last executing test programs: 52.765729859s ago: executing program 0 (id=70): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000282000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000140)={0x0, 0x0, 0x18}) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000140)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 52.535504218s ago: executing program 0 (id=71): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x802, 0x0) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcdK\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\x00'/47, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) setgroups(0x0, 0x0) ftruncate(r2, 0xffff) (async) r5 = syz_open_pts(r0, 0x80202) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@arm64={0x10, 0x10, 0x80, '\x00', 0x8}) (async) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000200)=0xd) fcntl$addseals(r2, 0x409, 0x7) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$cgroup_subtree(r6, 0x0, 0x3e) (async) r7 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000000c0)={r2, 0x1, 0x8000, 0x800000000800d000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) close_range(r0, 0xffffffffffffffff, 0x0) 52.474556532s ago: executing program 0 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0xa0, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x3}]}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xfe}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x5}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x2}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x6}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x80000001}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1a}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x81}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xffff}]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80000001}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xff}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4044c14}, 0xc800) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_genetlink_get_family_id$ethtool(0x0, r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'geneve0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYRES8=r7], 0xfdef) syz_open_pts(r4, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 50.352360314s ago: executing program 0 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) (async) syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') prctl$PR_GET_NAME(0x10, 0x0) (async) socket(0x2c, 0x1, 0x7) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write(r0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x1) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r2, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002163, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406"], 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 49.144436121s ago: executing program 0 (id=112): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x7) r3 = userfaultfd(0x1) (async, rerun: 64) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) wait4(r4, 0x0, 0x2, 0x0) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) prlimit64(r5, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) syz_clone3(&(0x7f0000001380)={0x10000000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140), {0x13}, &(0x7f0000000240)=""/206, 0xce, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=[r4, r5, r6], 0x3}, 0x58) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000a31000/0x3000)=nil, 0x3000}}) (async) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x100000000000015a) 49.03406503s ago: executing program 0 (id=115): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f0000000180), 0x80000) (async) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x4, 0x2, {0xa, 0x4e20, 0x4, @empty, 0xfd}}}, 0x3a) (async) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x4, 0x2, {0xa, 0x4e20, 0x4, @empty, 0xfd}}}, 0x3a) getsockopt(r2, 0x111, 0x81, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x141840, 0xa4) (async) open(&(0x7f00000001c0)='./file0/file0\x00', 0x141840, 0xa4) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x100) (async) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x100) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000080)={0x2800000000000000, 0x8000000, 0xb1, 0x8, 0xd}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x14, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/zoneinfo\x00', 0x0, 0x0) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000009802000000000000000400000000000009c20a41c35027e5302280c22220c3c3fbc6254e157a913093650af05ea70d1526c91320666d142002709b57dc28e313c422e0e2309b54993b47141c6451f7d57d788935674de1ff53d5c8cb51f95af8bb98ab1d168a4d31b3cad859f6e0180afaef0a15fe87cf550d0f1676a54d66787304623752d984613b783cbc0071ecc6904e77f5ddb7f4bed4b939b4584bdaee91e6daa2f70a35cefaa40ea6a17f750572a932013110"]) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f0500000000000000b76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103476bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) close_range(r9, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r10) 48.966633815s ago: executing program 32 (id=115): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f0000000180), 0x80000) (async) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x4, 0x2, {0xa, 0x4e20, 0x4, @empty, 0xfd}}}, 0x3a) (async) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x4, 0x2, {0xa, 0x4e20, 0x4, @empty, 0xfd}}}, 0x3a) getsockopt(r2, 0x111, 0x81, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x141840, 0xa4) (async) open(&(0x7f00000001c0)='./file0/file0\x00', 0x141840, 0xa4) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x100) (async) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x100) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000080)={0x2800000000000000, 0x8000000, 0xb1, 0x8, 0xd}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x14, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/zoneinfo\x00', 0x0, 0x0) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000009802000000000000000400000000000009c20a41c35027e5302280c22220c3c3fbc6254e157a913093650af05ea70d1526c91320666d142002709b57dc28e313c422e0e2309b54993b47141c6451f7d57d788935674de1ff53d5c8cb51f95af8bb98ab1d168a4d31b3cad859f6e0180afaef0a15fe87cf550d0f1676a54d66787304623752d984613b783cbc0071ecc6904e77f5ddb7f4bed4b939b4584bdaee91e6daa2f70a35cefaa40ea6a17f750572a932013110"]) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) close_range(r9, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r10) 4.584805351s ago: executing program 1 (id=710): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x1000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x0, &(0x7f0000001200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$loop(&(0x7f00000004c0), 0x1, 0x40000) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x98, &(0x7f00000003c0)={0x100000000, 0x1, 0x10}}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000001040)=""/133, 0x85}], 0x2}}], 0x1, 0x40000000, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000000)=ANY=[@ANYBLOB="6d61783d30303000000000303030303030303030303030303030302c006bfc8c8554fbef1cbd30cd95d9439d6618c398000864592a748dba"]) 4.568328812s ago: executing program 1 (id=713): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000040)) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000080)=0x2) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f00000000c0)={0x9, 0x88, "183815415637d3c4baa053609b9ecc437533fa969628cd62ad27bc012ec4456f0afb55bc8593782e3e189a07b301f38d7db0932225b3335f61d66b13388014a4542303f879e3bd1bf5449342b27a4d6007688c6c8e6718ba04f5bebea6c208bcd649bfc5a8c60e5da4d18037ad8288011e710359199893d2b3070478ef7e0b1908ec8bd1a11896f4"}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x280000) (async) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x280000) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x51, 0xe3, 0x6ac, {0x9a2, 0x6}, {0xab0, 0x4}, @period={0x5b, 0x6, 0x1ff, 0xaa, 0x9, {0x3, 0x7f, 0xfffe, 0x5}, 0x1, &(0x7f0000000200)=[0xfff8]}}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x14) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)={0xa, {0xa, 0x5, 0x5}}, 0xa) (async) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)={0xa, {0xa, 0x5, 0x5}}, 0xa) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000002c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000300)={0x3ff8, 0xe08, 0x1, 0x274b, 0x18, "d9f2c3a383905cb53de813ab32ba1f435a2fa2"}) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000300)={0x3ff8, 0xe08, 0x1, 0x274b, 0x18, "d9f2c3a383905cb53de813ab32ba1f435a2fa2"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000380), 0x2, 0x0) (async) openat$cgroup_type(r4, &(0x7f0000000380), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000001, 0x4010, r2, 0xabd3a000) r5 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000400)='nomand\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000400)='nomand\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x20) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x24008010) (async) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x24008010) statx(r6, &(0x7f00000005c0)='./file0\x00', 0x4000, 0xb9e723303d887394, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, r7, &(0x7f0000000700)='./file0\x00') socket(0x25, 0x800, 0x8) (async) r8 = socket(0x25, 0x800, 0x8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r9, &(0x7f0000001b80)={&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f0000000940)=""/255, 0xff}, {&(0x7f0000000a40)=""/120, 0x78}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x5, &(0x7f0000001b40)=""/6, 0x6}, 0x0) fsetxattr$security_capability(r6, &(0x7f0000001bc0), &(0x7f0000001c00)=@v1={0x1000000, [{0x5, 0x9}]}, 0xc, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x68, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xf6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff9}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) setuid(0xee01) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001d80)) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001d80)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000001dc0)={{r2}, r10, 0x2, @unused=[0x4, 0x401, 0x9, 0xfffffffffffffffa], @name="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"}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000001dc0)={{r2}, r10, 0x2, @unused=[0x4, 0x401, 0x9, 0xfffffffffffffffa], @name="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"}) 3.738467098s ago: executing program 1 (id=728): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) keyctl$invalidate(0x15, r1) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101, 0x7}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x54, r6, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xd8, r4, 0x100, 0x72bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x100, 0xa}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffb}, @chandef_params, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x2010}, 0x20004044) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) keyctl$invalidate(0x15, r1) (async) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r1) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101, 0x7}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x54, r6, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xd8, r4, 0x100, 0x72bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x100, 0xa}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffb}, @chandef_params, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x2010}, 0x20004044) (async) 3.60231278s ago: executing program 1 (id=729): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fadvise64(r0, 0x9, 0x80, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x8, 0x3}) (async) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x8, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000362000/0x4000)=nil, &(0x7f0000099000/0x4000)=nil, 0x4000, 0x2}) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffeef, 0x24000804, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x64) (async) sendto$inet(r2, 0x0, 0xfffffffffffffeef, 0x24000804, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x64) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) (async) read$FUSE(r6, 0x0, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000300)={0x9, {{0xa, 0x4e20, 0x0, @private2, 0x8}}, {{0xa, 0x4e20, 0x2, @private1, 0x5}}}, 0x108) close(r2) (async) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000001010100000000000000000a0000073c0001802c000180140003002001000000000000000000000000000114000400fe8000000000000000000000000000bb0c0002800500010011000000db9eaff30c290f84fe371ea5f711379a43c482a6a50fb29494a132ddebae471b73120a3d8b31327cc06b44a02231e467cb9e8da9502f52da1a43c69001685f4ebb6e5346be58773d630f2e1b78b0869d2605f3ba72aca63d541c8e11dd7c14dd6026d895b7f73d48101a71efb054aea1b82cd7e08431235cdcc119a387b3"], 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x24000000) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000001010100000000000000000a0000073c0001802c000180140003002001000000000000000000000000000114000400fe8000000000000000000000000000bb0c0002800500010011000000db9eaff30c290f84fe371ea5f711379a43c482a6a50fb29494a132ddebae471b73120a3d8b31327cc06b44a02231e467cb9e8da9502f52da1a43c69001685f4ebb6e5346be58773d630f2e1b78b0869d2605f3ba72aca63d541c8e11dd7c14dd6026d895b7f73d48101a71efb054aea1b82cd7e08431235cdcc119a387b3"], 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x24000000) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x0, 0x16, 0x2, "2417"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x0, 0x16, 0x2, "2417"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.430429844s ago: executing program 4 (id=768): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x20ffa083, 0x8002) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xafe2}) r1 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x6ae, 0x4) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000100)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x4, 0xc0, [0x0, 0x4, 0x5cfb, 0xf1f3, 0x8, 0x7], 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/192}, &(0x7f0000000300)=0x78) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000340)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r4 = socket(0x1, 0x800, 0x9) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) ioctl$FIOCLEX(r3, 0x5451) accept4$inet(r3, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = dup3(r2, 0xffffffffffffffff, 0x80000) setsockopt$MRT6_ASSERT(r4, 0x29, 0xcf, &(0x7f0000000440)=0x1, 0x4) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x50, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x168, 0x6, [{{0x9, 0x4, 0x0, 0xcc, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x4, 0x92, 0x1, {0x22, 0xc95}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5, 0x3f, 0x9}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x6, 0x9, 0x7, 0x20, 0x9}, 0xcc, &(0x7f0000000500)={0x5, 0xf, 0xcc, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x40, 0x4, 0xfe}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0x54, 0x2, 0x7, 0x0, 0x3, [0xff00cf, 0xff0000]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x19ee7ca041135204, 0xbc, 0x2, 0xbb33, 0x10}, @generic={0x94, 0x10, 0x4, "fd31b28315cf5205581c86ec37b24a4386a4769a891dc8bf93bbcfda6c0451fb1ad3b895c1bcfef27778624ea7cb0a59e420c86c653aa37a36356b51e86beb0ad61394825bcf6888a7e7089c30355a10babdc5148443d447e420d5a4acd8446e8ec16eb75ed961c7d3fa5a41e7874dc62a8e1e892b2720983706bef75fa7d3d64d37bf26a7cf9c3548e8bdfa775932e313"}]}, 0x2, [{0x21, &(0x7f0000000600)=@string={0x21, 0x3, "1091937f31f64732480599c384a3d34f0abbc5a1e0a3bedb8e4b14e4d8e879"}}, {0x8, &(0x7f0000000640)=@string={0x8, 0x3, "1c0242d3f73f"}}]}) socket$nl_audit(0x10, 0x3, 0x9) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=0x1000) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001780)={'gre0\x00', &(0x7f0000001700)={'gre0\x00', 0x0, 0x700, 0x7800, 0xff, 0x8, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x68, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x88, 0x3, 0x1, [{@remote, 0xc2fe}]}, @timestamp={0x44, 0xc, 0x46, 0x0, 0xc, [0x7, 0x10000]}, @ssrr={0x89, 0x1b, 0xd3, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000017c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0xb5, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x400, 0x6, 0x1, {0x22, 0xc5d}}, {{{0x9, 0x5, 0x81, 0x3, 0xc384d0ae0745e3b, 0x5, 0x14, 0xa6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xa, 0x2, 0x35}}]}}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x201, 0x9, 0x40, 0xac, 0x8, 0xf7}, 0x10, &(0x7f0000001840)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x86, 0x8, 0x59, 0x8, 0x7f}]}, 0x2, [{0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x426}}, {0x79, &(0x7f00000018c0)=@string={0x79, 0x3, "594d07349bc3fa52438c224b903527e63972860939cb7c60852131d49eda6a90d6a242da28bafeb04076c2094f1747f544b459d367bfb7586b946dfb93f4d99a06b158cbd95271b2159040ef30ffe42b6af68ff5153cffe9f200f56d741599cf952e68a055fb083b9ccef11543dbf81b95d5b2e097947f"}}]}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000001980)) bind$vsock_stream(r5, &(0x7f00000019c0)={0x28, 0x0, 0x2710, @local}, 0x10) 951.764163ms ago: executing program 4 (id=781): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) 893.123398ms ago: executing program 4 (id=783): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0xf) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x40859) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e000000ecef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400005e30d2bc0a000f23c80f21f80f23f8b8f4008ee0", 0x51}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)='9', 0x1}], 0x1) shutdown(r4, 0x1) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000240)=0x3, 0x4) 889.210798ms ago: executing program 4 (id=785): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000001400)={'vlan1\x00', @remote}) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee01]) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x40c, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, 'user_id'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@flag='dirsync'}, {@appraise_type}, {@measure}, {@uid_eq={'uid', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, 'rootmode'}}, {@pcr}, {@pcr={'pcr', 0x3d, 0x3d}}]}}) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r1, r0, 0x0, 0x80000000) 860.4493ms ago: executing program 4 (id=787): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r1) syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x8, 0x0) r4 = memfd_create(&(0x7f0000000000)='/.//\\&\x02\'**\x00', 0x3) fsetxattr$security_selinux(r4, &(0x7f0000000100), &(0x7f00000001c0)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) setrlimit(0x0, &(0x7f0000000100)={0x4, 0x2c}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8000, 0x80000001}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 788.472616ms ago: executing program 3 (id=791): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x1800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r4, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001540)=""/229, 0xe5}, {&(0x7f0000005200)=""/4116, 0x1014}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2cf}, {{0x0, 0x0, 0x0}, 0x4}], 0x6, 0x12040, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000000)={0x4, 0x1, 0x2, 0x0, 0x0, [{{r0}, 0x8}, {{r1}, 0x9}]}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x21, r5, 0x0, 0x2) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 787.088867ms ago: executing program 2 (id=792): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x42) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000180)={0x10000, 0x8000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) close(r5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x0, 0x0, 0x0}) 685.316415ms ago: executing program 3 (id=793): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x4) read$FUSE(r0, &(0x7f0000001880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc0040, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ']+'}}]}}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8d0) 674.471656ms ago: executing program 2 (id=794): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="c0b0f9846f650292cf06b2d27c5a703253d8ab389d5086ec5b9b75", 0x1b}], 0x1, 0x0, 0x10001) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4010) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x6e22, 0x40000, @empty}, 0x1c) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, 0x1c) (async) listen(r5, 0x0) (async) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 644.649748ms ago: executing program 3 (id=795): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x50, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',pr', @ANYRESDEC=r4]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./cgroup\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010006000000000002000000", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=r5, @ANYBLOB="04000300e76feb8f5fd01b02", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="10000200000000002000040000000000"], 0x44, 0x2) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4604070003050000000000000003000300060000000903000200000000fdffffff0e00000000402000"], 0x38) close(r8) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x7, {0xb, 0x0, 0x0, {0x9, 0x1, 0x7, 0x90000005, 0x40000000000003, 0x2, 0x9ec, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f000000db40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, r9}, 0x10) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, r9, {0xa05}}, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000600)=@gcm_256={{0x303}, "00001200", "97dea8137ea99ec5933f7f2f061e1c9dcda100", "03206500", "e37b012ae7dd4708"}, 0x38) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fallocate(r11, 0x11, 0x8, 0x5ad) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 643.886488ms ago: executing program 2 (id=796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) 573.278483ms ago: executing program 1 (id=797): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0xfff7, 0x7, 0xa250, 0xfffffffffffffff4, 0x3, r1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 572.419544ms ago: executing program 3 (id=798): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffffffffffff8}, 0x1, 0x0, 0x0, 0x48015}, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) r0 = socket(0x10, 0x803, 0x40) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f0000000300)=""/67, 0x43}, 0x42) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x24000089, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010000000200ffdbdf2507000000080000000400001e0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000006c0), 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r2, 0x22e7c000) 571.967554ms ago: executing program 1 (id=799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r1, 0x1b) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x800009dc, 0x40040) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, &(0x7f00000001c0)={0x2, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) r5 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000282000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000140)={0x0, 0x0, 0x18}) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000140)={0x0, 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201002009240300f2020005490c240206"], 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, 0x0, 0x0, r6) close_range(r0, 0xffffffffffffffff, 0x0) 571.472604ms ago: executing program 2 (id=800): r0 = socket$inet(0x2, 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x82, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e24, 0x101, @mcast1, 0x200a3c}, {0xa, 0xffde, 0xbffffffd, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0xffffffffffffffff, {[0x4, 0x4, 0xfffffffb, 0xfffffef9, 0x0, 0x0, 0xc2]}}, 0x5c) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="8b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000500)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a3128ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e855fcc69886249156a930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89b93fe5a37ca9c85a0e6e82bd603efb596c4cf0b791013cff43bf314e11a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162860a3c3389ee366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8e6b3450e545fc070644bd06a36106cdb63f9e8ad7ae50b5b44e47f377961f5e29392330fb40d63c911ffd13e094f0452cc5c77b0731b56211b2d8a7554f6077ae593626a54f56d6dea49058fd1d48db02a7b33d50474b58a7e14e6a4d935bfaf4865f00074d59ece4b2d5f5e768e952733ee2c34b3e4b0be230f792f8b16f872afbbd155fe5314d4f54ea7b747eb2cd2410db7464c73ecd4815cda0bcc839fb603bb3f0c04b2d233b54a78b7aa3db9745b69c8788e15", 0x2ea}], 0x1}}], 0x2, 0x4040854) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) readv(r2, &(0x7f0000000080), 0x10000000000001a7) 494.57487ms ago: executing program 2 (id=801): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@uuid_null}]}) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000680)=""/98, 0x62) recvmsg$inet_nvme(r3, &(0x7f0000000400)={&(0x7f0000000180)=@caif, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/238, 0xee}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000540)=""/183, 0xb7}], 0x3}, 0x200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) rt_tgsigqueueinfo(r5, r6, 0x35, &(0x7f0000000740)={0x14, 0x4, 0x4}) read$FUSE(r4, &(0x7f0000009800)={0x2020}, 0x2020) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40) getdents64(r7, &(0x7f0000000480)=""/145, 0x91) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r8, 0x45809000) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='jfs\x00', 0x8000, 0x0) 434.274705ms ago: executing program 3 (id=802): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 411.154446ms ago: executing program 3 (id=803): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x440081, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x440081, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) unshare(0x62040200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x2, [{}, {}]}, 0x48) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x2, [{}, {}]}, 0x48) close(r0) (async) close(r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000001c0)={0x40000008}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000001c0)={0x40000008}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000a00), 0x0, 0x15) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket(0x10, 0x803, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="75ccc93f2950"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x80) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="75ccc93f2950"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x80) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) read$char_usb(r7, &(0x7f0000000240)=""/109, 0x6d) close_range(r4, 0xffffffffffffffff, 0x0) close(r3) (async) close(r3) 282.442317ms ago: executing program 4 (id=804): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x3017000, 0x0, 0x6, 0x3}, 0x20) fchdir(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x3, 0x648000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4604070003050000000000000003000300060000000903000200000000fdffffff0e00000000402000"], 0x38) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x30000009}) epoll_pwait2(r6, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x7e, 0x0) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) syz_clone3(&(0x7f0000000440)={0x21001100, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000240), {0x36}, &(0x7f0000000500)=""/223, 0xdf, &(0x7f0000000300)=""/114, &(0x7f0000000380)=[0xffffffffffffffff], 0x1, {r4}}, 0x58) timer_create(0x5, &(0x7f0000000600)={0x0, 0x2d, 0x2, @tid=r8}, &(0x7f0000000640)) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) 0s ago: executing program 2 (id=805): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0xb3c) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) write(r2, &(0x7f00000002c0)="240000001a005f0214f9f407000904001f0000010000000000000200000000000000830000", 0x25) r5 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @flat=@binder={0x73622a85, 0xb, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): =2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.891168][ T36] audit: type=1400 audit(1756403540.670:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.943070][ T36] audit: type=1400 audit(1756403540.750:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.968670][ T36] audit: type=1400 audit(1756403540.750:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.968731][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.839243][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.846384][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.853571][ T288] bridge_slave_0: entered allmulticast mode [ 24.859877][ T288] bridge_slave_0: entered promiscuous mode [ 24.871884][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.878965][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.886146][ T288] bridge_slave_1: entered allmulticast mode [ 24.892456][ T288] bridge_slave_1: entered promiscuous mode [ 24.908578][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.915674][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.923029][ T290] bridge_slave_0: entered allmulticast mode [ 24.929588][ T290] bridge_slave_0: entered promiscuous mode [ 24.946374][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.953550][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.960741][ T290] bridge_slave_1: entered allmulticast mode [ 24.967168][ T290] bridge_slave_1: entered promiscuous mode [ 25.035356][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.042539][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.049621][ T289] bridge_slave_0: entered allmulticast mode [ 25.056118][ T289] bridge_slave_0: entered promiscuous mode [ 25.062683][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.069721][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.076860][ T289] bridge_slave_1: entered allmulticast mode [ 25.083186][ T289] bridge_slave_1: entered promiscuous mode [ 25.109833][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.117068][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.124320][ T291] bridge_slave_0: entered allmulticast mode [ 25.130738][ T291] bridge_slave_0: entered promiscuous mode [ 25.143131][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.150293][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.157481][ T291] bridge_slave_1: entered allmulticast mode [ 25.163860][ T291] bridge_slave_1: entered promiscuous mode [ 25.286106][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.293390][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.300711][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.307893][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.368061][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.375145][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.382446][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.389486][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.413787][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.421775][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.429105][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.436721][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.463627][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.470716][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.481325][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.488512][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.534368][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.541477][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.559354][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.566461][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.574210][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.581270][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.588958][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.596167][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.604097][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.611200][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.618949][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.626028][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.647838][ T288] veth0_vlan: entered promiscuous mode [ 25.668185][ T288] veth1_macvtap: entered promiscuous mode [ 25.707493][ T291] veth0_vlan: entered promiscuous mode [ 25.729398][ T289] veth0_vlan: entered promiscuous mode [ 25.741016][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.748419][ T289] veth1_macvtap: entered promiscuous mode [ 25.765803][ T290] veth0_vlan: entered promiscuous mode [ 25.782195][ T291] veth1_macvtap: entered promiscuous mode [ 25.798538][ T290] veth1_macvtap: entered promiscuous mode [ 25.831044][ T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.899684][ T338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 25.986429][ T347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.987282][ T352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10 [ 26.010075][ T359] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 26.027887][ T359] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 26.036590][ T359] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 26.044701][ T359] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 26.134007][ T367] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 26.182020][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.241629][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.251531][ T329] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.361480][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 26.368475][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.377347][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.387488][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.398086][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.402575][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 26.407867][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.416376][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.421029][ T10] usb 2-1: Product: syz [ 26.431001][ T46] usb 4-1: config 3 has an invalid interface number: 220 but max is 0 [ 26.433042][ T329] usb 1-1: Using ep0 maxpacket: 16 [ 26.441811][ T46] usb 4-1: config 3 has no interface number 0 [ 26.446890][ T10] usb 2-1: Manufacturer: syz [ 26.453501][ T46] usb 4-1: config 3 interface 220 has no altsetting 0 [ 26.457879][ T10] usb 2-1: SerialNumber: syz [ 26.466785][ T46] usb 4-1: New USB device found, idVendor=04f1, idProduct=3008, bcdDevice=a2.1c [ 26.471136][ T329] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 26.478985][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.488321][ T329] usb 1-1: config 0 has no interface number 0 [ 26.499683][ T46] usb 4-1: Product: syz [ 26.501846][ T329] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 26.506130][ T46] usb 4-1: Manufacturer: syz [ 26.515715][ T329] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 26.520393][ T46] usb 4-1: SerialNumber: syz [ 26.531727][ T329] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 26.544167][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.552531][ T329] usb 1-1: Product: syz [ 26.556738][ T329] usb 1-1: Manufacturer: syz [ 26.562137][ T329] usb 1-1: SerialNumber: syz [ 26.567651][ T329] usb 1-1: config 0 descriptor?? [ 26.573141][ T356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 26.580418][ T356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 26.708510][ T344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.717163][ T344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.787207][ T369] overlayfs: failed to resolve './file0': -2 [ 26.795957][ T356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 26.804250][ T356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 26.820869][ T10] usb 2-1: skipping empty audio interface (v1) [ 26.830005][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 26.840790][ T10] usb 2-1: USB disconnect, device number 2 [ 26.858096][ T46] asix 4-1:3.220 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 26.859666][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.869529][ T46] asix 4-1:3.220: probe with driver asix failed with error -71 [ 26.898123][ T46] usb 4-1: USB disconnect, device number 2 [ 27.015270][ T329] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 27.025953][ T329] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 27.035743][ T329] asix 1-1:0.251: probe with driver asix failed with error -5 [ 27.050978][ T329] usb 1-1: USB disconnect, device number 2 [ 27.068319][ T377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.069103][ T378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.089477][ T380] Zero length message leads to an empty skb [ 27.521983][ T396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 27.572911][ T411] /dev/rnullb0: Can't open blockdev [ 27.649575][ T415] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 5 [ 27.657529][ T416] EXT4-fs: Ignoring removed check option [ 27.669809][ T415] rust_binder: Write failure EINVAL in pid:10 [ 27.671310][ T415] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 27.672395][ T416] No source specified [ 27.692633][ T415] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 27.750204][ T420] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.792720][ T421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 27.799384][ T372] rust_binder: 417: removing orphan mapping 0:24 [ 27.832552][ T429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 27.925769][ T432] rust_binder: Error while translating object. [ 27.944574][ T434] tipc: Started in network mode [ 27.960282][ T432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.960317][ T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 27.973252][ T434] tipc: Node identity 4, cluster identity 4711 [ 27.991864][ T435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.020462][ T434] tipc: Node number set to 4 [ 28.185019][ T448] capability: warning: `syz.0.34' uses 32-bit capabilities (legacy support in use) [ 28.481921][ T36] kauditd_printk_skb: 107 callbacks suppressed [ 28.481957][ T36] audit: type=1400 audit(1756403545.290:181): avc: denied { mounton } for pid=460 comm="syz.2.38" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.511332][ T461] binder: Bad value for 'stats' [ 28.639674][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 28.659766][ T36] audit: type=1400 audit(1756403545.460:182): avc: denied { connect } for pid=468 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.689944][ T36] audit: type=1400 audit(1756403545.480:183): avc: denied { create } for pid=468 comm="syz.2.40" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.748592][ T36] audit: type=1400 audit(1756403545.480:184): avc: denied { create } for pid=468 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 28.787232][ T36] audit: type=1400 audit(1756403545.480:185): avc: denied { getopt } for pid=468 comm="syz.2.40" laddr=::1 lport=49157 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.813494][ T36] audit: type=1400 audit(1756403545.490:186): avc: denied { write } for pid=468 comm="syz.2.40" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.994497][ T36] audit: type=1400 audit(1756403545.800:187): avc: denied { map } for pid=482 comm="syz.3.45" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.019103][ T481] syzkaller0: refused to change device tx_queue_len [ 29.031414][ T36] audit: type=1400 audit(1756403545.800:188): avc: denied { read write } for pid=482 comm="syz.3.45" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.075422][ T36] audit: type=1400 audit(1756403545.840:189): avc: denied { append } for pid=480 comm="syz.1.44" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.111418][ T36] audit: type=1400 audit(1756403545.840:190): avc: denied { append } for pid=480 comm="syz.1.44" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.307510][ T492] rust_binder: 490 RLIMIT_NICE not set [ 29.321732][ T10] rust_binder: 489: removing orphan mapping 0:24 [ 29.361205][ T494] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 29.381546][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.456275][ T496] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 29.541450][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 29.582234][ T46] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 29.590757][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.601844][ T46] usb 2-1: config 0 has no interface number 0 [ 29.619523][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 29.641473][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.650030][ T46] usb 2-1: Product: syz [ 29.661425][ T46] usb 2-1: Manufacturer: syz [ 29.666089][ T46] usb 2-1: SerialNumber: syz [ 29.672282][ T46] usb 2-1: config 0 descriptor?? [ 29.682518][ T46] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 29.689167][ T46] usb 2-1: No valid video chain found. [ 29.985258][ T518] netlink: 'syz.3.56': attribute type 4 has an invalid length. [ 30.022451][ T518] netlink: 'syz.3.56': attribute type 4 has an invalid length. [ 30.241464][ T451] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.241630][ T452] Bluetooth: hci0: command 0x1003 tx timeout [ 30.988524][ T529] tipc: Started in network mode [ 31.000658][ T529] tipc: Node identity b21f10e35c5f, cluster identity 4 [ 31.017992][ T529] tipc: Enabled bearer , priority 0 [ 31.037623][ T528] tipc: Disabling bearer [ 31.901220][ T10] rust_binder: 561: removing orphan mapping 0:4120 [ 32.115825][ T46] usb 2-1: USB disconnect, device number 3 [ 32.177178][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.207505][ T574] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 32.225767][ T574] overlayfs: missing 'lowerdir' [ 32.386764][ T574] exFAT-fs (rnullb0): invalid boot record signature [ 32.401564][ T574] exFAT-fs (rnullb0): failed to read boot sector [ 32.412111][ T574] exFAT-fs (rnullb0): failed to recognize exfat type [ 32.452164][ T582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.512117][ T586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 32.561289][ T593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 32.580522][ T593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:36 [ 32.607650][ T595] rust_binder: Got transaction with invalid offset. [ 32.617277][ T595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.624068][ T595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 32.663476][ T582] rust_binder: Read failure Err(EFAULT) in pid:50 [ 32.702618][ T603] syz.2.84 uses obsolete (PF_INET,SOCK_PACKET) [ 32.811152][ T610] rust_binder: Write failure EINVAL in pid:87 [ 32.811450][ T610] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.842769][ T613] mmap: syz.3.88 (613) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.891446][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.971491][ T329] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 33.042769][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.052957][ T46] usb 2-1: config 0 has no interfaces? [ 33.059805][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 33.069162][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 33.077377][ T46] usb 2-1: Product: syz [ 33.081633][ T46] usb 2-1: Manufacturer: syz [ 33.086248][ T46] usb 2-1: SerialNumber: syz [ 33.091636][ T46] usb 2-1: config 0 descriptor?? [ 33.122993][ T329] usb 3-1: not running at top speed; connect to a high speed hub [ 33.132576][ T329] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.141903][ T329] usb 3-1: config 1 has no interface number 1 [ 33.148081][ T329] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 33.160980][ T329] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 33.173842][ T329] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.182991][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.191174][ T329] usb 3-1: Product:   [ 33.195409][ T329] usb 3-1: Manufacturer: 㘬냏恉ꑆ䊰Ტ䓆ᐥ [ 33.201974][ T329] usb 3-1: SerialNumber: 핮ꀕ㳌궲麷渳䍬褴瑥ⷚ튮⿉톞➩㎥嵟䴯쩂侾䌚渵ﾬ늩ꜩ㍟줨뾢掼㻦迳ﱉ鼌 [ 33.299481][ T601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.308106][ T601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.450662][ T628] rust_binder: Error while translating object. [ 33.450694][ T628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.457049][ T628] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 33.466701][ T628] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:40 [ 33.513959][ T64] usb 2-1: USB disconnect, device number 4 [ 33.795473][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 33.795496][ T36] audit: type=1400 audit(1756403550.599:244): avc: denied { create } for pid=632 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 33.821456][ T36] audit: type=1400 audit(1756403550.599:245): avc: denied { map } for pid=632 comm="syz.3.94" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.845603][ T329] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 33.852738][ T36] audit: type=1400 audit(1756403550.609:246): avc: denied { setopt } for pid=632 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.876765][ T36] audit: type=1400 audit(1756403550.619:247): avc: denied { setopt } for pid=604 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.936820][ T639] rust_binder: Write failure EFAULT in pid:111 [ 33.937343][ T640] rust_binder: Write failure EFAULT in pid:111 [ 33.957918][ T642] capability: warning: `syz.3.97' uses deprecated v2 capabilities in a way that may be insecure [ 34.021227][ T64] rust_binder: 600: removing orphan mapping 0:24 [ 34.040921][ T36] audit: type=1400 audit(1756403550.839:248): avc: denied { bind } for pid=643 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.060622][ T36] audit: type=1400 audit(1756403550.849:249): avc: denied { bind } for pid=643 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.079957][ T36] audit: type=1400 audit(1756403550.849:250): avc: denied { read } for pid=643 comm="syz.1.98" path="socket:[5455]" dev="sockfs" ino=5455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.103406][ T36] audit: type=1400 audit(1756403550.909:251): avc: denied { setopt } for pid=643 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.104470][ T64] usb 3-1: USB disconnect, device number 2 [ 34.149602][ T648] fuse: Unknown parameter './file0' [ 34.167829][ T36] audit: type=1400 audit(1756403550.969:252): avc: denied { bind } for pid=651 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.221193][ T653] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 34.221213][ T653] rust_binder: Error while translating object. [ 34.230016][ T653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.236294][ T653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 34.241564][ T451] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.245791][ T452] Bluetooth: hci0: command 0x1003 tx timeout [ 34.278494][ T36] audit: type=1400 audit(1756403551.079:253): avc: denied { getopt } for pid=656 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.334020][ T663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 34.334056][ T663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:81 [ 34.571488][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.578540][ T667] overlayfs: missing 'lowerdir' [ 34.658021][ T697] ======================================================= [ 34.658021][ T697] WARNING: The mand mount option has been deprecated and [ 34.658021][ T697] and is ignored by this kernel. Remove the mand [ 34.658021][ T697] option from the mount to silence this warning. [ 34.658021][ T697] ======================================================= [ 34.699460][ T697] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 34.722520][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.732777][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.744356][ T701] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.748324][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.769257][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.778480][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.786534][ T10] usb 1-1: Product: syz [ 34.790969][ T10] usb 1-1: Manufacturer: syz [ 34.799549][ T10] usb 1-1: SerialNumber: syz [ 34.804790][ T703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 34.809095][ T10] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 34.827321][ T10] cdc_mbim 1-1:1.0: bind() failure [ 35.010784][ T329] usb 1-1: USB disconnect, device number 3 [ 35.101464][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.201573][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.251468][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 35.258447][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.267024][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.277482][ T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.288246][ T64] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.297545][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.305579][ T64] usb 4-1: Product: syz [ 35.309760][ T64] usb 4-1: Manufacturer: syz [ 35.314589][ T64] usb 4-1: SerialNumber: syz [ 35.351476][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 35.357935][ T10] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 35.366081][ T10] usb 2-1: config 1 has no interface number 1 [ 35.372247][ T10] usb 2-1: too many endpoints for config 1 interface 3 altsetting 255: 165, using maximum allowed: 30 [ 35.383296][ T10] usb 2-1: config 1 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 35.396588][ T10] usb 2-1: config 1 interface 3 has no altsetting 0 [ 35.405003][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.414901][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.422963][ T10] usb 2-1: Product: syz [ 35.427162][ T10] usb 2-1: Manufacturer: syz [ 35.431825][ T10] usb 2-1: SerialNumber: syz [ 35.531844][ T711] overlayfs: conflicting lowerdir path [ 35.565216][ T64] usb 4-1: skipping empty audio interface (v1) [ 35.573678][ T64] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.590413][ T64] usb 4-1: USB disconnect, device number 3 [ 35.606716][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.634320][ T45] bridge_slave_1: left allmulticast mode [ 35.640768][ T45] bridge_slave_1: left promiscuous mode [ 35.649106][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.657843][ T45] bridge_slave_0: left allmulticast mode [ 35.663949][ T45] bridge_slave_0: left promiscuous mode [ 35.669996][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.813644][ T45] veth1_macvtap: left promiscuous mode [ 35.819244][ T45] veth0_vlan: left promiscuous mode [ 35.885567][ T718] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.939365][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.946569][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.953764][ T722] bridge_slave_0: entered allmulticast mode [ 35.960149][ T722] bridge_slave_0: entered promiscuous mode [ 35.966803][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.973907][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.981140][ T722] bridge_slave_1: entered allmulticast mode [ 35.987680][ T722] bridge_slave_1: entered promiscuous mode [ 36.102132][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.109340][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.116773][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.124058][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.152514][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.162713][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.169783][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.199180][ T722] veth0_vlan: entered promiscuous mode [ 36.212695][ T722] veth1_macvtap: entered promiscuous mode [ 36.254914][ T747] 9pnet_fd: Insufficient options for proto=fd [ 36.261942][ T747] SELinux: policydb magic number 0x8f9 does not match expected magic number 0xf97cff8c [ 36.272836][ T747] SELinux: failed to load policy [ 36.331460][ T329] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.331502][ T64] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.491459][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 36.498260][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.501436][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 36.507314][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.513081][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 36.521897][ T64] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.533867][ T329] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.546489][ T64] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.554994][ T329] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 36.564789][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.573953][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.581977][ T64] usb 3-1: Product: syz [ 36.591735][ T329] usb 4-1: config 0 descriptor?? [ 36.593902][ T64] usb 3-1: Manufacturer: syz [ 36.602430][ T329] usbhid 4-1:0.0: can't add hid device: -22 [ 36.603389][ T64] usb 3-1: SerialNumber: syz [ 36.609719][ T329] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 36.801588][ T736] cgroup: noprefix used incorrectly [ 36.806968][ T735] cgroup: noprefix used incorrectly [ 36.835112][ T64] usb 3-1: skipping empty audio interface (v1) [ 36.843711][ T64] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.859275][ T64] usb 3-1: USB disconnect, device number 3 [ 36.870218][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.132605][ T767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.166027][ T736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.181296][ T736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.314750][ T773] rust_binder: Error while translating object. [ 37.314798][ T773] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.321296][ T773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 37.452802][ T780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=780 comm=syz.2.132 [ 37.641478][ T357] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 37.781628][ T714] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.792488][ T357] usb 5-1: config 0 has an invalid descriptor of length 58, skipping remainder of the config [ 37.802934][ T357] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.815905][ T357] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 37.825008][ T357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.833827][ T357] usb 5-1: config 0 descriptor?? [ 37.839986][ T357] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 37.931504][ T714] usb 3-1: Using ep0 maxpacket: 16 [ 37.938826][ T714] usb 3-1: config 1 interface 0 altsetting 85 bulk endpoint 0x1 has invalid maxpacket 64 [ 37.949138][ T714] usb 3-1: config 1 interface 0 altsetting 85 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.962683][ T714] usb 3-1: config 1 interface 0 has no altsetting 0 [ 37.971897][ T714] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 37.980987][ T714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.989254][ T714] usb 3-1: Product: П [ 37.993434][ T714] usb 3-1: Manufacturer: э [ 37.997746][ T10] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 37.998461][ T714] usb 3-1: SerialNumber: ࠧ [ 38.013154][ T789] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 38.031489][ T10] usb 2-1: USB disconnect, device number 5 [ 38.223769][ T789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.232429][ T789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.245941][ T714] usb 3-1: USB disconnect, device number 4 [ 38.371487][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.521493][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 38.527965][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 38.536665][ T10] usb 2-1: config 143 has an invalid interface number: 213 but max is 1 [ 38.545231][ T10] usb 2-1: config 143 has an invalid interface number: 2 but max is 1 [ 38.553458][ T10] usb 2-1: config 143 has an invalid descriptor of length 53, skipping remainder of the config [ 38.564057][ T10] usb 2-1: config 143 has no interface number 0 [ 38.570353][ T10] usb 2-1: config 143 has no interface number 1 [ 38.576677][ T10] usb 2-1: config 143 interface 213 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 38.589960][ T10] usb 2-1: config 143 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 38.603059][ T10] usb 2-1: config 143 interface 213 has no altsetting 0 [ 38.610038][ T10] usb 2-1: config 143 interface 2 has no altsetting 0 [ 38.618656][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 38.627785][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.635919][ T10] usb 2-1: Product: syz [ 38.640104][ T10] usb 2-1: Manufacturer: syz [ 38.644757][ T10] usb 2-1: SerialNumber: syz [ 39.011430][ T714] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.101951][ T357] usb 4-1: USB disconnect, device number 4 [ 39.171417][ T714] usb 3-1: Using ep0 maxpacket: 8 [ 39.177726][ T714] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 39.186203][ T714] usb 3-1: config 0 has no interface number 0 [ 39.194035][ T714] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 39.203396][ T714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.211508][ T714] usb 3-1: Product: syz [ 39.215855][ T714] usb 3-1: Manufacturer: syz [ 39.220548][ T714] usb 3-1: SerialNumber: syz [ 39.226433][ T714] usb 3-1: config 0 descriptor?? [ 39.401117][ T10] asix 2-1:143.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 39.411642][ T10] asix 2-1:143.213: probe with driver asix failed with error -71 [ 39.420523][ T10] asix 2-1:143.2 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 39.430922][ T10] asix 2-1:143.2: probe with driver asix failed with error -71 [ 39.441073][ T10] usb 2-1: USB disconnect, device number 6 [ 39.451903][ T357] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.518659][ T714] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 39.527565][ T808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.529658][ T808] rust_binder: Error in use_page_slow: ESRCH [ 39.532351][ T714] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 39.536690][ T808] rust_binder: use_range failure ESRCH [ 39.545920][ T714] usb 3-1: USB disconnect, device number 5 [ 39.551108][ T808] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 39.562798][ T808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.572276][ T808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:112 [ 39.602514][ T357] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 39.620746][ T357] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 39.638670][ T357] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 39.647748][ T357] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 39.658779][ T357] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 39.662150][ T817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.671134][ T357] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 39.671280][ T817] rust_binder: pid 817 performed invalid decrement on ref [ 39.677919][ T357] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 39.702633][ T357] usb 4-1: Product: syz [ 39.706895][ T357] usb 4-1: Manufacturer: syz [ 39.715345][ T820] syz.2.144 (820): attempted to duplicate a private mapping with mremap. This is not supported. [ 39.726531][ T357] cdc_wdm 4-1:1.0: skipping garbage [ 39.732107][ T357] cdc_wdm 4-1:1.0: skipping garbage [ 39.741545][ T357] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 39.747543][ T357] cdc_wdm 4-1:1.0: Unknown control protocol [ 39.916352][ T714] usb 4-1: USB disconnect, device number 5 [ 39.997861][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 39.997880][ T36] audit: type=1400 audit(1756403556.799:276): avc: denied { create } for pid=826 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 40.023971][ T357] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.181432][ T357] usb 3-1: Using ep0 maxpacket: 8 [ 40.187879][ T357] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 40.201414][ T357] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.216337][ T357] usb 3-1: config 1 interface 0 has no altsetting 0 [ 40.225004][ T357] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 40.234466][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.242964][ T357] usb 3-1: Product: ᐌ [ 40.247340][ T357] usb 3-1: Manufacturer: Є [ 40.252371][ T357] usb 3-1: SerialNumber: 倐늂ᮨ碱⒬ꯘ埲༓ꑉ仮㹜驢඄㌸⣇龠೐沏䌞䯕茏❫宭ڄ幏쮎㎥揱ﷃ㔝頟碛闲꿆䗄髫핓喎폞㻶 [ 40.270686][ T822] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 40.380235][ T46] usb 5-1: USB disconnect, device number 2 [ 40.485978][ T822] netlink: 679 bytes leftover after parsing attributes in process `syz.2.145'. [ 40.496552][ T822] netlink: 679 bytes leftover after parsing attributes in process `syz.2.145'. [ 40.565100][ T851] fuseblk: Unknown parameter 'defaultblksize' [ 40.650096][ T357] usb 3-1: USB disconnect, device number 6 [ 41.108810][ T13] bridge_slave_1: left allmulticast mode [ 41.121975][ T13] bridge_slave_1: left promiscuous mode [ 41.127681][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.141796][ T13] bridge_slave_0: left allmulticast mode [ 41.151124][ T13] bridge_slave_0: left promiscuous mode [ 41.169549][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.191856][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.192618][ T877] rust_binder: Got transaction with invalid offset. [ 41.211533][ T877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.218303][ T877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 41.412988][ T13] tipc: Left network mode [ 41.441799][ T13] veth1_macvtap: left promiscuous mode [ 41.452338][ T13] veth0_vlan: left promiscuous mode [ 41.549138][ T895] tipc: Started in network mode [ 41.560158][ T895] tipc: Node identity 8f, cluster identity 6 [ 41.566987][ T895] tipc: Node number set to 143 [ 41.582342][ T895] tipc: Cannot configure node identity twice [ 41.598535][ T880] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.616452][ T880] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.628394][ T880] bridge_slave_0: entered allmulticast mode [ 41.635372][ T880] bridge_slave_0: entered promiscuous mode [ 41.649523][ T880] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.657184][ T880] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.665057][ T880] bridge_slave_1: entered allmulticast mode [ 41.672978][ T880] bridge_slave_1: entered promiscuous mode [ 41.679463][ T898] rust_binder: 59: no such ref 2 [ 41.760032][ T36] audit: type=1400 audit(1756403558.559:277): avc: denied { getopt } for pid=899 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.804176][ T880] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.811389][ T880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.838689][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.856409][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.863623][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.871953][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.879157][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.930355][ T880] veth0_vlan: entered promiscuous mode [ 41.943952][ T880] veth1_macvtap: entered promiscuous mode [ 41.983465][ T36] audit: type=1400 audit(1756403558.789:278): avc: denied { mounton } for pid=880 comm="syz-executor" path="/root/syzkaller.pD8LI8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 42.141464][ T357] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 42.302608][ T357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 42.313687][ T357] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 42.323086][ T357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.334629][ T357] usb 4-1: config 0 descriptor?? [ 42.340965][ T915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.353680][ T12] bridge_slave_1: left allmulticast mode [ 42.359785][ T12] bridge_slave_1: left promiscuous mode [ 42.365863][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.376956][ T12] bridge_slave_0: left allmulticast mode [ 42.386745][ T12] bridge_slave_0: left promiscuous mode [ 42.392885][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.433330][ T36] audit: type=1400 audit(1756403559.239:279): avc: denied { map } for pid=930 comm="syz.1.176" path="socket:[8408]" dev="sockfs" ino=8408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.456810][ T931] rust_binder: Error while translating object. [ 42.456863][ T931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.464148][ T931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 42.484333][ T36] audit: type=1400 audit(1756403559.269:280): avc: denied { read } for pid=930 comm="syz.1.176" path="socket:[8408]" dev="sockfs" ino=8408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.551326][ T915] tc_dump_action: action bad kind [ 42.551420][ T36] audit: type=1400 audit(1756403559.349:281): avc: denied { write } for pid=914 comm="syz.3.171" path="socket:[8420]" dev="sockfs" ino=8420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.603770][ T12] veth1_macvtap: left promiscuous mode [ 42.609543][ T12] veth0_vlan: left promiscuous mode [ 42.620361][ T357] usbhid 4-1:0.0: can't add hid device: -71 [ 42.626959][ T36] audit: type=1400 audit(1756403559.429:282): avc: denied { execute } for pid=941 comm="syz.1.179" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.651861][ T357] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 42.665221][ T357] usb 4-1: USB disconnect, device number 6 [ 42.718564][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.726316][ T932] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.735376][ T932] bridge_slave_0: entered allmulticast mode [ 42.746106][ T932] bridge_slave_0: entered promiscuous mode [ 42.753570][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.760641][ T932] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.769742][ T932] bridge_slave_1: entered allmulticast mode [ 42.776371][ T932] bridge_slave_1: entered promiscuous mode [ 42.803771][ T957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 42.803803][ T957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:34 [ 42.880708][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.897286][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.904657][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.911954][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.948722][ T36] audit: type=1400 audit(1756403559.749:283): avc: denied { create } for pid=973 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 42.972150][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.981838][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.992317][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.999422][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.008457][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.015556][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.045235][ T932] veth0_vlan: entered promiscuous mode [ 43.062400][ T932] veth1_macvtap: entered promiscuous mode [ 43.098913][ T980] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 43.101533][ T357] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.118301][ T36] audit: type=1400 audit(1756403559.909:284): avc: denied { mount } for pid=979 comm="syz.4.189" name="/" dev="ramfs" ino=8721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 43.135842][ T983] netlink: 'syz.2.174': attribute type 27 has an invalid length. [ 43.241312][ T36] audit: type=1400 audit(1756403560.039:285): avc: denied { mount } for pid=992 comm="syz.4.193" name="/" dev="configfs" ino=2453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 43.247207][ T993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.264170][ T993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:82 [ 43.312966][ T357] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.335055][ T357] usb 2-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 43.344303][ T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.353700][ T357] usb 2-1: config 0 descriptor?? [ 43.451471][ T372] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.483699][ T997] netlink: 316 bytes leftover after parsing attributes in process `syz.4.194'. [ 43.493233][ T997] netlink: 316 bytes leftover after parsing attributes in process `syz.4.194'. [ 43.602100][ T372] usb 4-1: Using ep0 maxpacket: 32 [ 43.608408][ T372] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.618972][ T372] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 43.628116][ T372] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 43.637531][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.651099][ T372] usb 4-1: config 0 descriptor?? [ 43.763485][ T357] wacom 0003:056A:0017.0001: unknown main item tag 0x0 [ 43.770538][ T357] wacom 0003:056A:0017.0001: unknown main item tag 0x0 [ 43.777678][ T357] wacom 0003:056A:0017.0001: unknown main item tag 0x0 [ 43.784724][ T357] wacom 0003:056A:0017.0001: unknown main item tag 0x0 [ 43.791760][ T357] wacom 0003:056A:0017.0001: unknown main item tag 0x0 [ 43.799135][ T357] wacom 0003:056A:0017.0001: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 43.809416][ T357] wacom 0003:056A:0017.0001: hidraw0: USB HID v0.03 Device [HID 056a:0017] on usb-dummy_hcd.1-1/input0 [ 43.821998][ T357] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0017.0001/input/input5 [ 43.864725][ T46] usb 4-1: USB disconnect, device number 7 [ 43.971421][ T372] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.975466][ T357] usb 2-1: USB disconnect, device number 7 [ 44.007356][ T10] rust_binder: 982: removing orphan mapping 0:8 [ 44.081342][ T1012] tipc: Started in network mode [ 44.086789][ T1012] tipc: Node identity 0690ef1d6e77, cluster identity 4711 [ 44.094302][ T1012] tipc: Enabled bearer , priority 0 [ 44.113630][ T1012] syzkaller0: entered promiscuous mode [ 44.119385][ T1012] syzkaller0: entered allmulticast mode [ 44.125460][ T1012] tipc: Resetting bearer [ 44.132771][ T372] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 44.145503][ T372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 44.145543][ T1012] tipc: Resetting bearer [ 44.157468][ T372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 44.173766][ T372] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.186815][ T372] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.196048][ T372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.200883][ T1012] tipc: Disabling bearer [ 44.205292][ T372] usb 5-1: config 0 descriptor?? [ 44.215167][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 44.293159][ T1015] netlink: 'syz.2.199': attribute type 28 has an invalid length. [ 44.372931][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 44.380605][ T46] usb 4-1: can't read configurations, error -61 [ 44.512128][ T46] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 44.625571][ T372] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 44.636967][ T372] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 44.649970][ T372] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 44.682846][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 44.695181][ T46] usb 4-1: can't read configurations, error -61 [ 44.703152][ T46] usb usb4-port1: attempt power cycle [ 44.940113][ T1029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.949473][ T1029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.051690][ T46] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 45.083077][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 45.095783][ T46] usb 4-1: can't read configurations, error -61 [ 45.110715][ T1035] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.110740][ T1035] rust_binder: Read failure Err(EFAULT) in pid:18 [ 45.119679][ T1035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 45.148349][ T1037] fuse: Unknown parameter 'f?50x0000000000000006' [ 45.165945][ T1037] fuse: Unknown parameter 'nd' [ 45.231456][ T46] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 45.240824][ T1044] binder: Bad value for 'stats' [ 45.253326][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 45.261743][ T46] usb 4-1: can't read configurations, error -61 [ 45.267951][ T1047] binder: Unknown parameter 'fscontext?}' [ 45.268420][ T46] usb usb4-port1: unable to enumerate USB device [ 45.290596][ T1049] virtio-fs: tag not found [ 45.402086][ T1052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 45.711420][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.861421][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 45.867705][ T46] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.876442][ T46] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.885401][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.894436][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.896329][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 45.896349][ T36] audit: type=1400 audit(1756403562.699:293): avc: denied { connect } for pid=1055 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.904237][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.940678][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.942735][ T357] usb 5-1: USB disconnect, device number 3 [ 45.956630][ T46] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.968954][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.977865][ T46] usb 2-1: config 0 descriptor?? [ 46.184547][ T46] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 46.386212][ T36] audit: type=1400 audit(1756403563.189:294): avc: denied { read write } for pid=1053 comm="syz.1.210" name="lp0" dev="devtmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 46.387114][ T357] usb 2-1: USB disconnect, device number 8 [ 46.410232][ T36] audit: type=1400 audit(1756403563.189:295): avc: denied { open } for pid=1053 comm="syz.1.210" path="/dev/usb/lp0" dev="devtmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 46.441500][ T357] usblp0: removed [ 46.484399][ T1064] loop2: detected capacity change from 0 to 7 [ 46.543443][ T1065] random: crng reseeded on system resumption [ 46.551416][ T36] audit: type=1400 audit(1756403563.349:296): avc: denied { write } for pid=1063 comm="syz.4.213" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.581407][ T36] audit: type=1400 audit(1756403563.349:297): avc: denied { open } for pid=1063 comm="syz.4.213" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.604917][ T36] audit: type=1400 audit(1756403563.389:298): avc: denied { ioctl } for pid=1063 comm="syz.4.213" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.654441][ T1067] rust_binder: Error while translating object. [ 46.654487][ T1067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 46.660820][ T1067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104 [ 46.700736][ T36] audit: type=1400 audit(1756403563.499:299): avc: denied { getopt } for pid=1070 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.705607][ T1072] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.712777][ T36] audit: type=1400 audit(1756403563.509:300): avc: denied { append } for pid=1069 comm="syz.4.215" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.760046][ T36] audit: type=1400 audit(1756403563.509:301): avc: denied { append } for pid=1070 comm="syz.2.216" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.844867][ T36] audit: type=1400 audit(1756403563.649:302): avc: denied { remount } for pid=1084 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.895466][ T1089] tipc: Enabled bearer , priority 0 [ 46.925905][ T1089] syzkaller0: entered promiscuous mode [ 46.931740][ T1089] syzkaller0: entered allmulticast mode [ 46.937529][ T1089] tipc: Resetting bearer [ 46.947105][ T1091] tipc: Cannot configure node identity twice [ 47.032273][ T1089] tipc: Resetting bearer [ 47.045129][ T1089] tipc: Disabling bearer [ 47.093748][ T1101] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 47.308264][ T1114] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 47.801421][ T357] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 47.806286][ T1166] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 47.883939][ T745] rust_binder: 1165: removing orphan mapping 0:24 [ 47.888620][ T1174] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 47.890625][ T1174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:143 [ 47.905436][ T1176] /dev/nullb0: Can't lookup blockdev [ 47.962562][ T357] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.977097][ T357] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 47.986346][ T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 47.994628][ T357] usb 2-1: Product: syz [ 47.998810][ T357] usb 2-1: Manufacturer: syz [ 48.003513][ T357] usb 2-1: SerialNumber: syz [ 48.213901][ T357] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 48.467935][ C1] usblp0: nonzero write bulk status received: -71 [ 48.468502][ T745] usb 2-1: USB disconnect, device number 9 [ 48.481273][ T745] usblp0: removed [ 48.937505][ T1200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 48.965684][ T1206] fuse: Bad value for 'fd' [ 49.012202][ T1210] netlink: 92 bytes leftover after parsing attributes in process `syz.1.258'. [ 49.261446][ T357] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 49.331433][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 49.398614][ T1218] Source file dentry negative [ 49.404907][ T1218] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.417927][ T357] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.429515][ T357] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 49.441453][ T357] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.451675][ T357] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 49.461150][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.473896][ T45] bridge_slave_1: left allmulticast mode [ 49.488403][ T357] hub 3-1:1.0: bad descriptor, ignoring hub [ 49.494510][ T45] bridge_slave_1: left promiscuous mode [ 49.494895][ T357] hub 3-1:1.0: probe with driver hub failed with error -5 [ 49.500245][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.507587][ T357] cdc_wdm 3-1:1.0: skipping garbage [ 49.523932][ T357] cdc_wdm 3-1:1.0: skipping garbage [ 49.529309][ T357] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 49.531822][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 49.547227][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 49.547773][ T45] bridge_slave_0: left allmulticast mode [ 49.563684][ T45] bridge_slave_0: left promiscuous mode [ 49.569418][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.577557][ T46] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 49.590545][ T1223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 49.602195][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.608753][ T1223] SELinux: security_context_str_to_sid (unconfined3]59n) failed with errno=-22 [ 49.610505][ T46] usb 2-1: Product: syz [ 49.626122][ T46] usb 2-1: Manufacturer: syz [ 49.630785][ T46] usb 2-1: SerialNumber: syz [ 49.643745][ T46] usb 2-1: config 0 descriptor?? [ 49.649212][ T1214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.656724][ T1214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.688317][ T1212] devpts: called with bogus options [ 49.745065][ T45] tipc: Left network mode [ 49.751867][ T45] veth1_macvtap: left promiscuous mode [ 49.757699][ T45] veth0_vlan: left promiscuous mode [ 49.801650][ T357] usb 3-1: USB disconnect, device number 7 [ 49.835199][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.842430][ T1224] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.849600][ T1224] bridge_slave_0: entered allmulticast mode [ 49.856297][ T1224] bridge_slave_0: entered promiscuous mode [ 49.863936][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.866406][ T1214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.871187][ T1224] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.878722][ T1214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.886067][ T1224] bridge_slave_1: entered allmulticast mode [ 49.899575][ T1224] bridge_slave_1: entered promiscuous mode [ 49.982345][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.989642][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.999852][ T938] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.007196][ T938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.036777][ T1224] veth0_vlan: entered promiscuous mode [ 50.049827][ T1224] veth1_macvtap: entered promiscuous mode [ 50.101346][ T1214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.110498][ T1214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.320656][ T46] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 50.435995][ T1249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.436050][ T1249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 50.455927][ T1249] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 50.471451][ T1249] rust_binder: Read failure Err(EFAULT) in pid:159 [ 50.487831][ T1249] devpts: called with bogus options [ 50.517081][ T357] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 50.555061][ T46] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 50.581573][ T46] usb 2-1: USB disconnect, device number 10 [ 50.692769][ T357] usb 3-1: unable to get BOS descriptor or descriptor too short [ 50.706891][ T357] usb 3-1: config 176 has an invalid interface number: 218 but max is 0 [ 50.721094][ T357] usb 3-1: config 176 has no interface number 0 [ 50.734738][ T357] usb 3-1: config 176 interface 218 has no altsetting 0 [ 50.752686][ T1259] netlink: 104 bytes leftover after parsing attributes in process `syz.3.273'. [ 50.754812][ T357] usb 3-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00 [ 50.794938][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.810423][ T357] usb 3-1: Product: syz [ 50.823602][ T357] usb 3-1: Manufacturer: syz [ 50.840612][ T357] usb 3-1: SerialNumber: syz [ 51.068948][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 51.068985][ T36] audit: type=1400 audit(1756403567.873:384): avc: denied { mounton } for pid=1242 comm="syz.2.269" path="/proc/82/task" dev="proc" ino=10450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 51.110566][ T357] ipheth 3-1:176.218: Unable to find alternate settings interface [ 51.122757][ T357] usb 3-1: USB disconnect, device number 8 [ 51.151411][ T36] audit: type=1400 audit(1756403567.953:385): avc: denied { write } for pid=1274 comm="syz.3.277" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 51.170470][ T1278] binder: Unknown parameter '' [ 51.441644][ T64] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 51.592647][ T64] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 51.601219][ T64] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.611754][ T64] usb 4-1: config 0 has no interface number 0 [ 51.619987][ T64] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 51.629562][ T64] usb 4-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 51.638804][ T64] usb 4-1: Product: syz [ 51.643527][ T64] usb 4-1: Manufacturer: syz [ 51.648170][ T64] usb 4-1: SerialNumber: syz [ 51.654304][ T64] usb 4-1: config 0 descriptor?? [ 51.820419][ T1291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 51.862071][ T10] usb 4-1: USB disconnect, device number 12 [ 51.911345][ T1296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.285'. [ 51.981416][ T36] audit: type=1400 audit(1756403568.783:386): avc: denied { map } for pid=1298 comm="syz.1.286" path="/proc/78/task/79/setgroups" dev="proc" ino=10568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 52.007093][ T36] audit: type=1400 audit(1756403568.783:387): avc: denied { execute } for pid=1298 comm="syz.1.286" path="/proc/78/task/79/setgroups" dev="proc" ino=10568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 52.221462][ T357] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 52.371417][ T357] usb 5-1: Using ep0 maxpacket: 32 [ 52.378668][ T357] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 52.386056][ T1312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 52.387271][ T357] usb 5-1: config 0 has no interface number 0 [ 52.397951][ T1312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1312 comm=syz.3.291 [ 52.404161][ T357] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 52.419529][ T36] audit: type=1400 audit(1756403569.223:388): avc: denied { ioctl } for pid=1311 comm="syz.3.291" path="socket:[9791]" dev="sockfs" ino=9791 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.423999][ T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.456951][ T357] usb 5-1: Product: syz [ 52.461172][ T357] usb 5-1: Manufacturer: syz [ 52.465924][ T357] usb 5-1: SerialNumber: syz [ 52.471246][ T357] usb 5-1: config 0 descriptor?? [ 52.478003][ T357] smsc95xx v2.0.0 [ 52.510219][ T36] audit: type=1400 audit(1756403569.313:389): avc: denied { read } for pid=1313 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.774215][ T36] audit: type=1400 audit(1756403569.583:390): avc: denied { read } for pid=1316 comm="syz.1.293" path="socket:[9801]" dev="sockfs" ino=9801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.798559][ T36] audit: type=1400 audit(1756403569.583:391): avc: denied { write } for pid=1316 comm="syz.1.293" name="file2" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.821058][ T36] audit: type=1400 audit(1756403569.583:392): avc: denied { open } for pid=1316 comm="syz.1.293" path="/26/file2" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.848180][ T1320] netlink: 'syz.1.294': attribute type 25 has an invalid length. [ 52.859990][ T36] audit: type=1400 audit(1756403569.583:393): avc: denied { setattr } for pid=1316 comm="syz.1.293" name="file2" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.964164][ T1324] process 'syz.1.296' launched './file0' with NULL argv: empty string added [ 52.974153][ T1324] overlayfs: overlapping lowerdir path [ 52.981035][ T1324] overlayfs: overlapping lowerdir path [ 53.281474][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 53.421468][ T10] usb 3-1: device descriptor read/64, error -71 [ 53.512535][ T357] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 53.523397][ T357] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 53.534419][ T357] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 53.545489][ T357] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 53.556218][ T357] usb 5-1: USB disconnect, device number 4 [ 53.681549][ T10] usb 3-1: device descriptor read/64, error -71 [ 53.921444][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 53.974607][ T357] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 54.051520][ T10] usb 3-1: device descriptor read/64, error -71 [ 54.095006][ T1360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.095850][ T1360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 54.103076][ T1362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.112914][ T1361] fuse: Unknown parameter '[ser_id' [ 54.132503][ T357] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.158149][ T357] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 54.176718][ T357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 54.191437][ T357] usb 4-1: Product: syz [ 54.198664][ T357] usb 4-1: Manufacturer: syz [ 54.203557][ T357] usb 4-1: SerialNumber: syz [ 54.268193][ T1379] SELinux: failed to load policy [ 54.274064][ T1379] tmpfs: Unknown parameter 'nos`*\' [ 54.311504][ T10] usb 3-1: device descriptor read/64, error -71 [ 54.411245][ T357] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 54.422594][ T10] usb usb3-port1: attempt power cycle [ 54.683786][ T1388] bridge_slave_0: left allmulticast mode [ 54.689566][ T1388] bridge_slave_0: left promiscuous mode [ 54.695363][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.771480][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 54.793050][ T10] usb 3-1: device descriptor read/8, error -71 [ 54.929289][ T10] usb 3-1: device descriptor read/8, error -71 [ 54.937860][ T1406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 54.947226][ T1406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 54.956874][ T1406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 55.098387][ T1409] netlink: 5 bytes leftover after parsing attributes in process `syz.1.320'. [ 55.171424][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 55.202624][ T10] usb 3-1: device descriptor read/8, error -71 [ 55.332501][ T10] usb 3-1: device descriptor read/8, error -71 [ 55.442431][ T10] usb usb3-port1: unable to enumerate USB device [ 56.126460][ T938] bridge_slave_1: left allmulticast mode [ 56.131138][ T1420] rust_binder: Error while translating object. [ 56.133289][ T938] bridge_slave_1: left promiscuous mode [ 56.138302][ T1420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.139760][ T938] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.164614][ T1420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 56.165677][ C0] usblp0: nonzero write bulk status received: -71 [ 56.166120][ T46] usb 4-1: USB disconnect, device number 13 [ 56.188647][ T938] bridge_slave_0: left allmulticast mode [ 56.196627][ T938] bridge_slave_0: left promiscuous mode [ 56.203119][ T46] usblp0: removed [ 56.207552][ T938] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.277910][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.285407][ T1415] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.292643][ T1415] bridge_slave_0: entered allmulticast mode [ 56.299566][ T1415] bridge_slave_0: entered promiscuous mode [ 56.306902][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.314108][ T1415] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.321300][ T1415] bridge_slave_1: entered allmulticast mode [ 56.328141][ T1415] bridge_slave_1: entered promiscuous mode [ 56.334313][ T938] tipc: Left network mode [ 56.340550][ T938] veth1_macvtap: left promiscuous mode [ 56.346306][ T938] veth0_vlan: left promiscuous mode [ 56.456522][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.463760][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.471041][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.478116][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.492944][ T64] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 56.503874][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.512337][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.526706][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.533822][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.541735][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.548814][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.581954][ T1415] veth0_vlan: entered promiscuous mode [ 56.602193][ T1415] veth1_macvtap: entered promiscuous mode [ 56.657520][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 56.664130][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 56.677336][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.696176][ T64] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.715590][ T64] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.730725][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.743970][ T64] usb 3-1: Product: syz [ 56.748199][ T64] usb 3-1: Manufacturer: syz [ 56.761423][ T64] usb 3-1: SerialNumber: syz [ 56.875900][ T1451] netlink: 'syz.4.333': attribute type 5 has an invalid length. [ 56.884016][ T1451] netlink: 'syz.4.333': attribute type 5 has an invalid length. [ 56.891860][ T1451] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.333'. [ 56.902895][ T1451] rust_binder: Write failure EFAULT in pid:10 [ 56.919157][ T1453] rust_binder: Error while translating object. [ 56.926696][ T1453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.933276][ T1453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 56.967603][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 56.967641][ T36] audit: type=1400 audit(1756403573.773:400): avc: denied { bind } for pid=1456 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.006130][ T64] usb 3-1: skipping empty audio interface (v1) [ 57.014608][ T64] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 57.028422][ T64] usb 3-1: USB disconnect, device number 13 [ 57.045758][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.149148][ T1469] netlink: 'syz.4.339': attribute type 4 has an invalid length. [ 57.157558][ T1469] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.339'. [ 57.262935][ T36] audit: type=1400 audit(1756403574.073:401): avc: denied { bind } for pid=1472 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.422564][ T36] audit: type=1400 audit(1756403574.233:402): avc: denied { listen } for pid=1479 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.442696][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.533338][ T36] audit: type=1400 audit(1756403574.333:403): avc: denied { read } for pid=1481 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.602454][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 57.631870][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.661414][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.702591][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.715736][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.741407][ T9] usb 5-1: Product: syz [ 57.745650][ T9] usb 5-1: Manufacturer: syz [ 57.750270][ T9] usb 5-1: SerialNumber: syz [ 58.106199][ T9] usb 5-1: 0:2 : does not exist [ 58.113550][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 58.125073][ T9] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 58.134819][ T9] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 58.145355][ T9] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 58.159621][ T9] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 58.169972][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 58.181220][ T9] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 58.193206][ T9] usb 5-1: USB disconnect, device number 5 [ 58.235425][ T1506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.271438][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 58.288814][ T36] audit: type=1400 audit(1756403575.093:404): avc: denied { write } for pid=1514 comm="syz.2.357" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 58.342278][ T1516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 58.441498][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 58.447953][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 58.458882][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.472055][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 58.481221][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.491179][ T10] usb 4-1: config 0 descriptor?? [ 58.631515][ T36] audit: type=1400 audit(1756403575.433:405): avc: denied { accept } for pid=1517 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 58.646986][ T1521] 9pnet_fd: Insufficient options for proto=fd [ 58.663797][ T36] audit: type=1400 audit(1756403575.473:406): avc: denied { ioctl } for pid=1520 comm="syz.1.360" path="socket:[12351]" dev="sockfs" ino=12351 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.704322][ T10] usb 4-1: string descriptor 0 read error: -71 [ 58.710962][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 58.719704][ T10] usb 4-1: USB disconnect, device number 14 [ 58.951444][ T357] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 59.102668][ T357] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.113738][ T357] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.123891][ T357] usb 2-1: config 0 interface 0 has no altsetting 0 [ 59.130588][ T357] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 59.140278][ T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.149551][ T357] usb 2-1: config 0 descriptor?? [ 59.541441][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 59.558312][ T357] uclogic 0003:28BD:0075.0003: interface is invalid, ignoring [ 59.667728][ T36] audit: type=1400 audit(1756403576.473:407): avc: denied { bind } for pid=1549 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.721421][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 59.727873][ T10] usb 4-1: config 1 has an invalid interface number: 152 but max is 0 [ 59.736422][ T10] usb 4-1: config 1 has no interface number 0 [ 59.742782][ T10] usb 4-1: config 1 interface 152 altsetting 3 endpoint 0xD has an invalid bInterval 64, changing to 7 [ 59.754047][ T10] usb 4-1: config 1 interface 152 has no altsetting 0 [ 59.762825][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=d4.ef [ 59.773892][ T1526] binder: Unknown parameter '000000000000000000000000x0000000000000000' [ 59.782579][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.791180][ T357] usb 2-1: USB disconnect, device number 11 [ 59.800758][ T10] usb 4-1: Product: syz [ 59.805832][ T10] usb 4-1: Manufacturer: syz [ 59.810575][ T10] usb 4-1: SerialNumber: syz [ 60.022577][ T10] usbhid 4-1:1.152: couldn't find an input interrupt endpoint [ 60.033969][ T10] usb 4-1: USB disconnect, device number 15 [ 60.361036][ T1561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.463840][ T1565] fuse: Bad value for 'fd' [ 60.505486][ T1567] overlayfs: failed to clone upperpath [ 60.540110][ T1569] tipc: Can't bind to reserved service type 2 [ 60.611543][ T372] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 60.676988][ T36] audit: type=1400 audit(1756403577.483:408): avc: denied { create } for pid=1576 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 60.741430][ T372] usb 2-1: device descriptor read/64, error -71 [ 60.931454][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 60.991420][ T372] usb 2-1: device descriptor read/64, error -71 [ 61.091414][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 61.106891][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.128423][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.148360][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 61.157830][ T36] audit: type=1400 audit(1756403577.953:409): avc: denied { ioctl } for pid=1587 comm="syz.4.385" path="socket:[12546]" dev="sockfs" ino=12546 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.183604][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.192426][ T10] usb 4-1: config 0 descriptor?? [ 61.198530][ T10] hub 4-1:0.0: USB hub found [ 61.252365][ T372] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 61.381459][ T372] usb 2-1: device descriptor read/64, error -71 [ 61.404417][ T10] hub 4-1:0.0: 1 port detected [ 61.605411][ T1577] overlay: Unknown parameter 'dont_measure' [ 61.621486][ T10] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 61.621491][ T372] usb 2-1: device descriptor read/64, error -71 [ 61.621515][ T10] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 61.643203][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 61.649207][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 61.681755][ T10] usb 4-1: USB disconnect, device number 16 [ 61.731534][ T372] usb usb2-port1: attempt power cycle [ 62.081441][ T372] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 62.102562][ T372] usb 2-1: device descriptor read/8, error -71 [ 62.169329][ T1598] netlink: 84 bytes leftover after parsing attributes in process `syz.3.388'. [ 62.234253][ T372] usb 2-1: device descriptor read/8, error -71 [ 62.315072][ T1607] tipc: Enabled bearer , priority 0 [ 62.333737][ T1607] syzkaller0: entered promiscuous mode [ 62.339252][ T1607] syzkaller0: entered allmulticast mode [ 62.345301][ T1607] tipc: Resetting bearer [ 62.352807][ T1607] tipc: Resetting bearer [ 62.367147][ T1607] tipc: Disabling bearer [ 62.438587][ T1610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.438621][ T1610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.445519][ T1610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.452226][ T1610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.458864][ T1610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.465367][ T1610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.472040][ T1610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.478573][ T1610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.481445][ T372] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 62.485807][ T1610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.522476][ T372] usb 2-1: device descriptor read/8, error -71 [ 62.672652][ T372] usb 2-1: device descriptor read/8, error -71 [ 62.781505][ T372] usb usb2-port1: unable to enumerate USB device [ 63.521136][ T36] audit: type=1400 audit(1756403580.323:410): avc: denied { mount } for pid=1660 comm="syz.1.408" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.551346][ T36] audit: type=1400 audit(1756403580.353:411): avc: denied { unmount } for pid=880 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.671443][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 63.831412][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 63.842376][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.861423][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 63.878997][ T9] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 63.891411][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.901442][ T9] usb 3-1: Product: syz [ 63.905740][ T9] usb 3-1: Manufacturer: syz [ 63.911700][ T9] usb 3-1: SerialNumber: syz [ 63.921214][ T9] usb 3-1: config 0 descriptor?? [ 64.296502][ T36] audit: type=1400 audit(1756403581.103:412): avc: denied { watch } for pid=1686 comm="syz.1.415" path="/63/file0" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.319400][ T36] audit: type=1400 audit(1756403581.103:413): avc: denied { watch } for pid=1686 comm="syz.1.415" path="/63/file0" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.385621][ T1699] 9pnet_fd: Insufficient options for proto=fd [ 64.392379][ T1699] rust_binder: Fixups oob 164 166 363 196 [ 64.392408][ T1699] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 64.398434][ T1699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.407847][ T1699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 64.544530][ T1659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.573487][ T1659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.597871][ T36] audit: type=1400 audit(1756403581.403:414): avc: denied { nlmsg_write } for pid=1717 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 64.724896][ T1732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 64.734585][ T1732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1821 sclass=netlink_route_socket pid=1732 comm=syz.1.429 [ 64.783474][ T1659] 9pnet_fd: Insufficient options for proto=fd [ 64.791332][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 64.801918][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 64.811934][ T9] usb 3-1: USB disconnect, device number 14 [ 65.309912][ T36] audit: type=1400 audit(1756403582.113:415): avc: denied { mounton } for pid=1759 comm="syz.2.442" path="/56/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 65.420246][ T1763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.433115][ T36] audit: type=1400 audit(1756403582.243:416): avc: denied { ioctl } for pid=1767 comm="syz.2.444" path="mnt:[4026532311]" dev="nsfs" ino=4026532311 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.611063][ T1782] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 65.672009][ T1784] SELinux: security_context_str_to_sid () failed with errno=-22 [ 65.704567][ T1786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.723634][ T1791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.777559][ T36] audit: type=1400 audit(1756403582.583:417): avc: denied { setattr } for pid=1787 comm="syz.4.451" name="" dev="pipefs" ino=13723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 65.784456][ T1799] rust_binder: Failed copying into alloc: EFAULT [ 65.811534][ T1799] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 65.818056][ T1799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.826783][ T1799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:235 [ 65.856700][ T1804] rust_binder: Write failure EFAULT in pid:238 [ 66.141420][ T372] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 66.301402][ T372] usb 2-1: Using ep0 maxpacket: 32 [ 66.312775][ T372] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.321446][ T372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.341417][ T372] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.363177][ T372] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.373570][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.387162][ T372] usb 2-1: Product: syz [ 66.391716][ T372] usb 2-1: Manufacturer: syz [ 66.396442][ T372] usb 2-1: SerialNumber: syz [ 66.561492][ T46] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 66.610774][ T372] usb 2-1: skipping empty audio interface (v1) [ 66.632586][ T372] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 66.651186][ T372] usb 2-1: USB disconnect, device number 16 [ 66.673020][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.721603][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 66.732569][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 66.741931][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.752288][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.762701][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.771895][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.780039][ T46] usb 3-1: Product: syz [ 66.784636][ T46] usb 3-1: Manufacturer: syz [ 66.789315][ T46] usb 3-1: SerialNumber: syz [ 67.011855][ T46] usb 3-1: skipping empty audio interface (v1) [ 67.020008][ T46] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 67.030114][ T46] usb 3-1: USB disconnect, device number 15 [ 67.039012][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.160262][ T1865] rust_binder: Write failure EFAULT in pid:245 [ 67.180431][ T36] audit: type=1400 audit(1756403583.983:418): avc: denied { create } for pid=1866 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.230177][ T36] audit: type=1400 audit(1756403584.033:419): avc: denied { map } for pid=1874 comm="syz.1.468" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.352007][ T1893] 9p: Unknown access argument : -22 [ 67.390156][ T1895] overlayfs: failed to clone upperpath [ 67.527689][ T1899] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 67.527714][ T1899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 67.535879][ T1899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:186 [ 67.560355][ T1901] rust_binder: 188: no such ref 0 [ 67.574785][ T1901] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 67.581900][ T1901] rust_binder: Failed to allocate buffer. len:18446744073709550816, is_oneway:false [ 67.581924][ T1901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 67.591327][ T1901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:188 [ 67.849049][ T1928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.866844][ T1928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.891493][ T46] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 68.052584][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1632, setting to 64 [ 68.063764][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.076679][ T46] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 68.085848][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.091659][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 68.095553][ T46] usb 3-1: config 0 descriptor?? [ 68.106855][ T1910] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.251474][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 68.258274][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.266885][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.277157][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.288399][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.297531][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.305623][ T9] usb 2-1: Product: syz [ 68.309811][ T9] usb 2-1: Manufacturer: syz [ 68.314475][ T9] usb 2-1: SerialNumber: syz [ 68.317330][ T1910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.327880][ T1910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.522622][ T1928] overlayfs: failed to resolve './file0': -2 [ 68.529607][ T46] acrux 0003:1A34:0802.0004: unknown global tag 0xd [ 68.534684][ T9] usb 2-1: skipping empty audio interface (v1) [ 68.536575][ T46] acrux 0003:1A34:0802.0004: item 0 2 1 13 parsing failed [ 68.548609][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 68.551523][ T46] acrux 0003:1A34:0802.0004: parse failed [ 68.561796][ T9] usb 2-1: USB disconnect, device number 17 [ 68.576018][ T46] acrux 0003:1A34:0802.0004: probe with driver acrux failed with error -22 [ 68.580593][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.643108][ T1964] netlink: 76 bytes leftover after parsing attributes in process `syz.3.499'. [ 68.652399][ T1964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 68.663586][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 68.663606][ T36] audit: type=1400 audit(1756403585.473:426): avc: denied { bind } for pid=1963 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.689146][ T36] audit: type=1400 audit(1756403585.473:427): avc: denied { name_bind } for pid=1963 comm="syz.3.499" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 68.710389][ T36] audit: type=1400 audit(1756403585.473:428): avc: denied { node_bind } for pid=1963 comm="syz.3.499" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 68.734146][ T46] usb 3-1: USB disconnect, device number 16 [ 68.741189][ T36] audit: type=1400 audit(1756403585.473:429): avc: denied { read } for pid=1963 comm="syz.3.499" path="socket:[14482]" dev="sockfs" ino=14482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.344403][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 69.348426][ T2007] 9pnet: Unknown protocol version 9 [ 69.501434][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 69.501440][ T744] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 69.515633][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.526042][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.538067][ T36] audit: type=1326 audit(1756403586.343:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1967 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7c78ebe9 code=0x7fc00000 [ 69.570537][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 69.579682][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 69.588133][ T9] usb 2-1: Product: syz [ 69.592454][ T9] usb 2-1: Manufacturer: syz [ 69.600822][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 69.651631][ T744] usb 3-1: Using ep0 maxpacket: 8 [ 69.658594][ T744] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 32 [ 69.668442][ T744] usb 3-1: config 1 interface 0 has no altsetting 0 [ 69.676645][ T744] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 69.685950][ T744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.693999][ T744] usb 3-1: Product: syz [ 69.698272][ T744] usb 3-1: Manufacturer: syz [ 69.703010][ T744] usb 3-1: SerialNumber: syz [ 69.708703][ T1992] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 69.854723][ T9] usb 2-1: USB disconnect, device number 18 [ 69.919708][ T744] usb 3-1: USB disconnect, device number 17 [ 70.257376][ T36] audit: type=1400 audit(1756403587.063:431): avc: denied { sqpoll } for pid=2032 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.392253][ T36] audit: type=1400 audit(1756403587.203:432): avc: denied { mount } for pid=2041 comm="syz.1.529" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 70.416070][ T36] audit: type=1400 audit(1756403587.223:433): avc: denied { unmount } for pid=880 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 70.527196][ T36] audit: type=1400 audit(1756403587.333:434): avc: denied { remount } for pid=2064 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.731429][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 70.882631][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 70.893963][ T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 70.903344][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.912594][ T9] usb 3-1: config 0 descriptor?? [ 70.918066][ T2059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.132655][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 71.143650][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 71.162418][ T9] usb 3-1: USB disconnect, device number 18 [ 71.876090][ T2103] overlayfs: failed to clone upperpath [ 72.122401][ T2120] netlink: 'syz.2.554': attribute type 27 has an invalid length. [ 72.154440][ T36] audit: type=1400 audit(1756403588.953:435): avc: denied { read } for pid=2119 comm="syz.2.554" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 72.218680][ T2124] fuse: Bad value for 'fd' [ 72.561542][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 72.711478][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 72.718517][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.732208][ T9] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255 [ 72.751477][ T9] usb 3-1: config 8 interface 0 has no altsetting 0 [ 72.763930][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 72.773199][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.799822][ T9] usb 3-1: Product: syz [ 72.807434][ T9] usb 3-1: Manufacturer: syz [ 72.817545][ T9] usb 3-1: SerialNumber: syz [ 72.834658][ T2137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.457146][ T2158] overlayfs: missing 'lowerdir' [ 73.679007][ T9] usb 3-1: selecting invalid altsetting 0 [ 73.706478][ T9] usb 3-1: USB disconnect, device number 19 [ 73.734493][ T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.004335][ T2190] 9pnet_fd: Insufficient options for proto=fd [ 74.190372][ T2206] binder: Unknown parameter 'stath' [ 74.200974][ T2204] bridge0: port 3(veth1_to_batadv) entered blocking state [ 74.222788][ T2204] bridge0: port 3(veth1_to_batadv) entered disabled state [ 74.230068][ T2204] veth1_to_batadv: entered allmulticast mode [ 74.237700][ T2204] veth1_to_batadv: entered promiscuous mode [ 74.244519][ T2204] bridge0: port 3(veth1_to_batadv) entered blocking state [ 74.251735][ T2204] bridge0: port 3(veth1_to_batadv) entered forwarding state [ 74.334914][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 74.334935][ T36] audit: type=1400 audit(1756403591.143:439): avc: denied { create } for pid=2211 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.403200][ T2221] netlink: 188 bytes leftover after parsing attributes in process `syz.2.590'. [ 74.515273][ T45] bridge_slave_1: left allmulticast mode [ 74.520985][ T45] bridge_slave_1: left promiscuous mode [ 74.526914][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.588192][ T2229] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.595341][ T2229] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.602596][ T2229] bridge_slave_0: entered allmulticast mode [ 74.608882][ T2229] bridge_slave_0: entered promiscuous mode [ 74.615283][ T2238] netlink: 80 bytes leftover after parsing attributes in process `syz.3.595'. [ 74.624392][ T2229] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.631684][ T2229] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.638875][ T2229] bridge_slave_1: entered allmulticast mode [ 74.645627][ T2229] bridge_slave_1: entered promiscuous mode [ 74.664063][ T45] veth1_macvtap: left promiscuous mode [ 74.669791][ T45] veth0_vlan: left promiscuous mode [ 74.855728][ T2229] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.863126][ T2229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.870640][ T2229] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.877726][ T2229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.913647][ T938] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.931334][ T938] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.958876][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.966015][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.002920][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.010058][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.032067][ T2265] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.602'. [ 75.077292][ T2229] veth0_vlan: entered promiscuous mode [ 75.094890][ T2229] veth1_macvtap: entered promiscuous mode [ 75.261438][ T372] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 75.412448][ T372] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 75.420821][ T372] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 75.441108][ T372] usb 3-1: config 0 interface 0 has no altsetting 0 [ 75.459647][ T372] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.469143][ T372] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 75.487490][ T372] usb 3-1: Product: syz [ 75.493901][ T372] usb 3-1: Manufacturer: syz [ 75.498542][ T372] usb 3-1: SerialNumber: syz [ 75.511678][ T372] usb 3-1: config 0 descriptor?? [ 75.517892][ T372] hub 3-1:0.0: bad descriptor, ignoring hub [ 75.524143][ T372] hub 3-1:0.0: probe with driver hub failed with error -5 [ 75.542541][ T372] usb 3-1: selecting invalid altsetting 0 [ 75.724884][ T2268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.742925][ T2268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.744190][ T2293] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 75.761635][ T2268] binder: Unknown parameter '`irsync' [ 75.785004][ T2293] rust_binder: Write failure EINVAL in pid:10 [ 75.822977][ T36] audit: type=1400 audit(1756403592.623:440): avc: denied { write } for pid=2301 comm="syz.2.612" name="icmp6" dev="proc" ino=4026532456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.891506][ T372] usb 3-1: USB disconnect, device number 20 [ 75.916891][ T2310] rust_binder: Write failure EFAULT in pid:14 [ 75.916999][ T2310] rust_binder: 14: no such ref 3 [ 75.931954][ T2310] rust_binder: 14: no such ref 0 [ 75.971409][ T2310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 75.995515][ T2319] incfs: Backing dir is not set, filesystem can't be mounted. [ 76.021508][ T2319] incfs: mount failed -2 [ 76.221408][ T372] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 76.372502][ T372] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.383046][ T372] usb 3-1: config 0 has no interfaces? [ 76.396682][ T372] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 76.406612][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 76.415223][ T372] usb 3-1: Product: syz [ 76.419697][ T372] usb 3-1: Manufacturer: syz [ 76.426930][ T372] usb 3-1: SerialNumber: syz [ 76.433287][ T372] usb 3-1: config 0 descriptor?? [ 76.441926][ T2363] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 76.545578][ T2375] overlayfs: failed to clone upperpath [ 76.692342][ T2317] rust_binder: Error while translating object. [ 76.692384][ T2317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.699008][ T2317] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 76.708812][ T2317] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:261 [ 76.722964][ T9] usb 3-1: USB disconnect, device number 21 [ 76.804822][ T36] audit: type=1400 audit(1756403593.613:441): avc: denied { write } for pid=2377 comm="syz.1.638" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.846657][ T36] audit: type=1400 audit(1756403593.613:442): avc: denied { add_name } for pid=2377 comm="syz.1.638" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.867329][ T36] audit: type=1400 audit(1756403593.613:443): avc: denied { create } for pid=2377 comm="syz.1.638" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 76.888439][ T36] audit: type=1400 audit(1756403593.613:444): avc: denied { associate } for pid=2377 comm="syz.1.638" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.077518][ T36] audit: type=1400 audit(1756403593.883:445): avc: denied { listen } for pid=2385 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 77.191429][ T372] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 77.208135][ T36] audit: type=1326 audit(1756403594.013:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8c98ebe9 code=0x7fc00000 [ 77.234481][ T36] audit: type=1326 audit(1756403594.013:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8c98ebe9 code=0x7fc00000 [ 77.258607][ T36] audit: type=1326 audit(1756403594.043:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2387 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8c98ebe9 code=0x7fc00000 [ 77.274287][ T9] rust_binder: 2316: removing orphan mapping 0:24 [ 77.362503][ T372] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 77.375529][ T372] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 77.385065][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.394299][ T372] usb 2-1: config 0 descriptor?? [ 77.566076][ T2406] rust_binder: Write failure EFAULT in pid:269 [ 77.893761][ T372] usbhid 2-1:0.0: can't add hid device: -71 [ 77.915133][ T372] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 77.932397][ T372] usb 2-1: USB disconnect, device number 19 [ 78.111426][ T46] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 78.262535][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.273656][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 78.284768][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 78.295918][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 78.308394][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.317779][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.325929][ T46] usb 3-1: Product: syz [ 78.330230][ T46] usb 3-1: Manufacturer: syz [ 78.334989][ T46] usb 3-1: SerialNumber: syz [ 78.340717][ T2432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 78.348861][ T46] cdc_mbim 3-1:1.0: skipping garbage [ 78.411585][ T2448] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 78.418790][ T2448] rust_binder: Write failure EINVAL in pid:23 [ 78.487136][ T2459] input: syz1 as /devices/virtual/input/input9 [ 78.519920][ T2463] netlink: 152 bytes leftover after parsing attributes in process `syz.1.668'. [ 78.539104][ T2463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.668'. [ 78.548889][ T2432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 78.558202][ T2432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 78.925473][ T2499] rust_binder: Error while translating object. [ 78.925547][ T2499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 78.932289][ T2499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47 [ 78.942476][ T2497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.051783][ T2503] overlay: ./file0 is not a directory [ 79.168348][ T2432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 79.176522][ T2432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 79.184313][ T46] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 79.336505][ T2517] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 79.385055][ T2432] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 79.385099][ T2432] rust_binder: Read failure Err(EFAULT) in pid:292 [ 79.401981][ T46] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 79.429314][ T46] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 79.446500][ T46] wwan wwan0: port wwan0mbim0 attached [ 79.473199][ T46] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 82:2f:3b:42:28:e9 [ 79.510291][ T46] usb 3-1: USB disconnect, device number 22 [ 79.522486][ T46] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 79.573550][ T46] wwan wwan0: port wwan0mbim0 disconnected [ 79.590576][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 79.590596][ T36] audit: type=1400 audit(1756403596.393:457): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 79.834245][ T2554] binder: Bad value for 'stats' [ 79.889906][ T36] audit: type=1400 audit(1756403596.693:458): avc: denied { write } for pid=2557 comm="syz.1.703" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.981113][ T36] audit: type=1400 audit(1756403596.783:459): avc: denied { setattr } for pid=2561 comm="syz.4.705" name="NETLINK" dev="sockfs" ino=16673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.095979][ T36] audit: type=1400 audit(1756403596.903:460): avc: denied { create } for pid=2589 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.117376][ T36] audit: type=1400 audit(1756403596.903:461): avc: denied { create } for pid=2589 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.149559][ T36] audit: type=1400 audit(1756403596.953:462): avc: denied { getopt } for pid=2586 comm="syz.2.714" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.215875][ T36] audit: type=1400 audit(1756403597.023:463): avc: denied { watch } for pid=2597 comm="syz.2.716" path="pipe:[16704]" dev="pipefs" ino=16704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 80.293584][ T36] audit: type=1400 audit(1756403597.103:464): avc: denied { validate_trans } for pid=2602 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 80.543851][ T36] audit: type=1400 audit(1756403597.353:465): avc: denied { listen } for pid=2610 comm="syz.3.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.652532][ T2615] tipc: Started in network mode [ 80.657564][ T2615] tipc: Node identity 26374f42adec, cluster identity 4711 [ 80.664971][ T2615] tipc: Enabled bearer , priority 10 [ 80.989176][ T2636] rust_binder: Error while translating object. [ 80.989205][ T2636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.995509][ T2636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 81.006569][ T2637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.371430][ T744] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 81.461427][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 81.511513][ T744] usb 2-1: device descriptor read/64, error -71 [ 81.579096][ T36] audit: type=1326 audit(1756403598.383:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2631 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7c78ebe9 code=0x7fc00000 [ 81.610837][ T2671] incfs: Options parsing error. -22 [ 81.610861][ T2672] incfs: Options parsing error. -22 [ 81.616392][ T2671] incfs: mount failed -22 [ 81.621541][ T2672] incfs: mount failed -22 [ 81.631415][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 81.638448][ T9] usb 3-1: config 4 has an invalid interface number: 56 but max is 0 [ 81.646883][ T9] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 81.655857][ T9] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 81.664704][ T9] usb 3-1: config 4 has no interface number 0 [ 81.670841][ T9] usb 3-1: config 4 interface 56 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 81.682295][ T9] usb 3-1: config 4 interface 56 altsetting 16 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 81.693600][ T9] usb 3-1: config 4 interface 56 altsetting 16 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 81.705598][ T9] usb 3-1: config 4 interface 56 altsetting 16 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 81.716691][ T9] usb 3-1: config 4 interface 56 altsetting 16 has a duplicate endpoint with address 0xB, skipping [ 81.727500][ T9] usb 3-1: config 4 interface 56 has no altsetting 0 [ 81.735691][ T9] usb 3-1: New USB device found, idVendor=19d2, idProduct=1255, bcdDevice=3e.12 [ 81.744837][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.752894][ T9] usb 3-1: Product: 菱ඨृ᭿콋멊筠꺪ᘜ띸ҝꋲ貾ᰊ穾叄ⷘ图ⲡ늾溕ၭ談겛폍櫙᪵ꋹఞբᘑ镼᥮믠㐜辻ꃏ퓰슍ꌅ㡊㹥依逋脹奼⫀繣濞鄸㼺嶄꼺䂾畸걛Ｙ潆䓔Ꮢ띷ꎧꖈ벐ᳱᖼဒ울棂饐玞ᣟ墣鄫쒕虂ؽ鸊㻛䐋挸젲ꗢ瑄똜㨙왡݃꺟⤺攤פֿ阸摐 [ 81.761545][ T744] usb 2-1: device descriptor read/64, error -71 [ 81.784026][ T9] usb 3-1: Manufacturer: ࠧ [ 81.794829][ T9] usb 3-1: SerialNumber: 킗⇄渐㎊댪䏪媻澏嫋掠╍橨ఆ澉꫾䰧⌢쨗ퟛ㢅≢⻐璥切熰涅ช点ꢠ닼⊭Ꮒ惜툣셓쨍刟际ꯩ⣇䞕얏⥡ｾ얓梋뷘￩꒒ꩽ慠 [ 81.801443][ T372] tipc: Node number set to 2346405698 [ 82.022783][ T744] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 82.029085][ T9] usb 3-1: USB disconnect, device number 23 [ 82.161429][ T744] usb 2-1: device descriptor read/64, error -71 [ 82.256648][ T2707] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 82.265043][ T2707] overlayfs: missing 'lowerdir' [ 82.321984][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 82.411448][ T744] usb 2-1: device descriptor read/64, error -71 [ 82.482762][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 82.489246][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 82.500228][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 82.509146][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 82.518211][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.527977][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.531515][ T744] usb usb2-port1: attempt power cycle [ 82.537741][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.556225][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.565518][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.574373][ T9] usb 3-1: config 0 descriptor?? [ 82.783322][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 82.881431][ T744] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 82.902471][ T744] usb 2-1: device descriptor read/8, error -71 [ 82.985777][ T46] usb 3-1: USB disconnect, device number 24 [ 82.993715][ T46] usblp0: removed [ 83.032392][ T744] usb 2-1: device descriptor read/8, error -71 [ 83.271463][ T744] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 83.300311][ T744] usb 2-1: device descriptor read/8, error -71 [ 83.442172][ T744] usb 2-1: device descriptor read/8, error -71 [ 83.551511][ T744] usb usb2-port1: unable to enumerate USB device [ 83.690840][ T2798] ./cgroup: Can't lookup blockdev [ 83.698084][ T2798] netlink: 104 bytes leftover after parsing attributes in process `syz.2.780'. [ 83.732023][ T2801] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 83.756200][ T2807] netlink: 1 bytes leftover after parsing attributes in process `syz.4.783'. [ 83.788633][ T2811] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 83.814254][ T2815] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 83.823311][ T2815] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 84.441433][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 84.601393][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 84.607666][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.618195][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.628886][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.638136][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.646309][ T10] usb 2-1: Product: syz [ 84.650489][ T10] usb 2-1: Manufacturer: syz [ 84.655409][ T10] usb 2-1: SerialNumber: syz [ 84.671407][ T932] ------------[ cut here ]------------ [ 84.676954][ T932] WARNING: CPU: 0 PID: 932 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 84.686325][ T932] Modules linked in: [ 84.690291][ T932] CPU: 0 UID: 0 PID: 932 Comm: syz-executor Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 84.702067][ T932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.712281][ T932] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 84.718064][ T932] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 84.737956][ T932] RSP: 0018:ffffc9000e69fb68 EFLAGS: 00010293 [ 84.744175][ T932] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff88810aff5f00 [ 84.752499][ T932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.760691][ T932] RBP: ffffc9000e69fb90 R08: ffff888131062fdf R09: 1ffff1102620c5fb [ 84.768742][ T932] R10: dffffc0000000000 R11: ffffed102620c5fc R12: 0000000000000000 [ 84.776791][ T932] R13: dffffc0000000000 R14: ffff888131062f40 R15: ffff8881312c0550 [ 84.784861][ T932] FS: 000055558d2e0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 84.793932][ T932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.800549][ T932] CR2: 00007ffc9d503c88 CR3: 000000012320e000 CR4: 00000000003526b0 [ 84.808670][ T932] Call Trace: [ 84.812097][ T932] [ 84.815063][ T932] ovl_do_remove+0x7b8/0xcf0 [ 84.819693][ T932] ? ovl_set_redirect+0x780/0x780 [ 84.824791][ T932] ? down_write+0xe9/0x2a0 [ 84.829250][ T932] ? __cfi_down_write+0x10/0x10 [ 84.834187][ T932] ovl_rmdir+0x1e/0x30 [ 84.838344][ T932] vfs_rmdir+0x3e0/0x560 [ 84.842656][ T932] incfs_kill_sb+0x109/0x230 [ 84.847462][ T932] deactivate_locked_super+0xd5/0x2a0 [ 84.852902][ T932] deactivate_super+0xb8/0xe0 [ 84.857627][ T932] cleanup_mnt+0x3f1/0x480 [ 84.862113][ T932] __cleanup_mnt+0x1d/0x40 [ 84.866831][ T932] task_work_run+0x1e3/0x250 [ 84.871510][ T932] ? __cfi_task_work_run+0x10/0x10 [ 84.876799][ T932] ? __x64_sys_umount+0x126/0x170 [ 84.881965][ T932] ? __cfi___x64_sys_umount+0x10/0x10 [ 84.887491][ T932] ? __kasan_check_read+0x15/0x20 [ 84.892594][ T932] resume_user_mode_work+0x36/0x50 [ 84.897758][ T932] syscall_exit_to_user_mode+0x64/0xb0 [ 84.903296][ T932] do_syscall_64+0x64/0xf0 [ 84.907760][ T932] ? clear_bhb_loop+0x50/0xa0 [ 84.912660][ T932] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.919007][ T932] RIP: 0033:0x7f077e98ff17 [ 84.923523][ T932] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 84.943898][ T932] RSP: 002b:00007ffc9d504438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 84.952400][ T932] RAX: 0000000000000000 RBX: 00007f077ea11c05 RCX: 00007f077e98ff17 [ 84.960489][ T932] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9d5044f0 [ 84.968524][ T932] RBP: 00007ffc9d5044f0 R08: 0000000000000000 R09: 0000000000000000 [ 84.976538][ T932] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9d505580 [ 84.984570][ T932] R13: 00007f077ea11c05 R14: 00000000000148b0 R15: 00007ffc9d5055c0 [ 84.992682][ T932] [ 84.995792][ T932] ---[ end trace 0000000000000000 ]--- [ 85.002156][ T932] ------------[ cut here ]------------ [ 85.007661][ T932] WARNING: CPU: 0 PID: 932 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 85.017133][ T932] Modules linked in: [ 85.021143][ T932] CPU: 0 UID: 0 PID: 932 Comm: syz-executor Tainted: G W syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 85.034454][ T932] Tainted: [W]=WARN [ 85.038275][ T932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.048478][ T932] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 85.054178][ T932] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 85.073880][ T932] RSP: 0018:ffffc9000e69fb68 EFLAGS: 00010293 [ 85.079982][ T932] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff88810aff5f00 [ 85.088041][ T932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.096157][ T932] RBP: ffffc9000e69fb90 R08: ffff888131062fdf R09: 1ffff1102620c5fb [ 85.104289][ T932] R10: dffffc0000000000 R11: ffffed102620c5fc R12: 0000000000000000 [ 85.112504][ T932] R13: dffffc0000000000 R14: ffff888131062f40 R15: ffff8881312c0550 [ 85.120543][ T932] FS: 000055558d2e0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 85.129618][ T932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.136261][ T932] CR2: 00007ffc9d503c88 CR3: 000000012320e000 CR4: 00000000003526b0 [ 85.144476][ T932] Call Trace: [ 85.147793][ T932] [ 85.150837][ T932] ovl_do_remove+0x7b8/0xcf0 [ 85.155491][ T932] ? ovl_set_redirect+0x780/0x780 [ 85.160565][ T932] ? down_write+0xe9/0x2a0 [ 85.165042][ T932] ? __cfi_down_write+0x10/0x10 [ 85.169937][ T932] ovl_rmdir+0x1e/0x30 [ 85.174121][ T932] vfs_rmdir+0x3e0/0x560 [ 85.178395][ T932] incfs_kill_sb+0x1a0/0x230 [ 85.183057][ T932] deactivate_locked_super+0xd5/0x2a0 [ 85.188554][ T932] deactivate_super+0xb8/0xe0 [ 85.193316][ T932] cleanup_mnt+0x3f1/0x480 [ 85.197868][ T932] __cleanup_mnt+0x1d/0x40 [ 85.202340][ T932] task_work_run+0x1e3/0x250 [ 85.207043][ T932] ? __cfi_task_work_run+0x10/0x10 [ 85.212299][ T932] ? __x64_sys_umount+0x126/0x170 [ 85.217359][ T932] ? __cfi___x64_sys_umount+0x10/0x10 [ 85.222785][ T932] ? __kasan_check_read+0x15/0x20 [ 85.227894][ T932] resume_user_mode_work+0x36/0x50 [ 85.233060][ T932] syscall_exit_to_user_mode+0x64/0xb0 [ 85.238552][ T932] do_syscall_64+0x64/0xf0 [ 85.243153][ T932] ? clear_bhb_loop+0x50/0xa0 [ 85.247857][ T932] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.253910][ T932] RIP: 0033:0x7f077e98ff17 [ 85.258466][ T932] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 85.278422][ T932] RSP: 002b:00007ffc9d504438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.287085][ T932] RAX: 0000000000000000 RBX: 00007f077ea11c05 RCX: 00007f077e98ff17 [ 85.295214][ T932] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9d5044f0 [ 85.303233][ T932] RBP: 00007ffc9d5044f0 R08: 0000000000000000 R09: 0000000000000000 [ 85.311316][ T932] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9d505580 [ 85.319554][ T932] R13: 00007f077ea11c05 R14: 00000000000148b0 R15: 00007ffc9d5055c0 [ 85.327749][ T932] [ 85.330785][ T932] ---[ end trace 0000000000000000 ]--- [ 85.336423][ T10] usb 2-1: 0:2 : does not exist [ 85.347255][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 85.373763][ T10] usb 2-1: USB disconnect, device number 24 [ 85.398466][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.465045][ T2871] rust_binder: Error while translating object. [ 85.465075][ T2871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }