8d0fac2af900348d0587fd3d18489f4d44c5fd6f5a340322156f395402e880b7def364e3d08298d018b6e2a2eacfb0fe275314f07c051c112b70523e0dd9a59166bc4358134bb63c4a540d8545f7f7f85d829", @nested={0x4, 0x53}, @generic="95ee4c3a9c6424b78ca9e13d79519fd93d569f0e73125311f414ab609624114982a1df7b89262ede6bdab02ab1886d3197d0ff5dc7fd26fc1baf07a6b0eac5bb9d7109c54efe4c72aae082e9726422bdaeb64f1eb08e9d04ccd4d078542502ee386e0955d63dabb459ad711c1d", @nested={0x4, 0x1e}, @generic="e0e599aa90e954075c89b6"]}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4}, 0x804) timer_create(0x5, &(0x7f0000000040)={0x0, 0x2f, 0x2, @thr={&(0x7f0000000000)="78a8d843469822c1bd44e152ce46dbdeba8e72973b5b120592346a1c02a355f20a61d406acad10db646dcb384752109044a588f05fb62782270762c8cd", &(0x7f0000000180)="f9cf2ee93710a94e1bc1ef2660f44ae5baf83d02672c9b90e9b62cee16216376e0cb71a452b50aa5dbb419c53ec59557342069a46f837785727bb76b769300f56e22c32617ce64d9ae0e4703dea2716dc00ae372d98a85b5417348b2b5d01d1f59a92c7a76bca6477056fcda384327509d3cde2a521e766dbc536afce5a31f9acf05b0e5edadccb173d9f7f9ea75bc2a39611595d972f2c431216fdc5a22af5b2382bcc5a7d43beb8b78ae4e"}}, &(0x7f0000000080)) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_AIE_ON(r2, 0x7001) setresuid(0xee00, 0xee00, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000052c0)={0x368, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x304, 0x5, 0x0, 0x1, [@nested={0x300, 0x124, 0x0, 0x1, [@generic="e52cfdc68ae361504fb4c62b8d9ac5e3dbef730cb2cf00eac243342b13b4b2783e39f91b", @nested={0xc1, 0x95, 0x0, 0x1, [@nested={0x4, 0x151}, @generic="9f04e2e04c5e100d9e58807b0096f337701f7abd7496b5b3ca4cc3c940ca62110404496d613fb09e1b288a498db87682d4352c7b0bdf2c65590cd71a73eb0e7784562bf1f677c65ddb15175cb931cab7a37a62f6e4c9c52327f48dd9952d429bb2a199dc6ddee341de7a400bdd0e6928657e2de5a6d05869fb6773ae19db71894e2711b8864a9b1d9178a18d0e0329ae717bc4892619efe6e32e57f3b248aab32dbf6abddece7fa450210297ee", @typed={0x8, 0xac, 0x0, 0x0, @uid}, @nested={0x4, 0xd7}]}, @typed={0x4, 0x138}, @nested={0x20d, 0x110, 0x0, 0x1, [@typed={0x14, 0x67, 0x0, 0x0, @ipv6=@mcast1}, @generic="11277c096e5b2d7552ca4f113df5e2b9cb2c8a2aedb1ac80f4027491f90f75b0286a2340c5a0f49430ed6ffe7c03ece4148486d5976f0ae19577fbfc7a8d2ca4f725832d", @generic="037e1ee9f7b0a4220dd524d682cc8cbbbdea4835ea4084f3a42b8263beaacbb438155fb626b5605be64b919ff93802c1e5e24c6193c4198fee8b119e011113f8920122e3b4fffc8efce6031d349a3848fc3126e8aeb1d282b47c74f6e6648e6179a4be3bd11a2c4b84623e4129c26e0c4a7b9293fb5b2598cd45c43ab1910968bb4aff9c74ad264076f3134d86dc36948a4daa60062b27cb2fefcf86572d37bcd40a7ed907bb11a98cea45381165f55a6fe6bd1897874865ab2987ae36390edcc29f987d98c534e2", @generic="081b173ca8c2c3138757b83f4768f5a0e07d1416eb8cc8d0fac2af900348d0587fd3d18489f4d44c5fd6f5a340322156f395402e880b7def364e3d08298d018b6e2a2eacfb0fe275314f07c051c112b70523e0dd9a59166bc4358134bb63c4a540d8545f7f7f85d829", @nested={0x4, 0x53}, @generic="95ee4c3a9c6424b78ca9e13d79519fd93d569f0e73125311f414ab609624114982a1df7b89262ede6bdab02ab1886d3197d0ff5dc7fd26fc1baf07a6b0eac5bb9d7109c54efe4c72aae082e9726422bdaeb64f1eb08e9d04ccd4d078542502ee386e0955d63dabb459ad711c1d", @nested={0x4, 0x1e}, @generic="e0e599aa90e954075c89b6"]}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async) timer_create(0x5, &(0x7f0000000040)={0x0, 0x2f, 0x2, @thr={&(0x7f0000000000)="78a8d843469822c1bd44e152ce46dbdeba8e72973b5b120592346a1c02a355f20a61d406acad10db646dcb384752109044a588f05fb62782270762c8cd", &(0x7f0000000180)="f9cf2ee93710a94e1bc1ef2660f44ae5baf83d02672c9b90e9b62cee16216376e0cb71a452b50aa5dbb419c53ec59557342069a46f837785727bb76b769300f56e22c32617ce64d9ae0e4703dea2716dc00ae372d98a85b5417348b2b5d01d1f59a92c7a76bca6477056fcda384327509d3cde2a521e766dbc536afce5a31f9acf05b0e5edadccb173d9f7f9ea75bc2a39611595d972f2c431216fdc5a22af5b2382bcc5a7d43beb8b78ae4e"}}, &(0x7f0000000080)) (async) ioctl$RTC_UIE_ON(r2, 0x7003) (async) ioctl$RTC_AIE_ON(r2, 0x7001) (async) setresuid(0xee00, 0xee00, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m44.590567082s ago: executing program 1 (id=433): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x9}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2000000a}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x1}, @enter_looper], 0x1d8, 0x0, &(0x7f0000000600)="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"}) (async) r3 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0xb0, 0x0, &(0x7f0000000640)=[@release={0x40046306, 0x1}, @increfs={0x40046304, 0x3}, @free_buffer, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x6, 0x0, 0x11}, @fda={0x66646185, 0x7, 0x1, 0x100}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}}, &(0x7f00000002c0)={0x0, 0x20, 0x40}}}], 0xaf, 0x0, &(0x7f0000000700)="af618c08f3904bfc5e544141208707a82461319accb11f4dfbadfc4dfc95bf82ebca6eea6029447958d13fcb620b1dd7b63e2a794658dcac1cc36248a5364c323a354b4bfb8969934e469bb7e3b7a1a46f3269e77fb1e7c3cbf40e323e4ac1d09ea2c9b87b5e88f74431d27dda3caa731429ecaf6770db3c406d12d04002ae5d746d4d2d1519f9a1834d07d54afaeece558962e58231df1c7bbe821432f279de6091fdb55d07a1166ec907cdd93542"}) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="d6"}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgid(0x0) sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0xc0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x4207, r6) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x420000, 0x103) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000980)='.pending_reads\x00', 0x400100, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1m44.549964123s ago: executing program 1 (id=436): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket(0x1e, 0x1, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) splice(r1, 0x0, r2, &(0x7f0000001580)=0x3, 0x9614, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r3, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) socket(0x1e, 0x1, 0x0) (async) pipe(&(0x7f0000001300)) (async) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) (async) splice(r1, 0x0, r2, &(0x7f0000001580)=0x3, 0x9614, 0x0) (async) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) (async) listen(r3, 0x3) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x400, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) (async) dup3(r5, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) 1m29.480612724s ago: executing program 32 (id=436): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket(0x1e, 0x1, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) splice(r1, 0x0, r2, &(0x7f0000001580)=0x3, 0x9614, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r3, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) socket(0x1e, 0x1, 0x0) (async) pipe(&(0x7f0000001300)) (async) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) (async) splice(r1, 0x0, r2, &(0x7f0000001580)=0x3, 0x9614, 0x0) (async) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) (async) listen(r3, 0x3) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x400, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) (async) dup3(r5, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) 1m21.042121154s ago: executing program 3 (id=667): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000140)={0x3, 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pread64(r2, 0x0, 0x0, 0x1) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0xaece, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.961192635s ago: executing program 3 (id=670): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4044851}, 0x40850) 1m20.959656435s ago: executing program 3 (id=671): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1800, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x4000, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000003c0)={0x1, {{0xa, 0x4e21, 0x800, @mcast1, 0x9}}, {{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8}}}, 0x108) r3 = epoll_create(0x6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) epoll_pwait2(r3, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000100)={r4, r5+10000000}, &(0x7f00000001c0)={[0x4]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f00000002c0)={[0x3]}, &(0x7f0000000300), &(0x7f0000000380)={0x0, 0x989680}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000340), 0xfffffffffffffd77, 0x0, 0x0}) 1m20.063907579s ago: executing program 3 (id=679): r0 = socket$nl_audit(0x10, 0x3, 0x9) mkdir(0x0, 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_cmd={0x36, 0x9, 0x9, 0x6, 0x5, 0x8, 0x5f, 0x1, 0xf7, 0xd, 0x3b59, 0x7, 0x2, 0xe, 0x4, 0x9, [0x8, 0x6]}}) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="10000000eb03"], 0x10}, 0x1, 0x0, 0x0, 0x4044851}, 0x40850) 1m19.98592742s ago: executing program 3 (id=680): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4044851}, 0x40850) 1m19.35800105s ago: executing program 3 (id=683): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c000340000000000000000534000780080001"], 0x54}}, 0x40010) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4) sendfile(r1, r0, 0x0, 0x400000000003895) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c000340000000000000000534000780080001"], 0x54}}, 0x40010) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4) (async) sendfile(r1, r0, 0x0, 0x400000000003895) (async) 1m19.269148261s ago: executing program 33 (id=683): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c000340000000000000000534000780080001"], 0x54}}, 0x40010) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4) sendfile(r1, r0, 0x0, 0x400000000003895) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c000340000000000000000534000780080001"], 0x54}}, 0x40010) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4) (async) sendfile(r1, r0, 0x0, 0x400000000003895) (async) 1m17.986777311s ago: executing program 0 (id=705): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.350017922s ago: executing program 0 (id=736): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd002888100001000c081000418e00000004fcff", 0x58}], 0x1) 1m15.202909384s ago: executing program 0 (id=737): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x10}, 0x1, 0x0, 0x0, 0x4044851}, 0x40850) 1m15.157186954s ago: executing program 0 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000000)=0x100, 0x4) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x280000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x7, 0xf4a, 0x0, 0x40, 0x44150044}) accept(r0, 0x0, &(0x7f0000000180)) syz_open_dev$evdev(0x0, 0x1bbc, 0x801) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r6, 0x7706, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01030000faffffffffff3300"], 0x30}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r9, 0x10001, 0x0) 1m14.955581937s ago: executing program 0 (id=743): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040), 0x4) fadvise64(r0, 0xa, 0x400, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x7, 0x6, 0x2, 0x7}, 0x10) 1m14.824541769s ago: executing program 0 (id=745): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd001894100001000c081000418e00000004fcff", 0x58}], 0x1) 1m14.560740674s ago: executing program 34 (id=745): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd001894100001000c081000418e00000004fcff", 0x58}], 0x1) 6.856900044s ago: executing program 4 (id=1288): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x2000000) 6.295994693s ago: executing program 4 (id=1290): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) lseek(0xffffffffffffffff, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2) 6.242169453s ago: executing program 5 (id=1292): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 5.379678317s ago: executing program 5 (id=1298): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x4000000) 4.832983485s ago: executing program 4 (id=1303): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002640)="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", 0xa41}], 0x1, 0x0, 0x1220}}], 0x1, 0x85) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000003080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet6(0xa, 0x3, 0xff) close_range(r3, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x89e0, &(0x7f0000000040)) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, 0x0, &(0x7f0000000080)) 4.776251126s ago: executing program 4 (id=1304): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x0, 'veth0_vlan\x00', {0x2ff}, 0x4b5c}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd32]}, 0x8) read(r6, &(0x7f00000002c0)=""/183, 0xeb) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x80000001, 0x1) 4.039877038s ago: executing program 6 (id=1311): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2) 4.039634078s ago: executing program 6 (id=1312): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00189404fcff", 0x58}], 0x1) 3.976055058s ago: executing program 6 (id=1314): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f0000000000)=0x1, 0xa, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 3.470804706s ago: executing program 2 (id=1318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sendmmsg$inet(r1, &(0x7f0000003a40)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000080)={{0x2, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040)) syz_usb_connect$cdc_ncm(0x6, 0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="12015100020000102505a1a44000e9059e94925aa57b9b7201020301090272000201ff50010904000001020d00000724060001017e05240002000d240f0105000000ffffa5fa0a06241a0300320c241b03000600700403000a0824786117b204000905810300020307070904010000020d3af00904010102020d0000090582021000010445090503020004030703"], &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x8, 0x0, 0x8, 0xff, 0x5}, 0x7f, &(0x7f0000000280)={0x5, 0xf, 0x7f, 0x5, [@generic={0x46, 0x10, 0xb, "93857a523fdcec0d6a24ab4de233ff5e24df380449e2d9d169b1843757f5463a7535fa3f1dfbbc5a45e116ee1eea70c644af6d07f3256b345f7e3d5c18764325d1ce33"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x6, 0x78, 0x9c3, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x6, 0xe}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x7, 0xf00, 0xff, [0xff0000, 0xff0000, 0xffffc0, 0xff0030]}]}, 0x2, [{0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "a435c49b63933a5ba98c91381cacb0452d751279f47a097ec6f59b96f3a451f294995660d0327a4548e8e086699669caad828ac2d56c29722fc4b00f2a62fb254ed50424797a04f53f0c75c2200671f9fe5527528e2b8886dce1b8743874a053c5fa5cbd4786442b3a0739a7f7152e6009d61549d55fa4bdb8fd9802cdb9ebfe76f8ba9e0e284dd796d7feb050ab83c9694607d3c3c0425f9f4fd7fd476a905bdb9927af"}}, {0x74, &(0x7f0000000400)=@string={0x74, 0x3, "6c21f3dc231f144a37678238d57584e970ca7b0313d2a8e8e903c3c121e631437f16d51993ef56a9e5e815457a9ac13bee7b52738eec9e17d5caedf144d573e9302276c765255f5ffc8ef44656091d01dd233be094cb9a47c95dd87ee098cc3070810f4a027c7816a06d5b62802d44810f41"}}]}) (async) syz_usb_connect$cdc_ncm(0x6, 0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="12015100020000102505a1a44000e9059e94925aa57b9b7201020301090272000201ff50010904000001020d00000724060001017e05240002000d240f0105000000ffffa5fa0a06241a0300320c241b03000600700403000a0824786117b204000905810300020307070904010000020d3af00904010102020d0000090582021000010445090503020004030703"], &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x8, 0x0, 0x8, 0xff, 0x5}, 0x7f, &(0x7f0000000280)={0x5, 0xf, 0x7f, 0x5, [@generic={0x46, 0x10, 0xb, "93857a523fdcec0d6a24ab4de233ff5e24df380449e2d9d169b1843757f5463a7535fa3f1dfbbc5a45e116ee1eea70c644af6d07f3256b345f7e3d5c18764325d1ce33"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0x6, 0x78, 0x9c3, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x6, 0xe}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x7, 0xf00, 0xff, [0xff0000, 0xff0000, 0xffffc0, 0xff0030]}]}, 0x2, [{0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "a435c49b63933a5ba98c91381cacb0452d751279f47a097ec6f59b96f3a451f294995660d0327a4548e8e086699669caad828ac2d56c29722fc4b00f2a62fb254ed50424797a04f53f0c75c2200671f9fe5527528e2b8886dce1b8743874a053c5fa5cbd4786442b3a0739a7f7152e6009d61549d55fa4bdb8fd9802cdb9ebfe76f8ba9e0e284dd796d7feb050ab83c9694607d3c3c0425f9f4fd7fd476a905bdb9927af"}}, {0x74, &(0x7f0000000400)=@string={0x74, 0x3, "6c21f3dc231f144a37678238d57584e970ca7b0313d2a8e8e903c3c121e631437f16d51993ef56a9e5e815457a9ac13bee7b52738eec9e17d5caedf144d573e9302276c765255f5ffc8ef44656091d01dd233be094cb9a47c95dd87ee098cc3070810f4a027c7816a06d5b62802d44810f41"}}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r5, r5, &(0x7f0000000000)=0x1, 0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0xf) (async) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = socket$unix(0x1, 0x5, 0x0) r10 = dup2(r9, r8) close_range(r10, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)={0x39c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x21e3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3c331809}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8dd}]}]}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff48}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$.j$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa5aa}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '].#-/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x276f}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "50a1b6ffe0b30ae127d8e247ed7f6fabf2fca48deb2044cab624c7c3a7af412faa017d36c5bcc5a3e2dc1815cfa5"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_OURS={0x1f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "c90587959c63a2446e0a4d8ad3fcdd0f1f51fc08b269d03e36c23b20625d0d17c48ab05265476adf3ed0773f54206119f51d1f23d78873c77cbc60a8ad7eaba2436eb37b9e92a2cca61522e35b0691614fb0bf002a2dbe0a151d6c4ad23c09b200b5095b498d5767c0b917d5a36ae9ee63bae46c16227d7fac63770f5732a7ccf43375c590ba88177da9cb9955c31c537bb4c42b2f843c822997c9ccd16fdead308e3b4daf63b91a861435b91fa6f786a8ec59d3c3d3e0e4643962481ff6458c1589b4969c97c964ef5f5ab1bcd2ea96b0b66330d648b641204e91676c4f81e1b57229301a"}, @ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "14600d3e054f2017e0c58ea66a3412f7aa8f5ced709dd9b37ba6003a5f183dc813afacb4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfa}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*@$\xa5/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%(%*c:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']#\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe}]}, 0x39c}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)={0x39c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x21e3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3c331809}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8dd}]}]}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff48}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$.j$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa5aa}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '].#-/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x276f}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "50a1b6ffe0b30ae127d8e247ed7f6fabf2fca48deb2044cab624c7c3a7af412faa017d36c5bcc5a3e2dc1815cfa5"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_OURS={0x1f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "c90587959c63a2446e0a4d8ad3fcdd0f1f51fc08b269d03e36c23b20625d0d17c48ab05265476adf3ed0773f54206119f51d1f23d78873c77cbc60a8ad7eaba2436eb37b9e92a2cca61522e35b0691614fb0bf002a2dbe0a151d6c4ad23c09b200b5095b498d5767c0b917d5a36ae9ee63bae46c16227d7fac63770f5732a7ccf43375c590ba88177da9cb9955c31c537bb4c42b2f843c822997c9ccd16fdead308e3b4daf63b91a861435b91fa6f786a8ec59d3c3d3e0e4643962481ff6458c1589b4969c97c964ef5f5ab1bcd2ea96b0b66330d648b641204e91676c4f81e1b57229301a"}, @ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "14600d3e054f2017e0c58ea66a3412f7aa8f5ced709dd9b37ba6003a5f183dc813afacb4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfa}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*@$\xa5/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%(%*c:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']#\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe}]}, 0x39c}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) 3.112901892s ago: executing program 6 (id=1319): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000002, 0x810, r0, 0xadbe0000) 3.111764142s ago: executing program 6 (id=1320): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0xa, 0x0, &(0x7f00000015c0)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.110306622s ago: executing program 6 (id=1321): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r3, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0) 2.949134204s ago: executing program 2 (id=1322): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2) 2.801565016s ago: executing program 5 (id=1323): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r2, &(0x7f0000008c80)={0x1f, @none, 0x7}, 0xa) setreuid(0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@private=0xa010103, @loopback}, 0xc) 2.728090778s ago: executing program 5 (id=1324): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e003aae04fcff", 0x58}], 0x1) 2.727632608s ago: executing program 5 (id=1325): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xc4d06, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x37, 0x63, 0x35, 0x34, 0x30, 0x62, 0x39], 0x2d, [0x64, 0x31, 0x30, 0x30], 0x2d, [0x65, 0x62, 0x39, 0x30], 0x2d, [0x64, 0x63, 0x61, 0x32], 0x2d, [0x38, 0x32, 0x36, 0x33, 0x31, 0x31, 0x66, 0x30]}}}, {@fsname={'fsname', 0x3d, '-}[^)-'}}, {@uid_lt={'uid<', r0}}, {@obj_type={'obj_type', 0x3d, 'upperdir'}}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r2, &(0x7f0000000280)=""/4096, 0x1000) lseek(r1, 0x10001, 0x0) 1.797190832s ago: executing program 4 (id=1326): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) rt_sigaction(0x3e, 0x0, 0x0, 0x8, &(0x7f00000001c0)) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000a40)={0x14, &(0x7f00000009c0)={0x40, 0x24, 0x35, {0x35, 0x2, "978839a33fcbc00acff34a5f594af6f9185f4299e2e4e147f322161d2411c282a0457cceac4253bf09a344be37b133f167c46a"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c40)={0x5b, &(0x7f0000000a80)={0x40, 0x31, 0x6e, "31d4f6b32020b2927714a4222971a038d906b4b491f45af13547efdda96da0683515f8c1fd52fe62d64db35af0b120f02fa988e370d503b774c5d44b391072f6d7a45ab149b72c02517ee30c06472f1f998dd8a5a0447c92f78a581be94122662a962a056e0e89dd6bba19cb9aa4"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x8}}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000cc0)={0x20, 0x2, 0xfb, {0xfb, 0x5, "2229933907c64a93448a9ab2ced90cb7b02cdc2fa063694729b22144ca238160f75ea5f4b432b0bbf30f3639fe18a982ad0cd2e4b230685b2e73d31bfefce55ec42e9641fef401470d6ffe59a037a3f708ed682da083ebb0509f9cabee264abf6c17de4c9798ff15b4300187a71159866828d55cb9f6171b70aa8dc00c786c57413766d30a923668c5e57144eba3e0c61ad09e36ff1ed4d98cbcb8db4f94ec1a3eab235039bb1c0833f946c8595b5c2bd10d64a35473cbe0527411d0162b577841dea531e869ba1c8cab3f5ef23652a2d59c2fdbcc8141d9e0283b08d744252409459fec50abaa65ef4650236843897bd39e7476ec6a41ae73"}}, &(0x7f0000000100)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "87dfd8ab6f676f526e79c6d0e0f734336f8d89bdaa052e711f072a54d130e7c2b1006e9ca0dd519910bc2ef01b7c2704c8fd57ed0b99ed06a0ca07a6f2e01ddc99135bd958d1b26226bf95b7f36c62b255607c82b4e57122eceef4ae28a354cb4e264c68cff7f09065edbad85a648e91b21ef9c184f8454734f233087d973a1b92f99f02cd8db9560dbad59f74bf7ba85962001c8b6163834d0ba210cb2a69adf6070adccf"}}, &(0x7f0000000080)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xd, 0x800}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x3, 0xc5}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x3, 0x81, 0x1, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "29782fbc4bfd25f28969c1efdb5aee25"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x1, 0x1, 0xbd, "412ef673", "f0f1260e"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x0, 0x0, 0xfc, 0xc58, 0x5be}}}, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x20, 0x23, 0x7f, "f503280169417cb0e39e3f0671e77fbe21b23b2ea9bb72bb61061e91975d8a5664cb5b7ba0696c620da4fff5720970a935b5dcb33929784f47b29eaddcb06cec2e7e8afa7c6907967701350c78fa5e83398451c1887435500a9f4ca9b3953daf465b520a2249adf9a9161460843ddee4c16539ea9bd757067b759202512a47"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4e}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x8}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0xb, 0x2, "ff75"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x13, 0x6}, &(0x7f0000000780)={0x40, 0x17, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x19, 0xffffffd8, "23a1"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x21, 0x1}}) 1.26960802s ago: executing program 4 (id=1327): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x149) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)=0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xc01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x4) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xbc, 0x4f, 0x40, 0x2, 0x80, 0x5, 0x0, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0xfffffffffffff350}], 0x9}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x0, 0x10, 0x1, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x4}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@verity_require}]}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) 651.19169ms ago: executing program 2 (id=1328): ioctl$TCSETSF(0xffffffffffffffff, 0x5457, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "7a58bec239ed2d5a99bbc4bff0ebd318665a8a"}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xcf02, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) accept4(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0xc1800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000480), 0x4) 566.920141ms ago: executing program 2 (id=1329): sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x3, 0x4, 0x3, 0x7}, {0x81, 0x0, 0x8, 0xffffc81d}, {0xfff7, 0x3, 0xd1, 0x9}, {0x5, 0x2, 0x9, 0x4}, {0x4, 0x1, 0xf7, 0x2}, {0xe2, 0x9, 0x9, 0x4}]}) socketpair(0x6, 0x4, 0x68f, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$FITHAW(r2, 0xc0045878) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r5 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r5], 0x20}}, 0x40816) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) poll(&(0x7f0000000000)=[{r6, 0x1000}], 0x1, 0x8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$igmp6(0xa, 0x3, 0x2) r8 = accept4$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14, 0x80800) accept$packet(r8, &(0x7f0000000240), &(0x7f00000002c0)=0x14) 556.663691ms ago: executing program 2 (id=1330): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, 0x0, 0x41) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x840) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/custom1\x00', 0x1000, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x62000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000002b00)={{0x1, 0x0, 0x3, 0x3, 0xf20}, 0xa836, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x3, 0x200, 0x5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000108, 0x0, 0x3}]}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x606}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x10001, r3, 'id0\x00'}) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/10], 0xa) syz_usb_connect(0x0, 0x194, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x12, 0xf2, 0xfb, 0x0, 0x19d2, 0x86, 0xce6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x182, 0x1, 0x4, 0xf, 0x0, 0x81, [{{0x9, 0x4, 0x49, 0xff, 0x2, 0x1, 0xab, 0x8c, 0xa, [@generic={0x9e, 0xa, "e24e8d420757792530019c8ce5196b662755013f42c91d7e546d779ebafe8e93d72ce469ee76ed07102288003cdb529bff3b589615c663247cfe4864c779eab6a03413a2a5d023ee0605e843b4fac327caab9b7bb101b5fe66312b7689afab6a0817cdefc06a547194a6ffc9eba6ba52012d92d8a78e4b487e98328ad6449324c31af0c27e267281286e571045fd8f3cabcdda3eac3f034d8b20d5db"}], [{{0x9, 0x5, 0x4, 0x23191632da291aa7, 0x40, 0x6, 0x0, 0x10, [@generic={0xc0, 0x30, "28661a7f7aa10f6fb4372dc50bd417886d8eed8b88bfe6a3677bf5f97b3ce59398498d618e5bda02dc23a512eba1b10a8e33f7c7deb55b281659f8979ac95e6a9cc95ccc13de5813558f788d24987490a8617c9ad413fc47e2b5ddd40c356fc25709b2a07535b39ecd08a6097c7854522fb83bd08a379c304c1c9774bdbc05d82e08654f550b0dc1b6d5c9b48cf271a6603e69b7d0e26a81a035430eb4e77ed89759707d9be635028f10d17198af1db0e68bd62b42101f7f5a96836a4136"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0xe8, 0x9, 0x3d}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5, 0x8, 0x4, 0x20, 0xcf}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x3a, 0x4}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x455}}, {0xf6, &(0x7f0000000340)=ANY=[@ANYBLOB="f603932f9149ba50809e0ad693ac8c0ed48a639f52d530c6d90daa5c084943bb39f548070e227b5611a2af3f6e96d9d20e4b7585ee08ee842761ce2e3714d86a7b00284e9d44ba24bb4a23d5145d73a856748cf35579ac0f08d0ab6aa934553742d1985285a13d0f43db54140af33bb40786c886d5bf33a246c130f6136c1d2c1a5d791a0fd3d9d79b399a193aa32ecbd0002b86499450794d19492042075ad35ebcdc355d63f1384284e5a2d3963ce947dd4ba1404bd4ba53839fc642489a8d5175db38ac338ea3fdb7a9f27b110c92ccb33b9fda05e2efa589d117ff6aaf1bb776f6cb6eca5815bf92a10b25c58b7e059aab671e00"]}, {0x2b, &(0x7f0000000440)=@string={0x2b, 0x3, "11e8ad952c7c56dbed0b03cd327ed74d653749697849be3b82895e7c82a12ef44405afa25be3acfbb6"}}, {0x77, &(0x7f0000000480)=ANY=[@ANYBLOB="7703d1bbe665d0943179d8e227dd378896d68c44beae22cd06971a208d0e5c97db0fb08fcd63f63c0ee2358d48864aa5fdd8f18118ba42163dfde3aca3d7e6850792c08d4ecedd9bf6bd216b9adb56b9ac286083b4422b1e3c167d20b03d1ad42d3df521fb002792e8dc66dd8b7a3400000008"]}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000005c0), 0x10400, 0x0) 194.315927ms ago: executing program 5 (id=1331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x11000000) 0s ago: executing program 2 (id=1332): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4005840}, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}, {@metacopy_on}, {@uuid_on}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o\b', 0x2}], 0x1}}], 0x1, 0x2400c040) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x5, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): xpacket 0 [ 37.109512][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.118639][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.126649][ T9] usb 2-1: SerialNumber: syz [ 37.132170][ T604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 37.343696][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 37.361472][ T9] usb 2-1: USB disconnect, device number 6 [ 37.525171][ T636] fuse: Unknown parameter 'user_i00000000000000000000' [ 37.783314][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.815264][ T659] fuse: Unknown parameter 'user_i00000000000000000000' [ 37.836617][ T661] FAT-fs (rnullb0): bogus number of reserved sectors [ 37.843402][ T661] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 37.923123][ T9] usb 4-1: device descriptor read/64, error -71 [ 37.951496][ T666] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 38.013126][ T668] syz.1.143 uses obsolete (PF_INET,SOCK_PACKET) [ 38.183081][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.296354][ T684] fuse: Unknown parameter 'user_i00000000000000000000' [ 38.423084][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.553105][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.725411][ T706] fuse: Unknown parameter 'user_id00000000000000000000' [ 38.793091][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.823193][ T720] rust_binder: Error while translating object. [ 38.823260][ T720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.833112][ T720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 38.857752][ T722] binder: Bad value for 'max' [ 38.891108][ T725] tipc: Started in network mode [ 38.896145][ T725] tipc: Node identity ac14140f, cluster identity 4711 [ 38.904037][ T725] tipc: New replicast peer: 255.255.255.255 [ 38.910272][ T725] tipc: Enabled bearer , priority 10 [ 38.913243][ T9] usb usb4-port1: attempt power cycle [ 38.922920][ T305] bridge_slave_1: left allmulticast mode [ 38.934253][ T305] bridge_slave_1: left promiscuous mode [ 38.939905][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.940339][ T729] fuse: Unknown parameter 'user_id00000000000000000000' [ 38.964017][ T305] bridge_slave_0: left allmulticast mode [ 38.969693][ T305] bridge_slave_0: left promiscuous mode [ 38.983261][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.088320][ T305] veth1_macvtap: left promiscuous mode [ 39.093937][ T305] veth0_vlan: left promiscuous mode [ 39.206067][ T746] IPv6: NLM_F_CREATE should be specified when creating new route [ 39.225581][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.232632][ T737] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.240172][ T737] bridge_slave_0: entered allmulticast mode [ 39.246961][ T737] bridge_slave_0: entered promiscuous mode [ 39.253693][ T737] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.260833][ T737] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.268288][ T737] bridge_slave_1: entered allmulticast mode [ 39.276559][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 39.285249][ T737] bridge_slave_1: entered promiscuous mode [ 39.304410][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.307383][ T755] fuse: Unknown parameter 'user_id00000000000000000000' [ 39.367935][ T737] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.375049][ T737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.382359][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.389441][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.419094][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.432461][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.447123][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.464217][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.471319][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.479719][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.486863][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.530209][ T737] veth0_vlan: entered promiscuous mode [ 39.550945][ T777] fuse: Bad value for 'fd' [ 39.552112][ T737] veth1_macvtap: entered promiscuous mode [ 39.573398][ T779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 39.697277][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 39.697295][ T36] audit: type=1400 audit(1752856509.070:273): avc: denied { write } for pid=799 comm="syz.0.195" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.704859][ T803] fuse: Bad value for 'fd' [ 39.729332][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 39.754151][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.760588][ T807] fuseblk: Unknown parameter 'rootmodŽWl3’e' [ 39.772587][ T36] audit: type=1400 audit(1752856509.140:274): avc: denied { name_bind } for pid=810 comm="syz.1.199" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.884158][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.916399][ T36] audit: type=1400 audit(1752856509.290:275): avc: denied { map } for pid=830 comm="syz.1.205" path="socket:[6412]" dev="sockfs" ino=6412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.939629][ T36] audit: type=1400 audit(1752856509.290:276): avc: denied { read } for pid=830 comm="syz.1.205" path="socket:[6412]" dev="sockfs" ino=6412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.993265][ T9] usb usb4-port1: unable to enumerate USB device [ 39.999008][ T835] fuse: Bad value for 'fd' [ 40.033149][ T494] tipc: Node number set to 2886997007 [ 40.135000][ T36] audit: type=1400 audit(1752856509.510:277): avc: denied { read write } for pid=851 comm="syz.0.214" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.159791][ T36] audit: type=1400 audit(1752856509.510:278): avc: denied { open } for pid=851 comm="syz.0.214" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.183001][ T36] audit: type=1400 audit(1752856509.530:279): avc: denied { ioctl } for pid=851 comm="syz.0.214" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.217561][ T36] audit: type=1400 audit(1752856509.590:280): avc: denied { getopt } for pid=836 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.282978][ T36] audit: type=1400 audit(1752856509.650:281): avc: denied { accept } for pid=857 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.303778][ T858] overlay: ./file0 is not a directory [ 40.327841][ T860] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 40.333357][ T862] fuse: Unknown parameter '0x0000000000000004' [ 40.605619][ T36] audit: type=1400 audit(1752856509.980:282): avc: denied { ioctl } for pid=880 comm="syz.0.225" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.639404][ T883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 40.648300][ T883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 40.657250][ T883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 40.667620][ T883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 40.695334][ T886] fuse: Unknown parameter '0x0000000000000004' [ 40.789508][ T879] binder: Unknown parameter '/dev/input/event#' [ 40.931587][ T908] fuse: Unknown parameter '0x0000000000000004' [ 41.418701][ T936] fuse: Unknown parameter '0x0000000000000004' [ 41.892331][ T967] fuse: Unknown parameter '0x0000000000000004' [ 41.996625][ T986] fuse: Unknown parameter '0x0000000000000004' [ 42.039531][ T988] capability: warning: `syz.1.268' uses deprecated v2 capabilities in a way that may be insecure [ 42.050688][ T990] netlink: 'syz.0.269': attribute type 16 has an invalid length. [ 42.134786][ T1020] fuse: Unknown parameter 'fd0x0000000000000004' [ 42.160031][ T1022] mmap: syz.0.281 (1022) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.530862][ T1052] fuse: Unknown parameter 'fd0x0000000000000004' [ 42.614720][ T1058] /dev/nullb0: Can't lookup blockdev [ 42.621223][ T1058] binder: Bad value for 'stats' [ 42.646883][ T1060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.661914][ T1060] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 42.724834][ T1066] input: syz1 as /devices/virtual/input/input5 [ 43.068830][ T355] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.083488][ T355] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.133095][ T344] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.208809][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.294295][ T344] usb 1-1: config 33 has an invalid interface number: 131 but max is 0 [ 43.302620][ T344] usb 1-1: config 33 has no interface number 0 [ 43.308871][ T344] usb 1-1: config 33 interface 131 has no altsetting 0 [ 43.317268][ T344] usb 1-1: New USB device found, idVendor=1435, idProduct=0711, bcdDevice=6d.89 [ 43.326370][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.334385][ T344] usb 1-1: Product: syz [ 43.338541][ T344] usb 1-1: Manufacturer: syz [ 43.343169][ T344] usb 1-1: SerialNumber: syz [ 43.553223][ T344] usb 1-1: bad CDC descriptors [ 43.561756][ T344] usb 1-1: USB disconnect, device number 5 [ 43.660004][ T1134] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 43.687746][ T1138] netlink: 'syz.2.327': attribute type 13 has an invalid length. [ 44.253256][ T1153] 9pnet: p9_errstr2errno: server reported unknown error O»Ü‰›Xò۵רѳlú¶uË9vî [ 44.295210][ T1153] netlink: 1536 bytes leftover after parsing attributes in process `syz.2.332'. [ 44.887172][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 44.887190][ T36] audit: type=1400 audit(1752856514.260:324): avc: denied { ioctl } for pid=1162 comm="syz.1.336" path="socket:[7502]" dev="sockfs" ino=7502 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.932943][ T36] audit: type=1400 audit(1752856514.300:325): avc: denied { sqpoll } for pid=1166 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.962597][ T36] audit: type=1400 audit(1752856514.330:326): avc: denied { getopt } for pid=1172 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.967740][ T1173] netlink: 116 bytes leftover after parsing attributes in process `syz.0.338'. [ 44.982485][ T36] audit: type=1400 audit(1752856514.330:327): avc: denied { bind } for pid=1172 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.011435][ T36] audit: type=1400 audit(1752856514.340:328): avc: denied { nlmsg_read } for pid=1172 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.031860][ T36] audit: type=1400 audit(1752856514.370:329): avc: denied { write } for pid=1172 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.273197][ T318] Bluetooth: hci0: command 0x1003 tx timeout [ 45.273258][ T319] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.898779][ T36] audit: type=1400 audit(1752856515.270:330): avc: denied { getopt } for pid=1174 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.211206][ T1115] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 46.246619][ T1181] netlink: 3 bytes leftover after parsing attributes in process `syz.3.341'. [ 46.255818][ T1181] netlink: 3 bytes leftover after parsing attributes in process `syz.3.341'. [ 46.264848][ T1181] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 46.306082][ T36] audit: type=1400 audit(1752856515.680:331): avc: denied { append } for pid=1184 comm="syz.3.343" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.306604][ T1185] __vm_enough_memory: pid: 1185, comm: syz.3.343, bytes: 1152922604118523904 not enough memory for the allocation [ 46.354361][ T36] audit: type=1400 audit(1752856515.730:332): avc: denied { bind } for pid=1189 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.374135][ T36] audit: type=1400 audit(1752856515.730:333): avc: denied { read } for pid=1189 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.753088][ T355] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 47.904159][ T355] usb 1-1: config 33 has an invalid interface number: 131 but max is 0 [ 47.923209][ T355] usb 1-1: config 33 has no interface number 0 [ 47.929430][ T355] usb 1-1: config 33 interface 131 has no altsetting 0 [ 47.953934][ T355] usb 1-1: New USB device found, idVendor=1435, idProduct=0711, bcdDevice=6d.89 [ 47.963072][ T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.971096][ T355] usb 1-1: Product: syz [ 47.983076][ T355] usb 1-1: Manufacturer: syz [ 47.987724][ T355] usb 1-1: SerialNumber: syz [ 48.382753][ T1257] netlink: 'syz.2.368': attribute type 63 has an invalid length. [ 48.390966][ T1257] netlink: 5 bytes leftover after parsing attributes in process `syz.2.368'. [ 48.400016][ T1257] gretap0: entered allmulticast mode [ 48.401973][ T355] usb 1-1: bad CDC descriptors [ 48.406991][ T1257] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 48.412794][ T355] usb 1-1: USB disconnect, device number 6 [ 48.467012][ T1263] overlayfs: failed to clone upperpath [ 48.555891][ T1275] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 48.563008][ T1275] overlayfs: failed to set xattr on upper [ 48.569082][ T1275] overlayfs: ...falling back to redirect_dir=nofollow. [ 48.577130][ T1275] overlayfs: ...falling back to metacopy=off. [ 48.583319][ T1275] overlayfs: ...falling back to uuid=null. [ 48.589469][ T1275] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 48.704903][ T1299] netlink: 4112 bytes leftover after parsing attributes in process `syz.1.385'. [ 48.973097][ T1305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 49.008838][ T1310] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 49.310685][ T1329] 9pnet: p9_errstr2errno: server reported unknown error [ 49.333343][ T510] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.453103][ T500] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 49.484191][ T510] usb 1-1: config index 0 descriptor too short (expected 53540, got 36) [ 49.503134][ T510] usb 1-1: config 237 has too many interfaces: 97, using maximum allowed: 32 [ 49.512016][ T510] usb 1-1: config 237 has an invalid descriptor of length 199, skipping remainder of the config [ 49.528820][ T510] usb 1-1: config 237 has 0 interfaces, different from the descriptor's value: 97 [ 49.538305][ T510] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 49.548654][ T510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.603115][ T500] usb 4-1: Using ep0 maxpacket: 32 [ 49.610030][ T500] usb 4-1: config 1 interface 0 altsetting 47 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.621046][ T500] usb 4-1: config 1 interface 0 has no altsetting 0 [ 49.628051][ T500] usb 4-1: string descriptor 0 read error: -22 [ 49.634421][ T500] usb 4-1: New USB device found, idVendor=045e, idProduct=00db, bcdDevice= 0.40 [ 49.643545][ T500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.966688][ T510] usb 1-1: string descriptor 0 read error: -71 [ 49.973654][ T510] usb 1-1: USB disconnect, device number 7 [ 50.435739][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 50.435757][ T36] audit: type=1400 audit(1752856519.810:345): avc: denied { map } for pid=1373 comm="syz.2.416" path="socket:[8071]" dev="sockfs" ino=8071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 50.485838][ T36] audit: type=1400 audit(1752856519.860:346): avc: denied { lock } for pid=1373 comm="syz.2.416" path="socket:[8074]" dev="sockfs" ino=8074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 50.566685][ T1388] 9pnet_fd: Insufficient options for proto=fd [ 51.508360][ T1435] cgroup: No subsys list or none specified [ 51.508483][ T1434] netlink: 'syz.0.437': attribute type 32 has an invalid length. [ 51.524522][ T1434] netlink: 'syz.0.437': attribute type 30 has an invalid length. [ 51.534184][ T36] audit: type=1400 audit(1752856520.910:347): avc: denied { ioctl } for pid=1432 comm="syz.0.437" path="socket:[8148]" dev="sockfs" ino=8148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.773115][ T344] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 51.924107][ T344] usb 1-1: config 0 has an invalid interface number: 144 but max is 0 [ 51.932387][ T344] usb 1-1: config 0 has no interface number 0 [ 51.939959][ T344] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9e.0a [ 51.949172][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.957244][ T344] usb 1-1: Product: syz [ 51.961654][ T344] usb 1-1: Manufacturer: syz [ 51.966275][ T344] usb 1-1: SerialNumber: syz [ 51.972230][ T344] usb 1-1: config 0 descriptor?? [ 51.978442][ T344] usb_ehset_test 1-1:0.144: probe with driver usb_ehset_test failed with error -32 [ 52.155074][ T500] usbhid 4-1:1.0: can't add hid device: -71 [ 52.167127][ T500] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 52.175929][ T500] usb 4-1: USB disconnect, device number 12 [ 52.215398][ T344] usb 1-1: USB disconnect, device number 8 [ 52.692662][ T1454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 52.883346][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.889766][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.896327][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.263114][ T355] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.414158][ T355] usb 4-1: config 33 has an invalid interface number: 131 but max is 0 [ 53.422583][ T355] usb 4-1: config 33 has no interface number 0 [ 53.428822][ T355] usb 4-1: config 33 interface 131 has no altsetting 0 [ 53.437244][ T355] usb 4-1: New USB device found, idVendor=1435, idProduct=0711, bcdDevice=6d.89 [ 53.446362][ T355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.454385][ T355] usb 4-1: Product: syz [ 53.458547][ T355] usb 4-1: Manufacturer: syz [ 53.463155][ T355] usb 4-1: SerialNumber: syz [ 53.670496][ T355] usb 4-1: bad CDC descriptors [ 53.678233][ T355] usb 4-1: USB disconnect, device number 13 [ 54.403060][ T36] audit: type=1400 audit(1752856523.770:348): avc: denied { nlmsg_write } for pid=1501 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 54.429934][ T36] audit: type=1400 audit(1752856523.800:349): avc: denied { validate_trans } for pid=1501 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.673211][ T344] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 54.824235][ T344] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.834455][ T344] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.848289][ T344] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.857369][ T344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 54.865387][ T344] usb 4-1: SerialNumber: syz [ 54.871508][ T344] usb 4-1: bad CDC descriptors [ 54.953231][ T319] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.953271][ T318] Bluetooth: hci0: command 0x1003 tx timeout [ 55.078909][ T31] usb 4-1: USB disconnect, device number 14 [ 55.173906][ T1528] overlayfs: failed to clone upperpath [ 55.193335][ T1532] bridge0: port 3(veth1_macvtap) entered blocking state [ 55.200335][ T1532] bridge0: port 3(veth1_macvtap) entered disabled state [ 55.207410][ T1532] veth1_macvtap: entered allmulticast mode [ 55.213694][ T1532] veth1_macvtap: left allmulticast mode [ 55.413186][ T510] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 55.564185][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.575254][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 55.586026][ T510] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.588154][ T36] audit: type=1400 audit(1752856524.960:350): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.599508][ T510] usb 1-1: New USB device found, idVendor=056a, idProduct=1494, bcdDevice= 0.00 [ 55.628459][ T510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.637635][ T510] usb 1-1: config 0 descriptor?? [ 55.642958][ T1530] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 55.893102][ T500] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 56.044195][ T500] usb 4-1: config 33 has an invalid interface number: 131 but max is 0 [ 56.052596][ T500] usb 4-1: config 33 has an invalid descriptor of length 209, skipping remainder of the config [ 56.063175][ T500] usb 4-1: config 33 has no interface number 0 [ 56.065437][ T510] wacom 0003:056A:1494.0003: unknown main item tag 0x0 [ 56.069371][ T500] usb 4-1: config 33 interface 131 has no altsetting 0 [ 56.077476][ T510] wacom 0003:056A:1494.0003: Unknown device_type for 'HID 056a:1494'. Ignoring. [ 56.086622][ T500] usb 4-1: New USB device found, idVendor=1435, idProduct=0711, bcdDevice=6d.89 [ 56.101232][ T500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.109267][ T500] usb 4-1: Product: syz [ 56.114446][ T500] usb 4-1: Manufacturer: syz [ 56.119056][ T500] usb 4-1: SerialNumber: syz [ 56.281395][ T344] usb 1-1: USB disconnect, device number 9 [ 56.327502][ T500] usb 4-1: bad CDC descriptors [ 56.334859][ T500] usb 4-1: USB disconnect, device number 15 [ 56.913597][ T36] audit: type=1400 audit(1752856526.290:351): avc: denied { ioctl } for pid=1570 comm="syz.2.494" path="socket:[8697]" dev="sockfs" ino=8697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.253085][ T500] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 57.403086][ T500] usb 4-1: Using ep0 maxpacket: 32 [ 57.409307][ T500] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 57.417831][ T500] usb 4-1: config 0 has no interface number 0 [ 57.425244][ T500] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 57.434317][ T500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.442310][ T500] usb 4-1: Product: syz [ 57.446583][ T500] usb 4-1: Manufacturer: syz [ 57.451194][ T500] usb 4-1: SerialNumber: syz [ 57.456646][ T500] usb 4-1: config 0 descriptor?? [ 57.462686][ T500] smsc95xx v2.0.0 [ 57.468669][ T1580] 9pnet_fd: Insufficient options for proto=fd [ 57.499315][ T1584] overlayfs: failed to clone upperpath [ 57.632910][ T36] audit: type=1326 audit(1752856527.000:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956798e9a9 code=0x7fc00000 [ 57.666952][ T1592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.866205][ T500] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 57.883372][ T500] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 58.216198][ T1606] bridge0: port 3(veth0_to_bridge) entered blocking state [ 58.223398][ T1606] bridge0: port 3(veth0_to_bridge) entered disabled state [ 58.230636][ T1606] veth0_to_bridge: entered allmulticast mode [ 58.237123][ T1606] veth0_to_bridge: entered promiscuous mode [ 58.243196][ T1606] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.255518][ T1606] bridge0: port 3(veth0_to_bridge) entered blocking state [ 58.262645][ T1606] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 58.298860][ T36] audit: type=1400 audit(1752856527.670:353): avc: denied { wake_alarm } for pid=1609 comm="syz.2.508" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.473347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.485476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.497705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.509739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.521877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.533902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.545979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.558002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.570248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.582260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.596076][ T500] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 58.609262][ T500] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 58.630066][ T500] usb 4-1: USB disconnect, device number 16 [ 58.646482][ T1623] rust_binder: 1623: no such ref 4294967295 [ 58.652459][ T1623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:205 [ 58.711648][ T1624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.937728][ T1629] overlayfs: failed to clone upperpath [ 58.966444][ T1631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.517'. [ 59.136724][ T36] audit: type=1400 audit(1752856528.510:354): avc: denied { setopt } for pid=1644 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.179745][ T36] audit: type=1400 audit(1752856528.530:355): avc: denied { read write } for pid=1644 comm="syz.3.524" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.205022][ T36] audit: type=1400 audit(1752856528.530:356): avc: denied { open } for pid=1644 comm="syz.3.524" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.543134][ T344] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 59.571996][ T36] audit: type=1400 audit(1752856528.940:357): avc: denied { mount } for pid=1648 comm="syz.0.526" name="/" dev="configfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.601762][ T36] audit: type=1400 audit(1752856528.970:358): avc: denied { setcurrent } for pid=1648 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.621792][ T36] audit: type=1401 audit(1752856528.970:359): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 59.713783][ T1654] netlink: 5 bytes leftover after parsing attributes in process `syz.2.528'. [ 59.743067][ T344] usb 4-1: Using ep0 maxpacket: 32 [ 59.749299][ T344] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 59.758389][ T344] usb 4-1: config 0 has no interface number 0 [ 59.774060][ T344] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 59.801779][ T344] usb 4-1: config 0 interface 196 has no altsetting 0 [ 59.810339][ T344] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 59.819628][ T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.827812][ T344] usb 4-1: Product: syz [ 59.832037][ T344] usb 4-1: Manufacturer: syz [ 59.836858][ T344] usb 4-1: SerialNumber: syz [ 59.847542][ T344] usb 4-1: config 0 descriptor?? [ 59.852916][ T1647] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.127150][ T1671] overlayfs: failed to clone upperpath [ 60.233112][ T500] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 60.383093][ T500] usb 1-1: Using ep0 maxpacket: 32 [ 60.389841][ T500] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 60.398337][ T500] usb 1-1: config 0 has no interface number 0 [ 60.406109][ T500] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 60.415450][ T500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.423633][ T500] usb 1-1: Product: syz [ 60.427927][ T500] usb 1-1: Manufacturer: syz [ 60.432584][ T500] usb 1-1: SerialNumber: syz [ 60.442950][ T500] usb 1-1: config 0 descriptor?? [ 60.450317][ T500] smsc95xx v2.0.0 [ 60.462197][ T344] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 60.472899][ T344] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 60.641804][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 60.641822][ T36] audit: type=1400 audit(1752856530.010:372): avc: denied { write } for pid=1673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.704292][ T36] audit: type=1400 audit(1752856530.010:373): avc: denied { add_name } for pid=1673 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.733279][ T36] audit: type=1400 audit(1752856530.010:374): avc: denied { create } for pid=1673 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.756899][ T36] audit: type=1400 audit(1752856530.010:375): avc: denied { write } for pid=1673 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.783780][ T36] audit: type=1400 audit(1752856530.010:376): avc: denied { append } for pid=1673 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.808380][ T36] audit: type=1400 audit(1752856530.060:377): avc: denied { remove_name } for pid=1684 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.832210][ T36] audit: type=1400 audit(1752856530.060:378): avc: denied { unlink } for pid=1684 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.862891][ T500] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 60.893073][ T500] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 61.073352][ T31] usb 4-1: USB disconnect, device number 17 [ 61.153386][ T31] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 61.518553][ T500] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 61.531715][ T500] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 61.576556][ T500] usb 1-1: USB disconnect, device number 10 [ 62.162525][ T36] audit: type=1400 audit(1752856531.530:379): avc: denied { ioctl } for pid=1726 comm="syz.0.547" path="socket:[9966]" dev="sockfs" ino=9966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.191415][ T500] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 62.353112][ T500] usb 4-1: device descriptor read/64, error -71 [ 62.603082][ T500] usb 4-1: device descriptor read/64, error -71 [ 62.773078][ T344] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 62.863862][ T500] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 62.944392][ T344] usb 1-1: unable to get BOS descriptor or descriptor too short [ 62.953756][ T344] usb 1-1: config 1 interface 1 has no altsetting 0 [ 62.961748][ T344] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.970910][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.989096][ T344] usb 1-1: Product: syz [ 62.993751][ T344] usb 1-1: Manufacturer: syz [ 62.998366][ T344] usb 1-1: SerialNumber: syz [ 63.013549][ T500] usb 4-1: device descriptor read/64, error -71 [ 63.243692][ T1730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.252299][ T1730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.263089][ T500] usb 4-1: device descriptor read/64, error -71 [ 63.323864][ T1730] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 63.342031][ T1730] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 63.360955][ T1730] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 63.383188][ T500] usb usb4-port1: attempt power cycle [ 63.389301][ T1730] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 63.418851][ T1732] netlink: 'syz.0.548': attribute type 4 has an invalid length. [ 63.444146][ T1732] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.548'. [ 63.483077][ C0] net_ratelimit: 97829 callbacks suppressed [ 63.483094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.493854][ T344] usb 1-1: found format II with max.bitrate = 2418, frame size=7 [ 63.501153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.520826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.523073][ T344] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 63.532891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.550926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.563015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.569262][ T344] usb 1-1: USB disconnect, device number 11 [ 63.575076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.593045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.605077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.617166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.753145][ T500] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 63.794189][ T500] usb 4-1: device descriptor read/8, error -71 [ 63.924400][ T500] usb 4-1: device descriptor read/8, error -71 [ 64.173075][ T500] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 64.226854][ T500] usb 4-1: device descriptor read/8, error -71 [ 64.374067][ T500] usb 4-1: device descriptor read/8, error -71 [ 64.484153][ T500] usb usb4-port1: unable to enumerate USB device [ 64.603071][ T344] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 64.774105][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.793059][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.813590][ T344] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 64.822658][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.853159][ T344] usb 1-1: config 0 descriptor?? [ 64.871229][ T344] hub 1-1:0.0: USB hub found [ 65.046755][ T36] audit: type=1400 audit(1752856534.420:380): avc: denied { remount } for pid=1752 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.073591][ T344] hub 1-1:0.0: 1 port detected [ 65.383074][ T500] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 65.533114][ T500] usb 4-1: Using ep0 maxpacket: 32 [ 65.543778][ T500] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 65.551877][ T500] usb 4-1: config 0 has no interface number 0 [ 65.562378][ T500] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 65.571947][ T500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.580108][ T500] usb 4-1: Product: syz [ 65.584551][ T500] usb 4-1: Manufacturer: syz [ 65.589181][ T500] usb 4-1: SerialNumber: syz [ 65.599155][ T500] usb 4-1: config 0 descriptor?? [ 65.606967][ T500] smsc95xx v2.0.0 [ 65.680951][ T45] usb 1-1: USB disconnect, device number 12 [ 65.686950][ T344] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 65.744468][ T36] audit: type=1400 audit(1752856535.120:381): avc: denied { create } for pid=1768 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.007782][ T500] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 66.018609][ T500] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 66.293584][ T1778] overlayfs: failed to clone upperpath [ 66.635997][ T500] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 66.648364][ T500] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 66.673347][ T500] usb 4-1: USB disconnect, device number 22 [ 66.962821][ T1789] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.969954][ T1789] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.977364][ T1789] bridge_slave_0: entered allmulticast mode [ 66.983879][ T1789] bridge_slave_0: entered promiscuous mode [ 66.990456][ T1789] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.997721][ T1789] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.006729][ T1789] bridge_slave_1: entered allmulticast mode [ 67.013725][ T1789] bridge_slave_1: entered promiscuous mode [ 67.023785][ T36] audit: type=1400 audit(1752856536.400:382): avc: denied { unmount } for pid=737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.273351][ T1816] syz.0.577: attempt to access beyond end of device [ 67.273351][ T1816] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 67.312293][ T1816] FAT-fs (loop0): unable to read boot sector [ 67.327828][ T1789] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.335078][ T1789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.342378][ T1789] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.349699][ T1789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.398887][ T1818] fuse: Unknown parameter '' [ 67.457732][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.469595][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.491921][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.499011][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.530876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.537968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.582805][ T1789] veth0_vlan: entered promiscuous mode [ 67.598435][ T1789] veth1_macvtap: entered promiscuous mode [ 67.604302][ T500] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 67.633681][ T36] audit: type=1400 audit(1752856537.000:383): avc: denied { mount } for pid=1789 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.753206][ T500] usb 1-1: device descriptor read/64, error -71 [ 67.814445][ T1825] __vm_enough_memory: pid: 1825, comm: syz.4.581, bytes: 1152922604118523904 not enough memory for the allocation [ 67.918174][ T1834] rust_binder: Error while translating object. [ 67.918226][ T1834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.929966][ T1834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 67.993263][ T500] usb 1-1: device descriptor read/64, error -71 [ 68.233864][ T344] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.263825][ T500] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 68.393557][ T344] usb 5-1: Using ep0 maxpacket: 32 [ 68.400006][ T344] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 68.408518][ T500] usb 1-1: device descriptor read/64, error -71 [ 68.415046][ T344] usb 5-1: config 0 has no interface number 0 [ 68.422916][ T344] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 68.432233][ T344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.440424][ T344] usb 5-1: Product: syz [ 68.447072][ T344] usb 5-1: Manufacturer: syz [ 68.451735][ T344] usb 5-1: SerialNumber: syz [ 68.461466][ T344] usb 5-1: config 0 descriptor?? [ 68.468891][ T344] smsc95xx v2.0.0 [ 68.493097][ C0] net_ratelimit: 97846 callbacks suppressed [ 68.493120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.511211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.523234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.535361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.547430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.559623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.571676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.584485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.596507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.608575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.663070][ T500] usb 1-1: device descriptor read/64, error -71 [ 68.773243][ T500] usb usb1-port1: attempt power cycle [ 68.872426][ T344] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 68.884942][ T344] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 69.133072][ T500] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 69.174167][ T500] usb 1-1: device descriptor read/8, error -71 [ 69.314210][ T500] usb 1-1: device descriptor read/8, error -71 [ 69.440602][ T1851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 69.573078][ T500] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 69.615750][ T500] usb 1-1: device descriptor read/8, error -71 [ 69.700349][ T344] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 69.716735][ T1862] netlink: 'syz.3.593': attribute type 4 has an invalid length. [ 69.724592][ T344] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 69.740582][ T344] usb 5-1: USB disconnect, device number 2 [ 69.764167][ T500] usb 1-1: device descriptor read/8, error -71 [ 69.883924][ T500] usb usb1-port1: unable to enumerate USB device [ 70.293680][ T1868] fuse: Unknown parameter 'fdŸ0x0000000000000009' [ 70.300680][ T36] audit: type=1400 audit(1752856539.670:384): avc: denied { ioctl } for pid=1865 comm="syz.0.595" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 70.490415][ T1870] netlink: 316 bytes leftover after parsing attributes in process `syz.0.596'. [ 70.513514][ T1870] netlink: 316 bytes leftover after parsing attributes in process `syz.0.596'. [ 70.590529][ T1873] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.591011][ T1873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 70.640543][ T1877] /dev/rnullb0: Can't open blockdev [ 70.679806][ T1879] netlink: 'syz.3.600': attribute type 13 has an invalid length. [ 70.740431][ T1882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1882 comm=syz.4.601 [ 70.780729][ T1884] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1884 comm=syz.4.602 [ 71.073109][ T500] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.144531][ T36] audit: type=1400 audit(1752856540.520:385): avc: denied { bind } for pid=1895 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.197537][ T1898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 71.243923][ T1902] netlink: 'syz.3.608': attribute type 29 has an invalid length. [ 71.260907][ T500] usb 5-1: Using ep0 maxpacket: 32 [ 71.268507][ T500] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 71.277941][ T500] usb 5-1: config 0 has no interface number 0 [ 71.291772][ T500] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 71.305017][ T500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.313305][ T500] usb 5-1: Product: syz [ 71.323289][ T500] usb 5-1: Manufacturer: syz [ 71.333449][ T500] usb 5-1: SerialNumber: syz [ 71.346014][ T500] usb 5-1: config 0 descriptor?? [ 71.355904][ T500] smsc95xx v2.0.0 [ 71.396791][ T1905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1905 comm=syz.0.610 [ 71.475153][ T36] audit: type=1400 audit(1752856540.850:386): avc: denied { bind } for pid=1910 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.756966][ T500] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 71.779387][ T500] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 71.920808][ T1936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.923329][ T1936] netlink: 316 bytes leftover after parsing attributes in process `syz.0.623'. [ 71.976140][ T1936] netlink: 316 bytes leftover after parsing attributes in process `syz.0.623'. [ 71.996947][ T36] audit: type=1326 audit(1752856541.370:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1941 comm="syz.3.625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7958e9a9 code=0x0 [ 72.025002][ T1936] rust_binder: Error while translating object. [ 72.025056][ T1936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.038457][ T1936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 72.111974][ T36] audit: type=1400 audit(1752856541.480:388): avc: denied { connect } for pid=1945 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.241822][ T1958] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=235 sclass=netlink_audit_socket pid=1958 comm=syz.0.629 [ 72.634324][ T500] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 72.645217][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 72.656339][ T500] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 72.671909][ T500] usb 5-1: USB disconnect, device number 3 [ 72.813075][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 72.819399][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 72.842651][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 72.859085][ T36] audit: type=1400 audit(1752856542.220:389): avc: denied { setopt } for pid=1967 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.879495][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 72.890386][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.912978][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.921090][ T1968] netlink: 9 bytes leftover after parsing attributes in process `syz.2.635'. [ 72.931525][ T45] usb 1-1: SerialNumber: syz [ 72.937421][ T1968] gretap0: entered promiscuous mode [ 72.943192][ T1966] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.952599][ T1968] gretap0: left allmulticast mode [ 72.984595][ T1968] netlink: 5 bytes leftover after parsing attributes in process `syz.2.635'. [ 72.993599][ T1968] 0ªî{X¹¦: renamed from gretap0 [ 73.000273][ T1968] 0ªî{X¹¦: left promiscuous mode [ 73.005584][ T1968] 0ªî{X¹¦: entered allmulticast mode [ 73.172265][ T45] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 73.200767][ T45] usb 1-1: USB disconnect, device number 17 [ 73.273423][ T1975] ======================================================= [ 73.273423][ T1975] WARNING: The mand mount option has been deprecated and [ 73.273423][ T1975] and is ignored by this kernel. Remove the mand [ 73.273423][ T1975] option from the mount to silence this warning. [ 73.273423][ T1975] ======================================================= [ 73.311991][ T1975] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 73.503047][ C0] net_ratelimit: 99615 callbacks suppressed [ 73.503071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.521102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.533141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.545228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.557258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.569341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.581379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.593488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.605509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.617667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.646598][ T1983] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=235 sclass=netlink_audit_socket pid=1983 comm=syz.2.639 [ 73.723865][ T36] audit: type=1400 audit(1752856543.100:390): avc: denied { map } for pid=1984 comm="syz.3.640" path="/dev/rnullb0" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.878971][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.953278][ T2004] binder: Binderfs stats mode cannot be changed during a remount [ 73.992178][ T2008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.649'. [ 74.022470][ T2010] binder: Bad value for 'stats' [ 74.042310][ T2010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.042708][ T2010] rust_binder: Error while translating object. [ 74.058966][ T2010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.069305][ T2010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 74.103071][ T500] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 74.275804][ T500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 74.287091][ T500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.297463][ T500] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 74.306831][ T500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.317396][ T500] usb 5-1: config 0 descriptor?? [ 74.325824][ T500] hub 5-1:0.0: USB hub found [ 74.471028][ T36] audit: type=1400 audit(1752856543.840:391): avc: denied { write } for pid=2018 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.525667][ T500] hub 5-1:0.0: 1 port detected [ 74.552480][ T2024] lo: MTU too low for tipc bearer [ 74.557727][ T2024] tipc: Enabling of bearer rejected, failed to enable media [ 74.583726][ T2026] 9pnet_fd: Insufficient options for proto=fd [ 74.793802][ T2043] overlayfs: failed to clone upperpath [ 74.951257][ T2051] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.960353][ T2051] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 74.971598][ T2051] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 74.983647][ T2051] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.090134][ T2061] FAULT_INJECTION: forcing a failure. [ 75.090134][ T2061] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.103326][ T2061] CPU: 1 UID: 0 PID: 2061 Comm: syz.0.669 Not tainted 6.12.30-syzkaller-g2e58e85c038f #0 c5e7ad78b71ddb211d6a9cda70735ca8545dcbc5 [ 75.103359][ T2061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.103380][ T2061] Call Trace: [ 75.103387][ T2061] [ 75.103396][ T2061] __dump_stack+0x21/0x30 [ 75.103434][ T2061] dump_stack_lvl+0x10c/0x190 [ 75.103459][ T2061] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.103485][ T2061] ? kstrtoull+0x13b/0x1e0 [ 75.103509][ T2061] dump_stack+0x19/0x20 [ 75.103533][ T2061] should_fail_ex+0x3d9/0x530 [ 75.103558][ T2061] should_fail+0xf/0x20 [ 75.103581][ T2061] should_fail_usercopy+0x1e/0x30 [ 75.103608][ T2061] _copy_from_user+0x22/0xb0 [ 75.103639][ T2061] ___sys_sendmsg+0x159/0x2a0 [ 75.103666][ T2061] ? __sys_sendmsg+0x280/0x280 [ 75.103693][ T2061] ? proc_fail_nth_write+0x17e/0x210 [ 75.103715][ T2061] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 75.103744][ T2061] __x64_sys_sendmsg+0x1eb/0x2c0 [ 75.103770][ T2061] ? fput+0x1a5/0x240 [ 75.103789][ T2061] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 75.103816][ T2061] ? ksys_write+0x1ef/0x250 [ 75.103844][ T2061] ? __kasan_check_read+0x15/0x20 [ 75.103870][ T2061] x64_sys_call+0x2a4c/0x2ee0 [ 75.103898][ T2061] do_syscall_64+0x58/0xf0 [ 75.103920][ T2061] ? clear_bhb_loop+0x50/0xa0 [ 75.103948][ T2061] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.103974][ T2061] RIP: 0033:0x7f956798e9a9 [ 75.104005][ T2061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.104024][ T2061] RSP: 002b:00007f95687c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.104051][ T2061] RAX: ffffffffffffffda RBX: 00007f9567bb5fa0 RCX: 00007f956798e9a9 [ 75.104068][ T2061] RDX: 0000000000040850 RSI: 00002000000006c0 RDI: 0000000000000003 [ 75.104084][ T2061] RBP: 00007f95687c9090 R08: 0000000000000000 R09: 0000000000000000 [ 75.104098][ T2061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.104112][ T2061] R13: 0000000000000000 R14: 00007f9567bb5fa0 R15: 00007fffb8411088 [ 75.104130][ T2061] [ 75.326779][ T344] usb 5-1: USB disconnect, device number 4 [ 75.332675][ T45] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 75.385195][ T36] audit: type=1400 audit(1752856544.760:392): avc: denied { watch } for pid=2063 comm="syz.0.672" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.569008][ T2071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 75.744872][ T2078] fuse: Unknown parameter 'rootmoàòƒù4£¨I000000000000100000' [ 75.793196][ T2081] binder: Unknown parameter 'contextÀ' [ 75.800100][ T36] audit: type=1400 audit(1752856545.170:393): avc: denied { create } for pid=2080 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 75.887941][ T36] audit: type=1400 audit(1752856545.260:394): avc: denied { remount } for pid=2080 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 75.913079][ T319] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.919232][ T318] Bluetooth: hci0: command 0x1003 tx timeout [ 76.605103][ T12] bridge_slave_1: left allmulticast mode [ 76.620218][ T12] bridge_slave_1: left promiscuous mode [ 76.626731][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.653615][ T12] bridge_slave_0: left allmulticast mode [ 76.669438][ T12] bridge_slave_0: left promiscuous mode [ 76.679280][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.703085][ T344] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.863060][ T344] usb 5-1: Using ep0 maxpacket: 32 [ 76.885729][ T344] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 76.903456][ T344] usb 5-1: config 0 has no interface number 0 [ 76.911884][ T12] veth1_macvtap: left promiscuous mode [ 76.922598][ T12] veth0_vlan: left promiscuous mode [ 76.933425][ T344] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 76.946974][ T344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.974234][ T344] usb 5-1: Product: syz [ 76.980808][ T2100] 9pnet_fd: Insufficient options for proto=fd [ 76.987337][ T344] usb 5-1: Manufacturer: syz [ 77.003474][ T344] usb 5-1: SerialNumber: syz [ 77.020318][ T344] usb 5-1: config 0 descriptor?? [ 77.035022][ T344] smsc95xx v2.0.0 [ 77.261291][ T2101] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.268562][ T2101] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.275890][ T2101] bridge_slave_0: entered allmulticast mode [ 77.282835][ T2101] bridge_slave_0: entered promiscuous mode [ 77.289688][ T2101] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.299015][ T2101] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.306305][ T2101] bridge_slave_1: entered allmulticast mode [ 77.313255][ T2101] bridge_slave_1: entered promiscuous mode [ 77.426515][ T2115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.427293][ T2115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 77.443496][ T344] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 77.454414][ T344] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 77.464593][ T2115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 77.567938][ T2101] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.575038][ T2101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.582352][ T2101] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.589500][ T2101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.623087][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.631820][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.693672][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.700776][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.803451][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.810559][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.831051][ T36] audit: type=1400 audit(1752856548.199:395): avc: denied { write } for pid=2125 comm="syz.0.698" name="softnet_stat" dev="proc" ino=4026532677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 77.949976][ T2101] veth0_vlan: entered promiscuous mode [ 77.982856][ T2101] veth1_macvtap: entered promiscuous mode [ 78.125148][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.280972][ T344] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 78.296551][ T494] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.305764][ T344] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 78.338816][ T494] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.355950][ T344] usb 5-1: USB disconnect, device number 5 [ 78.384365][ T500] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 78.513063][ C0] net_ratelimit: 92202 callbacks suppressed [ 78.513084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.531123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.534761][ T36] audit: type=1400 audit(1752856548.909:396): avc: denied { mount } for pid=2182 comm="syz.2.717" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.543195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.565361][ T2183] overlay: Bad value for 'uuid' [ 78.576904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.593653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.604627][ T500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.605694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.617654][ T500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.628701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.638998][ T500] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 78.650429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.659702][ T500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.671422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.683156][ T500] usb 1-1: config 0 descriptor?? [ 78.691376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.705468][ T500] hub 1-1:0.0: USB hub found [ 78.856504][ T2195] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 78.901232][ T500] hub 1-1:0.0: 1 port detected [ 79.108719][ T2200] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.122972][ T2200] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 79.131677][ T2200] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.141515][ T2200] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 79.534768][ T500] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 79.551343][ T500] usb 1-1: USB disconnect, device number 18 [ 79.716020][ T2225] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 79.732966][ T36] audit: type=1400 audit(1752856550.099:397): avc: denied { unmount } for pid=2224 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 79.871644][ T2228] overlayfs: failed to clone upperpath [ 79.877505][ T2227] overlayfs: failed to clone upperpath [ 79.903080][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 80.076057][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 80.083121][ T31] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 80.091474][ T31] usb 6-1: config 0 has no interface number 0 [ 80.099274][ T31] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 80.108711][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.116918][ T31] usb 6-1: Product: syz [ 80.121231][ T31] usb 6-1: Manufacturer: syz [ 80.126113][ T31] usb 6-1: SerialNumber: syz [ 80.133204][ T31] usb 6-1: config 0 descriptor?? [ 80.141048][ T31] smsc95xx v2.0.0 [ 80.163130][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.169289][ T319] Bluetooth: hci0: command 0x1003 tx timeout [ 80.542204][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 80.553362][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.903561][ T36] audit: type=1400 audit(1752856551.279:398): avc: denied { accept } for pid=2247 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 81.181475][ T12] bridge_slave_1: left allmulticast mode [ 81.206497][ T12] bridge_slave_1: left promiscuous mode [ 81.223297][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.231847][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.265386][ T12] bridge_slave_0: left allmulticast mode [ 81.281182][ T12] bridge_slave_0: left promiscuous mode [ 81.287141][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.371630][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 81.415860][ T31] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 81.444248][ T31] usb 6-1: USB disconnect, device number 2 [ 81.503209][ T344] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 81.531454][ T12] veth1_macvtap: left promiscuous mode [ 81.537265][ T12] veth0_vlan: left promiscuous mode [ 81.676690][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.706153][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.756351][ T344] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.797051][ T344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.820656][ T344] usb 5-1: config 0 descriptor?? [ 81.834520][ T344] hub 5-1:0.0: USB hub found [ 82.034404][ T344] hub 5-1:0.0: 1 port detected [ 82.299212][ T2261] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.326069][ T2261] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.343642][ T2261] bridge_slave_0: entered allmulticast mode [ 82.373545][ T2261] bridge_slave_0: entered promiscuous mode [ 82.401489][ T2261] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.430394][ T2261] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.450919][ T2261] bridge_slave_1: entered allmulticast mode [ 82.463494][ T2261] bridge_slave_1: entered promiscuous mode [ 82.541205][ T36] audit: type=1400 audit(1752856552.909:399): avc: denied { audit_control } for pid=2274 comm="syz.5.750" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.625879][ T2276] rust_binder: 2275 RLIMIT_NICE not set [ 82.639757][ T45] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 82.653222][ T344] usb 5-1: USB disconnect, device number 6 [ 82.725171][ T2278] process 'syz.5.751' launched './file1' with NULL argv: empty string added [ 82.758052][ T2261] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.765144][ T2261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.772489][ T2261] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.779558][ T2261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.788696][ T2278] fuse: Bad value for 'fd' [ 82.804276][ T2278] rust_binder: Write failure EFAULT in pid:36 [ 82.917214][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.957698][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.991460][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.998548][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.052289][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.059464][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.140853][ T2261] veth0_vlan: entered promiscuous mode [ 83.176095][ T2261] veth1_macvtap: entered promiscuous mode [ 83.283350][ T319] Bluetooth: hci0: command 0x1003 tx timeout [ 83.289424][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.523050][ C0] net_ratelimit: 95258 callbacks suppressed [ 83.523074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.541079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.553198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:31:dc:83:cc:2b, vlan:0) [ 83.565294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.577333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.589447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:31:dc:83:cc:2b, vlan:0) [ 83.601519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.613615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.625925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:31:dc:83:cc:2b, vlan:0) [ 83.638022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.693059][ T344] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 83.804884][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 83.874078][ T344] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.893077][ T344] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 83.917536][ T344] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.931588][ T2295] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2295 comm=syz.4.756 [ 83.964539][ T344] usb 7-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 83.983052][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 83.992864][ T344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.018823][ T344] usb 7-1: Product: syz [ 84.023097][ T31] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 84.031930][ T31] usb 6-1: config 0 has no interface number 0 [ 84.044988][ T344] usb 7-1: Manufacturer: syz [ 84.051016][ T31] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 84.063046][ T344] usb 7-1: SerialNumber: syz [ 84.073045][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.082081][ T344] usb 7-1: config 0 descriptor?? [ 84.111333][ T31] usb 6-1: Product: syz [ 84.126423][ T31] usb 6-1: Manufacturer: syz [ 84.131048][ T31] usb 6-1: SerialNumber: syz [ 84.161558][ T31] usb 6-1: config 0 descriptor?? [ 84.177577][ T31] smsc95xx v2.0.0 [ 84.186150][ T2299] binder: Unknown parameter '' [ 84.194676][ T36] audit: type=1400 audit(1752856554.569:400): avc: denied { remount } for pid=2298 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 84.247438][ T36] audit: type=1400 audit(1752856554.619:401): avc: denied { create } for pid=2300 comm="syz.2.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.309762][ T2308] tipc: Trying to set illegal importance in message [ 84.318642][ T2308] binder: Bad value for 'stats' [ 84.373300][ T2290] 9pnet_fd: Insufficient options for proto=fd [ 84.383247][ T2290] binder: Bad value for 'max' [ 84.389170][ T344] usb 7-1: USB disconnect, device number 2 [ 84.494224][ T2322] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2322 comm=syz.2.765 [ 84.581092][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 84.592326][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 84.716899][ T500] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 85.235547][ T500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.713879][ C1] bridge0: topology change detected, propagating [ 86.720263][ C1] bridge0: port 3(veth0_to_bridge) entered blocking state [ 86.728771][ T500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.738746][ T500] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.748920][ T500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.757019][ T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 86.768660][ T500] usb 5-1: config 0 descriptor?? [ 86.783834][ T500] hub 5-1:0.0: USB hub found [ 86.792514][ T31] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 86.806656][ T31] usb 6-1: USB disconnect, device number 3 [ 86.841810][ T2349] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 86.860266][ T2351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2351 comm=syz.6.776 [ 86.898900][ T2353] FAULT_INJECTION: forcing a failure. [ 86.898900][ T2353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.912106][ T2353] CPU: 1 UID: 0 PID: 2353 Comm: syz.6.777 Not tainted 6.12.30-syzkaller-g2e58e85c038f #0 c5e7ad78b71ddb211d6a9cda70735ca8545dcbc5 [ 86.912140][ T2353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.912158][ T2353] Call Trace: [ 86.912165][ T2353] [ 86.912174][ T2353] __dump_stack+0x21/0x30 [ 86.912206][ T2353] dump_stack_lvl+0x10c/0x190 [ 86.912233][ T2353] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.912260][ T2353] ? kstrtoull+0x13b/0x1e0 [ 86.912285][ T2353] dump_stack+0x19/0x20 [ 86.912309][ T2353] should_fail_ex+0x3d9/0x530 [ 86.912336][ T2353] should_fail+0xf/0x20 [ 86.912360][ T2353] should_fail_usercopy+0x1e/0x30 [ 86.912389][ T2353] _copy_from_user+0x22/0xb0 [ 86.912420][ T2353] ___sys_sendmsg+0x159/0x2a0 [ 86.912448][ T2353] ? __sys_sendmsg+0x280/0x280 [ 86.912475][ T2353] ? proc_fail_nth_write+0x17e/0x210 [ 86.912499][ T2353] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 86.912528][ T2353] __x64_sys_sendmsg+0x1eb/0x2c0 [ 86.912555][ T2353] ? fput+0x1a5/0x240 [ 86.912575][ T2353] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 86.912602][ T2353] ? ksys_write+0x1ef/0x250 [ 86.912632][ T2353] ? __kasan_check_read+0x15/0x20 [ 86.912660][ T2353] x64_sys_call+0x2a4c/0x2ee0 [ 86.912687][ T2353] do_syscall_64+0x58/0xf0 [ 86.912709][ T2353] ? clear_bhb_loop+0x50/0xa0 [ 86.912738][ T2353] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.912765][ T2353] RIP: 0033:0x7fa695d8e9a9 [ 86.912783][ T2353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.912812][ T2353] RSP: 002b:00007fa696c12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.912834][ T2353] RAX: ffffffffffffffda RBX: 00007fa695fb5fa0 RCX: 00007fa695d8e9a9 [ 86.912851][ T2353] RDX: 0000000000040850 RSI: 00002000000006c0 RDI: 0000000000000003 [ 86.912866][ T2353] RBP: 00007fa696c12090 R08: 0000000000000000 R09: 0000000000000000 [ 86.912879][ T2353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.912910][ T2353] R13: 0000000000000000 R14: 00007fa695fb5fa0 R15: 00007fff2d91cc08 [ 86.912929][ T2353] [ 87.126721][ T500] hub 5-1:0.0: 1 port detected [ 87.199157][ T36] audit: type=1400 audit(1752856557.569:402): avc: denied { compute_member } for pid=2379 comm="syz.6.788" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 87.199383][ T2380] fuse: Bad value for 'rootmode' [ 87.364900][ T2390] FAULT_INJECTION: forcing a failure. [ 87.364900][ T2390] name failslab, interval 1, probability 0, space 0, times 1 [ 87.377764][ T2390] CPU: 1 UID: 0 PID: 2390 Comm: syz.6.790 Not tainted 6.12.30-syzkaller-g2e58e85c038f #0 c5e7ad78b71ddb211d6a9cda70735ca8545dcbc5 [ 87.377800][ T2390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.377815][ T2390] Call Trace: [ 87.377823][ T2390] [ 87.377831][ T2390] __dump_stack+0x21/0x30 [ 87.377863][ T2390] dump_stack_lvl+0x10c/0x190 [ 87.377893][ T2390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.377920][ T2390] ? release_sock+0x171/0x1f0 [ 87.377942][ T2390] dump_stack+0x19/0x20 [ 87.377967][ T2390] should_fail_ex+0x3d9/0x530 [ 87.378008][ T2390] should_failslab+0xac/0x100 [ 87.378038][ T2390] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 87.378065][ T2390] ? __alloc_skb+0x10c/0x370 [ 87.378086][ T2390] __alloc_skb+0x10c/0x370 [ 87.378107][ T2390] netlink_alloc_large_skb+0xf7/0x1b0 [ 87.378137][ T2390] netlink_sendmsg+0x586/0xaf0 [ 87.378163][ T2390] ? __cfi_netlink_sendmsg+0x10/0x10 [ 87.378189][ T2390] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 87.378211][ T2390] ? security_socket_sendmsg+0x33/0xd0 [ 87.378238][ T2390] ? __cfi_netlink_sendmsg+0x10/0x10 [ 87.378263][ T2390] ____sys_sendmsg+0xa18/0xa70 [ 87.378308][ T2390] ? __sys_sendmsg_sock+0x50/0x50 [ 87.378338][ T2390] ? import_iovec+0x81/0xb0 [ 87.378358][ T2390] ___sys_sendmsg+0x220/0x2a0 [ 87.378386][ T2390] ? __sys_sendmsg+0x280/0x280 [ 87.378413][ T2390] ? proc_fail_nth_write+0x17e/0x210 [ 87.378437][ T2390] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 87.378467][ T2390] __x64_sys_sendmsg+0x1eb/0x2c0 [ 87.378495][ T2390] ? fput+0x1a5/0x240 [ 87.378515][ T2390] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 87.378542][ T2390] ? ksys_write+0x1ef/0x250 [ 87.378590][ T2390] ? __kasan_check_read+0x15/0x20 [ 87.378618][ T2390] x64_sys_call+0x2a4c/0x2ee0 [ 87.378647][ T2390] do_syscall_64+0x58/0xf0 [ 87.378670][ T2390] ? clear_bhb_loop+0x50/0xa0 [ 87.378698][ T2390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.378725][ T2390] RIP: 0033:0x7fa695d8e9a9 [ 87.378744][ T2390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.378763][ T2390] RSP: 002b:00007fa696c12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.378788][ T2390] RAX: ffffffffffffffda RBX: 00007fa695fb5fa0 RCX: 00007fa695d8e9a9 [ 87.378806][ T2390] RDX: 0000000000040850 RSI: 00002000000006c0 RDI: 0000000000000003 [ 87.378821][ T2390] RBP: 00007fa696c12090 R08: 0000000000000000 R09: 0000000000000000 [ 87.378837][ T2390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.378851][ T2390] R13: 0000000000000000 R14: 00007fa695fb5fa0 R15: 00007fff2d91cc08 [ 87.378870][ T2390] [ 87.851041][ T500] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 87.858389][ T31] usb 5-1: USB disconnect, device number 7 [ 87.864510][ T500] usb 5-1: Failed to suspend device, error -71 [ 88.053645][ T36] audit: type=1400 audit(1752856558.429:403): avc: denied { getopt } for pid=2396 comm="syz.5.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.320038][ T36] audit: type=1400 audit(1752856558.689:404): avc: denied { read } for pid=2411 comm="syz.6.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.517186][ T36] audit: type=1400 audit(1752856558.889:405): avc: denied { setopt } for pid=2444 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.648730][ T2451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2451 comm=syz.5.814 [ 88.703080][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.853060][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 88.859192][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.869358][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.878439][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.891409][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 88.900468][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.910106][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 88.916426][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 88.923848][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 89.111505][ T2437] tmpfs: Unsupported parameter 'mpol' [ 89.172679][ T2477] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 89.193227][ C1] net_ratelimit: 81080 callbacks suppressed [ 89.193249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.223188][ T500] usb 5-1: USB disconnect, device number 8 [ 89.246796][ T36] audit: type=1400 audit(1752856559.619:406): avc: denied { bind } for pid=2481 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.543343][ T36] audit: type=1400 audit(1752856559.919:407): avc: denied { unmount } for pid=2101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 89.643509][ T2497] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 89.803064][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 89.869349][ T36] audit: type=1400 audit(1752856560.239:408): avc: denied { mount } for pid=2507 comm="syz.4.832" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 89.943854][ T2515] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 89.964094][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.975685][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.985721][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.997462][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.009020][ T9] usb 6-1: config 0 descriptor?? [ 90.020368][ T9] hub 6-1:0.0: USB hub found [ 90.040252][ T2524] netlink: 5 bytes leftover after parsing attributes in process `syz.6.838'. [ 90.050396][ T2524] netlink: 20 bytes leftover after parsing attributes in process `syz.6.838'. [ 90.060252][ T2524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2524 comm=syz.6.838 [ 90.074146][ T2524] netlink: 108 bytes leftover after parsing attributes in process `syz.6.838'. [ 90.083607][ T2524] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2524 comm=syz.6.838 [ 90.217224][ T9] hub 6-1:0.0: 1 port detected [ 90.273077][ T500] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 90.424499][ T500] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.433299][ T500] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 90.440884][ T500] usb 5-1: can't read configurations, error -61 [ 90.573118][ T500] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 90.734442][ T500] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.743225][ T500] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 90.750805][ T500] usb 5-1: can't read configurations, error -61 [ 90.757379][ T500] usb usb5-port1: attempt power cycle [ 90.818915][ T9] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 90.819062][ T31] usb 6-1: USB disconnect, device number 4 [ 90.999716][ T2535] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2535 comm=syz.6.844 [ 91.022570][ T2537] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 91.103082][ T500] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 91.126638][ T500] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.136473][ T500] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 91.144987][ T500] usb 5-1: can't read configurations, error -61 [ 91.273266][ T500] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 91.294763][ T500] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.303398][ T500] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 91.310955][ T500] usb 5-1: can't read configurations, error -61 [ 91.317373][ T500] usb usb5-port1: unable to enumerate USB device [ 91.347212][ T2548] netlink: 5 bytes leftover after parsing attributes in process `syz.5.849'. [ 91.357380][ T2548] netlink: 20 bytes leftover after parsing attributes in process `syz.5.849'. [ 91.367148][ T2548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2548 comm=syz.5.849 [ 91.379998][ T2548] netlink: 108 bytes leftover after parsing attributes in process `syz.5.849'. [ 91.389608][ T2548] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2548 comm=syz.5.849 [ 92.069430][ T2578] 9pnet_fd: Insufficient options for proto=fd [ 92.131698][ T2578] incfs: Options parsing error. -22 [ 92.137052][ T2578] incfs: mount failed -22 [ 92.738684][ T36] audit: type=1400 audit(1752856563.109:409): avc: denied { mounton } for pid=2597 comm="syz.5.870" path="/32/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 92.791364][ T2608] /dev/loop0: Can't lookup blockdev [ 92.815830][ T2612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.875'. [ 92.924331][ T2624] overlayfs: failed to clone lowerpath [ 92.924987][ T36] audit: type=1400 audit(1752856563.299:410): avc: denied { create } for pid=2623 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.111088][ T2629] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 93.113123][ T36] audit: type=1400 audit(2000000000.090:411): avc: denied { mounton } for pid=2628 comm="syz.4.882" path="/syzcgroup/unified/syz4" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 93.119412][ T2629] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 93.151791][ T2629] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 93.158724][ T36] audit: type=1400 audit(2000000000.140:412): avc: denied { execute } for pid=2625 comm="syz.5.881" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.159888][ T2629] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 93.463060][ T36] audit: type=1400 audit(2000000000.440:413): avc: denied { map } for pid=2651 comm="syz.6.891" path="socket:[14179]" dev="sockfs" ino=14179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.493059][ T344] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 93.503072][ T36] audit: type=1400 audit(2000000000.440:414): avc: denied { read } for pid=2651 comm="syz.6.891" path="socket:[14179]" dev="sockfs" ino=14179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.509564][ T2657] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 93.553052][ T36] audit: type=1326 audit(2000000000.450:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2653 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695d8e9a9 code=0x7ffc0000 [ 93.664167][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.676044][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.686139][ T344] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 93.695668][ T344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.705014][ T344] usb 5-1: config 0 descriptor?? [ 93.718430][ T344] hub 5-1:0.0: USB hub found [ 93.918897][ T344] hub 5-1:0.0: 1 port detected [ 94.496261][ T2678] 9pnet_fd: Insufficient options for proto=fd [ 94.521386][ T45] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 94.536376][ T344] usb 5-1: USB disconnect, device number 13 [ 95.303096][ T2701] devpts: called with bogus options [ 95.443062][ T355] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 95.603079][ T355] usb 6-1: device descriptor read/64, error -71 [ 95.853094][ T355] usb 6-1: device descriptor read/64, error -71 [ 96.093116][ T355] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 96.134650][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.223075][ T355] usb 6-1: device descriptor read/64, error -71 [ 96.463053][ T355] usb 6-1: device descriptor read/64, error -71 [ 96.574938][ T355] usb usb6-port1: attempt power cycle [ 96.933086][ T355] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 96.984509][ T355] usb 6-1: device descriptor read/8, error -71 [ 97.119656][ T355] usb 6-1: device descriptor read/8, error -71 [ 97.163731][ T2741] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 97.363086][ T355] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 97.384157][ T355] usb 6-1: device descriptor read/8, error -71 [ 97.514129][ T355] usb 6-1: device descriptor read/8, error -71 [ 97.633077][ T355] usb usb6-port1: unable to enumerate USB device [ 98.153953][ T319] Bluetooth: hci0: command 0x1003 tx timeout [ 98.160016][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.260802][ T2769] devpts: called with bogus options [ 98.686934][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 98.686965][ T36] audit: type=1400 audit(2000000005.670:430): avc: denied { shutdown } for pid=2776 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.089385][ T2759] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 99.338237][ T2787] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 99.353060][ T2787] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 99.369291][ T2791] netlink: 72 bytes leftover after parsing attributes in process `syz.6.938'. [ 99.373239][ T2787] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 99.380855][ T2791] /dev/loop0: Can't lookup blockdev [ 99.403819][ T2787] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 99.765981][ T36] audit: type=1400 audit(2000000006.751:431): avc: denied { read } for pid=2795 comm="syz.4.939" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 99.843126][ T36] audit: type=1400 audit(2000000006.751:432): avc: denied { open } for pid=2795 comm="syz.4.939" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 99.893091][ T36] audit: type=1400 audit(2000000006.751:433): avc: denied { ioctl } for pid=2795 comm="syz.4.939" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 100.283331][ T36] audit: type=1400 audit(2000000007.271:434): avc: denied { nlmsg_read } for pid=2816 comm="syz.6.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 100.366618][ T2822] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 100.488193][ T36] audit: type=1400 audit(2000000007.471:435): avc: denied { create } for pid=2829 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.897902][ T2846] binder: Unknown parameter '0x0000000000000004' [ 101.260503][ T36] audit: type=1400 audit(2000000008.241:436): avc: denied { map } for pid=2884 comm="syz.4.971" path="socket:[15842]" dev="sockfs" ino=15842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.288991][ T2885] rust_binder: Error while translating object. [ 101.289024][ T2885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 101.295535][ T2885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:154 [ 101.336555][ T2902] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2902 comm=syz.2.978 [ 101.414067][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 101.435884][ T63] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.618059][ T2923] 9pnet_fd: Insufficient options for proto=fd [ 101.631534][ T2922] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 101.682554][ T2925] rust_binder: Error while translating object. [ 101.682585][ T2925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 101.688875][ T2925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:180 [ 101.719904][ T36] audit: type=1400 audit(2000000008.701:437): avc: denied { connect } for pid=2929 comm="syz.5.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.757176][ T36] audit: type=1400 audit(2000000008.741:438): avc: denied { unmount } for pid=2101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 101.785450][ T2939] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2939 comm=syz.5.989 [ 101.913096][ T63] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 102.063067][ T63] usb 5-1: Using ep0 maxpacket: 16 [ 102.070498][ T63] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 102.079584][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.087658][ T63] usb 5-1: Product: syz [ 102.091828][ T63] usb 5-1: Manufacturer: syz [ 102.096444][ T63] usb 5-1: SerialNumber: syz [ 102.103596][ T63] r8152-cfgselector 5-1: Unknown version 0x0000 [ 102.109889][ T63] r8152-cfgselector 5-1: config 0 descriptor?? [ 102.319415][ T63] r8152-cfgselector 5-1: Needed 1 retries to read version [ 102.328171][ T63] r8152-cfgselector 5-1: Unknown version 0x0000 [ 102.335156][ T63] r8152-cfgselector 5-1: bad CDC descriptors [ 102.459597][ T36] audit: type=1400 audit(2000000009.441:439): avc: denied { mounton } for pid=2955 comm="syz.5.997" path="/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 102.879236][ T2957] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 102.886454][ T2957] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 102.893552][ T2957] rust_binder: 2957: no such ref 1 [ 102.898676][ T2957] rust_binder: 2957: no such ref 1 [ 102.903860][ T2957] rust_binder: 2957: no such ref 3 [ 102.909019][ T2957] rust_binder: 2957: no such ref 1 [ 103.001596][ T2966] 9pnet_fd: Insufficient options for proto=fd [ 103.373067][ T344] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 103.527274][ T344] usb 6-1: Using ep0 maxpacket: 32 [ 103.534819][ T344] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 103.537122][ T2978] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 103.543152][ T344] usb 6-1: config 0 has no interface number 0 [ 103.565491][ T344] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 103.574591][ T344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.582760][ T344] usb 6-1: Product: syz [ 103.587029][ T344] usb 6-1: Manufacturer: syz [ 103.591638][ T344] usb 6-1: SerialNumber: syz [ 103.600494][ T344] usb 6-1: config 0 descriptor?? [ 103.607684][ T344] smsc95xx v2.0.0 [ 104.007846][ T344] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 104.018702][ T344] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 104.528607][ T2998] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2998 comm=syz.6.1014 [ 104.630278][ T344] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 104.641249][ T344] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 104.650634][ T344] usb 6-1: USB disconnect, device number 9 [ 104.671467][ T355] r8152-cfgselector 5-1: USB disconnect, device number 14 [ 105.068064][ T3016] overlayfs: failed to clone upperpath [ 105.088378][ T3019] raw_sendmsg: syz.6.1022 forgot to set AF_INET. Fix it! [ 105.160380][ T3023] cgroup: release_agent respecified [ 105.213574][ T3027] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3027 comm=syz.5.1025 [ 105.292066][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.367404][ T3042] capability: warning: `syz.4.1030' uses 32-bit capabilities (legacy support in use) [ 105.663800][ T3058] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3058 comm=syz.6.1035 [ 105.723083][ T344] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 105.771408][ T3066] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 105.883066][ T344] usb 5-1: Using ep0 maxpacket: 32 [ 105.893322][ T344] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 105.901680][ T344] usb 5-1: config 0 has no interface number 0 [ 105.909456][ T3071] netlink: 'syz.2.1040': attribute type 4 has an invalid length. [ 105.917463][ T344] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 105.926704][ T3071] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1040'. [ 105.936034][ T344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.944296][ T344] usb 5-1: Product: syz [ 105.948652][ T344] usb 5-1: Manufacturer: syz [ 105.953634][ T344] usb 5-1: SerialNumber: syz [ 105.961498][ T344] usb 5-1: config 0 descriptor?? [ 105.968560][ T344] smsc95xx v2.0.0 [ 106.054795][ T36] audit: type=1400 audit(2000000013.041:440): avc: denied { map } for pid=3077 comm="syz.2.1043" path="socket:[16462]" dev="sockfs" ino=16462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 106.088084][ T36] audit: type=1400 audit(2000000013.071:441): avc: denied { create } for pid=3081 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 106.369829][ T344] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 106.380714][ T344] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 106.765649][ T3104] 9pnet_fd: Insufficient options for proto=fd [ 106.795619][ T3108] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 106.993191][ T344] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 107.005564][ T344] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 107.015023][ T344] usb 5-1: USB disconnect, device number 15 [ 107.275507][ T36] audit: type=1326 audit(2000000014.261:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3110 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ccf8e9a9 code=0x7ffc0000 [ 107.299815][ T36] audit: type=1326 audit(2000000014.261:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3110 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ccf8e9a9 code=0x7ffc0000 [ 107.325041][ T36] audit: type=1326 audit(2000000014.281:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3110 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f96ccf8e9a9 code=0x7ffc0000 [ 107.353076][ T319] Bluetooth: hci0: command 0x1003 tx timeout [ 107.353190][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.383078][ T36] audit: type=1326 audit(2000000014.281:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3110 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ccf8e9a9 code=0x7ffc0000 [ 107.407996][ T36] audit: type=1326 audit(2000000014.281:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3110 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ccf8e9a9 code=0x7ffc0000 [ 107.431533][ T36] audit: type=1326 audit(2000000014.311:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3110 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f96ccf8e9a9 code=0x7ffc0000 [ 107.455309][ T36] audit: type=1326 audit(2000000014.311:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3110 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ccf8e9a9 code=0x7ffc0000 [ 107.480368][ T36] audit: type=1326 audit(2000000014.311:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3110 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ccf8e9a9 code=0x7ffc0000 [ 107.482300][ T3122] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3122 comm=syz.2.1057 [ 108.343094][ T355] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 108.523094][ T355] usb 6-1: Using ep0 maxpacket: 16 [ 108.532839][ T355] usb 6-1: unable to get BOS descriptor or descriptor too short [ 108.542044][ T355] usb 6-1: config 5 has an invalid interface number: 221 but max is 2 [ 108.550508][ T355] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 108.561027][ T355] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 108.570091][ T355] usb 6-1: config 5 has no interface number 0 [ 108.576421][ T355] usb 6-1: config 5 interface 221 altsetting 16 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 108.587731][ T355] usb 6-1: config 5 interface 221 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 108.598934][ T355] usb 6-1: config 5 interface 221 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 108.610234][ T355] usb 6-1: config 5 interface 221 altsetting 16 has 4 endpoint descriptors, different from the interface descriptor's value: 10 [ 108.623833][ T355] usb 6-1: config 5 interface 221 has no altsetting 0 [ 108.632187][ T355] usb 6-1: New USB device found, idVendor=0421, idProduct=0108, bcdDevice=87.ce [ 108.641627][ T355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.649964][ T355] usb 6-1: Product: syz [ 108.654400][ T355] usb 6-1: Manufacturer: syz [ 108.659057][ T355] usb 6-1: SerialNumber: syz [ 108.883211][ T355] usb 6-1: bad CDC descriptors [ 108.890039][ T355] usb 6-1: USB disconnect, device number 10 [ 109.407176][ T3169] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 109.444828][ T3176] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 109.525667][ T3181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 109.526920][ T3183] rust_binder: Write failure EINVAL in pid:230 [ 110.828924][ T3213] 9pnet_fd: Insufficient options for proto=fd [ 111.105191][ T3228] netlink: 'syz.6.1093': attribute type 6 has an invalid length. [ 111.132742][ T3233] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 111.415272][ T3243] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1098'. [ 111.601010][ T3250] rust_binder: 3250: no such ref 1 [ 111.606291][ T3250] rust_binder: 3250: no such ref 2 [ 111.623713][ T3254] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 111.689587][ T3259] 9pnet_fd: Insufficient options for proto=fd [ 111.704788][ T3263] rust_binder: 3257 RLIMIT_NICE not set [ 111.705505][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 111.705522][ T36] audit: type=1400 audit(2000000018.691:458): avc: denied { create } for pid=3249 comm="syz.5.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.870557][ T3281] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 112.075882][ T36] audit: type=1400 audit(2000000019.061:459): avc: denied { ioctl } for pid=3290 comm="syz.4.1117" path="socket:[17614]" dev="sockfs" ino=17614 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.237431][ T36] audit: type=1400 audit(2000000019.221:460): avc: denied { create } for pid=3300 comm="syz.6.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 112.274132][ T3304] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 112.533602][ T3320] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 61) [ 112.533628][ T3320] rust_binder: Error while translating object. [ 112.544254][ T3320] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.550470][ T3320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 112.947223][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.970257][ T3337] overlayfs: failed to clone upperpath [ 112.981533][ T3337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 113.038512][ T3347] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 113.071185][ T3352] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 114.917778][ T3386] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 114.953051][ T319] Bluetooth: hci0: command 0x1003 tx timeout [ 114.953108][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.223199][ T3409] rust_binder: 3396 RLIMIT_NICE not set [ 115.223211][ T3406] fuseblk: Unknown parameter 'oroup_id' [ 115.254138][ T36] audit: type=1400 audit(2000000022.241:461): avc: denied { unmount } for pid=2101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.339774][ T3413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296 [ 115.339843][ T3412] rust_binder: 3411 RLIMIT_NICE not set [ 115.934210][ T3429] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 116.103073][ T510] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 116.273053][ T510] usb 6-1: Using ep0 maxpacket: 32 [ 116.279573][ T510] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.288114][ T510] usb 6-1: config 0 has no interface number 0 [ 116.295906][ T510] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.305206][ T510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.313439][ T510] usb 6-1: Product: syz [ 116.317723][ T510] usb 6-1: Manufacturer: syz [ 116.322379][ T510] usb 6-1: SerialNumber: syz [ 116.333237][ T510] usb 6-1: config 0 descriptor?? [ 116.343547][ T510] smsc95xx v2.0.0 [ 116.781491][ T510] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 116.792235][ T510] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.403582][ T510] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 117.414497][ T510] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 117.423928][ T510] usb 6-1: USB disconnect, device number 11 [ 117.931541][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.208401][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 119.993041][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.993052][ T343] Bluetooth: hci0: command 0x1003 tx timeout [ 120.229068][ T3468] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 120.284410][ T36] audit: type=1400 audit(2000000027.271:462): avc: denied { bind } for pid=3470 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.356033][ T3471] overlayfs: failed to clone upperpath [ 120.887636][ T3482] netlink: 1048 bytes leftover after parsing attributes in process `syz.5.1182'. [ 120.891875][ T3484] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 121.025529][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.028296][ T3489] devpts: called with bogus options [ 121.031941][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.273056][ T319] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 121.273075][ T343] Bluetooth: hci1: command 0x1003 tx timeout [ 123.033065][ T319] Bluetooth: hci0: command 0x1003 tx timeout [ 123.033065][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.237665][ T3505] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 124.796773][ T3524] netlink: 'syz.6.1191': attribute type 12 has an invalid length. [ 126.426997][ T3556] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 126.873065][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.160127][ T36] audit: type=1326 audit(2000000035.141:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.6.1207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa695d8e9a9 code=0x0 [ 129.443214][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 129.555892][ T3603] netlink: 'syz.5.1215': attribute type 4 has an invalid length. [ 129.563692][ T36] audit: type=1400 audit(2000000036.541:464): avc: denied { name_bind } for pid=3602 comm="syz.5.1215" path="socket:[17145]" dev="sockfs" ino=17145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 129.613932][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.796939][ T3610] tipc: Can't bind to reserved service type 0 [ 131.028013][ T3641] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 131.037575][ T3643] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 131.071136][ T3645] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 131.106480][ T36] audit: type=1400 audit(2000000038.091:465): avc: denied { create } for pid=3648 comm="syz.4.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.126362][ T36] audit: type=1400 audit(2000000038.091:466): avc: denied { create } for pid=3648 comm="syz.4.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 140.520459][ T319] Bluetooth: hci0: command 0x1003 tx timeout [ 140.526598][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.594275][ T3664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:338 [ 141.387383][ T36] audit: type=1400 audit(2000000048.371:467): avc: denied { write } for pid=3678 comm="syz.4.1241" path="socket:[18202]" dev="sockfs" ino=18202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.455565][ T36] audit: type=1400 audit(2000000048.441:468): avc: denied { getopt } for pid=3680 comm="syz.4.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.470625][ T36] audit: type=1326 audit(2000000049.451:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26418e9a9 code=0x7fc00000 [ 142.494315][ T36] audit: type=1326 audit(2000000049.451:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa26418e9a9 code=0x7fc00000 [ 142.521017][ T36] audit: type=1326 audit(2000000049.451:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26418e9a9 code=0x7fc00000 [ 142.544836][ T36] audit: type=1326 audit(2000000049.451:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26418e9a9 code=0x7fc00000 [ 142.568994][ T36] audit: type=1326 audit(2000000049.451:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26418e9a9 code=0x7fc00000 [ 142.592550][ T36] audit: type=1326 audit(2000000049.451:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26418e9a9 code=0x7fc00000 [ 142.616084][ T36] audit: type=1326 audit(2000000049.451:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26418e9a9 code=0x7fc00000 [ 142.639587][ T36] audit: type=1326 audit(2000000049.451:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26418e9a9 code=0x7fc00000 [ 145.459151][ T3720] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 145.523091][ T510] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 145.653049][ T510] usb 6-1: device descriptor read/64, error -71 [ 145.673109][ T3738] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 145.893093][ T510] usb 6-1: device descriptor read/64, error -71 [ 146.167146][ T510] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 146.176130][ T3740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 146.303038][ T510] usb 6-1: device descriptor read/64, error -71 [ 146.543039][ T510] usb 6-1: device descriptor read/64, error -71 [ 146.653209][ T510] usb usb6-port1: attempt power cycle [ 146.746573][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 146.746591][ T36] audit: type=1400 audit(2000000053.731:485): avc: denied { create } for pid=3754 comm="syz.4.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.993067][ T510] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 147.014141][ T510] usb 6-1: device descriptor read/8, error -71 [ 147.144310][ T510] usb 6-1: device descriptor read/8, error -71 [ 147.383045][ T510] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 147.424109][ T510] usb 6-1: device descriptor read/8, error -71 [ 147.554199][ T510] usb 6-1: device descriptor read/8, error -71 [ 147.673225][ T510] usb usb6-port1: unable to enumerate USB device [ 147.762495][ T3772] 9pnet_fd: Insufficient options for proto=fd [ 148.141400][ T36] audit: type=1326 audit(2000000055.131:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.5.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c76d8e9a9 code=0x7fc00000 [ 148.174508][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1277'. [ 148.282057][ T3786] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 148.335407][ T3796] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 148.583069][ T500] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 148.743046][ T500] usb 6-1: Using ep0 maxpacket: 32 [ 148.749612][ T500] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 148.759990][ T500] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.770602][ T500] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.782977][ T500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.799378][ T500] usb 6-1: Product: syz [ 148.803786][ T500] usb 6-1: Manufacturer: syz [ 148.808467][ T500] usb 6-1: SerialNumber: syz [ 149.243925][ T3782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.243972][ T3782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 149.265552][ T500] usb 6-1: 0:2 : does not exist [ 149.294821][ T500] usb 6-1: USB disconnect, device number 16 [ 149.888582][ T3830] overlayfs: failed to resolve './file1': -2 [ 150.674475][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.173672][ T3822] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 151.267530][ T3863] overlayfs: failed to clone upperpath [ 151.273525][ T3862] overlayfs: failed to clone upperpath [ 151.981223][ T3877] overlayfs: failed to clone upperpath [ 152.099693][ T3888] overlayfs: failed to clone upperpath [ 152.713126][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.713151][ T319] Bluetooth: hci0: command 0x1003 tx timeout [ 152.881233][ T3896] overlayfs: failed to clone upperpath [ 152.909147][ T3900] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 154.829329][ T36] audit: type=1400 audit(2000000061.811:487): avc: denied { setopt } for pid=3918 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.364791][ T3920] overlayfs: failed to clone upperpath [ 155.365289][ T3905] overlayfs: failed to clone upperpath [ 155.396158][ T3923] x_tables: duplicate underflow at hook 4 [ 155.418776][ T36] audit: type=1400 audit(2000000062.401:488): avc: denied { create } for pid=3924 comm="syz.2.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 155.448732][ T36] audit: type=1400 audit(2000000062.431:489): avc: denied { accept } for pid=3924 comm="syz.2.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 157.673638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.913051][ T319] Bluetooth: hci0: command 0x1003 tx timeout [ 158.033036][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 301.043086][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.795960][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.6.1321:3906] [ 309.795986][ C0] CPU#0 Utilization every 22s during lockup: [ 309.795994][ C0] #1: 100% system, 0% softirq, 1% hardirq, 0% idle [ 309.796008][ C0] #2: 100% system, 0% softirq, 1% hardirq, 0% idle [ 309.796022][ C0] #3: 100% system, 1% softirq, 1% hardirq, 0% idle [ 309.796035][ C0] #4: 100% system, 0% softirq, 1% hardirq, 0% idle [ 309.796053][ C0] #5: 100% system, 1% softirq, 1% hardirq, 0% idle [ 309.796066][ C0] Modules linked in: [ 309.796091][ C0] CPU: 0 UID: 0 PID: 3906 Comm: syz.6.1321 Not tainted 6.12.30-syzkaller-g2e58e85c038f #0 c5e7ad78b71ddb211d6a9cda70735ca8545dcbc5 [ 309.796117][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.796131][ C0] RIP: 0010:change_mnt_propagation+0xff/0xb00 [ 309.796175][ C0] Code: 58 e7 ff 4d 8b 2e 48 c7 c3 28 ff ff ff 4d 89 fc 4d 8d 74 24 20 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 f7 e8 67 58 e7 ff 4d 39 2e 0f 84 8f 00 00 00 49 81 c4 [ 309.796189][ C0] RSP: 0018:ffffc90003d7f9c0 EFLAGS: 00000246 [ 309.796204][ C0] RAX: 1ffff11029a4051c RBX: ffffffffffffff28 RCX: dffffc0000000000 [ 309.796217][ C0] RDX: ffffc900071e3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 309.796229][ C0] RBP: ffffc90003d7fa10 R08: ffff8881470af2af R09: 0000000000000000 [ 309.796241][ C0] R10: ffff8881470af2a0 R11: ffffed1028e15e56 R12: ffff88814d2028c0 [ 309.796253][ C0] R13: ffff888111114330 R14: ffff88814d2028e0 R15: ffff8881178bfc00 [ 309.796266][ C0] FS: 00007fa696b8e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 309.796281][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.796293][ C0] CR2: 000000110c2c637b CR3: 0000000146d28000 CR4: 00000000003526b0 [ 309.796308][ C0] Call Trace: [ 309.796314][ C0] [ 309.796323][ C0] umount_tree+0xdfd/0xf70 [ 309.796342][ C0] ? irqentry_exit+0x4a/0x60 [ 309.796365][ C0] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 309.796388][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 309.796409][ C0] ? __detach_mounts+0x610/0x610 [ 309.796428][ C0] attach_recursive_mnt+0x6df/0x21c0 [ 309.796455][ C0] ? graft_tree+0x1c0/0x1c0 [ 309.796478][ C0] ? mnt_warn_timestamp_expiry+0x370/0x370 [ 309.796503][ C0] graft_tree+0x157/0x1c0 [ 309.796525][ C0] do_loopback+0x364/0x4b0 [ 309.796545][ C0] ? path_mount+0x1050/0x1050 [ 309.796572][ C0] ? security_capable+0xcf/0xf0 [ 309.796589][ C0] ? ns_capable+0x91/0xf0 [ 309.796608][ C0] path_mount+0x582/0x1050 [ 309.796626][ C0] ? putname+0x113/0x150 [ 309.796647][ C0] __se_sys_mount+0x2bd/0x480 [ 309.796667][ C0] ? __x64_sys_mount+0xf0/0xf0 [ 309.796687][ C0] ? __kasan_check_read+0x15/0x20 [ 309.796706][ C0] __x64_sys_mount+0xc3/0xf0 [ 309.796726][ C0] x64_sys_call+0x2021/0x2ee0 [ 309.796747][ C0] do_syscall_64+0x58/0xf0 [ 309.796762][ C0] ? clear_bhb_loop+0x50/0xa0 [ 309.796782][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 309.796801][ C0] RIP: 0033:0x7fa695d8e9a9 [ 309.796820][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.796833][ C0] RSP: 002b:00007fa696b8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.796849][ C0] RAX: ffffffffffffffda RBX: 00007fa695fb6320 RCX: 00007fa695d8e9a9 [ 309.796861][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000240 [ 309.796872][ C0] RBP: 00007fa695e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 309.796882][ C0] R10: 000000000080700a R11: 0000000000000246 R12: 0000000000000000 [ 309.796892][ C0] R13: 0000000000000001 R14: 00007fa695fb6320 R15: 00007fff2d91cc08 [ 309.796906][ C0] [ 309.796916][ C0] Sending NMI from CPU 0 to CPUs 1: [ 310.167657][ C1] NMI backtrace for cpu 1 [ 310.167670][ C1] CPU: 1 UID: 0 PID: 3928 Comm: syz.5.1331 Not tainted 6.12.30-syzkaller-g2e58e85c038f #0 c5e7ad78b71ddb211d6a9cda70735ca8545dcbc5 [ 310.167691][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.167701][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 310.167729][ C1] Code: cc cc cc b8 ee bb 62 8c 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 8c 41 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 c3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 310.167742][ C1] RSP: 0018:ffffc90000f2f5b0 EFLAGS: 000002d3 [ 310.167757][ C1] RAX: ffffffff81435565 RBX: 0000000000000003 RCX: ffff888133503900 [ 310.167768][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 310.167795][ C1] RBP: ffffc90000f2f5b0 R08: ffffffff8720d604 R09: 1ffffffff0e41ac0 [ 310.167807][ C1] R10: dffffc0000000000 R11: fffffbfff0e41ac1 R12: dffffc0000000000 [ 310.167819][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff920001e5eb8 [ 310.167830][ C1] FS: 000055555e5b0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 310.167843][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.167855][ C1] CR2: 00007f96cde74f98 CR3: 00000001290b8000 CR4: 00000000003526b0 [ 310.167868][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.167878][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.167888][ C1] Call Trace: [ 310.167893][ C1] [ 310.167901][ C1] kvm_wait+0x1ba/0x220 [ 310.167920][ C1] ? __cfi_kvm_wait+0x10/0x10 [ 310.167936][ C1] ? unwind_get_return_address+0x51/0x90 [ 310.167952][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 310.167973][ C1] __pv_queued_spin_lock_slowpath+0x78d/0xcc0 [ 310.167994][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 310.168013][ C1] ? stack_depot_save_flags+0x38/0x800 [ 310.168033][ C1] ? __kasan_check_write+0x18/0x20 [ 310.168052][ C1] _raw_spin_lock+0x109/0x120 [ 310.168067][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 310.168082][ C1] ? _raw_spin_unlock+0x45/0x60 [ 310.168097][ C1] ? d_walk+0x499/0x4f0 [ 310.168114][ C1] mntput_no_expire+0x147/0x6c0 [ 310.168130][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 310.168145][ C1] ? shrink_dcache_parent+0x1f8/0x250 [ 310.168163][ C1] ? mntput+0xd0/0xd0 [ 310.168178][ C1] ? _raw_spin_lock+0x8c/0x120 [ 310.168192][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 310.168207][ C1] mntput+0x63/0xd0 [ 310.168222][ C1] simple_release_fs+0xb4/0xe0 [ 310.168236][ C1] remove_one+0x368/0x3e0 [ 310.168255][ C1] ? __kasan_check_write+0x18/0x20 [ 310.168272][ C1] ? __cfi_remove_one+0x10/0x10 [ 310.168290][ C1] simple_recursive_removal+0x71c/0x8f0 [ 310.168313][ C1] ? __cfi_remove_one+0x10/0x10 [ 310.168331][ C1] ? __cfi_bt_host_release+0x10/0x10 [ 310.168353][ C1] debugfs_remove+0x5a/0x80 [ 310.168371][ C1] hci_release_dev+0xa6/0x1540 [ 310.168390][ C1] ? devres_release_all+0x33e/0x3b0 [ 310.168413][ C1] ? cleanup_glue_dir+0x1c1/0x220 [ 310.168434][ C1] ? __cfi_hci_release_dev+0x10/0x10 [ 310.168453][ C1] ? device_del+0xbe2/0xce0 [ 310.168473][ C1] ? __cfi_devres_release_all+0x10/0x10 [ 310.168495][ C1] ? __cfi_bt_host_release+0x10/0x10 [ 310.168516][ C1] bt_host_release+0x86/0xa0 [ 310.168538][ C1] device_release+0xae/0x1e0 [ 310.168552][ C1] ? __cfi_device_release+0x10/0x10 [ 310.168567][ C1] kobject_put+0x1aa/0x2a0 [ 310.168582][ C1] put_device+0x23/0x40 [ 310.168598][ C1] hci_free_dev+0x20/0x30 [ 310.168616][ C1] hci_uart_tty_close+0x1a4/0x230 [ 310.168637][ C1] ? __cfi_hci_uart_tty_close+0x10/0x10 [ 310.168656][ C1] tty_ldisc_release+0x2ad/0x600 [ 310.168671][ C1] tty_release_struct+0x2d/0xe0 [ 310.168688][ C1] tty_release+0xc0a/0x1230 [ 310.168703][ C1] ? __cfi_task_work_add+0x10/0x10 [ 310.168721][ C1] ? __cfi_tty_release+0x10/0x10 [ 310.168736][ C1] __fput+0x1fb/0xa00 [ 310.168751][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 310.168767][ C1] ____fput+0x20/0x30 [ 310.168805][ C1] task_work_run+0x1e3/0x250 [ 310.168820][ C1] ? __cfi_task_work_run+0x10/0x10 [ 310.168836][ C1] ? __kasan_check_write+0x18/0x20 [ 310.168855][ C1] resume_user_mode_work+0x36/0x50 [ 310.168871][ C1] syscall_exit_to_user_mode+0x64/0xb0 [ 310.168893][ C1] do_syscall_64+0x64/0xf0 [ 310.168908][ C1] ? clear_bhb_loop+0x50/0xa0 [ 310.168929][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 310.168948][ C1] RIP: 0033:0x7f1c76d8e9a9 [ 310.168961][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.168975][ C1] RSP: 002b:00007ffda93e4658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 310.168990][ C1] RAX: 0000000000000000 RBX: 00000000000260b9 RCX: 00007f1c76d8e9a9 [ 310.169001][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 310.169011][ C1] RBP: 00007f1c76fb7ba0 R08: 0000000000000001 R09: 0000000aa93e494f [ 310.169022][ C1] R10: 00007f1c76c00000 R11: 0000000000000246 R12: 00007f1c76fb5fac [ 310.169032][ C1] R13: 00007f1c76fb5fa0 R14: ffffffffffffffff R15: 00007ffda93e4770 [ 310.169046][ C1]