last executing test programs: 19.117958492s ago: executing program 0 (id=1627): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)="dc52b390", 0x4}, {&(0x7f0000000100)="7681024fff2eeb9b6e0e02d3aa", 0xd}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f00000003c0)="265edbab3b5a672799efd7489b321db88becb6a8c2e67f3617db8008c45007be5f17c1677990c156ff602b", 0x2b}, {&(0x7f00000001c0)="ca", 0x1}, {&(0x7f00000011c0)="b488", 0x2}, {&(0x7f0000001440)='4', 0x1}], 0x7, 0x3) (async, rerun: 32) close(r2) (rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f0000000940)="a6", 0x1}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='a', 0x1}, {&(0x7f0000000c80)='_\r', 0x2}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)='t', 0x1}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="81", 0x1}], 0x5}}], 0x2, 0x4008440) (async, rerun: 32) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) mlockall(0x7) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x2201, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x4) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r7, 0x4068aea3, &(0x7f0000000200)) (async, rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xed, 0x0, 0x0, 0x3}, 0x400000}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x2000, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x3c}, 0x3, @in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x3506, 0x2, 0x2}]}]}, 0x17c}}, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) rt_sigqueueinfo(0xffffffffffffffff, 0x3b, &(0x7f0000000280)={0x1c, 0x9, 0xfffffff8}) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 19.117405212s ago: executing program 0 (id=1628): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020a040007000000b6f1ff0f0100854105001a000000000000d74619edc7000000000000005a6371778de1ddf01ba2fa6c858b98ccefb41ae1"], 0x38}}, 0x4004008) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 19.115446062s ago: executing program 0 (id=1629): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x2d76, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x4) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) 19.021744679s ago: executing program 0 (id=1630): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x41) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) 19.02067271s ago: executing program 0 (id=1631): ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = socket$inet6(0xa, 0x6, 0x5) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) splice(r0, &(0x7f0000000080)=0x6a436215, r0, &(0x7f00000000c0), 0xffffffffffffffff, 0x7) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x3) r1 = dup3(r0, r0, 0x80000) close_range(r0, r1, 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) close_range(r0, r2, 0x0) r3 = dup2(r0, r0) splice(r3, &(0x7f0000000100)=0x79b8, r2, &(0x7f0000000140)=0x10000, 0x9, 0x5) syz_io_uring_setup(0x3615, &(0x7f0000000180)={0x0, 0x75db, 0x0, 0x1, 0x287}, &(0x7f0000000200), &(0x7f0000000240)) fsetxattr$security_evm(r1, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x2, "45783439afa6fcca86f8209bfe4bf4fd4a139c"}, 0x14, 0x3) read$FUSE(r1, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r3, &(0x7f0000003a00)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003980)=[{&(0x7f0000000340)={0x1f4, 0x27, 0x200, 0x70bd27, 0x25dfdbfd, "", [@nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @fd=r2}]}, @nested={0x192, 0x11b, 0x0, 0x1, [@generic="afd95d8220f5c2a34147a5b9b30a071cb0f67d898fe60e9f1da51a5cfe703d68e92e89f9d6f9ea5f7c8e2fd5f3edc75b22b2d45f0dae62073a6b59a1abc8cccce4d54c307e15b45b8e8730aac299f41d33d527754700c4585ec66ffd82cca1d8cc278900540324a3b4269a1102477c37166392c07255f1ad632c0c2dba54687058f39962705c1c76a57b1a9db863d63d42572afad8096b3fa8b9aeceede0a92e6fea3fd4293d916c1a71c129a06b7fb04ebe6683a355cb190c1f969dd7c18296162bfb8780", @typed={0xc, 0x129, 0x0, 0x0, @u64=0x80000001}, @generic="956a708fb795f715d23cb9045c38ab6a2aded4082e0537453ec5b03feac230adfa6ca107d9ad43d0e5f98e85e3a0fd4f2e1482ce99d1d505d41d159fc0aa96b7d4586625243dc340ebc099697a231cefbf72", @typed={0x8, 0x6e, 0x0, 0x0, @fd=r3}, @generic="8566258ccf4798f6ac14aef02bf89e0717c0b70942403a544a2ce4a8fd8ae408776df15f5fa64f10aad88822e602528d09d08631d0e801562c0c2351d7106b410be322e3a539238a041861b0bc925c9fdc2a80de97114b261267c5aff4fcd49b1512d1"]}, @typed={0xc, 0x12b, 0x0, 0x0, @u64=0xfffffffffffffffc}, @generic="cf7f097c142eda0fd7d95937f2a718c43989ba801dc0a39b", @generic="525b3af72845eec5cabe2890b0ad504ed3d05f716092a2", @typed={0x8, 0xbb, 0x0, 0x0, @pid}]}, 0x1f4}, {&(0x7f0000000540)={0x7c, 0x32, 0x300, 0x70bd29, 0x25dfdbfb, "", [@generic="c80f3bf0e567ff2cb4bf3cb0ccaa69393aeffe4b773b660014bbf72ee77e0979bcfcff63c5a8b10761d9cca55bb282d118469cf8cda7c12477d4945e9edc6f9066c4603017ed6e2c4eb73def10931de8dde935361f4af52e3d4200c3cb71bab4bbcabffa418c89b280ac0359"]}, 0x7c}, {&(0x7f00000005c0)={0x150, 0x41, 0x4, 0x70bd29, 0x25dfdbff, "", [@nested={0x27, 0x16, 0x0, 0x1, [@nested={0x4, 0x123}, @typed={0x5, 0x34, 0x0, 0x0, @str='\x00'}, @generic="765647ee3debf764fc0a729cb6c7aed8150c0cd340b1b5"]}, @generic="e068768c67eeefa878cda968dca03a5b3cd02947e4441fa1d2e8486e48ba8a4681779feedc9bd3ff014cbc791d0a894596ab8a85952639fd6d71ea6e8446c80b11972d6a01014043f3bf2a555e39b99496244ff446c3bf3c76f4f35a8322a591dee9c325341fc4483f", @nested={0xaa, 0x12e, 0x0, 0x1, [@generic="529e8267caa7cc8098caf7f038faa32d2f73e144ae7c6420daada54384b5dc622cd3d409a97653b0593c39b5a055bfedcc8ef7ead54bc8e8c61bbd93dc6a1089bf2df2d61c50fbf3e69bfd7dc5a86555e522b25095651cda8dbf17f3d7c5a736db8292a64d76402c6dd650cef39939d3b64dbf8c88c42f2bf4ac0d5bb60fcf225a782a93770f8268146b225949234db53f8cea6b52fddcdefdd94fdf66b5048c9f38eda9e30d"]}]}, 0x150}, {&(0x7f0000002780)={0x11cc, 0x28, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@generic="a6c50a63564f2601e23e8c59a86913b3730b93c93a28de17524f141452308be700c6bbd0fd5f66a3fc56d35ba7ab42ca58e2f3906145aeaa75ba8d6063bf2c674bf5655f381572c925116cd223c1015fd0fc12f5d27ec56a69e0aa53e96c4a87dad95a03c166a80c960d0ff8a7c1cbebc03c4e709784a66cd608b4e7d5ae8d9178231e6da90f6c3b42fe0b1cb948c89ba7c075525906033255b31915f69533c8fceb66aa14b4b8caf96a708f83ac5f776305", @nested={0x1028, 0x40, 0x0, 0x1, [@generic="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", @nested={0x4, 0x14e}, @generic="2cd6926d986bf9076d28d2f2aa41bc39", @typed={0x8, 0x139, 0x0, 0x0, @uid=r4}, @typed={0x4, 0x51}, @nested={0x4, 0x9e}]}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@empty}, @generic="a7e4b59c0886f5f6732bd91302548da83a48d1731c3a005c3d254292bb4619c9918dab4eecfbeaf3837435fe70c64b25c4f67439bc6ebb67f67f843b8d5233dee15d2d78c1dfb4edc89a759ab21e7573b4d9073573ae9f77c9bc748ec10bacb81dc4028cbb122d79ee272e51ac39bd55bdc93c6a9b0ccb28cb42bbcad4f147d9140751ae0c0055605a07c139d5879a6ce6448b525c366bea19a404df5ee6722571702b26d5bd80a0919ace1c4c1aee79e187e272faef730329fe5584ff2e23777795f248373b6a36890444040d98b592", @typed={0x8, 0x7c, 0x0, 0x0, @uid}]}, 0x11cc}], 0x4, &(0x7f00000039c0), 0x0, 0x583e75a53dbae5de}, 0x4040801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000003a40)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003a80), 0x400) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r6 = epoll_create1(0x0) copy_file_range(r1, &(0x7f0000003ac0)=0x6, r6, 0x0, 0x1, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000003b00)={0x28, 0x2, 0x0, {0x2, 0x2, 0x2}}, 0x28) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000003b40)={0x4, 0x7, 0x8, 0x10, 0x4ad}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000003c00)=[@text64={0x40, &(0x7f0000003b80)="66470f2f3b66b82b000f00d866b82c000f00d8b902090000b823b0ce7fba000000000f3048b800780000000000000f23d00f21f835300000050f23f8653e440fae2a66bad004b8cd1d3482ef65660f3880ac9b0b000000400f1c3364640f78d3", 0x60}], 0x1, 0x20, &(0x7f0000003c40), 0x0) setresuid(r4, r4, r4) read$FUSE(r1, &(0x7f0000003c80)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000005cc0)={0x2020}, 0x2020) 19.02049722s ago: executing program 0 (id=1632): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000000), 0x12) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000500)={0x1ffff, 0x0, &(0x7f0000ff8000/0x4000)=nil}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) (async) setresuid(r4, r4, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x808806, &(0x7f00000001c0)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}], [{@uid_gt={'uid>', r4}}]}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x303e02, 0x2f53a08607baf2e7) mknodat$loop(r5, &(0x7f00000000c0)='./file1\x00', 0x8, 0x0) (async) mknodat$loop(r5, &(0x7f00000000c0)='./file1\x00', 0x8, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) sendfile(r0, r0, 0x0, 0x7ffff000) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 19.02036994s ago: executing program 32 (id=1632): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000000), 0x12) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000500)={0x1ffff, 0x0, &(0x7f0000ff8000/0x4000)=nil}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) (async) setresuid(r4, r4, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x808806, &(0x7f00000001c0)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}], [{@uid_gt={'uid>', r4}}]}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x303e02, 0x2f53a08607baf2e7) mknodat$loop(r5, &(0x7f00000000c0)='./file1\x00', 0x8, 0x0) (async) mknodat$loop(r5, &(0x7f00000000c0)='./file1\x00', 0x8, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) sendfile(r0, r0, 0x0, 0x7ffff000) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 3.380050208s ago: executing program 4 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 3.379452938s ago: executing program 4 (id=1920): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000199c4f06000000004f5d010203010902240001002b2316a6700181172c0010000904d60202fff06f96ff0000090502020049"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 32) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async, rerun: 32) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r2, 0x0, 0x0) (rerun: 64) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="000000c8482b20c5051b4588ff74d7c0c1ed488b52d01d3658d335f65f86fd649db6f124ff154acddd204f96867bd914f77936a7e007b67857088af1cdfd75f26fe48e9b509e802613b2615495b07017678285bd088b7de73959e8b10df45119957988b252671a4b"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 32) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x24a800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000800)=ANY=[@ANYBLOB="01000000000100007b010000"]) (async) shutdown(r1, 0x1) (async, rerun: 32) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x90) (rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) (rerun: 32) 3.366895229s ago: executing program 4 (id=1921): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) r1 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000001300)="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", 0x1000, 0xfffffffffffffff9) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, 0x0, 0x0, r0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) add_key(&(0x7f0000000240)='user\x00', 0x0, &(0x7f0000000380)="0200871246bc8a8c51e3f66d5ca8084bc9b5b902000000debedc65b91f7f0000000000000000e98a0f8cdc157a05740f1a530d8592babf71d781b906b1226e82d51c51d884c489f35eb4beaf90ba2ff7296868219e89095bafa45c8fae415dfdb462ba1e02927b3e44023b1743af4433aa29537646915f1d97b82e146f85d3c65e59cb33f108559c4d653149cf68b157d44a582bc0b56806061449967f0fadc752c46335fc0965b9d4efed343746be25", 0xb0, r0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) r5 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r7) keyctl$chown(0x4, r7, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, r7, r1, 0x1) setsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, 0x0) epoll_create1(0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="08002900cb98b8"], 0x28}], 0x1}, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x463}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup/file0\x00', &(0x7f0000000040)='f2fs\x00', 0x8000, 0x0) 3.35541553s ago: executing program 4 (id=1922): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e44647522663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0x40, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x1240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x0, 0x1, 0xa4, 0x6, 0xa2b9, 0x4, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x7, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x90, 0x10001, 0xa, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0xfffffffd, 0xfffffffc, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0xbfc, 0x7ffe, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x5, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0xffff, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x61e3, 0xfff, 0x2, 0x100, 0xd8ce, 0x80, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x2a, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000040)={{r4, r5+60000000}, {0x77359400}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 3.304029324s ago: executing program 4 (id=1923): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x100}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$FS_IOC_GETFSMAP(r1, 0x4c09, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000280)={0x2, 'macvlan1\x00', {0x5}, 0x6}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xbc, r3, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x72}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}, @NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x0, 0x6, 0x9, 0x60]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7, 0x8}, {0x3, 0x4}, {0x3, 0x1}, {0x7, 0x3}, {0x2}, {0x0, 0x5}, {0x7, 0x2}, {0x7, 0x9}, {0x3, 0x5}, {0x2, 0xa}, {0x4}, {0x2, 0x2}, {0x7, 0x4}, {0x3, 0x4}, {0x4, 0x5}, {0x4, 0x4}, {0x2, 0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x3, 0xa}, {0x7, 0xa}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0x6}, {0x7, 0x2}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x9}, {0x4, 0x5}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x3}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x5, 0x8}, {0x1}, {0x1, 0x8}, {}, {0x3, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x18, 0x6, 0x1, 0x24, 0x9, 0x4, 0x48, 0x36, 0x18, 0x16, 0x6c, 0x9, 0xb]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000004) 3.174269955s ago: executing program 4 (id=1929): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x90ac1, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000003800)={0x2020}, 0x2020) 3.174083555s ago: executing program 33 (id=1929): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x90ac1, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000003800)={0x2020}, 0x2020) 2.36602711s ago: executing program 5 (id=1930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff15000e001c"], 0x4c}}, 0x10) syz_open_dev$usbmon(&(0x7f0000001840), 0x9, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x2000007, 0xc200) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000004) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x400}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x74}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x37}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000000}, 0x40) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0xffffffffffffffff) setpriority(0x1, 0x0, 0xe) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x2b, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/158, 0x0, 0x2, 0x2d}, @flat=@handle={0x73682a85, 0x100, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f0000000280)}}], 0x0, 0x0, 0x0}) 2.041383686s ago: executing program 3 (id=1939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) (async) fcntl$getown(r3, 0x9) 2.030584707s ago: executing program 3 (id=1940): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)=""/170) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) madvise(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) (async) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)=""/170) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) (async) madvise(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x3) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 1.976136651s ago: executing program 3 (id=1941): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x7, 0x1, 0x31}, @fda={0x66646185, 0x6, 0x0, 0x17}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000040)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000004000/0x4000)=nil) 1.974620551s ago: executing program 3 (id=1942): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) renameat2(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x40000000) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000001180)={{r3}, "198139429448cab186c3b2d154a91e9e4a9c440d32cd37582a8a4faada05ebbdf30a2a5579a11f89644da259cbf7bd21205131372fcdd794c9530d5d2c43846b61762c50476449fe29e2f905bfbefc8870f653c154cef30e22892a2891f13fce3707344671f5207aa2b480fea28a87176eb24c496575a13713a884866701b4397f63c8220acfc8cd47a4766e7a8a6d5c71a6c1e00d6a550a8bcbfdd480e53b55321368c65eb271753c3088e53e438c0c0b237314542cd46f0496e4c1f51fd81e5e663486f5b9020c6758a46eeef4811df75f5ccbc038c7499aa3ebe477d52679164ffe2ced9e1fe3215e235985b4be24ac8682fe9054ced93f4badad4b4fe0106c6a871e4a407365b445ee5e67eab47bd1d2b2d1b8e4152920fec5720e44d924973cf03bc2f39e8b5f23a3f6783743da27f8057033bf41a499fe202d97141c3d5f208abd12365fcd8434ca2a5387874e81a705de47e8cc8bfa6a129cb27e68d065e612c16459f7515e812e3124e02d4f3be0860068da1ba69ded1bdfd2447c2444499be26824dcc0b00165748caa962ad53db894ed49b35f6710b6196440b247dad1455c688af9ac65aabf9bd7b49bc6ec5377ef4c12a77f6f5e0e770c43e644bedd72f28296cba0991699b88015f1d0d15cc71b936b6371f8ace43c31e8e3f3ff1c843b47967f044deeb1b62fc4676d7baf7bafd622405961893feb3751c634a5a31700132c36065f6c31b45074bbd9674abb8f53df3c2f541ce8dcfe05d9d01684d019bdcd503ab2d2b8d7742ee16595833cd3b5314c257bd76e301407983be73d8be52ffa1e80286099e6a4940c782af0734f039ca4dac124979a8102c9a1cfbbe99a27119a534fad3b6646d01db26caaf3458f9cb121dcae2b08370f9d215a6535ffa188637ff33f46e6d690669c757681cbaf40b9a614be5f92b71116f8a0028d00f83747dc42611576d761c8223e2d929a2b5b981c3690d2518c1783d2cd209ae9e56d8c4a33ef5db002935b54f70b26d86724cedf481d9c00b9354f71339a7fd1ea5b38aa156f1b5ec69f445499c1fd91a69ca00ad04bc3319b6a1a9980e375da6148977c89ea6e7d2ec35dd25718b86b2de79b3a9c432d26d328931a409cd0b14855eba387f98ad6d07f23d030725091528516ebdd9eb72fad9ba8f7b493af2972d5156d839f30f4e4d32b45c2693c1b39fdd35dcbd50ee53584a578e2b10fbe907701581faf83fe84367d9b73828da27e3d3bba52141f49ab1ff4b5ef5de5b6382d2811447fa4a4407be9c41a5fd569bee32dfd7e146dddfbf2cec5bd003393010f0d3edadee8b21a3e5f979fa6e1d4e9c5c3414654fdc7f440312e0951eff7f322adf69d64c2f631ba66beb2542003c3001329374fcf2ff57eb79f9d93ee8ffd43e57ee1ae9129ab505f25aeec2e6c1b9dbba0bacb887f9e79e71e26df1d651b9f4906b590e69ae5363106edf8d3c2ec09c707db97617ac114071cafca0a3b02f988345036fcae3cc5f8657608b7631cacc7e4506c35bcbeb47322ecb4ae9828d18a64d98e54e6f3140823a63042864bb22e76f7c28a6745ab07d1e9d96a4f486f0432c9fd8a5e59f15e0dc29e40639dcca65574078c81045e07931f449c4a6fcf77ed8d0aec94778c848a382b319be88553a4e8b3afb9abd9b6d102a5450563dd64565e18fa1172076af8b630503630a5e9cf6371786ab4e4df2f52894008e6831912ee81bb439811f29ed8fc967e93a54389a4c86dfa06cedcc124e853c28b277f07697e36a6c05b1b2d161e5e9ecfb7e9f93d4041493ac14900273ced27a46279fd01cf4160e0679c254cb87a48c0b3bb7f9787e172b26909ff2787e1b82f7953faf63848640e1c68ff28d5a2725fd0d9d152ed37b6e38b372cfff5daa2bf5556dc536bcafc5c03090de3e9455534c9dc5ab09cbff0510dad89061b0ba4cee32eb8616640b82aa37d5fe9a1459737e4a9a176f7235e87ec0b9fa9934f89b889702e4effde5d01272e370670d6eed086ba548c443a992f2083391de855a370fdf2d64319a7948cd71f793b3fc17e02373a2f2b6cfd309618804da9c5eee1ad32fe087ee670fda1327f53b2df2cbf45213e6b260dca66638dc7e1fbbeb3cfacbbb78808496dae75f093f621f95212a5b924fe1bd65c31988e20d82d49b260adddf5c4d825f25c889a58e9a60810d6ed67a4bf51fe9736a01296a5773baf6e6a6eaa59e3597e122d1928bb53488ba5b843a28b49c6683de2c5bc06921665a0b6444fba80e416e20643b1e5192d62f53f7af511a8dceb697643212fec004f61f47ecf91ea9637a52783149a81d9def7ad95ea0a50c2e001cc32c02c2af4dc4791c019fad772a55f247f5182a761f76c357f6dc09a84bc9d1174491bebb408fec05aeb94e3e12b2ead3743296a606ea0559f74e999ce80ec3f94a80852a58e0aee066a042cb6ca5721f52543ebea288cad548773100b68755ba8c59f984e2a9b8ebc0fcc7613a142f3e817ff0d2d599b54ff5fa03bb80219882cc1969c66ffb5ef090f821615e8ce380387d6097d7fe30696ad58365190a74068caab72e711f65a067992410d422f4893b06fa20eb94314aef74f21515484e109da4ca4a70a17cc384a0c0a7f6c2898fef2d224f1b434579f3d8cfac22d50a34f43d82106540758b977f6e0ea3cccd113696ee767491015b0fd6719cc09e90e30833b2263920d710190e1429826ef1d3531e802cd663c186a916be70e2989eb5bac51788203b6c18c5cc12c658118a01a812d0431093dc79db49b31a2d27d3b5bc14a4575043c838457d54fd986aa8fbdf492a9973dc6ee98a8e1fb501451432d94ced63b74e1161e82d673ee68699c8ae0cc0f6e3dfb2249119b10b0acd062772235e762d0c99947d6a3b9e24c8ff0a7a5fcd55de401ed2a393bef13457ee6b851309bf85f2d15049f2b3fa64e31dac0bb7c8b9fa656189972a0a00b73a5bd0f75ac2d56dd65ffcb3700988fffc9747500fb46f6bab0d0f13766e366b105b7b9d7201bd75162124c6415b2ed1eb5ebfc38eae132dc416efc78c9f57820dddf68b8e0a997d5b47ebf09e1c098df370336ecd683ad084a51138ddaa7aad509b4d93bc4ff676d1d806824114ffdf12fcc9d40c57edb784230b79d049d18cff75cc2496e2e5493febb972f9f326948f90150f64223246db1d26e8ea79830da53dd4fe91e8686dfcf8607927f54a1b038d195b03c2fcda8aa6184df1d5b308b7adee6a5cc80186dfd550dddf47d3cdf5a08a6a18c95560326680d316f7139cf8c2399aff7a26467d308572e66f1ba6a67740cfc3d1bc4840c829c78af37a71baada9f5f54cab63b34132765e8b3414e678dd40e82d987f232655f6b73b99ba888f5360b9c6145acaabae0744d7ccb35e9093e8fe09e9bba57f8bfa59a6643955f1eb5a8abd1f2293648e78ebad637a868708fd75bee63dbe962760e2b32151cc040dd82917d8ec4d5839c20975a14d36e08a7ab60b5b49cc4bdbef51fd47d4e957f107662ccd2e2d0fca7ae7eeedae5a00ac53031d57764a8aeb8fe486b3c53572a848c18a6b532deb3634fd140bf1ff8890e38ecebedc2f73917727a8e7d2a9c937ee628bf33846936bd450b82dc492b945f13aafd8a55349a0aa90f974fb91ab6c9f0e601999287aac0e28148f8e45e49182c598fe02a556bb0382ab7050bae9408dad27890a59b2b0573ec9e9f11b835ba6b6ec207b15d7e25c275996012b1deaf0af6e5a9518b793b022555052a982f9b33e1f9464699d4f31b6361c14a1ca25a6f2bd8fdc9cf5c97ebe441b5746f1fd931344a774941d0ba882ec649dc6578e63b05b1ccc9dab59a76a7ba32de913540d8c887383e95c7ba0203fe0b198a27dfc7c7380716af1121d4a70df2333991b8fa5795a81450cc7471a3f60fb7c408c3a6d9c9aa2be268b89abfe04a73568d165a10c6af0083f2403df77b16c9d4d2c5d33853580a435f5e29c2787facf739d44465043776b421d4c2e32451d4a5eedece41fe918911cbcaa9dc78e048ba6bac0c140a6e4b65f539687bb2234cc1ae3336b3df6eb0b15dfe308dcb673ddd4445450aa0213a061f0a22cf1c2919ef9fda87ec872f05076b5b1a3fb178bb1b577f3b9f4ce8cfba98abab735f25924e32de92d54561194ff1035a0c1dcc29be289e978aef5d0a4b6cd547238b5d604e0f7e2dfbeb85ac5c6835a33b7014b16a3a8668148da4ff2e39200d2f4262bad4c741dd3a0d34e2f8753b077ece33f522c8b7c06662f25f0f6fb6bb3beaa35251ee3a63cc4abedf5c385b2f47db9e782753e01f953da4948e5977e4ccd4fd0bb33310a7d89e8b85831f12d7970b4f85d17b7e2589ecf01dc702547efe40c6142c08af371038e608725ccf52b0bd09f2de6a1e10a3b9623938c9ca131518cb37723ef7c4b3ca3c4dfec8450aa83ad11cd5d0e71f21a0a266e9c9d078be0af604d15c2b6e043d248a71c46416a5ac6555ae4fb2848577dc64a011146bb18e6b9371e547663d39df6f7a7a7b2cf46c4384dc665e3821b670b785002a2d1111297bbec70371101b95f83550e0c1e5c39d1595097bedf0039ce32a822bab3c9c83c68f1a447c4dbdde2f796a3b4663356cfbea6ffa22d78054ceb6ec909f69401950977c38e299632bc2bca65b9bfcf05f12712b206fae449300af16c18af591b703f00e8fe6d161067f4928cf1e9effb28e41f40cd92f10dd204c3e2216d5a224d9acb043455d90039f2ee9d6fc8cf17400a6e40207ccb94c37d4e7cd7349c074cefba210f8d94ee445a2f06489f4608b22c58999088b62cac03f3f063c86be03a6ee9aa31f737aabe6c548f392f03eb7ee3da6a091723cb3d9ac4686473af6800a438d1df4821600ee2f6abbf0e492d725ff1ef25c70ac844464b3e2f6de17b805320f9c1118906621148330b7f9794f07c0030c0d1231559c173f73afde0fdd8cb46f9068742008a34e869c6b5cb5579f1d0e55e3c8358d99c72415afa588c8bb2ec902d068389aa3bfb9479cbd366ad7783614c2d2f66e762e91ee7e265951ae22f0591c5a34f1f069e5bafcfb0942223e7776a374756135b86a35ff6101ba875682d246e763f3d6968846a1e5099747a26371aaa750f0120ee4a411e72f43c6efe148cf518b98a9703016144ee7389c22dcc1a5357ee2729e19d4305df16b3f55d63171a616e74ee052169d48d543d4226dc02c0b639773e81ac6f1d3b752e3f6edddb1c9584426367b98370444e95e75629dc0ade55038b8f97dd009b0c94a64f7e3a526adf9830da9be8b31b0348dd5192fbeb2baf650eae4fcefc1f07d2164ec71114b36bcc7607c55185b44658bdb67f416df5184a8b563f24ef9c849c9846574931ca7a407134350091ce90ca4218c012487d8ef1fa4eae758aee7b1289e7ca824de67efa3c70f53d341c36fe6b89ddd4a1ff7171b729490f7997fd0d13c82f3c46153a4da9ff4b09934cefca4f650a5a9c73c31a9c32628afe1fe592fc3da460a0ed312acb96a7fa1024641b4f10f50f714e48b48c031ba0ba506eb29aab1c392073cfd2c9b6e3873301080ad3362b060828437348c0268ec406daff08566b21ebd0f03c55cbf1752e247b8f8c8f9f5aa6a1690190d04eee1f77913e401865a760f922bf2281c83713094d28fd3fdff6e08f06e38c213e6454a345623287939a2395ea0bc98dd77ed2d78debbc7057de34dff10680de7c4900fdc4fa918f85c762cdf3fb4127054d6e0d1ee48e777c1e53fa1ec09bbf63a2f21"}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) (async) renameat2(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x40000000) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000001180)={{r3}, "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"}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) 1.974071181s ago: executing program 3 (id=1943): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89b0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) 1.973773931s ago: executing program 3 (id=1944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60050031, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) ioctl$KVM_SET_MSRS(r5, 0x4140aecd, 0x0) r6 = dup(r2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000050001c0"]) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xfe) getdents64(r7, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000100)={0x5, 0xfffefffb}, 0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB='readahead=0000000100000002176']) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x20, 0x0, 0x2, "f6c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x229, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xb, 0x2, 'Qe'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r10, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000100)={0x0, 0x8, 0x3, "41de2e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r8, 0xffffffffffffffff, 0x0) 1.480117031s ago: executing program 5 (id=1947): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x183c, &(0x7f0000000400)={0x0, 0x4100000, 0xb2, 0x2, 0x4}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x37) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x3}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x181942, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x5, &(0x7f0000000200)={0x0, 0x16, 0x800000000004, @tid=r5}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000300), 0x1) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x41, 0x0, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000100)={0x4, 0x1, 0x9d89, 0x1, 0x7}) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000003c0)=[{{0x1, 0x0, 0x1, 0x1}, {0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x1}}], 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_usb_connect$uac1(0x4, 0xac, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ef326d4e61300024506c"]}, 0x0) 1.251420559s ago: executing program 1 (id=1951): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.168367336s ago: executing program 1 (id=1952): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 1.108005491s ago: executing program 1 (id=1953): socket$nl_audit(0x10, 0x3, 0x9) socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x5, 0x4, 0x66, @empty, @empty, 0x7, 0x7800, 0xfffffffe, 0x5}}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, r0, 0x57788000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000000c0)=0x12, 0x4) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 941.441545ms ago: executing program 1 (id=1954): unshare(0x2c020400) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x400, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0xde, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10400, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x20, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x5, 0x7, 0x0, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0x2, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x1ff, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa806, 0x65f413f9, 0x107, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0xfffffffd, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) modify_ldt$read(0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x88001, 0xde6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r3, &(0x7f00000008c0)='/', 0x1, 0x0) sendfile(r3, r3, 0x0, 0x7fa) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f0000001900)="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"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0x13, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x80000001) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/73, 0x18}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x16}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x800000030) 937.236405ms ago: executing program 5 (id=1955): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x7, {0x7, 0x0, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0)) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x74886000) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x47bb) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 712.160153ms ago: executing program 2 (id=1956): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0x400448e7, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r2) write$cgroup_devices(r2, 0x0, 0xa) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000000)={0x5a8e, 0xffffffffffffffff, 'id1\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 711.719983ms ago: executing program 2 (id=1957): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000500)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002", @ANYRES32=r0, @ANYBLOB="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"], 0x80}}, 0x4040000) (async) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000000101040000008008000100ac14143208000200e00000020c0002800500ef6d453212c09dabbc5b42010000000000200002801400018008000100e000000108000200e00000010600034000030000080007400000000008000680000000000000000000"], 0x68}}, 0x0) (async) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000240)) sendmmsg(r1, &(0x7f00000000c0), 0x2c8, 0x300) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xe2) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRESDEC=r6, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r5], 0x80}}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 648.413158ms ago: executing program 2 (id=1958): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x0, 0x8}}) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x4, 0x3, {}, {r4, r5/1000+10000}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0xfffffff3}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000700)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x28800, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x420000, 0x41}, 0x18) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x2d0600, 0x30, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cpuset.cpus\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x144) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc8840, 0x8c) r10 = openat$incfs(r9, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"}) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0xc058671e, &(0x7f00000000c0)) r11 = syz_open_procfs(r6, &(0x7f0000000040)='ns\x00') getdents64(r11, &(0x7f00000046c0)=""/4096, 0x1000) getdents64(r11, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 608.820791ms ago: executing program 2 (id=1959): mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='adfs\x00', 0x1420, 0x0) 556.077256ms ago: executing program 2 (id=1960): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189882, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f0000000000000800030004"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x20000000001}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 514.064179ms ago: executing program 2 (id=1961): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) write(r1, &(0x7f0000000300)="d76bd7c6c3f97fe3", 0x8) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050018000200e509050102"], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$fuseblk(0x0, 0x0, &(0x7f0000000300), 0x80001, 0x0) ioctl$sock_netdev_private(r3, 0x89fc, &(0x7f00000002c0)="92e8f1b7edce85c79f9b2707c4e225dec95a66676ac83a7a39") sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) pread64(r2, &(0x7f0000000280)=""/133, 0x85, 0xfffffffffffffffc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6729582111f9b4395b7cdfb0ce0581b5e243", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmmsg$inet6(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x40, 0x40, 0x1, 0x0, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x65, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@generic={0x83, 0x9, "5efc45fd3712df"}, @noop, @noop, @timestamp={0x44, 0x10, 0xdd, 0x0, 0x5, [0x0, 0x5, 0x3]}, @lsrr={0x83, 0x17, 0x9c, [@empty, @multicast2, @loopback, @rand_addr=0x64010101, @remote]}, @end, @cipso={0x86, 0x11, 0x0, [{0x2, 0x2}, {0x0, 0x9, "4f920bce5e28ea"}]}, @cipso={0x86, 0x4, 0x1, [{0x1, 0xf, "e448e1adf554686a48035b2491"}, {0x1, 0x11, "d226eadb62763136ec890b3413145e"}, {0x2, 0x5, "1e0f21"}]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000380)={@local, 0x6, r6}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendfile(r2, r0, 0x0, 0x80000000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @remote, 0x10000}, 0x1c) 102.048062ms ago: executing program 1 (id=1962): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x7fff, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0xb, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x28}, 0x8000) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) unshare(0x40400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x1a) (async) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1963): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r5, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711}, 0x10, 0x40000) open(0x0, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000500)={0x2c, &(0x7f0000000580)={0x20, 0x23, 0x1e, {0x1e, 0xe, "d02180a78e9e4bcf10c25ed08c97fccad7a775c2af9ed8dccca74551"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, 0x0, 0x0, 0x0}, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x6000) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): tlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1806 comm=syz.2.451 [ 71.164329][ T1806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.451'. [ 71.174081][ T1806] fuse: Bad value for 'fd' [ 71.219315][ T9] usb 4-1: USB disconnect, device number 25 [ 71.227146][ T1814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8448 sclass=netlink_route_socket pid=1814 comm=syz.2.454 [ 71.240823][ T9] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 71.541239][ T1857] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 72.009720][ T1888] @: renamed from vlan0 (while UP) [ 72.161924][ T1891] pim6reg1: entered promiscuous mode [ 72.167272][ T1891] pim6reg1: entered allmulticast mode [ 72.258768][ T1893] netlink: 228 bytes leftover after parsing attributes in process `syz.1.469'. [ 72.269985][ T1893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 72.544845][ T394] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 72.838169][ T1926] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 72.864986][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 72.865004][ T36] audit: type=1400 audit(1756114713.353:431): avc: denied { append } for pid=1927 comm="syz.3.479" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.037495][ T1936] debugfs: Bad value for 'gid' [ 73.042312][ T1936] debugfs: Bad value for 'gid' [ 73.069955][ T36] audit: type=1400 audit(1756114713.553:432): avc: denied { setattr } for pid=1938 comm="syz.1.482" name="RAWv6" dev="sockfs" ino=14507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.145912][ T1941] 9pnet_fd: Insufficient options for proto=fd [ 73.173294][ T36] audit: type=1400 audit(1756114713.653:433): avc: denied { create } for pid=1942 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.537042][ T1952] rust_binder: 416: no such ref 0 [ 73.542145][ T1952] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.542164][ T1952] rust_binder: Read failure Err(EFAULT) in pid:416 [ 74.268656][ T1986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:419 [ 74.822307][ T1994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 74.978765][ T2003] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 74.988994][ T36] audit: type=1400 audit(1756114715.473:434): avc: denied { relabelto } for pid=2002 comm="syz.2.503" name="ptp0" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 75.016600][ T36] audit: type=1400 audit(1756114715.503:435): avc: denied { associate } for pid=2002 comm="syz.2.503" name="ptp0" dev="tmpfs" ino=833 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 75.044325][ T36] audit: type=1326 audit(1756114715.503:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2002 comm="syz.2.503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad64f8ebe9 code=0x0 [ 75.194576][ T2015] overlayfs: failed to resolve './file2': -2 [ 75.225900][ T2017] rust_binder: Error in use_page_slow: ESRCH [ 75.225924][ T2017] rust_binder: use_range failure ESRCH [ 75.232054][ T2017] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 75.237671][ T2017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 75.246017][ T2017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:432 [ 75.256299][ T2017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:432 [ 75.444820][ T912] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 75.594823][ T912] usb 4-1: device descriptor read/64, error -71 [ 75.825071][ T394] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 75.834805][ T912] usb 4-1: device descriptor read/64, error -71 [ 75.841845][ T2026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 75.866951][ T2028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=2028 comm=syz.2.513 [ 75.952877][ T2037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.516'. [ 75.974797][ T36] audit: type=1400 audit(1756114716.453:437): avc: denied { create } for pid=2038 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 75.974809][ T394] usb 1-1: device descriptor read/64, error -71 [ 75.976156][ T2039] netlink: 'syz.2.517': attribute type 28 has an invalid length. [ 76.012526][ T2039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2039 comm=syz.2.517 [ 76.014802][ T36] audit: type=1400 audit(1756114716.463:438): avc: denied { write } for pid=2038 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 76.025238][ T2039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2039 comm=syz.2.517 [ 76.114838][ T912] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 76.226668][ T394] usb 1-1: device descriptor read/64, error -71 [ 76.244844][ T912] usb 4-1: device descriptor read/64, error -71 [ 76.464812][ T394] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 76.494808][ T912] usb 4-1: device descriptor read/64, error -71 [ 76.594840][ T394] usb 1-1: device descriptor read/64, error -71 [ 76.614877][ T912] usb usb4-port1: attempt power cycle [ 76.711569][ T36] audit: type=1400 audit(1756114717.193:439): avc: denied { search } for pid=2052 comm="syz.2.523" name="/" dev="configfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.734502][ T36] audit: type=1400 audit(1756114717.213:440): avc: denied { read } for pid=2052 comm="syz.2.523" name="/" dev="configfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.787019][ T2059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:373 [ 76.834831][ T394] usb 1-1: device descriptor read/64, error -71 [ 76.954824][ T912] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 76.966278][ T394] usb usb1-port1: attempt power cycle [ 76.975808][ T912] usb 4-1: device descriptor read/8, error -71 [ 77.105838][ T912] usb 4-1: device descriptor read/8, error -71 [ 77.314855][ T394] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 77.335969][ T394] usb 1-1: device descriptor read/8, error -71 [ 77.344827][ T912] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 77.365967][ T912] usb 4-1: device descriptor read/8, error -71 [ 77.446815][ T2061] netlink: 104 bytes leftover after parsing attributes in process `syz.2.526'. [ 77.466085][ T394] usb 1-1: device descriptor read/8, error -71 [ 77.501617][ T912] usb 4-1: device descriptor read/8, error -71 [ 77.624435][ T912] usb usb4-port1: unable to enumerate USB device [ 77.714888][ T394] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 77.735888][ T394] usb 1-1: device descriptor read/8, error -71 [ 77.865877][ T394] usb 1-1: device descriptor read/8, error -71 [ 77.974967][ T394] usb usb1-port1: unable to enumerate USB device [ 78.161963][ T2084] netlink: 37 bytes leftover after parsing attributes in process `syz.2.533'. [ 78.213513][ T2092] 9pnet_fd: Insufficient options for proto=fd [ 78.604813][ T394] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 78.774818][ T394] usb 4-1: Using ep0 maxpacket: 8 [ 78.781173][ T394] usb 4-1: config 162 has an invalid interface number: 79 but max is 1 [ 78.789706][ T394] usb 4-1: config 162 has an invalid interface number: 183 but max is 1 [ 78.798365][ T394] usb 4-1: config 162 has no interface number 0 [ 78.804705][ T394] usb 4-1: config 162 has no interface number 1 [ 78.811252][ T394] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.824586][ T394] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 78.835769][ T394] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 78.847906][ T394] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 78.859783][ T394] usb 4-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 78.870433][ T394] usb 4-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 78.883891][ T394] usb 4-1: config 162 interface 79 has no altsetting 0 [ 78.890937][ T394] usb 4-1: config 162 interface 183 has no altsetting 0 [ 78.899723][ T394] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 78.909068][ T394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.917256][ T394] usb 4-1: Product: syz [ 78.921577][ T394] usb 4-1: Manufacturer: syz [ 78.926624][ T394] usb 4-1: SerialNumber: syz [ 79.139186][ T394] pl2303 4-1:162.79: required endpoints missing [ 79.156112][ T394] pl2303 4-1:162.183: pl2303 converter detected [ 79.163323][ T394] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 79.171872][ T394] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 79.180484][ T394] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 79.189031][ T394] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 79.197466][ T394] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 79.206051][ T394] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 79.214657][ T394] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 79.223288][ T394] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 79.231850][ T394] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 79.240641][ T394] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 79.249375][ T394] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 79.258990][ T394] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 79.269126][ T394] usb 4-1: USB disconnect, device number 30 [ 79.287004][ T394] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 79.297782][ T394] pl2303 4-1:162.183: device disconnected [ 79.520842][ T2106] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 79.662592][ T2120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.670650][ T2120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 80.117676][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 80.117695][ T36] audit: type=1400 audit(1756114720.603:443): avc: denied { create } for pid=2138 comm="syz.0.548" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.153634][ T36] audit: type=1400 audit(1756114720.613:444): avc: denied { mounton } for pid=2138 comm="syz.0.548" path="/137/file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.230275][ T36] audit: type=1400 audit(1756114720.713:445): avc: denied { getopt } for pid=2147 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.264805][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 80.283930][ T36] audit: type=1400 audit(1756114720.763:446): avc: denied { setopt } for pid=2150 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.329888][ T36] audit: type=1400 audit(1756114720.813:447): avc: denied { write } for pid=2154 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.331713][ T2155] IPv4: Oversized IP packet from 127.202.26.0 [ 80.445924][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.457039][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.466971][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 80.476165][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.487213][ T9] usb 2-1: config 0 descriptor?? [ 80.500973][ T2158] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 80.624294][ T36] audit: type=1400 audit(1756114721.103:448): avc: denied { connect } for pid=2166 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.703467][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 80.711101][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 80.718874][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 80.725013][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 80.742232][ T9] usb 2-1: USB disconnect, device number 30 [ 80.746135][ T2177] rust_binder: Write failure EINVAL in pid:390 [ 80.984822][ T394] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 81.145893][ T394] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.154822][ T45] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 81.156082][ T394] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.173281][ T394] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 81.182430][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.195125][ T394] usb 4-1: SerialNumber: syz [ 81.210343][ T2190] rust_binder: Write failure EINVAL in pid:475 [ 81.244370][ T2195] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 81.294898][ T45] usb 2-1: device descriptor read/64, error -71 [ 81.403019][ T2173] rust_binder: Write failure EFAULT in pid:365 [ 81.404146][ T394] usb 4-1: 0:2 : does not exist [ 81.425739][ T394] usb 4-1: USB disconnect, device number 31 [ 81.438068][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.544808][ T45] usb 2-1: device descriptor read/64, error -71 [ 81.784809][ T45] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 81.914813][ T45] usb 2-1: device descriptor read/64, error -71 [ 81.994550][ T2216] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.576'. [ 82.003707][ T2217] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.576'. [ 82.154812][ T45] usb 2-1: device descriptor read/64, error -71 [ 82.214789][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 82.265193][ T45] usb usb2-port1: attempt power cycle [ 82.374807][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 82.382337][ T9] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 82.390626][ T9] usb 4-1: config 0 has no interface number 1 [ 82.396767][ T9] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.405619][ T2260] overlayfs: failed to clone upperpath [ 82.407920][ T9] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 82.425035][ T9] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 82.434810][ T605] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 82.436496][ T9] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 82.454209][ T9] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.467470][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 82.470944][ T2264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2264 comm=syz.2.591 [ 82.479450][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 1024 [ 82.491674][ T2264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2264 comm=syz.2.591 [ 82.503006][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 82.516683][ T36] audit: type=1400 audit(1756114723.003:449): avc: denied { create } for pid=2263 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 82.527222][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 82.544821][ T2264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2264 comm=syz.2.591 [ 82.554020][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.566548][ T2264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2264 comm=syz.2.591 [ 82.574489][ T9] usb 4-1: Product: syz [ 82.586784][ T605] usb 1-1: device descriptor read/64, error -71 [ 82.591168][ T9] usb 4-1: Manufacturer: syz [ 82.597255][ T2264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2264 comm=syz.2.591 [ 82.602000][ T9] usb 4-1: SerialNumber: syz [ 82.614374][ T2264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2264 comm=syz.2.591 [ 82.629551][ T9] usb 4-1: config 0 descriptor?? [ 82.631439][ T45] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 82.636502][ T2264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2264 comm=syz.2.591 [ 82.645852][ T2212] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.656612][ T2264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2264 comm=syz.2.591 [ 82.665891][ T45] usb 2-1: device descriptor read/8, error -71 [ 82.678941][ T2264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2264 comm=syz.2.591 [ 82.695274][ T2264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=2264 comm=syz.2.591 [ 82.806346][ T45] usb 2-1: device descriptor read/8, error -71 [ 82.844822][ T605] usb 1-1: device descriptor read/64, error -71 [ 82.889861][ T412] usb 4-1: USB disconnect, device number 32 [ 83.044839][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 83.065804][ T45] usb 2-1: device descriptor read/8, error -71 [ 83.084819][ T605] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 83.195872][ T45] usb 2-1: device descriptor read/8, error -71 [ 83.218884][ T605] usb 1-1: device descriptor read/64, error -71 [ 83.252338][ T36] audit: type=1400 audit(1756114723.733:450): avc: denied { bind } for pid=2271 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.266573][ T2272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.593'. [ 83.349709][ T45] usb usb2-port1: unable to enumerate USB device [ 83.485054][ T605] usb 1-1: device descriptor read/64, error -71 [ 83.608768][ T605] usb usb1-port1: attempt power cycle [ 83.691742][ T36] audit: type=1400 audit(1756114724.173:451): avc: denied { remount } for pid=2280 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 83.898300][ T36] audit: type=1400 audit(1756114724.383:452): avc: denied { write } for pid=2289 comm="syz.1.599" name="netlink" dev="proc" ino=4026532473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.942818][ T2291] rust_binder: 2288 RLIMIT_NICE not set [ 83.954880][ T605] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 84.000931][ T605] usb 1-1: device descriptor read/8, error -71 [ 84.090499][ T9] rust_binder: 2287: removing orphan mapping 0:4248 [ 84.136600][ T605] usb 1-1: device descriptor read/8, error -71 [ 84.148127][ T2293] devpts: called with bogus options [ 84.227058][ T2296] fuse: Unknown parameter '' [ 84.237683][ T2297] pim6reg1: entered promiscuous mode [ 84.243040][ T2297] pim6reg1: entered allmulticast mode [ 84.351624][ T2310] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 84.351647][ T2310] rust_binder: Read failure Err(EFAULT) in pid:401 [ 84.360460][ T2310] rust_binder: 401: no such ref 16777216 [ 84.406377][ T2320] input: syz0 as /devices/virtual/input/input23 [ 84.464848][ T605] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 84.486409][ T605] usb 1-1: device descriptor read/8, error -71 [ 84.617772][ T605] usb 1-1: device descriptor read/8, error -71 [ 84.643095][ T2349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:405 [ 84.667849][ T2348] input: syz1 as /devices/virtual/input/input24 [ 84.724887][ T605] usb usb1-port1: unable to enumerate USB device [ 85.154186][ T2360] rust_binder: 401: no such ref 1 [ 85.159291][ T2360] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 85.171323][ T2360] rust_binder: Error in use_page_slow: ESRCH [ 85.171340][ T2360] rust_binder: use_range failure ESRCH [ 85.177467][ T2360] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 85.182970][ T2360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 85.191042][ T2360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:401 [ 85.201453][ T2366] rust_binder: Error while translating object. [ 85.210681][ T2366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.217031][ T2366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484 [ 85.227102][ T2368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.622'. [ 85.435123][ T2385] rust_binder: Error while translating object. [ 85.435157][ T2385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 85.441403][ T2385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:415 [ 85.507781][ T36] audit: type=1400 audit(1756114725.993:453): avc: denied { ioctl } for pid=2386 comm="syz.0.628" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.571291][ T2391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 85.750732][ T36] audit: type=1400 audit(1756114726.233:454): avc: denied { module_load } for pid=2414 comm="syz.1.632" path="/sys/power/wakeup_count" dev="sysfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 85.854870][ T605] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 85.897207][ T36] audit: type=1400 audit(1756114726.383:455): avc: denied { setopt } for pid=2429 comm="syz.2.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.014806][ T605] usb 1-1: Using ep0 maxpacket: 8 [ 86.022155][ T605] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.030802][ T605] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 86.039144][ T605] usb 1-1: config 0 has no interface number 0 [ 86.045824][ T605] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 86.057286][ T605] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024 [ 86.068769][ T605] usb 1-1: config 0 interface 88 has no altsetting 0 [ 86.077720][ T605] usb 1-1: string descriptor 0 read error: -22 [ 86.083968][ T605] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 86.093077][ T605] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 86.105126][ T605] usb 1-1: config 0 descriptor?? [ 86.116319][ T605] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input25 [ 86.210704][ T2432] exFAT-fs (rnullb0): invalid boot record signature [ 86.217374][ T2432] exFAT-fs (rnullb0): failed to read boot sector [ 86.223746][ T2432] exFAT-fs (rnullb0): failed to recognize exfat type [ 86.266354][ T2434] rust_binder: Error while translating object. [ 86.266409][ T2434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.272643][ T2434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 86.363195][ T605] usb 1-1: USB disconnect, device number 26 [ 86.507420][ T2445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 86.507689][ T2448] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 86.534890][ T45] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 86.622765][ T2454] kvm: pic: non byte read [ 86.627808][ T2454] kvm: pic: level sensitive irq not supported [ 86.627850][ T2454] kvm: pic: non byte read [ 86.638608][ T2454] kvm: pic: level sensitive irq not supported [ 86.638646][ T2454] kvm: pic: non byte read [ 86.649410][ T2454] kvm: pic: level sensitive irq not supported [ 86.649465][ T2454] kvm: pic: non byte read [ 86.660117][ T2454] kvm: pic: level sensitive irq not supported [ 86.660170][ T2454] kvm: pic: non byte read [ 86.670815][ T2454] kvm: pic: level sensitive irq not supported [ 86.670856][ T2454] kvm: pic: non byte read [ 86.696055][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.707051][ T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.716145][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.724828][ T45] usb 4-1: config 0 descriptor?? [ 86.792596][ T36] audit: type=1400 audit(1756114727.273:456): avc: denied { getopt } for pid=2457 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.811967][ T36] audit: type=1400 audit(1756114727.273:457): avc: denied { read } for pid=2457 comm="syz.1.647" path="socket:[17363]" dev="sockfs" ino=17363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.048403][ T36] audit: type=1400 audit(1756114727.533:458): avc: denied { shutdown } for pid=2472 comm="syz.2.652" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.132073][ T45] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 87.142381][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000F/input/input26 [ 87.191571][ T36] audit: type=1400 audit(1756114727.673:459): avc: denied { bind } for pid=2478 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.211770][ T36] audit: type=1400 audit(1756114727.693:460): avc: denied { listen } for pid=2478 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.232979][ T45] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 87.243822][ T36] audit: type=1400 audit(1756114727.693:461): avc: denied { write } for pid=2478 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.272775][ T36] audit: type=1400 audit(1756114727.693:462): avc: denied { accept } for pid=2478 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.407703][ T2488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.417286][ T2488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.425216][ T2488] rust_binder: Write failure EFAULT in pid:513 [ 87.537071][ T2436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.551757][ T2436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.560175][ T2436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.568798][ T2436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.577389][ T439] usb 4-1: USB disconnect, device number 33 [ 87.654820][ T9] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 87.673820][ T2490] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 87.825814][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.836861][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.846928][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.859965][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0b9c, bcdDevice= 0.00 [ 87.870609][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.880711][ T9] usb 1-1: config 0 descriptor?? [ 88.103922][ T9] usb 1-1: string descriptor 0 read error: -71 [ 88.115449][ T9] usbhid 1-1:0.0: can't add hid device: -22 [ 88.127582][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 88.139648][ T2511] kvm: emulating exchange as write [ 88.155694][ T9] usb 1-1: USB disconnect, device number 27 [ 88.212943][ T2522] binder: Bad value for 'stats' [ 88.464813][ T412] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 88.616311][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 88.630441][ T412] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 88.637210][ T2545] rust_binder: Error while translating object. [ 88.639603][ T2545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.639665][ T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.645810][ T2545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519 [ 88.656228][ T412] usb 4-1: config 0 descriptor?? [ 88.858299][ T2559] selinux_netlink_send: 24 callbacks suppressed [ 88.858317][ T2559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=2559 comm=syz.0.681 [ 88.879341][ T2559] rust_binder: Error while translating object. [ 88.879382][ T2559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 88.885605][ T2559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:533 [ 88.976751][ T2571] tipc: Started in network mode [ 88.990772][ T2571] tipc: Node identity ae186f6e31d4, cluster identity 4711 [ 88.997968][ T2571] tipc: Enabled bearer , priority 10 [ 89.079626][ T412] logitech 0003:046D:C295.0010: unbalanced delimiter at end of report description [ 89.089095][ T412] logitech 0003:046D:C295.0010: parse failed [ 89.095263][ T412] logitech 0003:046D:C295.0010: probe with driver logitech failed with error -22 [ 89.139939][ T2583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.691'. [ 89.284995][ T412] usb 4-1: USB disconnect, device number 34 [ 90.124805][ T9] tipc: Node number set to 2680975214 [ 90.414787][ T912] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 90.544102][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 90.544117][ T36] audit: type=1400 audit(1756114731.023:469): avc: denied { read } for pid=2640 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.585817][ T912] usb 1-1: config 127 has an invalid interface number: 32 but max is 0 [ 90.594148][ T912] usb 1-1: config 127 has no interface number 0 [ 90.600567][ T912] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 90.609743][ T912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.622362][ T912] ums-freecom 1-1:127.32: USB Mass Storage device detected [ 90.876364][ T2650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:569 [ 90.879069][ T2650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.896804][ T2650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.042753][ T36] audit: type=1400 audit(1756114731.523:470): avc: denied { execute } for pid=2660 comm="syz.2.712" path="/dev/rnullb0" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.214827][ T912] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 91.364824][ T912] usb 4-1: Using ep0 maxpacket: 16 [ 91.370856][ T36] audit: type=1326 audit(1756114731.853:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.1.713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f838f98ebe9 code=0x0 [ 91.393770][ T912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.404695][ T912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.414507][ T912] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 91.423719][ T912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.432295][ T912] usb 4-1: config 0 descriptor?? [ 91.474633][ T2668] rust_binder: 2666 RLIMIT_NICE not set [ 91.840426][ T912] playstation 0003:054C:05C4.0011: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 92.038783][ T912] playstation 0003:054C:05C4.0011: Invalid reportID received, expected 18 got 245 [ 92.048843][ T912] playstation 0003:054C:05C4.0011: Failed to retrieve DualShock4 pairing info: -22 [ 92.058186][ T912] playstation 0003:054C:05C4.0011: Failed to get MAC address from DualShock4 [ 92.066970][ T912] playstation 0003:054C:05C4.0011: Failed to create dualshock4. [ 92.075188][ T912] playstation 0003:054C:05C4.0011: probe with driver playstation failed with error -22 [ 92.154465][ T439] rust_binder: 2665: removing orphan mapping 0:24 [ 92.166441][ T2673] rust_binder: Write failure EINVAL in pid:447 [ 92.242552][ T2677] rust_binder: Error while translating object. [ 92.248799][ T2677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.254999][ T2677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 92.292244][ T912] usb 4-1: USB disconnect, device number 35 [ 92.414615][ T2684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50966 sclass=netlink_route_socket pid=2684 comm=syz.2.719 [ 92.714829][ T439] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 92.814196][ T912] rust_binder: 2653: removing orphan mapping 0:24 [ 92.820700][ T912] rust_binder: 0: removing orphan mapping 24:1048 [ 92.824704][ T2687] rust_binder: Error while translating object. [ 92.827205][ T2687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.833471][ T2687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:462 [ 92.865910][ T439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.885229][ T439] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.894948][ T439] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.904003][ T439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.912089][ T439] usb 2-1: SerialNumber: syz [ 93.038649][ T2710] netlink: 'syz.2.727': attribute type 25 has an invalid length. [ 93.120966][ T439] usb 2-1: 0:2 : does not exist [ 93.126184][ T439] usb 2-1: unit 5: unexpected type 0x09 [ 93.134372][ T439] usb 2-1: USB disconnect, device number 35 [ 93.144655][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.175749][ T912] usb 1-1: USB disconnect, device number 28 [ 93.208626][ T36] audit: type=1400 audit(1756114733.693:472): avc: denied { create } for pid=2716 comm="syz.0.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.570709][ T2721] fuse: Bad value for 'user_id' [ 93.575765][ T2721] fuse: Bad value for 'user_id' [ 93.708797][ T2730] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 93.717705][ T2730] rust_binder: Write failure EINVAL in pid:468 [ 93.736258][ T2732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 93.749787][ T2732] rust_binder: Write failure EINVAL in pid:470 [ 93.766274][ T2735] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 93.786099][ T2733] rust_binder: 457: no such ref 1 [ 93.791160][ T2733] rust_binder: 457: no such ref 1 [ 94.107223][ T36] audit: type=1400 audit(1756114734.593:473): avc: denied { shutdown } for pid=2744 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.454810][ T394] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 94.599636][ T439] rust_binder: 2727: removing orphan mapping 0:24 [ 94.607963][ T394] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.631612][ T394] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.652215][ T394] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.662298][ T394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.670894][ T394] usb 1-1: SerialNumber: syz [ 94.855544][ T36] audit: type=1326 audit(1756114735.343:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.3.747" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f406ef8ebe9 code=0x0 [ 94.880624][ T394] usb 1-1: 0:2 : does not exist [ 94.885722][ T394] usb 1-1: unit 14 not found! [ 94.893253][ T394] usb 1-1: USB disconnect, device number 29 [ 94.908149][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.909694][ T2774] rust_binder: 465: no such ref 0 [ 94.930707][ T2774] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 94.938385][ T36] audit: type=1400 audit(1756114735.423:475): avc: denied { relabelfrom } for pid=2771 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.941361][ T2774] rust_binder: 465: no such ref 0 [ 94.958716][ T36] audit: type=1400 audit(1756114735.423:476): avc: denied { relabelto } for pid=2771 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 95.066705][ T394] rust_binder: 2778: removing orphan mapping 0:24 [ 95.138569][ T2791] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 95.146344][ T2791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 95.231224][ T2795] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.232960][ T2795] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 95.239617][ T2795] rust_binder: Read failure Err(EFAULT) in pid:496 [ 95.347816][ T2802] overlayfs: failed to clone upperpath [ 95.416304][ T36] audit: type=1400 audit(1756114735.903:477): avc: denied { create } for pid=2810 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 95.558484][ T2823] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 95.818205][ T2869] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.818370][ T36] audit: type=1400 audit(1756114736.303:478): avc: denied { lock } for pid=2866 comm="syz.0.777" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.818632][ T2868] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 96.054706][ T2890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.262749][ T36] audit: type=1400 audit(1756114736.743:479): avc: denied { map } for pid=2913 comm="syz.3.793" path="pipe:[20472]" dev="pipefs" ino=20472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 96.314961][ T412] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 96.465876][ T412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.476825][ T412] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 96.485892][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.494696][ T412] usb 1-1: config 0 descriptor?? [ 96.594794][ T45] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 96.702025][ T412] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 96.711607][ T412] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0012/input/input28 [ 96.724779][ T45] usb 2-1: device descriptor read/64, error -71 [ 96.778074][ T412] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 96.932272][ T2917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.932777][ T412] usb 1-1: USB disconnect, device number 30 [ 96.964794][ T45] usb 2-1: device descriptor read/64, error -71 [ 97.204813][ T45] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 97.334789][ T45] usb 2-1: device descriptor read/64, error -71 [ 97.444143][ T2933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.444944][ T2933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 97.451418][ T2933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:620 [ 97.584804][ T45] usb 2-1: device descriptor read/64, error -71 [ 97.704823][ T912] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 97.712566][ T45] usb usb2-port1: attempt power cycle [ 97.865889][ T912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.875704][ T912] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.885602][ T912] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.900168][ T912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 97.909523][ T912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 97.917803][ T912] usb 1-1: Product: syz [ 97.922077][ T912] usb 1-1: Manufacturer: syz [ 97.926946][ T912] usb 1-1: SerialNumber: syz [ 98.074841][ T45] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 98.095832][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.134237][ T912] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 98.238633][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.337468][ T394] usb 1-1: USB disconnect, device number 31 [ 98.344097][ T394] usblp0: removed [ 98.484818][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 98.505834][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.635743][ T45] usb 2-1: device descriptor read/8, error -71 [ 98.744903][ T45] usb usb2-port1: unable to enumerate USB device [ 98.895849][ T2974] /dev/rnullb0: Can't lookup blockdev [ 98.955976][ T36] audit: type=1400 audit(1756114739.443:480): avc: denied { write } for pid=2986 comm="syz.2.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.005291][ T2989] netlink: 25 bytes leftover after parsing attributes in process `syz.2.819'. [ 99.421151][ T3008] __vm_enough_memory: pid: 3008, comm: syz.1.826, bytes: 18014402804453376 not enough memory for the allocation [ 99.474288][ T3018] input: syz1 as /devices/virtual/input/input29 [ 99.525011][ T3030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 99.534431][ T3030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.834'. [ 99.583382][ T36] audit: type=1400 audit(1756114740.063:481): avc: denied { accept } for pid=3038 comm="syz.1.837" lport=257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.604550][ T36] audit: type=1400 audit(1756114740.063:482): avc: denied { read } for pid=3038 comm="syz.1.837" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.629063][ T36] audit: type=1400 audit(1756114740.063:483): avc: denied { open } for pid=3038 comm="syz.1.837" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.630991][ T3048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 99.654322][ T36] audit: type=1400 audit(1756114740.073:484): avc: denied { execute } for pid=3038 comm="syz.1.837" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 99.696968][ T36] audit: type=1400 audit(1756114740.113:485): avc: denied { mount } for pid=3047 comm="syz.1.840" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 99.719535][ T36] audit: type=1400 audit(1756114740.113:486): avc: denied { mounton } for pid=3047 comm="syz.1.840" path="/172/file0" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 99.768428][ T3054] fuse: Unknown parameter '0xffffffffffffffff' [ 99.961794][ T36] audit: type=1400 audit(1756114740.443:487): avc: denied { create } for pid=3068 comm="syz.3.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.982093][ T3080] bridge0: port 3(macsec0) entered blocking state [ 99.988596][ T3080] bridge0: port 3(macsec0) entered disabled state [ 99.995296][ T3080] macsec0: entered allmulticast mode [ 100.000625][ T3080] veth1_macvtap: entered allmulticast mode [ 100.006895][ T3080] macsec0: entered promiscuous mode [ 100.012273][ T3080] bridge0: port 3(macsec0) entered blocking state [ 100.018734][ T3080] bridge0: port 3(macsec0) entered forwarding state [ 100.038380][ T3082] can0: slcan on ptm0. [ 100.123529][ T3096] $: renamed from bridge_slave_0 (while UP) [ 100.274810][ T394] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 100.465574][ T394] usb 2-1: config 0 has no interfaces? [ 100.471067][ T394] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 100.480343][ T394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.489165][ T394] usb 2-1: config 0 descriptor?? [ 100.511354][ T3145] 9pnet_fd: Insufficient options for proto=fd [ 100.696492][ T912] usb 2-1: USB disconnect, device number 40 [ 100.735252][ T3081] can0 (unregistered): slcan off ptm0. [ 101.053422][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 101.053441][ T36] audit: type=1400 audit(1756114741.533:491): avc: denied { setopt } for pid=3180 comm="syz.0.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.258253][ T36] audit: type=1400 audit(1756114741.743:492): avc: denied { write } for pid=3185 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.278845][ T36] audit: type=1400 audit(1756114741.743:493): avc: denied { nlmsg_write } for pid=3185 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.332105][ T3193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 101.544838][ T394] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 101.694797][ T394] usb 2-1: Using ep0 maxpacket: 8 [ 101.701242][ T394] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.710023][ T394] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 101.718184][ T394] usb 2-1: config 0 has no interface number 0 [ 101.724298][ T394] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 101.735301][ T394] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024 [ 101.746568][ T394] usb 2-1: config 0 interface 88 has no altsetting 0 [ 101.755666][ T394] usb 2-1: string descriptor 0 read error: -22 [ 101.761896][ T394] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 101.770987][ T394] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 101.779807][ T394] usb 2-1: config 0 descriptor?? [ 101.787349][ T394] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input30 [ 101.951689][ T36] audit: type=1400 audit(1756114742.433:494): avc: denied { connect } for pid=3222 comm="syz.3.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.988018][ T36] audit: type=1400 audit(1756114742.473:495): avc: denied { bind } for pid=3227 comm="syz.2.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.098394][ T394] usb 2-1: USB disconnect, device number 41 [ 102.384221][ T36] audit: type=1400 audit(1756114742.863:496): avc: denied { setopt } for pid=3229 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.532283][ T3240] /dev/rnullb0: Can't lookup blockdev [ 102.636947][ T3261] netlink: 72 bytes leftover after parsing attributes in process `syz.3.901'. [ 102.755552][ T3271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 103.355162][ T36] audit: type=1400 audit(1756114743.843:497): avc: denied { lock } for pid=3309 comm="syz.3.918" path="socket:[21972]" dev="sockfs" ino=21972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.378379][ T36] audit: type=1400 audit(1756114743.843:498): avc: denied { getopt } for pid=3309 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.455526][ T3322] fuse: Bad value for 'fd' [ 103.461355][ T3322] overlay: Unknown parameter 'measure' [ 103.570168][ T3345] overlayfs: failed to clone upperpath [ 103.590896][ T3347] 8021q: VLANs not supported on wg2 [ 103.745920][ T36] audit: type=1400 audit(1756114744.233:499): avc: denied { mount } for pid=3358 comm="syz.0.936" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 103.768679][ T3359] overlayfs: failed to clone lowerpath [ 103.885849][ T3368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 104.100666][ T36] audit: type=1400 audit(1756114744.583:500): avc: denied { execute_no_trans } for pid=3376 comm="syz.3.941" path="/223/file0" dev="tmpfs" ino=1242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.152164][ T3381] rust_binder: 549: no such ref 2 [ 104.307901][ T3393] 9pnet_fd: Insufficient options for proto=fd [ 104.414161][ T3400] overlayfs: failed to clone upperpath [ 104.503631][ T3402] overlayfs: failed to clone upperpath [ 104.930962][ T3430] netlink: 'syz.3.962': attribute type 32 has an invalid length. [ 104.948202][ T3435] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 105.073128][ T3449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 105.083333][ T3449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.968'. [ 105.122920][ T3451] bridge0: entered allmulticast mode [ 105.175686][ T3457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.971'. [ 105.185145][ T3458] overlayfs: failed to clone upperpath [ 105.918133][ T3501] input: syz1 as /devices/virtual/input/input31 [ 105.983468][ T3503] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 106.072424][ T3514] binder: Unknown parameter 'fsname' [ 106.118645][ T3524] overlayfs: failed to clone upperpath [ 106.327732][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 106.327750][ T36] audit: type=1400 audit(1756114746.813:504): avc: denied { connect } for pid=3544 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.604805][ T9] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 106.613549][ T3553] overlayfs: failed to clone upperpath [ 106.756613][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.764641][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 106.773193][ T9] usb 2-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.786272][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 106.794803][ T9] usb 2-1: string descriptor 0 read error: -22 [ 106.800995][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 106.810075][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.821221][ T3548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.029031][ T3548] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 107.040637][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 107.054700][ T9] usb 2-1: USB disconnect, device number 42 [ 107.061526][ T9] usblp0: removed [ 107.184865][ T3582] fuse: Bad value for 'fd' [ 107.221532][ T36] audit: type=1400 audit(1756114747.703:505): avc: denied { getopt } for pid=3587 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.258107][ T3594] veth1_macvtap: left promiscuous mode [ 107.307434][ T3598] tipc: Enabling of bearer rejected, failed to enable media [ 107.339419][ T3602] overlayfs: failed to clone upperpath [ 107.589266][ T3611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.589303][ T3611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 107.749766][ T3619] overlay: Unknown parameter 'fowner' [ 107.767244][ T3619] overlay: Unknown parameter 'fowner' [ 108.334920][ T3648] /dev/loop2: Can't lookup blockdev [ 108.468519][ T3654] overlayfs: failed to clone upperpath [ 108.503336][ T3661] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1039'. [ 108.531178][ T3661] overlayfs: cannot append lower layer [ 108.559166][ T36] audit: type=1400 audit(1756114749.043:506): avc: denied { nlmsg_read } for pid=3672 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.584885][ T3675] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1044'. [ 108.625601][ T3675] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1044'. [ 108.634529][ T3675] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 109.076535][ T36] audit: type=1400 audit(1756114749.563:507): avc: denied { remount } for pid=3684 comm="syz.2.1048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.182100][ T36] audit: type=1400 audit(1756114749.663:508): avc: denied { lock } for pid=3706 comm="syz.2.1055" path="socket:[22786]" dev="sockfs" ino=22786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 109.225398][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 109.250084][ T36] audit: type=1400 audit(1756114749.733:509): avc: denied { read } for pid=3716 comm="syz.3.1060" path="socket:[23776]" dev="sockfs" ino=23776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.253766][ T9] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.385332][ T3734] netlink: 'syz.3.1063': attribute type 12 has an invalid length. [ 109.394389][ T3734] mmap: syz.3.1063 (3734): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 109.500962][ T3760] SELinux: Context system_u:object_r:audisp_remote_exec_t:s0 is not valid (left unmapped). [ 109.511747][ T36] audit: type=1400 audit(1756114749.993:510): avc: denied { relabelto } for pid=3759 comm="syz.3.1071" name="kvm" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 109.566547][ T36] audit: type=1400 audit(1756114750.023:511): avc: denied { associate } for pid=3759 comm="syz.3.1071" name="kvm" dev="tmpfs" ino=999 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 109.593970][ T3772] 9pnet_fd: Insufficient options for proto=fd [ 109.602050][ T36] audit: type=1400 audit(1756114750.023:512): avc: denied { ioctl } for pid=3759 comm="syz.3.1071" path="/dev/kvm" dev="tmpfs" ino=999 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 109.634341][ T36] audit: type=1400 audit(1756114750.053:513): avc: denied { read write } for pid=3771 comm="syz.3.1075" name="kvm" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 110.014799][ T45] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 110.164811][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 110.171041][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.182611][ T45] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 110.191697][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.199713][ T45] usb 2-1: Product: syz [ 110.203883][ T45] usb 2-1: Manufacturer: syz [ 110.208484][ T45] usb 2-1: SerialNumber: syz [ 110.213725][ T45] usb 2-1: config 0 descriptor?? [ 110.219503][ T45] cdc_ether 2-1:0.0: probe with driver cdc_ether failed with error -22 [ 110.227906][ T45] usb 2-1: unsupported MDLM descriptors [ 110.420805][ T3783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.429364][ T3783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.438679][ T9] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 110.446786][ T9] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.077793][ T3847] overlayfs: failed to clone upperpath [ 111.113296][ T3853] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1104'. [ 111.268806][ T3883] overlayfs: failed to resolve './file1': -2 [ 111.445881][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 111.445898][ T36] audit: type=1400 audit(1756114751.933:517): avc: denied { write } for pid=3905 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 111.795811][ T3921] overlayfs: failed to clone upperpath [ 112.002799][ T36] audit: type=1400 audit(1756114752.483:518): avc: denied { getopt } for pid=3941 comm="syz.2.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.222468][ T3976] overlayfs: failed to clone upperpath [ 112.250563][ T36] audit: type=1400 audit(1756114752.733:519): avc: denied { bind } for pid=3978 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.319547][ T36] audit: type=1400 audit(1756114752.803:520): avc: denied { append } for pid=3986 comm="syz.3.1150" name="kvm" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 112.593596][ T36] audit: type=1400 audit(1756114753.073:521): avc: denied { accept } for pid=4005 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.614418][ T4007] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60178 sclass=netlink_xfrm_socket pid=4007 comm=syz.0.1157 [ 112.634377][ T36] audit: type=1400 audit(1756114753.113:522): avc: denied { read } for pid=4005 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.661227][ T912] usb 2-1: USB disconnect, device number 43 [ 112.732969][ T4014] rust_binder: Write failure EFAULT in pid:626 [ 113.045556][ T4060] overlayfs: failed to clone upperpath [ 113.045556][ T4059] overlayfs: failed to clone upperpath [ 113.148092][ T36] audit: type=1326 audit(1756114753.623:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.1181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f406ef8ebe9 code=0x0 [ 113.175952][ T912] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 113.243095][ T36] audit: type=1400 audit(1756114753.723:524): avc: denied { bpf } for pid=4086 comm="syz.3.1184" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.311842][ T36] audit: type=1326 audit(1756114753.793:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.3.1186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f406ef8ebe9 code=0x0 [ 113.345846][ T912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.356033][ T912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.359782][ T4106] overlayfs: failed to clone lowerpath [ 113.366587][ T912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.379669][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.388484][ T912] usb 2-1: Product: syz [ 113.392693][ T912] usb 2-1: Manufacturer: syz [ 113.397455][ T36] audit: type=1400 audit(1756114753.883:526): avc: denied { map } for pid=4108 comm="syz.2.1192" path="socket:[23481]" dev="sockfs" ino=23481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 113.397473][ T912] usb 2-1: SerialNumber: syz [ 113.789893][ T912] usb 2-1: 0:2 : does not exist [ 113.796611][ T912] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 113.808537][ T912] usb 2-1: USB disconnect, device number 44 [ 113.818254][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.932271][ T4126] 9pnet_fd: Insufficient options for proto=fd [ 114.218831][ T4148] rust_binder: Error while translating object. [ 114.218885][ T4148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 114.225103][ T4148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:639 [ 114.260110][ T4152] netlink: 'syz.1.1206': attribute type 25 has an invalid length. [ 114.278008][ T4152] rust_binder: 643: no such ref 3 [ 114.283054][ T4152] rust_binder: 643: no such ref 0 [ 114.288173][ T4152] rust_binder: Write failure EINVAL in pid:643 [ 114.378810][ T4155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 114.385024][ T4155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:646 [ 114.478382][ T4161] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.671308][ T4194] overlayfs: failed to clone upperpath [ 114.748298][ T698] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.022313][ T4236] overlayfs: failed to clone lowerpath [ 115.028689][ T4236] fuse: Unknown parameter 'fowner' [ 115.496103][ T4254] /dev/rnullb0: Can't lookup blockdev [ 116.549598][ T4282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 116.559222][ T4282] overlayfs: missing 'workdir' [ 116.570916][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 116.570933][ T36] audit: type=1400 audit(1756114757.053:533): avc: denied { ioctl } for pid=4281 comm="syz.2.1248" path="socket:[24807]" dev="sockfs" ino=24807 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.577130][ T4282] netlink: 376 bytes leftover after parsing attributes in process `syz.2.1248'. [ 116.602510][ T36] audit: type=1400 audit(1756114757.053:532): avc: denied { ioctl } for pid=4281 comm="syz.2.1248" path="socket:[24807]" dev="sockfs" ino=24807 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.665005][ T4291] fuse: Unknown parameter 'rootY6x 4mode' [ 116.717183][ T36] audit: type=1400 audit(1756114757.203:534): avc: denied { create } for pid=4296 comm="syz.3.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 116.764781][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 116.764783][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.812169][ T4304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'. [ 116.826609][ T4305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'. [ 116.833152][ T4309] overlayfs: failed to resolve './file1': -2 [ 116.932228][ T36] audit: type=1400 audit(1756114757.413:535): avc: denied { map } for pid=4319 comm="syz.1.1263" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.955959][ T36] audit: type=1400 audit(1756114757.413:536): avc: denied { execute } for pid=4319 comm="syz.1.1263" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.125800][ T4333] 9pnet_fd: Insufficient options for proto=fd [ 117.133222][ T4333] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=32884 sclass=netlink_xfrm_socket pid=4333 comm=syz.3.1268 [ 117.238239][ T4337] tipc: Trying to set illegal importance in message [ 117.246118][ T4337] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 117.253500][ T4337] rust_binder: Write failure EINVAL in pid:685 [ 117.253939][ T4338] input: syz1 as /devices/virtual/input/input32 [ 117.442578][ T4353] rust_binder: 692: no such ref 2 [ 117.447779][ T4353] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 117.714787][ T439] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 117.864776][ T439] usb 2-1: Using ep0 maxpacket: 32 [ 117.871033][ T439] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.879428][ T439] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.888066][ T439] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.897069][ T439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.906756][ T439] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.916426][ T439] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.929410][ T439] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.938457][ T439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.947198][ T439] usb 2-1: config 0 descriptor?? [ 118.040641][ T36] audit: type=1400 audit(1756114758.523:537): avc: denied { shutdown } for pid=4372 comm="syz.2.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.061625][ T36] audit: type=1400 audit(1756114758.533:538): avc: denied { getopt } for pid=4372 comm="syz.2.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.156868][ T439] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 118.175379][ T4383] overlayfs: disabling nfs_export due to verity=require [ 118.182372][ T4383] overlayfs: failed to clone upperpath [ 118.506147][ T4358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.514651][ T4358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.524194][ T4358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.532811][ T4358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.721733][ T4392] /dev/rnullb0: Can't lookup blockdev [ 118.739786][ T4396] 9pnet_fd: Insufficient options for proto=fd [ 118.747027][ T4396] 9pnet_fd: Insufficient options for proto=fd [ 118.768614][ T4400] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1294'. [ 119.173581][ T4420] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1301'. [ 119.183545][ T4420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4420 comm=syz.0.1301 [ 119.196629][ T4420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4420 comm=syz.0.1301 [ 119.525299][ T4440] overlayfs: failed to clone lowerpath [ 120.129984][ T4460] /dev/loop0: Can't lookup blockdev [ 120.135721][ T4460] /dev/rnullb0: Can't lookup blockdev [ 120.141209][ T4461] /dev/rnullb0: Can't lookup blockdev [ 120.157848][ T36] audit: type=1400 audit(1756114760.643:539): avc: denied { create } for pid=4462 comm="syz.2.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 120.179640][ T36] audit: type=1400 audit(1756114760.643:540): avc: denied { sys_admin } for pid=4462 comm="syz.2.1316" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 120.201016][ T36] audit: type=1400 audit(1756114760.643:541): avc: denied { associate } for pid=4464 comm="syz.2.1316" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 120.482489][ T439] usb 2-1: USB disconnect, device number 45 [ 120.489864][ T439] usblp0: removed [ 120.603747][ T4485] 9pnet_fd: Insufficient options for proto=fd [ 120.826851][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1326'. [ 120.835878][ T4496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1326'. [ 120.944242][ T4501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.944451][ T4501] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 120.969698][ T4501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.969839][ T4501] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 121.193530][ T4514] netlink: 'syz.1.1331': attribute type 32 has an invalid length. [ 121.347019][ T4526] fuse: Unknown parameter 'oȼ^'0x0000000000000005' [ 121.459624][ T4537] overlay: Unknown parameter 'dont_measure' [ 121.506407][ T4541] rust_binder: Error while translating object. [ 121.506448][ T4541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 121.512650][ T4541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:744 [ 121.553648][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 121.645223][ T4558] netlink: 'syz.1.1346': attribute type 8 has an invalid length. [ 121.994803][ T412] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 122.050987][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 122.051003][ T36] audit: type=1326 audit(1756114762.533:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.2.1353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad64f8ebe9 code=0x0 [ 122.164806][ T412] usb 2-1: Using ep0 maxpacket: 16 [ 122.171063][ T412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.181258][ T412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.191499][ T412] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.200658][ T412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.208748][ T412] usb 2-1: Product: syz [ 122.212998][ T412] usb 2-1: Manufacturer: syz [ 122.217601][ T412] usb 2-1: SerialNumber: syz [ 122.467074][ T412] usb 2-1: 0:2 : does not exist [ 122.480832][ T412] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 122.493715][ T412] usb 2-1: USB disconnect, device number 46 [ 122.502944][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.532511][ T4586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.542330][ T4585] netlink: 'syz.3.1356': attribute type 22 has an invalid length. [ 122.557160][ T4583] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 122.557186][ T4583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 122.565242][ T4583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:757 [ 122.671005][ T4594] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 122.701744][ T4594] serio: Serial port ptm0 [ 122.783959][ T4620] overlayfs: failed to clone upperpath [ 123.003648][ T4657] overlayfs: failed to clone lowerpath [ 123.194829][ T439] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 123.345866][ T439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.364074][ T439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.373862][ T439] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.389756][ T439] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.393916][ T4674] netlink: 'syz.3.1387': attribute type 11 has an invalid length. [ 123.398998][ T439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.415931][ T439] usb 2-1: config 0 descriptor?? [ 123.423989][ T4676] overlayfs: failed to clone upperpath [ 123.430971][ T36] audit: type=1400 audit(1756114763.913:549): avc: denied { execheap } for pid=4675 comm="syz.3.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 123.741638][ T36] audit: type=1400 audit(1756114764.223:550): avc: denied { create } for pid=4689 comm="syz.2.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.824195][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.831756][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.839190][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.846626][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.854046][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.861467][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.868861][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.876266][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.883650][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.891061][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.898467][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.905902][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.913378][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.920776][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.928275][ T439] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 123.935876][ T439] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 123.944676][ T439] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 124.088782][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.097308][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.146934][ T412] usb 2-1: USB disconnect, device number 47 [ 124.288271][ T4703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4703 comm=syz.2.1396 [ 124.300945][ T4703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=4703 comm=syz.2.1396 [ 124.322665][ T4705] syz.2.1397 uses obsolete (PF_INET,SOCK_PACKET) [ 124.664257][ T4727] netlink: 'syz.1.1406': attribute type 16 has an invalid length. [ 124.672177][ T4727] netlink: 'syz.1.1406': attribute type 3 has an invalid length. [ 124.680171][ T4727] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 124.687972][ T4727] netlink: 64030 bytes leftover after parsing attributes in process `syz.1.1406'. [ 124.727040][ T36] audit: type=1400 audit(1756114765.213:551): avc: denied { append } for pid=4729 comm="syz.1.1407" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.109708][ T36] audit: type=1400 audit(1756114765.593:552): avc: denied { checkpoint_restore } for pid=4745 comm="syz.2.1413" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.384782][ T412] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 125.534782][ T412] usb 2-1: Using ep0 maxpacket: 8 [ 125.541080][ T412] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 125.552230][ T412] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 125.566028][ T412] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.572638][ T412] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 125.581714][ T412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.590385][ T412] usb 2-1: config 0 descriptor?? [ 125.797447][ T412] gt683r_led 0003:1770:FF00.0016: invalid report_size -795022069 [ 125.806243][ T412] gt683r_led 0003:1770:FF00.0016: item 0 4 1 7 parsing failed [ 125.816151][ T412] gt683r_led 0003:1770:FF00.0016: hid parsing failed [ 125.823015][ T412] gt683r_led 0003:1770:FF00.0016: probe with driver gt683r_led failed with error -22 [ 125.834396][ T412] usb 2-1: USB disconnect, device number 48 [ 125.960315][ T4768] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 126.000661][ T36] audit: type=1400 audit(1756114766.483:553): avc: denied { nlmsg_write } for pid=4772 comm="syz.2.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 126.059183][ T394] rust_binder: 4764: removing orphan mapping 0:112 [ 126.074545][ T394] rust_binder: 0: removing orphan mapping 112:1048 [ 126.082204][ T4783] 9pnet_fd: Insufficient options for proto=fd [ 126.204850][ T4816] netlink: 'syz.2.1435': attribute type 6 has an invalid length. [ 126.220598][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.230245][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.238826][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.247796][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.256453][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.273091][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.277417][ T36] audit: type=1400 audit(1756114766.753:554): avc: denied { setattr } for pid=4829 comm="syz.3.1437" name="KEY" dev="sockfs" ino=26581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.304308][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.314364][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.328780][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.347638][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.361519][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.370411][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.379353][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.388022][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.394797][ T412] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 126.404027][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.412494][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.434545][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.443076][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.451906][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.460512][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.469162][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.477726][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.486210][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.494786][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.503235][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.511766][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.520302][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.528850][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.537311][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.545899][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.554402][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.562924][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.571602][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.580185][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.588709][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.597229][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.605920][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.614442][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.623024][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.631596][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.640277][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.648844][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.658708][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.667648][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.677925][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.686953][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.696528][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.705414][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.716710][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.725253][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.733834][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.743209][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.752148][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.762197][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.771088][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.779723][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.788227][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.796970][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.805727][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.814264][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.822859][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.831386][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.839889][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.857679][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.867394][ T4822] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.916916][ T4873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4873 comm=syz.2.1452 [ 126.934794][ T4873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=4873 comm=syz.2.1452 [ 126.996169][ T4888] overlayfs: failed to clone upperpath [ 127.209348][ T4908] overlay: Unknown parameter 'uid' [ 127.278214][ T4916] input: syz0 as /devices/virtual/input/input34 [ 127.512908][ T4924] overlayfs: failed to resolve '/000000000000003': -2 [ 127.588141][ T36] audit: type=1400 audit(1756114768.073:555): avc: denied { read } for pid=4938 comm="syz.2.1476" name="ptp0" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 127.614903][ T36] audit: type=1400 audit(1756114768.073:556): avc: denied { open } for pid=4938 comm="syz.2.1476" path="/dev/ptp0" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 127.678934][ T4953] overlayfs: failed to clone upperpath [ 127.724245][ T4966] 9pnet_fd: Insufficient options for proto=fd [ 127.731002][ T4966] overlayfs: failed to clone upperpath [ 127.736936][ T4967] overlayfs: failed to clone upperpath [ 127.783091][ T4973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1489'. [ 127.788418][ T4977] 9pnet_fd: Insufficient options for proto=fd [ 128.220422][ T4982] rust_binder: inc_ref_done called when no active inc_refs [ 128.220452][ T4982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:820 [ 128.228265][ T4982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.237609][ T4982] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 238) [ 128.244051][ T4982] rust_binder: Error while translating object. [ 128.254593][ T4982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.260801][ T4982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:820 [ 128.506059][ T4999] netlink: 'syz.0.1497': attribute type 13 has an invalid length. [ 128.523379][ T4999] erspan0: refused to change device tx_queue_len [ 128.634159][ T5007] overlayfs: failed to clone upperpath [ 129.030339][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.038929][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.384128][ T5033] overlayfs: failed to resolve './file0': -2 [ 131.614829][ T412] usb 2-1: device descriptor read/64, error -110 [ 131.854857][ T412] usb 2-1: device descriptor read/64, error -32 [ 132.094821][ T412] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 132.224807][ T412] usb 2-1: device descriptor read/64, error -32 [ 132.464850][ T412] usb 2-1: device descriptor read/64, error -32 [ 132.575062][ T412] usb usb2-port1: attempt power cycle [ 132.580606][ T412] raw-gadget.0 gadget.1: failed to queue reset event [ 132.654834][ T412] raw-gadget.0 gadget.1: failed to queue resume event [ 132.661723][ T412] raw-gadget.0 gadget.1: failed to queue reset event [ 132.874853][ T412] raw-gadget.0 gadget.1: failed to queue resume event [ 132.934849][ T412] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 132.954959][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 132.962318][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 132.969544][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 132.976631][ T412] usb 2-1: device descriptor read/8, error -32 [ 133.104985][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 133.112216][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 133.119496][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 133.126638][ T412] usb 2-1: device descriptor read/8, error -32 [ 133.234879][ T412] raw-gadget.0 gadget.1: failed to queue suspend event [ 133.241833][ T412] raw-gadget.0 gadget.1: failed to queue reset event [ 133.314857][ T412] raw-gadget.0 gadget.1: failed to queue resume event [ 133.374902][ T412] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 133.395010][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 133.402232][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 133.409506][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 133.416665][ T412] usb 2-1: device descriptor read/8, error -32 [ 133.544986][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 133.552308][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 133.559609][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 133.566693][ T412] usb 2-1: device descriptor read/8, error -32 [ 133.674830][ T412] raw-gadget.0 gadget.1: failed to queue suspend event [ 133.681753][ T412] usb usb2-port1: unable to enumerate USB device [ 139.773031][ T5072] netlink: 'syz.1.1521': attribute type 12 has an invalid length. [ 139.863039][ T36] audit: type=1400 audit(1756114780.343:557): avc: denied { write } for pid=5093 comm="syz.1.1531" name="/" dev="configfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.892075][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 139.904869][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 139.916533][ T5100] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5100 comm=syz.2.1534 [ 140.048642][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.059359][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.195978][ T36] audit: type=1400 audit(1756114780.683:558): avc: denied { mounton } for pid=5138 comm="syz.0.1546" path="/353/file0" dev="tmpfs" ino=1940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 140.195986][ T5139] fuse: Bad value for 'fd' [ 140.650280][ T5162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.652988][ T5164] netlink: 'syz.2.1556': attribute type 1 has an invalid length. [ 140.659287][ T5162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.675490][ T5162] __vm_enough_memory: pid: 5162, comm: syz.1.1555, bytes: 18014402804453376 not enough memory for the allocation [ 141.011096][ T5169] overlayfs: failed to clone upperpath [ 141.140629][ T5190] fuse: Unknown parameter 'f0x000000000000000c' [ 141.370734][ T5209] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1572'. [ 141.382686][ T5209] 0M: renamed from gretap0 (while UP) [ 141.389309][ T5209] 0M: entered allmulticast mode [ 141.394882][ T5209] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 141.503919][ T5233] kvm: kvm [5219]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000080 [ 141.515957][ T5233] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 141.523890][ T5233] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 141.541410][ T5233] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 141.549430][ T5233] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 141.566986][ T36] audit: type=1400 audit(1756114782.053:559): avc: denied { bind } for pid=5248 comm="syz.0.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.233226][ T5279] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1597'. [ 142.262007][ T5288] 9pnet_fd: Insufficient options for proto=fd [ 142.270291][ T5290] overlayfs: failed to clone upperpath [ 142.331856][ T36] audit: type=1400 audit(1756114782.813:560): avc: denied { setattr } for pid=5302 comm="syz.1.1607" name="/" dev="configfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.369784][ T5305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.379483][ T5309] 9pnet_fd: Insufficient options for proto=fd [ 142.382603][ T5305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.393939][ T5305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.912933][ T5323] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.023054][ T5346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63516 sclass=netlink_route_socket pid=5346 comm=syz.1.1620 [ 143.127399][ T5356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.136488][ T5356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.246360][ T5373] overlayfs: failed to clone upperpath [ 143.253013][ T5373] overlayfs: failed to clone upperpath [ 143.392614][ T5375] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.399724][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.406921][ T5375] bridge_slave_0: entered allmulticast mode [ 143.413103][ T5375] bridge_slave_0: entered promiscuous mode [ 143.419530][ T5375] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.426593][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.433668][ T5375] bridge_slave_1: entered allmulticast mode [ 143.439884][ T5375] bridge_slave_1: entered promiscuous mode [ 143.486036][ T5375] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.493123][ T5375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.500478][ T5375] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.507525][ T5375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.531503][ T697] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.540957][ T697] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.551075][ T698] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.554821][ T36] audit: type=1400 audit(1756114784.033:561): avc: denied { write } for pid=5385 comm="syz.2.1634" name="ptp0" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 143.558136][ T698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.592626][ T36] audit: type=1400 audit(1756114784.033:562): avc: denied { ioctl } for pid=5385 comm="syz.2.1634" path="/dev/ptp0" dev="tmpfs" ino=833 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 143.622160][ T698] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.629247][ T698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.641431][ T5375] veth0_vlan: entered promiscuous mode [ 143.653326][ T5375] veth1_macvtap: entered promiscuous mode [ 143.672676][ T5389] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 143.698160][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.707016][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.910015][ T5408] rust_binder: Failed copying remainder into alloc: EFAULT [ 143.910036][ T5408] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 143.917354][ T5408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 143.925737][ T5408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:16 [ 144.129858][ T5429] /dev/nullb0: Can't lookup blockdev [ 144.434814][ T394] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.452932][ T5445] 9pnet: Unknown protocol version 9 [ 144.585789][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.596771][ T394] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 144.606531][ T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.615607][ T394] usb 5-1: config 0 descriptor?? [ 144.623578][ T5468] fuse: Unknown parameter '$' [ 144.631879][ T5468] netlink: 'syz.3.1660': attribute type 11 has an invalid length. [ 145.025043][ T394] steelseries 0003:1038:12B6.0017: unknown main item tag 0x2 [ 145.032561][ T394] steelseries 0003:1038:12B6.0017: item fetching failed at offset 6/7 [ 145.042232][ T394] steelseries 0003:1038:12B6.0017: probe with driver steelseries failed with error -22 [ 145.056385][ T394] usb 5-1: USB disconnect, device number 2 [ 145.150292][ T5491] rust_binder: Write failure EFAULT in pid:883 [ 145.248322][ T5497] overlayfs: failed to clone upperpath [ 145.681397][ T5526] overlayfs: failed to clone upperpath [ 145.721043][ T36] audit: type=1400 audit(1756114786.203:563): avc: denied { create } for pid=5534 comm="syz.3.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 145.829264][ T5545] kvm: kvm [5542]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 145.837837][ T5545] kvm: kvm [5542]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 145.858950][ T5545] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1692'. [ 145.859681][ T5549] overlayfs: failed to clone lowerpath [ 145.867975][ T36] audit: type=1400 audit(1756114786.343:564): avc: denied { getattr } for pid=5546 comm="syz.1.1693" name="/" dev="incremental-fs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 145.874107][ T5545] x_tables: unsorted underflow at hook 2 [ 145.897604][ T5550] 9pnet_fd: Insufficient options for proto=fd [ 145.913934][ T5547] rust_binder: Read failure Err(EFAULT) in pid:904 [ 146.144776][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.231823][ T36] audit: type=1326 audit(1756114786.713:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.2.1705" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad64f8ebe9 code=0x0 [ 146.304820][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 146.311358][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 146.320159][ T9] usb 5-1: config 0 has no interface number 0 [ 146.326346][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.337382][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 146.349894][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 146.359098][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 146.367303][ T699] Trying to write to read-only block-device rnullb0 [ 146.367461][ T9] usb 5-1: Product: syz [ 146.378509][ T696] bridge_slave_1: left allmulticast mode [ 146.384171][ T696] bridge_slave_1: left promiscuous mode [ 146.389810][ T696] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.397097][ T9] usb 5-1: SerialNumber: syz [ 146.402754][ T696] bridge_slave_0: left allmulticast mode [ 146.408740][ T9] usb 5-1: config 0 descriptor?? [ 146.416001][ T696] bridge_slave_0: left promiscuous mode [ 146.421649][ T696] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.618785][ T36] audit: type=1400 audit(1756114787.103:566): avc: denied { read } for pid=95 comm="acpid" name="event4" dev="devtmpfs" ino=693 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 146.625537][ T9] usb 5-1: USB disconnect, device number 3 [ 146.662334][ T36] audit: type=1400 audit(1756114787.103:567): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=693 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 146.664625][ T5590] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 146.685325][ T36] audit: type=1400 audit(1756114787.103:568): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=693 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 146.735929][ T696] veth1_macvtap: left promiscuous mode [ 146.741639][ T696] veth0_vlan: left promiscuous mode [ 146.758530][ T36] audit: type=1400 audit(1756114787.243:569): avc: denied { mounton } for pid=5588 comm="syz.1.1706" path="/295/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 146.891888][ T36] audit: type=1400 audit(1756114787.373:570): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 147.142133][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.152576][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.240849][ T36] audit: type=1400 audit(1756114787.723:571): avc: denied { mounton } for pid=5606 comm="syz.4.1712" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 147.275101][ T36] audit: type=1400 audit(1756114787.763:572): avc: denied { unmount } for pid=5375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 147.301487][ T5611] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 147.301860][ T5612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.547947][ T5626] overlayfs: workdir and upperdir must be separate subtrees [ 148.669216][ T5669] overlayfs: failed to clone upperpath [ 148.709985][ T5678] 9pnet_fd: Insufficient options for proto=fd [ 148.726210][ T5680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'. [ 148.828902][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 149.024552][ T5746] overlayfs: failed to clone upperpath [ 149.174797][ T412] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.326717][ T412] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.336900][ T412] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.346472][ T412] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.355571][ T412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.363551][ T412] usb 5-1: SerialNumber: syz [ 149.569794][ T5733] overlay: Unknown parameter '/dev/uinput' [ 149.579805][ T412] usb 5-1: skipping empty audio interface (v1) [ 149.587661][ T412] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 149.597318][ T412] usb 5-1: USB disconnect, device number 4 [ 149.605851][ T5307] udevd[5307]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.119845][ T5790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.121625][ T5790] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1766' sets config #65 [ 150.139548][ T5790] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 150.139577][ T5790] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 150.148628][ T5790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:926 [ 150.206516][ T5794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.222080][ T5795] rust_binder: got new transaction with bad transaction stack [ 150.228843][ T5795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 150.313024][ T45] rust_binder: 5791: removing orphan mapping 0:24 [ 150.408612][ T5823] netlink: 'syz.4.1777': attribute type 4 has an invalid length. [ 150.413235][ T394] rust_binder: 5807: removing orphan mapping 0:24 [ 150.416434][ T5823] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1777'. [ 150.438481][ T5825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.441304][ T5825] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 150.447860][ T5825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 150.456655][ T5825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:938 [ 150.502641][ T412] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 150.537123][ T412] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 150.618563][ T5835] binder: Bad value for 'stats' [ 151.044612][ T5852] usb usb8: usbfs: process 5852 (syz.1.1785) did not claim interface 0 before use [ 151.073541][ T5855] netlink: 'syz.1.1786': attribute type 16 has an invalid length. [ 151.081465][ T5855] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1786'. [ 151.098354][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.117590][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.128238][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.137416][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.148280][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 151.161673][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 151.161691][ T36] audit: type=1400 audit(1756114791.643:578): avc: denied { map } for pid=5862 comm="syz.3.1790" path="socket:[30924]" dev="sockfs" ino=30924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.217266][ T36] audit: type=1400 audit(1756114791.643:579): avc: denied { read accept } for pid=5862 comm="syz.3.1790" path="socket:[30924]" dev="sockfs" ino=30924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.264754][ T36] audit: type=1400 audit(1756114791.643:580): avc: denied { ioctl } for pid=5862 comm="syz.3.1790" path="socket:[30924]" dev="sockfs" ino=30924 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.308611][ T36] audit: type=1400 audit(1756114791.733:581): avc: denied { watch watch_reads } for pid=5870 comm="syz.3.1793" path="/file1" dev="rootfs" ino=25771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 151.415198][ T36] audit: type=1400 audit(1756114791.903:582): avc: denied { sys_nice } for pid=5889 comm="syz.3.1801" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 151.705228][ T5929] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 151.705323][ T5929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.724220][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 151.751193][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 151.763196][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 151.774827][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.784466][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 151.793889][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 151.802920][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 151.812085][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 151.821309][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 151.853276][ T5943] overlay: ./file0 is not a directory [ 151.924765][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 151.931274][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 151.940190][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.951730][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 151.962624][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.973966][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.983125][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.991239][ T9] usb 5-1: Product: syz [ 151.995566][ T9] usb 5-1: Manufacturer: syz [ 152.000190][ T9] usb 5-1: SerialNumber: syz [ 152.071966][ T5952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5952 comm=syz.3.1821 [ 152.119747][ T5962] netlink: 'syz.2.1824': attribute type 28 has an invalid length. [ 152.209920][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.229549][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.256738][ T9] usb 5-1: USB disconnect, device number 5 [ 152.270819][ T36] audit: type=1400 audit(1756114792.753:583): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 152.296097][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.311378][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.329996][ T36] audit: type=1400 audit(1756114792.813:584): avc: denied { ioctl } for pid=5980 comm="syz.1.1831" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 152.426341][ T5984] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.426480][ T5984] rust_binder: Read failure Err(EFAULT) in pid:129 [ 152.698394][ T6003] rust_binder: 6002 RLIMIT_NICE not set [ 152.728741][ T36] audit: type=1400 audit(1756114793.213:585): avc: denied { create } for pid=6008 comm="syz.2.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 152.760528][ T412] rust_binder: 6001: removing orphan mapping 0:24 [ 152.767129][ T412] rust_binder: 6001: removing orphan mapping 24:1024 [ 152.819812][ T6024] tipc: Enabling of bearer rejected, failed to enable media [ 152.879155][ T696] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.890961][ T36] audit: type=1400 audit(1756114793.363:586): avc: denied { lock } for pid=6032 comm="syz.4.1849" path="socket:[31239]" dev="sockfs" ino=31239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 152.914878][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.923931][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.482348][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.491851][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.555095][ T36] audit: type=1400 audit(1756114794.044:587): avc: denied { remount } for pid=6044 comm="syz.1.1853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 153.604483][ T6045] incfs_lookup_dentry err:-5 [ 153.609591][ T6045] incfs: Can't find or create .index dir in ./file0 [ 153.616292][ T6045] incfs: mount failed -5 [ 154.883080][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 155.206822][ T6077] __vm_enough_memory: pid: 6077, comm: syz.4.1865, bytes: 18014402804453376 not enough memory for the allocation [ 155.554966][ T6087] overlayfs: failed to clone upperpath [ 155.811996][ T6096] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6096 comm=syz.2.1872 [ 156.029723][ T6104] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 156.038543][ T6104] overlayfs: missing 'lowerdir' [ 156.059044][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.066239][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.073378][ T6102] bridge_slave_0: entered allmulticast mode [ 156.079763][ T6102] bridge_slave_0: entered promiscuous mode [ 156.112535][ T6112] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 156.234888][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.242012][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.249147][ T6102] bridge_slave_1: entered allmulticast mode [ 156.255402][ T6102] bridge_slave_1: entered promiscuous mode [ 156.261429][ T696] macsec0: left allmulticast mode [ 156.266687][ T696] veth1_macvtap: left allmulticast mode [ 156.272309][ T696] macsec0: left promiscuous mode [ 156.277478][ T696] bridge0: port 3(macsec0) entered disabled state [ 156.284738][ T696] bridge_slave_1: left allmulticast mode [ 156.290381][ T696] bridge_slave_1: left promiscuous mode [ 156.296006][ T696] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.303587][ T696] $: left allmulticast mode [ 156.308526][ T696] $: left promiscuous mode [ 156.313517][ T696] bridge0: port 1($) entered disabled state [ 156.320661][ T696] tipc: Resetting bearer [ 156.334597][ T696] tipc: Disabling bearer [ 156.402462][ T6046] overlayfs: statfs failed on './file0' [ 156.501507][ T696] tipc: Left network mode [ 156.511009][ T696] veth1_macvtap: left promiscuous mode [ 156.516583][ T696] veth0_vlan: left promiscuous mode [ 156.572497][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.579585][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.586916][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.593957][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.638839][ T6102] veth0_vlan: entered promiscuous mode [ 156.649691][ T6102] veth1_macvtap: entered promiscuous mode [ 156.779146][ T6132] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=6132 comm=syz.1.1882 [ 156.848061][ T6142] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 156.848078][ T6142] rust_binder: Error while translating object. [ 156.857386][ T6142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.863805][ T6142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1003 [ 156.955532][ T6147] SELinux: failed to load policy [ 157.042985][ T6152] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 157.065915][ T6156] __nla_validate_parse: 26 callbacks suppressed [ 157.065932][ T6156] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1891'. [ 157.082164][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 157.082179][ T36] audit: type=1400 audit(1756114797.665:589): avc: denied { getopt } for pid=6155 comm="syz.2.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.116759][ T31] rust_binder: 6148: removing orphan mapping 0:112 [ 157.123416][ T31] rust_binder: 6148: removing orphan mapping 112:1048 [ 157.131411][ T912] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.142897][ T6160] rust_binder: Write failure EINVAL in pid:1011 [ 157.143428][ T6162] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.156615][ T6163] rust_binder: Write failure EINVAL in pid:1011 [ 157.296974][ T912] usb 5-1: Using ep0 maxpacket: 8 [ 157.309470][ T912] usb 5-1: config 8 has an invalid interface number: 160 but max is 0 [ 157.317834][ T912] usb 5-1: config 8 has no interface number 0 [ 157.324002][ T912] usb 5-1: config 8 interface 160 has no altsetting 0 [ 157.332342][ T912] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 157.341431][ T912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.349484][ T912] usb 5-1: Product: syz [ 157.353741][ T912] usb 5-1: Manufacturer: syz [ 157.358374][ T912] usb 5-1: SerialNumber: syz [ 157.569801][ T6179] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1898'. [ 157.580481][ T912] usb 5-1: Invalid firmware size=18. [ 157.586457][ T912] usb 5-1: USB disconnect, device number 6 [ 157.791326][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.800313][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.006322][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.017036][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.032606][ T6192] kernel profiling enabled (shift: 7) [ 158.039095][ T912] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 158.048613][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.057069][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.080975][ T36] audit: type=1326 audit(1756114798.690:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.4.1904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01c2b8ebe9 code=0x0 [ 158.168443][ T912] usb 3-1: device descriptor read/64, error -71 [ 158.400142][ T912] usb 3-1: device descriptor read/64, error -71 [ 158.634835][ T912] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 158.761968][ T912] usb 3-1: device descriptor read/64, error -71 [ 159.006501][ T912] usb 3-1: device descriptor read/64, error -71 [ 159.053058][ T394] rust_binder: 0: removing orphan mapping 0:24 [ 159.125916][ T912] usb usb3-port1: attempt power cycle [ 159.233887][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.241002][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.249486][ T6266] bridge_slave_0: entered allmulticast mode [ 159.256055][ T6266] bridge_slave_0: entered promiscuous mode [ 159.467529][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.474608][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.475969][ T912] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 159.495785][ T6266] bridge_slave_1: entered allmulticast mode [ 159.502458][ T6266] bridge_slave_1: entered promiscuous mode [ 159.511721][ T912] usb 3-1: device descriptor read/8, error -71 [ 159.518200][ T697] bridge_slave_1: left allmulticast mode [ 159.527085][ T697] bridge_slave_1: left promiscuous mode [ 159.533817][ T697] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.541645][ T697] bridge_slave_0: left allmulticast mode [ 159.547424][ T697] bridge_slave_0: left promiscuous mode [ 159.553247][ T697] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.663071][ T912] usb 3-1: device descriptor read/8, error -71 [ 159.726147][ T6285] 9pnet_fd: Insufficient options for proto=fd [ 159.753852][ T697] veth1_macvtap: left promiscuous mode [ 159.759407][ T697] veth0_vlan: left promiscuous mode [ 159.804084][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.811194][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.818462][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.825500][ T6266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.846649][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.854007][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.863176][ T696] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.870256][ T696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.886429][ T696] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.893479][ T696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.900839][ T912] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 159.920529][ T6266] veth0_vlan: entered promiscuous mode [ 159.927763][ T912] usb 3-1: device descriptor read/8, error -71 [ 159.934026][ T6266] veth1_macvtap: entered promiscuous mode [ 159.987565][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1930'. [ 159.997432][ T36] audit: type=1400 audit(1756114800.653:591): avc: denied { write } for pid=6292 comm="syz.5.1930" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 160.054830][ T912] usb 3-1: device descriptor read/8, error -71 [ 160.071908][ T6294] rust_binder: Write failure EFAULT in pid:2 [ 160.161488][ T912] usb usb3-port1: unable to enumerate USB device [ 160.410264][ T6318] incfs: Options parsing error. -22 [ 160.415565][ T6318] incfs: mount failed -22 [ 160.765400][ T6320] tipc: Started in network mode [ 160.770400][ T6320] tipc: Node identity 100, cluster identity 4711 [ 160.776765][ T6320] tipc: Node number set to 256 [ 160.812295][ T6322] x_tables: duplicate underflow at hook 2 [ 161.100016][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 161.182346][ T6338] /dev/rnullb0: Can't open blockdev [ 161.418921][ T6357] input: syz0 as /devices/virtual/input/input36 [ 161.419645][ T6359] syzkaller1: entered allmulticast mode [ 161.608956][ T6365] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1957'. [ 161.671570][ T412] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 161.819930][ T412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 161.835566][ T412] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.849601][ T412] usb 6-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 161.858857][ T412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.867482][ T412] usb 6-1: config 0 descriptor?? [ 161.872757][ T6359] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 162.064273][ T1037] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 162.212574][ T1037] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 162.220738][ T1037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.236477][ T1037] usb 3-1: config 0 has no interface number 0 [ 162.245931][ T1037] usb 3-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.256136][ T1037] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.260858][ T6377] rust_binder: Error while translating object. [ 162.266032][ T6377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.272295][ T6377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1034 [ 162.282766][ T1037] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 162.301345][ T1037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.309348][ T1037] usb 3-1: Product: syz [ 162.309520][ T412] wacom 0003:056A:00F8.0019: hidraw0: USB HID v1.01 Device [HID 056a:00f8] on usb-dummy_hcd.5-1/input0 [ 162.313720][ T1037] usb 3-1: Manufacturer: syz [ 162.329499][ T1037] usb 3-1: SerialNumber: syz [ 162.339925][ T1037] usb 3-1: config 0 descriptor?? [ 162.359971][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.369382][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.377663][ T6380] ------------[ cut here ]------------ [ 162.383205][ T6380] WARNING: CPU: 1 PID: 6380 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 162.392674][ T6380] Modules linked in: [ 162.396591][ T6380] CPU: 1 UID: 0 PID: 6380 Comm: syz.1.1963 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 162.408156][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.418247][ T6380] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 162.424163][ T6380] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 81 26 ee 05 00 0f 85 be 00 00 00 c6 05 74 26 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 162.428458][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.443820][ T6380] RSP: 0018:ffffc9000fcc7680 EFLAGS: 00010246 [ 162.452769][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.458253][ T6380] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 162.473984][ T6380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000fcc7738 [ 162.482001][ T6380] RBP: ffffc9000fcc77a8 R08: ffffc9000fcc7737 R09: 0000000000000000 [ 162.490031][ T6380] R10: ffffc9000fcc7720 R11: fffff52001f98ee7 R12: ffffc9000fcc76c0 [ 162.498070][ T6380] R13: dffffc0000000000 R14: 1ffff92001f98ed4 R15: 0000000000000000 [ 162.506075][ T6380] FS: 00007f83908076c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 162.515065][ T6380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.521694][ T6380] CR2: 0000200000005000 CR3: 000000012e172000 CR4: 00000000003526b0 [ 162.529717][ T6380] Call Trace: [ 162.533025][ T6380] [ 162.536007][ T6380] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 162.541773][ T6380] ? kasan_save_alloc_info+0x40/0x50 [ 162.547903][ T6380] ? __kasan_slab_alloc+0x73/0x90 [ 162.552979][ T6380] ? hashtab_init+0xdb/0x1f0 [ 162.557975][ T6380] ___kmalloc_large_node+0x9c/0x1d0 [ 162.563219][ T6380] ? ebitmap_read+0x21d/0x990 [ 162.567956][ T6380] ? hashtab_init+0xdb/0x1f0 [ 162.572565][ T6380] __kmalloc_large_node_noprof+0x1e/0xe0 [ 162.576309][ T6375] fuseblk: Unknown parameter 'g)X!9[|߰C00000000000000000000' [ 162.578250][ T6380] ? hashtab_init+0xdb/0x1f0 [ 162.590995][ T6380] __kmalloc_noprof+0x26d/0x450 [ 162.593140][ T394] usb 6-1: USB disconnect, device number 2 [ 162.595886][ T6380] hashtab_init+0xdb/0x1f0 [ 162.595909][ T6380] ? policydb_read+0x86f/0x28c0 [ 162.604495][ T1037] usb 3-1: MIDIStreaming interface descriptor not found [ 162.606122][ T6380] symtab_init+0x44/0x70 [ 162.619766][ T1037] usb 3-1: USB disconnect, device number 18 [ 162.622187][ T6380] policydb_read+0x8fe/0x28c0 [ 162.632780][ T6380] ? kasan_save_alloc_info+0x40/0x50 [ 162.638131][ T6380] ? __cfi_policydb_read+0x10/0x10 [ 162.643268][ T6380] ? security_load_policy+0x128/0x12f0 [ 162.644247][ T5091] udevd[5091]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 162.648818][ T6380] security_load_policy+0x162/0x12f0 [ 162.669952][ T6380] ? irqentry_exit+0x4a/0x60 [ 162.674611][ T6380] ? exc_page_fault+0x66/0xc0 [ 162.679431][ T6380] ? asm_exc_page_fault+0x2b/0x30 [ 162.684495][ T6380] ? __cfi_security_load_policy+0x10/0x10 [ 162.690234][ T6380] ? rep_movs_alternative+0x4a/0xa0 [ 162.695471][ T6380] sel_write_load+0x298/0x5e0 [ 162.700178][ T6380] ? futex_wait+0x29a/0x7a0 [ 162.704734][ T6380] ? __cfi_sel_write_load+0x10/0x10 [ 162.709968][ T6380] ? __cfi_futex_wait+0x10/0x10 [ 162.714859][ T6380] ? bpf_lsm_file_permission+0xd/0x20 [ 162.720259][ T6380] ? __cfi_sel_write_load+0x10/0x10 [ 162.725490][ T6380] vfs_write+0x3c3/0xe80 [ 162.729773][ T6380] ? __cfi_vfs_write+0x10/0x10 [ 162.734564][ T6380] ? __kasan_check_write+0x18/0x20 [ 162.739701][ T6380] ? mutex_lock+0x92/0x1c0 [ 162.744151][ T6380] ? __cfi_mutex_lock+0x10/0x10 [ 162.749073][ T6380] ? __fget_files+0x2c5/0x340 [ 162.753779][ T6380] ksys_write+0x141/0x250 [ 162.758125][ T6380] ? __cfi_ksys_write+0x10/0x10 [ 162.762993][ T6380] ? __kasan_check_write+0x18/0x20 [ 162.768139][ T6380] ? fpregs_restore_userregs+0x11d/0x260 [ 162.773800][ T6380] __x64_sys_write+0x7f/0x90 [ 162.778398][ T6380] x64_sys_call+0x271c/0x2ee0 [ 162.783116][ T6380] do_syscall_64+0x58/0xf0 [ 162.787559][ T6380] ? clear_bhb_loop+0x50/0xa0 [ 162.792297][ T6380] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.798223][ T6380] RIP: 0033:0x7f838f98ebe9 [ 162.802671][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.822317][ T6380] RSP: 002b:00007f8390807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.830777][ T6380] RAX: ffffffffffffffda RBX: 00007f838fbb5fa0 RCX: 00007f838f98ebe9 [ 162.838857][ T6380] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000007 [ 162.846862][ T6380] RBP: 00007f838fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 162.854876][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.862929][ T6380] R13: 00007f838fbb6038 R14: 00007f838fbb5fa0 R15: 00007fffb2b39bc8 [ 162.870948][ T6380] [ 162.873980][ T6380] ---[ end trace 0000000000000000 ]--- [ 162.879538][ T6380] SELinux: failed to load policy