last executing test programs: 3.158249666s ago: executing program 3 (id=1001): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)) mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) chdir(&(0x7f0000000300)='./file1\x00') (async) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) rmdir(&(0x7f00000001c0)='./file1\x00') bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r2, 0x0, 0x0) (async) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000200)=""/15, &(0x7f0000000240)=0xf) (async) request_key(0x0, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0x5c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async) r5 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x8}], 0x1, 0x40001041, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}, {@redirect_dir_off}, {@volatile}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) 3.153710976s ago: executing program 3 (id=1003): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 3.153406896s ago: executing program 3 (id=1004): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0xfffffffd, 0x0, 0x0, 0x10000, 0x0, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x860, 0x12) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x770a, 0x2) 3.152761526s ago: executing program 3 (id=1005): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x8d, {0x8d, 0x4, "4d3a62cd0a24f5475d647176261042e57bd92082c4d5e09b9852281a86dab8cad6db32b6800b01c0d15bb6a9511b1b276a6fc1a10c9a77df937a590dfcf593ea655ca756fb1bb0d2b3b372705d3ac968e64ca7a21d5bd6d4f06053a4f25a58eacf511ad8d920ff9474da2d3906d66f6346f3662a28abc24840e34694da92ddfdc6bfe561cf9a4ed62ee948"}}, &(0x7f0000000100)={0x0, 0x3, 0x75, @string={0x75, 0x3, "ba0dcb3e5fdf381da1db4628e6fe566c383ec9b772b581f88b67cc33ae9bbf3b0591a9a3b8bf84622fd088c855aac6e3fa9a38cd34a85354e41ca7fbf164818fdfe2ad49199c7c12d3ae0e5174c945f8f8513def452f09210376f6e6e575ad031977850974c1b6296fd454a33656344a7e180e"}}, &(0x7f0000000180)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x8, 0x5}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0x4, 0x2, "070b8a11", "d091ab52"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x0, 0xe5, 0x3, 0x81, 0x5, 0x1}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0xc, 0x9c, "5c815f4af02e8d4f08eac7dbc5a64d649ae808bd9f217818064edfd22a406cd08178a5309b7a64b35e3ed3342bb71746b4c5688e1ea12a6631405c323081a81302d32fb99fd54e03867699fb2beef8d0e36a4927eb65e853429e997a4ea4688206f96484641be3725bb9f46496d7b26acb0fbd4f1c35d8a5de71d4efe655a8a855e50091881213fcc066b7db1fa54cdb5cf33e2aaa50a704856888fa"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf4}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x800, 0x8}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "ccc7"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x762}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "a125"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xfffd}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xe0}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xb}, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8602, 0x0) 2.615595349s ago: executing program 3 (id=1009): syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c0202"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xcd, &(0x7f0000000140)=@string={0xcd, 0x3, "9cbec00c9c08c580029f87db132affedc1a2cba8ea394a19fcd296776e1327e75e8d4c01db86a26dbd7e980e2211c1413e69905ebfe254abcdd55896dc9818b0beb223c2094d83fd7973403a3eada5609c6a0a4d6a36cb93ac850d8b265bf9e209a2e06feb102caf9f350b134cacbea4a10e22d1ee86ae1dfbf764a742597747c0db58ed9f317b6de054c62b9a67c817a16398f6d71b383ef6da60ca84bafef00abefe5942d8d01ba5958149374be6b253e317796984535dc30a6550278c22da731dbbf3a2883af1eedc80"}}, {0x42, &(0x7f0000000240)=@string={0x42, 0x3, "0c74fbdf28c81a76dfb13eb0e0e0b587ef1a33789fafe753af87c77b4f145e6351354db4d03c312ce9ae6bcec9c2dab40cbe30f371483a67acc62d902784e128"}}, {0x25, &(0x7f00000002c0)=@string={0x25, 0x3, "726fd02c253acce0d65b74fc030832a19275dd35259850f8603bdbdb928eda78a09c52"}}, {0xad, &(0x7f0000000600)=@string={0xad, 0x3, "2a3f4c1c9a9826618e732c45c02b96d5b8b9814abb47e71e19876dffed2700e54356bf7c3519f50b4a8690ccc7b640324674f777f3c1468e8e400ac29d94d089f50895b542f59135ba96dacd1123a3b43121a5cee3157cb4d392652f7e37591a75165e7d29a52f71bd942483195d3052b256a4fd4acc602aa2a62f0d7b3ed5b57eacfff4fede7897981662caa2f87ea4b5493c78c63f0888c755be7a3214e88fea124fadf87ec85f8ced53"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2cfb}}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close_range(r0, 0xffffffffffffffff, 0x0) 2.063833803s ago: executing program 3 (id=1012): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r4, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20180700000000000000658fa5"], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000002240)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000000)=0xe8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5a000a00bb6a880000d6c8db0000dba67e0602000043c59ed66b5571ca5f2ae0e28900000200df018002000000fc060f0000000000000061547a68", 0x59) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) ioprio_set$uid(0x3, r7, 0x4007) sendfile(r0, r0, 0x0, 0x7ffff000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) 1.135587178s ago: executing program 1 (id=1021): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) utimes(0x0, &(0x7f0000000180)={{0x77359400}}) r2 = geteuid() syz_clone(0x4000000, &(0x7f00000009c0)="43d0ecb5179b1dcbef8e4f05ccfd294b237b04a0ea795fa5a0e6f391f1a7ae61d5d03803618d5d46cb71fe906475f7701c4897da957959f076bd2b988a7cc00806c5d803532b6ee79a028bf9ffa4ed84bfcb602f29cf472754505079ed7acfcbd1854b0e942d1e3bbc01ad9e7c3d4351242a06f77f33ea05376a0d22f5f30f0d173bf44f8917348a3412bdc72a7cc390c5fd0a91eb073385fc", 0x99, &(0x7f0000000980), &(0x7f00000000c0), &(0x7f0000000d40)="6f779b9b773b2119b9e5a76d54a8df3a9b3cbbb9cc8db962c59cfb1a65efa36773b385ecfe97d0184ec1c33afc9264ebb0c4b3b4ddd630aedc1a27a55dce9dd8550b8cadbc43630168b7e28a2eaec7b0d26347e096aab8140911d53b60659b4046629a65d732f9105b63dd2fee82cffc00966dd1aa8c868d199be780718e43309e285c3e0dc21d0298f3ffc3") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0xe8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, 0x0}, &(0x7f0000000c40)=0xc) sendmmsg$unix(r1, &(0x7f0000000d00)=[{{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000002c0)="956d7af3fa92cb3d974675944f65e007cbb7b5b7f1c47ddebb7af2228d1a98aa9c1500b8250959d1ec1f267c3e4948b90a14a9238b204e30c7b6c721bdc73422dd54507b4bfc3acfbd4e710375d34f84767ff2a91ce7f661eb17799105d477d81da7c02813d599163444c981a9507472a2a30007892ee9f51dc2e7939baccfb4d7ee13c331fd9f0c782bbc7020670360ea3c045c4342d35fcd4298363e5618226620641d4b22be93de4e4333d1b8476d36a7456679837d", 0xb7}, {&(0x7f0000000380)="7815854f62c5d76cc5eb28e0b5fcad0368d8440df2ad1dd541dd3eeefa9fdb922cb1497788df901f7afb4a8b297eb1dbed7322aabd72650ee0675cb9718568b000483cb0811f", 0x46}, {&(0x7f0000000400)="f99f4eab7fd9cea927059197c4fcb7c7a75ea9bbefa08c1133eadefcb20f5dd2b1a7a7d9725311028caaa8923b5e2359998ea6acad9d5cbad06e0d18c0dd8161b4b00cfe7db5ecb3e2c4afdf10ec6ad78623c878152ef76468881d9bf51717571a72d2f4fc93b722b7f555a4855c61bb7fbba4232e1d624c672b3484349b8dda38f72c6fef24b42b95266922563893d54ab731313c227e320843dbb8f5", 0x9d}, {&(0x7f0000000f00)="ccba5b7d2e2666f81835da4c8505fac224d572001e9221176029386ef918f271dfd69198abf65b4313f4cbfe141d3e8a2e7f5801156af792cdd99b338782546459d1a858fbc64f63fa7ccbdde942f6361b6a88c791e20d43d03076cb2711d35ce3815da162a4c07fe352e8109803f11d44deea525b35571832b3f08c7f9f7c48ae2dc8acae54aefbf8e8ab5d9848baa7e1fbf159bb2ea2af1f18b8fc3770b4f70ca4d2bab08f1d8000be4eab34b44d5ad14d328aba7b4e8587547e66747e675dd118ee05105ca48cb3cd682566adccce48def0b1af7685dab0d18dff409b5d1ae08915750f4e44", 0xe7}, {&(0x7f00000005c0)="74ee8e4845b16658465d36a6ecd5e95c5a8cffab890f2147f100ef8a9481a8dc93602f7564bf04b4b0bd6945a0f7fdedadb26a2dc623d6f96e8834625ba2c1b19daa119c18fafb0dbf86b66ddeeedebfc37fd5033102bb2b1f657a402767b334ddfb1ec387b0a89ba508253d5f85a15094ed430aa713823d281ca6e02640158978e302ce563ad567ffc6d3a91dd60433b4aee705c9dc462494e7005f9e305c3fa69da955e05a879d2867884180604570", 0xb0}, {&(0x7f0000000680)="b8c3b5f26d24700b971b15d1cad62b6246511b53c5155722618f66bdb0406dccd85146fa20f8b1648825768a18ec42632c450ebb7ad4dea69c6dd77691c91b34c37f7e76f0b86304c17911845864c85e63f5f6a88635c2136c08154d99c935cc10aafa627257c412235ace9a993b6a7869820f32eabf072ee6effc0ac677887746cc7e32d7a8ac50216857ed5391330fcce845de7a1c9da697afc3cef635d1459e7651f1277cafaa6a99731447e11ab869d87bb9ed5d5b87f8732fab8fedd26e33ab536b0319d32f8b3677bb7c9d1af33dcccbe9f43e47afc7f786694df771fbf440351066ffaabc2eec30cacf", 0xed}, {&(0x7f0000000780)="268ff75c9f26a951f7f26b09f8732d20fdb9392b30f6232ed8a47adc104d5acee3eede207b34b55218dbec454895fe3c35a2349cb16778fce3e073b9a6c0d971bef59625e57354e7bca1572a7aa46ce2e074f43c83278332549866bf22ee6264ef6b6179684a7391a771982a3d559c39125b019b7b41e65130ed08d39b44fde9196b7b4794fd114061a8e12318ffb0e9dfc6542821f0d063d373a2c973ebde364415155d23885822d5fb18297a53d1ce6ce6c9cff3ef2cebea763a7442e5c4198b50dda93885b356974083d0", 0xcc}], 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES64=r4, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0009001018000000d10200ee0000000001000000aa7929af491008ebe8a09a50ebdac76aaabaface330c0de00c8094427b9532f1c9f8610f19e973d62e6034dfa0e7b16d4aea9f3b8e27cdbea8137ab44924aa0134b94c02362772bd372acb6a82f170d4ab30676239e10c4737c936763c3c7c490c50ca515dcf87f8391204e1031ef8ba5572e0814d97ca4c92dcea9b", @ANYRES32=r0, @ANYRES32=r0], 0x58}}], 0x1, 0x20010) syz_io_uring_setup(0x83, &(0x7f0000000240)={0x0, 0xc7b7, 0x80, 0x0, 0x352}, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) inotify_add_watch(r6, 0x0, 0x3000004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x28, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x3a, 0x0, 0x0, 0x0, @str='}\x00'}]}]}, 0x28}], 0x1}, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x10) 1.11974899s ago: executing program 1 (id=1022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r1 = socket$inet(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x18400, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000002ec0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x440400, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xc49}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) sendfile(r4, r4, 0x0, 0x1200000000000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 997.789569ms ago: executing program 1 (id=1029): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='macvtap0\x00', 0x10) (async) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) recvmmsg(r1, &(0x7f0000001300)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/130, 0x82}], 0x4}, 0xfe1b}, {{&(0x7f0000000480)=@xdp, 0x80, &(0x7f0000000980)=[{&(0x7f0000000500)=""/12, 0xc}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/101, 0x65}, {&(0x7f0000000600)=""/55, 0x37}, {&(0x7f0000000640)=""/169, 0xa9}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/15, 0xf}, {&(0x7f0000000880)=""/28, 0x1c}, {&(0x7f00000008c0)=""/167, 0xa7}], 0xa, &(0x7f0000000a40)=""/180, 0xb4}, 0x2}, {{&(0x7f0000000b00)=@phonet, 0x80, &(0x7f0000001180)=[{&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000000c80)=""/200, 0xc8}, {&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/22, 0x16}, {&(0x7f0000000ec0)=""/145, 0x91}, {&(0x7f0000000f80)=""/225, 0xe1}, {&(0x7f0000001080)=""/135, 0x87}, {&(0x7f0000001140)=""/13, 0xd}], 0x8, &(0x7f0000001200)=""/229, 0xe5}, 0x9}], 0x3, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) (async) r4 = getpid() getgroups(0x3, &(0x7f0000003700)=[0xee01, 0xee01, 0xee01]) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000037c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000005980)='./file0\x00', &(0x7f00000059c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000005a40)='./file0\x00', &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000005b00)=0x0) r10 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000005b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000005c80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lstat(&(0x7f0000005d00)='./file0\x00', &(0x7f0000005d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() (async) fstat(r2, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005e40)={0x0, 0x0, 0x0}, &(0x7f0000005e80)=0xc) lstat(&(0x7f0000005ec0)='./file0\x00', &(0x7f0000005f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005f80)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000006080)=0xe8) (async) getresuid(&(0x7f00000060c0), &(0x7f0000006100), &(0x7f0000006140)=0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000006180)={0x0, 0x0, 0x0}, &(0x7f00000061c0)=0xc) stat(&(0x7f0000006740)='./file0\x00', &(0x7f0000006780)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000006800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006980)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000006a80)=0xe8) getgroups(0x8, &(0x7f0000006ac0)=[0x0, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0xffffffffffffffff, 0x0]) syz_fuse_handle_req(r3, &(0x7f0000001400)="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", 0x2000, &(0x7f0000006c40)={&(0x7f0000003400)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x2, 0x4088020, 0x1, 0x4, 0x401, 0x7, 0x0, 0x0, 0x10, 0xffffffc8}}, &(0x7f0000003480)={0x18, 0xfffffffffffffffe, 0xf, {0x1}}, &(0x7f00000034c0)={0x18, 0xfffffffffffffff5, 0x4, {0x2}}, &(0x7f0000003500)={0x18, 0x0, 0xa3, {0x6}}, &(0x7f0000003540)={0x18, 0x0, 0x2, {0xffffff70}}, &(0x7f0000003580)={0x28, 0x0, 0x0, {{0x8, 0x98, 0x0, r4}}}, &(0x7f00000035c0)={0x60, 0x0, 0x8000000000000001, {{0x3, 0xffffffff, 0xfffffffffffffffb, 0x346, 0x55, 0x5, 0x5, 0x400}}}, &(0x7f0000003640)={0x18, 0x0, 0xf, {0x80000001}}, &(0x7f0000003680)={0x19, 0xffffffffffffffda, 0x8000000000000000, {'macvtap0\x00'}}, &(0x7f00000036c0)={0x20, 0x0, 0x8, {0x0, 0x1}}, &(0x7f0000003740)={0x78, 0xfffffffffffffff5, 0x5, {0x5, 0xff, 0x0, {0x0, 0x1501800000000, 0x18, 0x94, 0x80000000, 0x6, 0x6, 0x8, 0x5, 0xa000, 0xffffffff, 0xee01, r5, 0xa, 0xe}}}, &(0x7f0000005800)={0x90, 0x0, 0x4, {0x2, 0x1, 0x5, 0x7fffffffffffffff, 0xfffffeff, 0x4, {0x3, 0x1000, 0xd, 0x7, 0xa3b3, 0x99, 0x3, 0x2, 0x4, 0xc000, 0xfffff40e, r6, 0x0, 0xac4, 0xffffff62}}}, &(0x7f00000058c0)={0x90, 0x0, 0x401, [{0x5, 0x1, 0x9, 0x0, 'macvtap0\x00'}, {0x1, 0x9, 0x0, 0x5}, {0x3, 0x6, 0x5, 0x8, '--..-'}, {0x6, 0xe, 0x1, 0x1ff, '#'}]}, &(0x7f0000006200)={0x538, 0xfffffffffffffffe, 0x8, [{{0x2, 0x3, 0x4, 0x85, 0x8, 0x9, {0x5, 0x3ff, 0x1a6e3df7, 0x12, 0x1, 0x9, 0x4, 0xe, 0x1ff, 0x2000, 0x7, r7, r8, 0xffff, 0x9}}, {0x0, 0x4, 0x4, 0xe9d, ']]]-'}}, {{0x6, 0x1, 0x8000, 0xffffffffffffffff, 0xc, 0x5, {0x6, 0xea9, 0x2, 0x7, 0x7, 0x5, 0x7f, 0x7fffffff, 0x8, 0xa000, 0x7ff, r9, r10, 0xd5, 0x4}}, {0x3, 0x5, 0x9, 0x81, 'macvtap0\x00'}}, {{0x0, 0x2, 0x3, 0x8, 0x3, 0x0, {0x1, 0xfffffffffffffbff, 0x3, 0x3, 0x7fffffff, 0x7, 0x9, 0x5, 0x8, 0x6000, 0xffffb842, r11, r12, 0x29, 0x2}}, {0x2, 0x8a4, 0x9, 0xffff8001, 'macvtap0\x00'}}, {{0x2, 0x1, 0x7, 0x2, 0x1000, 0x101, {0x2, 0x40, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0x6, 0x8000, 0x6, 0xc000, 0x400, 0xee01, r13, 0x4, 0x7}}, {0x2, 0x7, 0x0, 0x80}}, {{0x3, 0x3, 0x5, 0x8000, 0x1, 0xfffffff7, {0x4, 0xf5f, 0xfffffffffffffff9, 0xb71, 0xe991, 0x1, 0xffffff0c, 0x7, 0x8, 0x0, 0xfff, r14, r15, 0xa1e, 0x4}}, {0x1, 0x3, 0x9, 0x81e3, 'macvtap0\x00'}}, {{0x0, 0x2, 0x6, 0x9, 0xffffffff, 0xa9, {0x3, 0x9, 0x4, 0xa8, 0x0, 0x7, 0x1, 0x2, 0x9, 0x6000, 0x3ff, 0x0, r16, 0xd288}}, {0x5, 0x1, 0x9, 0x3, 'macvtap0\x00'}}, {{0x6, 0x1, 0xb, 0x0, 0x4, 0x200, {0x1, 0x9, 0x40, 0x457e2ae7, 0x4ff425ff, 0xdb6a, 0xffff4e43, 0xf65, 0x9, 0xa000, 0x6, r17, 0xffffffffffffffff, 0x8, 0x8}}, {0x4, 0x6, 0x9, 0x6, 'macvtap0\x00'}}, {{0x6, 0x2, 0xc, 0x66, 0x9, 0xa5f0, {0x5, 0x4, 0x1, 0x6, 0xd96, 0x9, 0x5, 0xe8ef, 0x1ff, 0xa000, 0x4, r18, r19, 0xff, 0x3e8c}}, {0x4, 0x0, 0x9, 0x0, 'macvtap0\x00'}}]}, &(0x7f0000006880)={0xa0, 0x24, 0x9, {{0x5, 0x1, 0x9, 0x4f, 0x7fff, 0x3, {0x4, 0x4, 0x2, 0xe000000000000000, 0x101, 0x10001, 0x9, 0xd9cb, 0x9a3d, 0x2000, 0x2, r20, r21, 0x2, 0x3ff}}, {0x0, 0x5}}}, &(0x7f0000006940)={0x20, 0x0, 0xb6, {0x401, 0x0, 0x6, 0x6c7}}, &(0x7f0000006b00)={0x130, 0xfffffffffffffffe, 0x2, {0x3, 0x2, 0x0, '\x00', {0x200, 0xed3, 0x8001, 0x52, r22, r23, 0x4000, '\x00', 0x8, 0x1, 0x0, 0x9, {0x63, 0x5}, {0x36, 0x6}, {0xe62, 0x4}, {0x0, 0x2}, 0x8, 0x8, 0xa5, 0xfffffc01}}}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000006d00)='./binderfs2/binder0\x00', 0x2, 0x0) 924.997065ms ago: executing program 1 (id=1031): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="02030003100000002cbd7000fddbdf2505000900000100001cdc0dca1d9f688c68b516dff165714f95a5b398bbc41c846960e56de42944af030006003c00000002004e22e0200002000000000000000002000100000000000000070c00000000030005003c00000002004e20640101000000000000200000010014"], 0x80}, 0x1, 0x7}, 0x0) 915.773746ms ago: executing program 1 (id=1033): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110b}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r7}, @flat=@handle={0x73682a85, 0x3cc87b4eb8f9cd1d, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xc, 0x1000000000000, &(0x7f00000005c0)="cbe60100f646f195447c88eb"}) close_range(r6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) 540.804736ms ago: executing program 2 (id=1048): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000005c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', r4, 0x40, 0x0, 0x3520, 0x2124, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x66, 0x0, 0x4b, 0x4, 0x0, @local, @remote, {[@cipso={0x86, 0x35, 0x1, [{0x0, 0x11, "54c7363a860fa17b152e470c05b36f"}, {0x7, 0x10, "420de15c2c9ed8b9ee13bdcd7833"}, {0x0, 0x3b, "1a8ea6b1d6d17f8e1b43d865"}]}, @generic={0x7, 0xd, "124f7542ca6a9f17b7d4c5"}]}}}}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r5, &(0x7f0000007100)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40000020, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) (async) syz_open_dev$mouse(&(0x7f0000000a40), 0x4, 0xc0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x7f) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) (rerun: 32) close(r11) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r6, &(0x7f000000af40)={0xa000000a}) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000640)={0x1, r12}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000d40)={0xd4, 0x0, &(0x7f00000006c0)=[@exit_looper, @acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={@fda={0x66646185, 0x9, 0x2, 0x2f}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/41, 0x0, 0x8000, 0x5}, @flat=@weak_binder={0x77622a85, 0x1000, 0xffffffffffffffff}}, &(0x7f0000000580)}, 0x400}, @acquire_done={0x40106309, 0x2}, @decrefs={0x40046307, 0x3}, @exit_looper], 0x93, 0x0, &(0x7f0000000c80)="3193024c73a3d38409922e56053cd86ba570f03e8337aa0622a20d66a9748d65bf314f9ede7d0b6f27ccf5154c7c1eff55ffd214870714c2ebbe4bc84b82ce52bb595e1baa695ca7d5a70d9b32e2b36b89a547874e2e68a5a44e7bf4ee114c571e032b7efafb69e134f777d609e5cae12740fdafa5df634ee97b8c0c0967c2055bb35619cf547b4f5c992fba3e0f4fda2d4a00"}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000202505a8a44002000000000000000001010ac0030904006a0107010109090501024000800100090582020004020505"], &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x7, 0xb, 0x0, 0xff}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 540.240086ms ago: executing program 2 (id=1050): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) unshare(0x28000600) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x36) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) (async) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x10, r0, 0x4dd99000) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40d00, 0x0) (async, rerun: 64) madvise(&(0x7f00000eb000/0x4000)=nil, 0x4000, 0x17) (async, rerun: 64) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x4) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000004c0)) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 534.025797ms ago: executing program 2 (id=1051): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1802, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000180), 0x0}) (async) socket(0x28, 0x5, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@local}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x0, 0x1, 0x1200}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 514.756299ms ago: executing program 2 (id=1052): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="02030003100000002cbd7000fddbdf2505000900000100001cdc0dca1d9f688c68b516dff165714f95a5b398bbc41c846960e56de42944af030006003c00000002004e22e0002002000000000000000002000100000000000000070c00000000030005003c00000002004e20640101000000000000200000010014"], 0x80}, 0x1, 0x7}, 0x0) 456.850353ms ago: executing program 2 (id=1053): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) (async) clock_gettime(0x0, &(0x7f0000003fc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003d40)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/27, 0x1b}, {&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000240)=""/6, 0x6}], 0x4, &(0x7f0000000500)=""/237, 0xed}, 0x80000001}, {{&(0x7f0000000600)=@ieee802154, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/127, 0xffffffffffffff0d}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f0000000700)=""/122, 0x7a}, {&(0x7f0000000780)=""/48, 0x30}], 0x4}, 0x8}, {{&(0x7f0000000840)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)=""/180, 0xb4}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000009c0)=""/105, 0x69}, {&(0x7f0000000a40)=""/252, 0xfc}], 0x4, &(0x7f0000000b80)=""/25, 0x19}, 0x7}, {{&(0x7f0000000bc0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000c40)=""/21, 0x15}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x2, &(0x7f0000001cc0)=""/166, 0xa6}, 0x7}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001e00)=""/23, 0x17}], 0x1, &(0x7f0000001e80)=""/108, 0x6c}, 0xffffffff}, {{&(0x7f0000001f00)=@ax25={{0x3, @netrom}, [@bcast, @remote, @remote, @bcast, @remote, @netrom, @remote, @default]}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f80)=""/237, 0xed}], 0x1}, 0x15eb026}, {{&(0x7f00000020c0)=@can, 0x80, &(0x7f0000002180)=[{&(0x7f0000002140)=""/43, 0x2b}], 0x1}, 0x7}, {{&(0x7f00000021c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000002240)=""/246, 0xf6}, {&(0x7f0000002340)=""/147, 0x93}, {&(0x7f0000004040)=""/127, 0x7f}], 0x3, &(0x7f0000002440)=""/116, 0x74}, 0x9}, {{&(0x7f00000024c0)=@nfc, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002540)=""/82, 0x52}, {&(0x7f00000025c0)=""/216, 0xd8}, {&(0x7f00000026c0)=""/190, 0xbe}, {&(0x7f0000002780)=""/30, 0x1e}, {&(0x7f00000027c0)=""/113, 0x71}, {&(0x7f0000002840)=""/115, 0x73}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)}, {&(0x7f00000029c0)=""/123, 0x7b}], 0x9, &(0x7f0000002b00)=""/214, 0xd6}, 0xa9a}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002c00)=""/38, 0x26}, {&(0x7f0000002c40)=""/26, 0x1a}, {&(0x7f0000002c80)=""/120, 0x78}], 0x3, &(0x7f0000002d40)=""/4096, 0x1000}, 0x9}], 0xa, 0x61, &(0x7f0000004000)={r2, r3+60000000}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4) (async) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000002980), 0x10) (async) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r6 = timerfd_create(0x0, 0x0) fsync(r6) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) (async) sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0xfffff, 0xbfdffffc}, 0x0, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) (async) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 456.574653ms ago: executing program 2 (id=1054): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES16=r4, @ANYRES8, @ANYRES16=r5, @ANYRES16=r6], 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r7 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) write(r7, &(0x7f0000000100), 0xfffffe5d) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) faccessat(0xffffffffffffffff, 0x0, 0x3) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000005dc0), 0x0, 0x0, 0x1) write(r0, &(0x7f0000001c00)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6798428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc000f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb68ec4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b330e7735bf1c7e0e26aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3ca6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad744941039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d3de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca3064b954915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4f624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc607185701065a8b84a2f2502af8e68d0fe7635ac502f1b9ef82e61102b303d5f6483c0169ac112d9010a022c58e3f80f0cfb16f906a3df335d42df851aeee62f85bb93c87e7b8b171054c2b7d77a8e4f04c0ed12076233729e6f82e46e8065bb8d870c27bdd427ebf21cd8cb83fd53667a48a42c0ffe91d1fc078b616cb9b763c448aa7c7156df9485535ae508cc87b66a340af762db602326d02af73557e3fba164c12cc92ee61ae4dea1a65c32d3acab702227e9484a927777f07bcd7b5e3616012d9ec79802e2830e7732590a83bfe1bd710ff70bfb53b0b6c711c10cfa6902f645bcebaf64e0805731061f5478d801601c1deeb2d14c26aa130d1d31a235f97d93902ba1ea08be27", 0xfffffdbf) 181.123485ms ago: executing program 0 (id=1061): socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) 180.793515ms ago: executing program 0 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x66}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000880}, 0x2000000) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000140)) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) recvmsg$can_raw(r2, &(0x7f00000014c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/6, 0x6}], 0x5}, 0xc0) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000001500)={0x1}) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000001540)) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x11) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x68, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x80, @link='syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000090}, 0x20004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001ac0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x184, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2008}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "80debb0294065c2c7d39815a32df561793d17bf25dfe"}}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x48a4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2fb3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8084}, 0x400c041) (async) ioctl$KVM_CAP_HYPERV_VP_INDEX(r2, 0x4068aea3, &(0x7f0000001b00)) (async) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001b80), 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x30}}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r4) (async) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000001d40)) (async) r8 = syz_open_procfs$userns(0x0, &(0x7f0000001d80)) close_range(r0, r8, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x30, r10, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x5) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r8, 0x8002f515, &(0x7f0000001f00)) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4094) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000002080)={0x73622a85, 0x0, 0x1}) 180.685335ms ago: executing program 0 (id=1063): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000007c0)={0x17}) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x145342, 0x0) (async, rerun: 32) timer_create(0x1, 0x0, &(0x7f0000000380)=0x0) (rerun: 32) timer_getoverrun(r2) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 165.556027ms ago: executing program 0 (id=1064): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x160e) (async) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x2f, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) r5 = eventfd2(0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x0, 0x1fd, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) (async) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) (async) close(r4) r7 = fsmount(r0, 0x1, 0x1) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f0000000200), 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) 33.129677ms ago: executing program 0 (id=1065): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0xfffffffe, @loopback, 0x15c9}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010003", 0x4d}], 0x1) 459.42µs ago: executing program 1 (id=1066): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x230402, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 0s ago: executing program 0 (id=1067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r2, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) r3 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r4 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=r4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000004e40)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 22.852918][ T36] audit: type=1400 audit(1756380422.800:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.854143][ T282] cgroup: Unknown subsys name 'net' [ 22.875844][ T36] audit: type=1400 audit(1756380422.800:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.903420][ T36] audit: type=1400 audit(1756380422.830:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.903758][ T282] cgroup: Unknown subsys name 'devices' [ 23.066394][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.072189][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.203626][ T36] audit: type=1400 audit(1756380423.150:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.227261][ T36] audit: type=1400 audit(1756380423.150:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.252151][ T36] audit: type=1400 audit(1756380423.150:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.260482][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.284557][ T36] audit: type=1400 audit(1756380423.240:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.310583][ T36] audit: type=1400 audit(1756380423.240:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.340776][ T36] audit: type=1400 audit(1756380423.290:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.367000][ T36] audit: type=1400 audit(1756380423.290:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.367148][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.827161][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.834514][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.841690][ T289] bridge_slave_0: entered allmulticast mode [ 24.848241][ T289] bridge_slave_0: entered promiscuous mode [ 24.854762][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.861980][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.869324][ T290] bridge_slave_0: entered allmulticast mode [ 24.876354][ T290] bridge_slave_0: entered promiscuous mode [ 24.882846][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.890040][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.897313][ T291] bridge_slave_0: entered allmulticast mode [ 24.903604][ T291] bridge_slave_0: entered promiscuous mode [ 24.911816][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.918937][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.926294][ T289] bridge_slave_1: entered allmulticast mode [ 24.932635][ T289] bridge_slave_1: entered promiscuous mode [ 24.938876][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.946101][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.953493][ T290] bridge_slave_1: entered allmulticast mode [ 24.960133][ T290] bridge_slave_1: entered promiscuous mode [ 24.966315][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.973694][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.981167][ T291] bridge_slave_1: entered allmulticast mode [ 24.987465][ T291] bridge_slave_1: entered promiscuous mode [ 25.021098][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.028443][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.036060][ T292] bridge_slave_0: entered allmulticast mode [ 25.042539][ T292] bridge_slave_0: entered promiscuous mode [ 25.049494][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.056839][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.063925][ T292] bridge_slave_1: entered allmulticast mode [ 25.070540][ T292] bridge_slave_1: entered promiscuous mode [ 25.245349][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.252452][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.260229][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.267357][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.281883][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.289045][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.296366][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.303393][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.312234][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.319289][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.326953][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.334209][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.344113][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.351314][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.358623][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.365760][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.412208][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.419906][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.428136][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.435816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.443180][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.451042][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.458353][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.465790][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.478292][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.485464][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.499130][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.506294][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.529781][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.536937][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.545783][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.553162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.560862][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.567916][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.576313][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.583363][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.593910][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.601072][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.628673][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.636087][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.667293][ T290] veth0_vlan: entered promiscuous mode [ 25.676959][ T291] veth0_vlan: entered promiscuous mode [ 25.691991][ T289] veth0_vlan: entered promiscuous mode [ 25.708912][ T292] veth0_vlan: entered promiscuous mode [ 25.717886][ T289] veth1_macvtap: entered promiscuous mode [ 25.726659][ T291] veth1_macvtap: entered promiscuous mode [ 25.738056][ T290] veth1_macvtap: entered promiscuous mode [ 25.766548][ T292] veth1_macvtap: entered promiscuous mode [ 25.799691][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.876655][ T334] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 25.880616][ T337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.924025][ T340] rust_binder: Error while translating object. [ 25.924136][ T340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.930884][ T340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 26.089147][ T352] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 26.154299][ T329] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.294186][ T329] usb 1-1: device descriptor read/64, error -71 [ 26.334319][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.484252][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 26.491380][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.500391][ T31] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 26.509167][ T31] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 26.520058][ T31] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 26.530081][ T31] usb 3-1: config 128 has no interface number 0 [ 26.536532][ T31] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 26.548134][ T329] usb 1-1: device descriptor read/64, error -71 [ 26.554553][ T31] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 26.564937][ T31] usb 3-1: config 128 interface 127 has no altsetting 0 [ 26.573537][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 26.582809][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.591013][ T31] usb 3-1: Product: syz [ 26.595777][ T31] usb 3-1: Manufacturer: syz [ 26.600608][ T31] usb 3-1: SerialNumber: syz [ 26.794106][ T329] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.812955][ T31] usb 3-1: USB disconnect, device number 2 [ 26.835946][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.934345][ T329] usb 1-1: device descriptor read/64, error -71 [ 27.174221][ T329] usb 1-1: device descriptor read/64, error -71 [ 27.284230][ T329] usb usb1-port1: attempt power cycle [ 27.574187][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.607140][ T379] rust_binder: Write failure EFAULT in pid:18 [ 27.627910][ T329] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.669617][ T329] usb 1-1: device descriptor read/8, error -71 [ 27.724130][ T389] overlayfs: failed to resolve './file0': -2 [ 27.769272][ T392] tipc: Enabling of bearer rejected, failed to enable media [ 27.805086][ T329] usb 1-1: device descriptor read/8, error -71 [ 27.966641][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 27.966659][ T36] audit: type=1400 audit(1756380427.920:150): avc: denied { mount } for pid=405 comm="syz.2.25" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 27.995973][ T406] ======================================================= [ 27.995973][ T406] WARNING: The mand mount option has been deprecated and [ 27.995973][ T406] and is ignored by this kernel. Remove the mand [ 27.995973][ T406] option from the mount to silence this warning. [ 27.995973][ T406] ======================================================= [ 28.032586][ T63] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.054989][ T36] audit: type=1400 audit(1756380428.010:151): avc: denied { create } for pid=405 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.075373][ T329] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 28.086019][ T406] 9pnet_fd: Insufficient options for proto=fd [ 28.093313][ T36] audit: type=1400 audit(1756380428.030:152): avc: denied { write } for pid=405 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.113204][ T36] audit: type=1400 audit(1756380428.040:153): avc: denied { nlmsg_write } for pid=405 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.134201][ T36] audit: type=1400 audit(1756380428.040:154): avc: denied { create } for pid=405 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.153942][ T36] audit: type=1400 audit(1756380428.040:155): avc: denied { ioctl } for pid=405 comm="syz.2.25" path="socket:[3512]" dev="sockfs" ino=3512 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.178841][ T36] audit: type=1400 audit(1756380428.040:156): avc: denied { connect } for pid=405 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.198576][ T329] usb 1-1: device descriptor read/8, error -71 [ 28.204897][ T36] audit: type=1400 audit(1756380428.040:157): avc: denied { write } for pid=405 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.225485][ T63] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 28.244210][ T63] usb 2-1: config 0 has no interface number 0 [ 28.255122][ T63] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 28.264592][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.272663][ T63] usb 2-1: Product: syz [ 28.277259][ T63] usb 2-1: Manufacturer: syz [ 28.281864][ T63] usb 2-1: SerialNumber: syz [ 28.287208][ T63] usb 2-1: config 0 descriptor?? [ 28.335318][ T329] usb 1-1: device descriptor read/8, error -71 [ 28.444222][ T329] usb usb1-port1: unable to enumerate USB device [ 28.630671][ T36] audit: type=1400 audit(1756380428.580:158): avc: denied { getopt } for pid=409 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.650417][ T36] audit: type=1400 audit(1756380428.580:159): avc: denied { watch } for pid=411 comm="syz.2.27" path="/13" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.717962][ T416] overlayfs: failed to clone upperpath [ 28.734939][ T416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1824 sclass=netlink_route_socket pid=416 comm=syz.2.29 [ 28.739187][ T63] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 28.749013][ T416] tipc: Enabling of bearer rejected, failed to enable media [ 28.754238][ T63] usb 2-1: No valid video chain found. [ 28.774207][ T63] usb 2-1: USB disconnect, device number 2 [ 28.805225][ T427] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.934016][ T433] rust_binder: 6: no such ref 2 [ 29.000969][ T437] netlink: 'syz.3.34': attribute type 29 has an invalid length. [ 29.008717][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 29.490307][ T447] pim6reg1: entered promiscuous mode [ 29.496324][ T447] pim6reg1: entered allmulticast mode [ 29.514132][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.622169][ T458] syzkaller0: entered promiscuous mode [ 29.627707][ T458] syzkaller0: entered allmulticast mode [ 29.664124][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 29.669964][ T10] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 29.679929][ T10] usb 2-1: config 0 has no interfaces? [ 29.686882][ T10] usb 2-1: config 0 has no interfaces? [ 29.693270][ T10] usb 2-1: config 0 has no interfaces? [ 29.700753][ T10] usb 2-1: config 0 has no interfaces? [ 29.709625][ T10] usb 2-1: config 0 has no interfaces? [ 29.717559][ T10] usb 2-1: config 0 has no interfaces? [ 29.726173][ T10] usb 2-1: config 0 has no interfaces? [ 29.732953][ T10] usb 2-1: config 0 has no interfaces? [ 29.746449][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 29.764160][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.780391][ T10] usb 2-1: config 0 descriptor?? [ 29.892617][ T462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10 [ 29.915527][ T466] 9pnet_fd: Insufficient options for proto=fd [ 29.979297][ T471] tmpfs: Bad value for 'huge' [ 29.987907][ T329] usb 2-1: USB disconnect, device number 3 [ 30.143739][ T486] fuse: Bad value for 'fd' [ 30.334170][ T63] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.484170][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 30.491515][ T63] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 30.504134][ T63] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 30.517731][ T63] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.529004][ T63] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.539219][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.550437][ T63] usb 4-1: Product: syz [ 30.555561][ T63] usb 4-1: Manufacturer: syz [ 30.560970][ T63] usb 4-1: SerialNumber: syz [ 30.599687][ T504] ptm ptm8: ldisc open failed (-12), clearing slot 8 [ 30.627844][ T510] overlayfs: cannot append lower layer [ 30.680220][ T518] rust_binder: Failed copying into alloc: EFAULT [ 30.680246][ T518] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 30.694003][ T520] rust_binder: Error while translating object. [ 30.703482][ T518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.711083][ T518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:29 [ 30.712931][ T524] mmap: syz.2.68 (524) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.720881][ T520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.742628][ T520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 30.775688][ T481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.799240][ T481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.927318][ T534] rust_binder: Error in use_page_slow: ESRCH [ 30.927340][ T534] rust_binder: use_range failure ESRCH [ 30.936350][ T534] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 30.942035][ T534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 30.950245][ T534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:33 [ 30.962646][ T537] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 31.030335][ T543] rust_binder: Error in use_page_slow: ESRCH [ 31.030364][ T543] rust_binder: use_range failure ESRCH [ 31.043769][ T543] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 31.052390][ T543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 31.072290][ T543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:37 [ 31.093157][ T548] rust_binder: Write failure EFAULT in pid:52 [ 31.454116][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.472564][ T63] usb 4-1: 0:2 : does not exist [ 31.480115][ T63] usb 4-1: USB disconnect, device number 2 [ 31.487849][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.564208][ T329] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 31.614137][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 31.621415][ T10] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 31.630221][ T10] usb 1-1: config 0 has no interface number 0 [ 31.637973][ T10] usb 1-1: config 0 interface 72 has no altsetting 0 [ 31.646862][ T10] usb 1-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 31.656793][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.665131][ T10] usb 1-1: Product: syz [ 31.669318][ T10] usb 1-1: Manufacturer: syz [ 31.673964][ T10] usb 1-1: SerialNumber: syz [ 31.680020][ T10] usb 1-1: config 0 descriptor?? [ 31.715288][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 31.727299][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.741601][ T329] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 31.751307][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.760177][ T329] usb 2-1: config 0 descriptor?? [ 31.765576][ T563] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 32.007199][ T566] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.037834][ T571] 9pnet: Could not find request transport: xen [ 32.098274][ T576] overlay: ./bus is not a directory [ 32.182785][ T329] wacom 0003:056A:0020.0001: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 32.198039][ T329] wacom 0003:056A:0020.0001: hidraw0: USB HID v1.01 Device [HID 056a:0020] on usb-dummy_hcd.1-1/input0 [ 32.232723][ T329] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0020.0001/input/input4 [ 32.771108][ T599] overlay: Unknown parameter '' [ 32.776881][ T599] netlink: 'syz.2.95': attribute type 13 has an invalid length. [ 32.836714][ T609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 32.840625][ T45] rust_binder: 590: removing orphan mapping 0:4120 [ 32.967240][ T601] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 32.967267][ T601] rust_binder: Error while translating object. [ 32.977188][ T601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.983930][ T601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 32.994709][ T615] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 33.004232][ T615] rust_binder: Error while translating object. [ 33.016738][ T615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.023029][ T615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 33.062533][ T619] rust_binder: Error while translating object. [ 33.071967][ T619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.079292][ T619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:52 [ 34.070045][ T46] bridge_slave_1: left allmulticast mode [ 34.085762][ T46] bridge_slave_1: left promiscuous mode [ 34.091666][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.100049][ T46] bridge_slave_0: left allmulticast mode [ 34.106013][ T46] bridge_slave_0: left promiscuous mode [ 34.112121][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.220504][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 34.235615][ T10] usb 1-1: USB disconnect, device number 6 [ 34.246428][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 34.246445][ T36] audit: type=1400 audit(1756380434.190:223): avc: denied { mounton } for pid=645 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 34.275742][ T46] veth1_macvtap: left promiscuous mode [ 34.284393][ T46] veth0_vlan: left promiscuous mode [ 34.292430][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.72/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.304755][ T45] usb 2-1: USB disconnect, device number 4 [ 34.426699][ T36] audit: type=1400 audit(1756380434.380:224): avc: denied { mounton } for pid=646 comm="syz.1.111" path="/21/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 34.459572][ T36] audit: type=1400 audit(1756380434.380:225): avc: denied { mount } for pid=646 comm="syz.1.111" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.487867][ T36] audit: type=1400 audit(1756380434.410:226): avc: denied { read append } for pid=649 comm="syz.0.112" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.492258][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.523890][ T36] audit: type=1400 audit(1756380434.410:227): avc: denied { open } for pid=649 comm="syz.0.112" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.548255][ T645] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.555577][ T36] audit: type=1400 audit(1756380434.410:228): avc: denied { ioctl } for pid=649 comm="syz.0.112" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.555628][ T645] bridge_slave_0: entered allmulticast mode [ 34.581985][ T36] audit: type=1400 audit(1756380434.440:229): avc: denied { name_bind } for pid=656 comm="syz.2.114" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 34.587851][ T645] bridge_slave_0: entered promiscuous mode [ 34.615201][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.622827][ T645] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.631482][ T645] bridge_slave_1: entered allmulticast mode [ 34.637964][ T645] bridge_slave_1: entered promiscuous mode [ 34.674418][ T36] audit: type=1400 audit(1756380434.620:230): avc: denied { create } for pid=666 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.696758][ T36] audit: type=1400 audit(1756380434.620:231): avc: denied { write } for pid=666 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.755778][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.762840][ T645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.770417][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.777539][ T645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.817599][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.825749][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.837153][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.844331][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.857032][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.864326][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.896403][ T645] veth0_vlan: entered promiscuous mode [ 34.911920][ T645] veth1_macvtap: entered promiscuous mode [ 34.937052][ T36] audit: type=1400 audit(1756380434.890:232): avc: denied { unmount } for pid=645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.007404][ T689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 35.119864][ T700] rust_binder: Write failure EFAULT in pid:46 [ 35.149803][ T704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.156805][ T704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:50 [ 35.324144][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.494181][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 35.500807][ T10] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 35.512036][ T10] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 35.521406][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.564155][ T329] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.714324][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 35.720801][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.732531][ T329] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 35.739890][ T698] binder: Bad value for 'max' [ 35.742250][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.759178][ T329] usb 1-1: config 0 descriptor?? [ 35.761429][ T10] usb 4-1: string descriptor 0 read error: -71 [ 35.782293][ T10] hub 4-1:32.0: USB hub found [ 35.788647][ T10] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 35.815344][ T10] usb 4-1: USB disconnect, device number 3 [ 35.970203][ T329] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 35.987316][ T329] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 35.995318][ T329] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 36.002856][ T329] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 36.010366][ T329] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 36.022123][ T329] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 36.041561][ T329] koneplus 0003:1E7D:2D51.0002: couldn't init struct koneplus_device [ 36.050478][ T329] koneplus 0003:1E7D:2D51.0002: couldn't install mouse [ 36.059373][ T329] koneplus 0003:1E7D:2D51.0002: probe with driver koneplus failed with error -71 [ 36.071360][ T329] usb 1-1: USB disconnect, device number 7 [ 36.404146][ T329] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.524133][ T45] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 36.555537][ T329] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.564124][ T329] usb 1-1: config 176 has an invalid interface number: 218 but max is 0 [ 36.572928][ T329] usb 1-1: config 176 has no interface number 0 [ 36.579435][ T329] usb 1-1: config 176 interface 218 has no altsetting 0 [ 36.588396][ T329] usb 1-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00 [ 36.598021][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.606244][ T329] usb 1-1: Product: syz [ 36.610422][ T329] usb 1-1: Manufacturer: syz [ 36.615414][ T329] usb 1-1: SerialNumber: syz [ 36.664140][ T45] usb 4-1: device descriptor read/64, error -71 [ 36.857124][ T329] ipheth 1-1:176.218: Unable to find alternate settings interface [ 36.866686][ T329] usb 1-1: USB disconnect, device number 8 [ 36.904120][ T45] usb 4-1: device descriptor read/64, error -71 [ 37.144207][ T45] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 37.284176][ T45] usb 4-1: device descriptor read/64, error -71 [ 37.524104][ T45] usb 4-1: device descriptor read/64, error -71 [ 37.598474][ T764] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.598500][ T764] rust_binder: Read failure Err(EFAULT) in pid:66 [ 37.607053][ T764] rust_binder: Write failure EFAULT in pid:66 [ 37.644243][ T45] usb usb4-port1: attempt power cycle [ 37.924164][ T740] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 37.994119][ T45] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 38.015305][ T45] usb 4-1: device descriptor read/8, error -71 [ 38.074115][ T740] usb 1-1: Using ep0 maxpacket: 32 [ 38.081242][ T740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.092564][ T740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.102445][ T740] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 38.111793][ T740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.120630][ T740] usb 1-1: config 0 descriptor?? [ 38.145278][ T45] usb 4-1: device descriptor read/8, error -71 [ 38.384124][ T45] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 38.405301][ T45] usb 4-1: device descriptor read/8, error -71 [ 38.535242][ T45] usb 4-1: device descriptor read/8, error -71 [ 38.644185][ T45] usb usb4-port1: unable to enumerate USB device [ 38.675627][ T456] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 38.684468][ T740] usbhid 1-1:0.0: can't add hid device: -71 [ 38.697035][ T740] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.719210][ T740] usb 1-1: USB disconnect, device number 9 [ 38.744316][ T805] netlink: 'syz.2.166': attribute type 30 has an invalid length. [ 38.744318][ T806] netlink: 'syz.2.166': attribute type 30 has an invalid length. [ 38.829105][ T821] netlink: 72 bytes leftover after parsing attributes in process `syz.0.172'. [ 38.847655][ T456] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 38.864098][ T456] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 38.880003][ T456] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 38.893439][ T456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.925927][ T839] netlink: 104 bytes leftover after parsing attributes in process `syz.2.179'. [ 38.967195][ T846] netlink: 88 bytes leftover after parsing attributes in process `syz.2.182'. [ 39.066536][ T850] Zero length message leads to an empty skb [ 39.106419][ T854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.115758][ T854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.128621][ T456] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 39.141241][ T456] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7 [ 39.157510][ T456] usb 2-1: USB disconnect, device number 5 [ 39.214721][ T740] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 39.266135][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 39.266152][ T36] audit: type=1400 audit(1756380439.220:263): avc: denied { mount } for pid=873 comm="syz.2.191" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 39.294431][ T874] overlayfs: failed to clone upperpath [ 39.384177][ T740] usb 1-1: Using ep0 maxpacket: 32 [ 39.390806][ T740] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 39.399326][ T740] usb 1-1: config 0 has no interface number 0 [ 39.405728][ T740] usb 1-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 39.416113][ T740] usb 1-1: config 0 interface 214 has no altsetting 0 [ 39.417118][ T878] overlayfs: failed to clone upperpath [ 39.424627][ T740] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 39.438249][ T740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.447233][ T740] usb 1-1: Product: syz [ 39.451677][ T740] usb 1-1: Manufacturer: syz [ 39.456398][ T740] usb 1-1: SerialNumber: syz [ 39.461737][ T740] usb 1-1: config 0 descriptor?? [ 39.467196][ T835] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.514183][ T456] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.664141][ T456] usb 2-1: Using ep0 maxpacket: 16 [ 39.670722][ T456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.682515][ T456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.692834][ T456] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 39.702990][ T456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.712222][ T456] usb 2-1: config 0 descriptor?? [ 39.714104][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 39.739084][ T835] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.864115][ T31] usb 4-1: device descriptor read/64, error -71 [ 40.123969][ T456] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0003/input/input8 [ 40.129864][ T31] usb 4-1: device descriptor read/64, error -71 [ 40.143195][ T456] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0003/input/input9 [ 40.159578][ T456] kye 0003:0458:5012.0003: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 40.211796][ T36] audit: type=1400 audit(1756380440.160:264): avc: denied { setopt } for pid=881 comm="syz.2.193" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.374810][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.399014][ T45] usb 2-1: USB disconnect, device number 6 [ 40.534241][ T31] usb 4-1: device descriptor read/64, error -71 [ 40.774263][ T31] usb 4-1: device descriptor read/64, error -71 [ 40.884234][ T31] usb usb4-port1: attempt power cycle [ 40.941893][ T36] audit: type=1400 audit(1756380440.890:265): avc: denied { write } for pid=907 comm="syz.1.201" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 40.942000][ T908] random: crng reseeded on system resumption [ 40.966737][ T36] audit: type=1400 audit(1756380440.890:266): avc: denied { open } for pid=907 comm="syz.1.201" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 41.016841][ T915] overlayfs: failed to clone upperpath [ 41.022942][ T916] overlayfs: failed to clone upperpath [ 41.029379][ T915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 41.038618][ T916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 41.071788][ T925] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 41.080370][ T924] futex_wake_op: syz.2.205 tries to shift op by -1; fix this program [ 41.258569][ T36] audit: type=1400 audit(1756380441.210:267): avc: denied { connect } for pid=834 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.260339][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 41.281520][ T36] audit: type=1400 audit(1756380441.210:268): avc: denied { read } for pid=834 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.290801][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.309835][ T36] audit: type=1400 audit(1756380441.210:269): avc: denied { shutdown } for pid=834 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.318078][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 41.349384][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 41.360909][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 41.372020][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 41.383509][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 41.395373][ T31] usb 4-1: device descriptor read/8, error -71 [ 41.401904][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 41.413158][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 41.424531][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 41.436002][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 41.447710][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 41.459314][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 41.470755][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 41.482391][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 41.494174][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 41.505551][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 41.516965][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 41.528384][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 41.539741][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 41.551339][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 41.562902][ T31] usb 4-1: device descriptor read/8, error -71 [ 41.569519][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 41.580958][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 41.592084][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 41.603486][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 41.614889][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 41.626313][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 41.638274][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 41.645341][ T36] audit: type=1400 audit(1756380441.600:270): avc: denied { bpf } for pid=927 comm="syz.2.206" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.649963][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 41.682464][ T740] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 41.696143][ T740] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 0e:9f:5b:f8:60:08 [ 41.717457][ T740] usb 1-1: USB disconnect, device number 10 [ 41.724642][ T740] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 41.745391][ T36] audit: type=1400 audit(1756380441.690:271): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 41.785585][ T938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.209'. [ 41.796479][ T938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 41.814155][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 41.836092][ T31] usb 4-1: device descriptor read/8, error -71 [ 41.842921][ T36] audit: type=1400 audit(1756380441.790:272): avc: denied { read } for pid=939 comm="syz.2.211" path="socket:[5767]" dev="sockfs" ino=5767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.995595][ T31] usb 4-1: device descriptor read/8, error -71 [ 42.064000][ T948] rust_binder: Error in use_page_slow: ESRCH [ 42.064019][ T948] rust_binder: use_range failure ESRCH [ 42.070185][ T948] rust_binder: Failed to allocate buffer. len:4184, is_oneway:false [ 42.076246][ T948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 42.084601][ T948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:104 [ 42.108065][ T31] usb usb4-port1: unable to enumerate USB device [ 42.143027][ T951] syzkaller0: entered promiscuous mode [ 42.149002][ T951] syzkaller0: entered allmulticast mode [ 42.168072][ T956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'. [ 42.585990][ T977] SELinux: security_context_str_to_sid () failed with errno=-22 [ 43.420657][ T1008] 9pnet_fd: Insufficient options for proto=fd [ 44.406369][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 44.406384][ T36] audit: type=1400 audit(1756380444.286:278): avc: denied { execute } for pid=1035 comm="syz.3.245" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.445730][ T36] audit: type=1400 audit(1756380444.324:279): avc: denied { mount } for pid=1037 comm="syz.3.246" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 44.476835][ T1042] 9pnet_fd: Insufficient options for proto=fd [ 44.492604][ T1044] capability: warning: `syz.3.248' uses deprecated v2 capabilities in a way that may be insecure [ 44.689834][ T1048] futex_wake_op: syz.2.250 tries to shift op by -1; fix this program [ 44.698571][ T1048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 44.761322][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.814579][ T1050] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.814599][ T1050] rust_binder: Read failure Err(EFAULT) in pid:89 [ 44.832685][ T1053] rust_binder: Error while translating object. [ 44.839582][ T1053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 44.845777][ T1053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 44.867277][ T36] audit: type=1400 audit(1756380444.716:280): avc: denied { ioctl } for pid=1054 comm="syz.1.253" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.902133][ T1055] binder: Bad value for 'max' [ 44.924003][ T1059] TCP: TCP_TX_DELAY enabled [ 44.972206][ T1066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:123 [ 44.972245][ T1066] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.982280][ T1066] rust_binder: Read failure Err(EFAULT) in pid:123 [ 45.018935][ T36] audit: type=1400 audit(1756380444.866:281): avc: denied { write } for pid=1078 comm="syz.0.260" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.264500][ T36] audit: type=1400 audit(1756380445.100:282): avc: denied { getopt } for pid=1087 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.285248][ T1088] tmpfs: Invalid uid '0x00000000ffffffff' [ 45.340857][ T36] audit: type=1400 audit(1756380445.165:283): avc: denied { write } for pid=1093 comm="syz.2.265" name="file0" dev="tmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.489890][ T1121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8278 sclass=netlink_route_socket pid=1121 comm=syz.2.273 [ 45.925537][ T1123] netlink: 288 bytes leftover after parsing attributes in process `syz.1.274'. [ 46.204990][ T31] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 46.366552][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.377004][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.387204][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 46.396686][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.404738][ T31] usb 2-1: SerialNumber: syz [ 46.410962][ T31] usb 2-1: 0:2 : does not exist [ 46.894529][ T36] audit: type=1400 audit(1756380446.615:284): avc: denied { bind } for pid=1154 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.916267][ T1155] 9pnet_fd: Insufficient options for proto=fd [ 46.933365][ T36] audit: type=1400 audit(1756380446.662:285): avc: denied { create } for pid=1156 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 46.962495][ T36] audit: type=1400 audit(1756380446.662:286): avc: denied { setattr } for pid=1156 comm="syz.2.287" name="NETLINK" dev="sockfs" ino=6104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.006420][ T1127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.015511][ T1127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.049761][ T364] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 47.069474][ T1166] fuse: Unknown parameter 'use_id' [ 47.210171][ T364] usb 1-1: Using ep0 maxpacket: 8 [ 47.216908][ T364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.225690][ T364] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 47.233886][ T364] usb 1-1: config 0 has no interface number 0 [ 47.240103][ T364] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 47.251555][ T364] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 47.261872][ T364] usb 1-1: config 0 interface 88 has no altsetting 0 [ 47.270500][ T364] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 47.279775][ T364] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 47.288099][ T364] usb 1-1: Product: syz [ 47.292270][ T364] usb 1-1: Manufacturer: syz [ 47.297036][ T364] usb 1-1: SerialNumber: syz [ 47.302529][ T364] usb 1-1: config 0 descriptor?? [ 47.525766][ T1152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.535265][ T1152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.544292][ T1152] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 47.546400][ T1152] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 47.565736][ T364] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input11 [ 47.578974][ T364] usb 1-1: USB disconnect, device number 11 [ 47.890435][ T1169] netlink: 'syz.3.291': attribute type 28 has an invalid length. [ 48.206541][ T36] audit: type=1400 audit(1756380447.849:287): avc: denied { mounton } for pid=1178 comm="syz.0.294" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 48.206780][ T1179] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.238677][ T1179] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 48.247504][ T1179] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.255480][ T1179] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 49.058505][ T1200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 49.166547][ T63] usb 2-1: USB disconnect, device number 7 [ 49.202660][ T1220] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1220 comm=syz.1.308 [ 49.229160][ T1222] rust_binder: Write failure EFAULT in pid:115 [ 49.460399][ T1236] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.466790][ T1236] rust_binder: Read failure Err(EFAULT) in pid:178 [ 49.478716][ T63] rust_binder: 1235: removing orphan mapping 0:24 [ 49.858503][ T1252] SELinux: security_context_str_to_sid () failed with errno=-22 [ 49.887325][ T1256] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 49.887344][ T1256] rust_binder: Error while translating object. [ 49.900662][ T1256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.907250][ T1256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 49.926380][ T63] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 49.960576][ T1262] process 'syz.1.325' launched './file0' with NULL argv: empty string added [ 49.970113][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 49.970127][ T36] audit: type=1400 audit(1756380449.495:290): avc: denied { execute_no_trans } for pid=1261 comm="syz.1.325" path="/49/file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.061580][ T1276] pim6reg1: entered promiscuous mode [ 50.067067][ T1276] pim6reg1: entered allmulticast mode [ 50.097480][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 50.104088][ T63] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 50.114947][ T63] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 50.124582][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.133418][ T63] usb 1-1: Product: syz [ 50.138031][ T63] usb 1-1: Manufacturer: syz [ 50.143254][ T63] usb 1-1: SerialNumber: syz [ 50.148790][ T63] usb 1-1: config 0 descriptor?? [ 50.158427][ T63] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 50.167086][ T63] usb 1-1: Detected FT232R [ 50.194453][ T1281] netlink: 'syz.1.331': attribute type 46 has an invalid length. [ 50.203605][ T1282] rust_binder: 147: no such ref 0 [ 50.212872][ T1282] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 50.220494][ T1282] rust_binder: Failed to allocate buffer. len:18446744073709550816, is_oneway:false [ 50.220519][ T1282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 50.230264][ T1282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:147 [ 50.244382][ T1269] netlink: 1 bytes leftover after parsing attributes in process `syz.3.327'. [ 50.341195][ T36] audit: type=1400 audit(1756380449.841:291): avc: denied { bind } for pid=1288 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.374235][ T63] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 50.381812][ T63] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 50.390099][ T63] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 50.397902][ T63] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 50.409614][ T63] usb 1-1: USB disconnect, device number 12 [ 50.416665][ T63] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 50.426491][ T63] ftdi_sio 1-1:0.0: device disconnected [ 50.929293][ T1308] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 50.929310][ T1308] rust_binder: Error while translating object. [ 50.938420][ T1308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.944739][ T1308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 51.498371][ T364] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 51.521334][ T1338] tipc: Enabling of bearer rejected, failed to enable media [ 51.530863][ T1339] tipc: Enabling of bearer rejected, failed to enable media [ 51.648117][ T364] usb 2-1: device descriptor read/64, error -71 [ 51.904747][ T364] usb 2-1: device descriptor read/64, error -71 [ 52.161430][ T364] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 52.300427][ T364] usb 2-1: device descriptor read/64, error -71 [ 52.472882][ T1363] overlayfs: failed to clone upperpath [ 52.479189][ T1362] overlayfs: failed to clone upperpath [ 52.558042][ T364] usb 2-1: device descriptor read/64, error -71 [ 52.674799][ T364] usb usb2-port1: attempt power cycle [ 53.038324][ T364] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 53.060969][ T364] usb 2-1: device descriptor read/8, error -71 [ 53.141225][ T1388] fuse: Bad value for 'fd' [ 53.199854][ T364] usb 2-1: device descriptor read/8, error -71 [ 53.212138][ T1390] overlay: ./file1 is not a directory [ 53.218166][ T36] audit: type=1326 audit(1756380452.525:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.3.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a4d58ebe9 code=0x0 [ 53.455389][ T364] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 53.478119][ T364] usb 2-1: device descriptor read/8, error -71 [ 53.617085][ T364] usb 2-1: device descriptor read/8, error -71 [ 53.733507][ T364] usb usb2-port1: unable to enumerate USB device [ 54.074486][ T1407] 9pnet_fd: Insufficient options for proto=fd [ 54.579739][ T36] audit: type=1400 audit(1756380453.806:293): avc: denied { setopt } for pid=1422 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.695839][ T456] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.856215][ T456] usb 1-1: Using ep0 maxpacket: 16 [ 54.862885][ T456] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.866931][ T31] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 54.874091][ T456] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.892295][ T456] usb 1-1: config 0 interface 0 has no altsetting 0 [ 54.899196][ T456] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 54.908528][ T456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.917615][ T456] usb 1-1: config 0 descriptor?? [ 55.005720][ T36] audit: type=1400 audit(1756380454.199:294): avc: denied { map } for pid=1428 comm="syz.3.386" path="socket:[8781]" dev="sockfs" ino=8781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 55.005753][ T1429] mmap: syz.3.386 (1429): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 55.049875][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 55.062015][ T31] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 55.071438][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.081094][ T31] usb 2-1: config 0 descriptor?? [ 55.086584][ T1417] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 55.162182][ T36] audit: type=1400 audit(1756380454.348:295): avc: denied { getopt } for pid=1430 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.187441][ T1433] 9pnet_fd: Insufficient options for proto=fd [ 55.309833][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 55.317118][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 55.326993][ T31] usb 2-1: USB disconnect, device number 12 [ 55.581083][ T36] audit: type=1400 audit(1756380454.741:296): avc: denied { mount } for pid=1414 comm="syz.0.381" name="/" dev="ramfs" ino=8812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.878149][ T456] usbhid 1-1:0.0: can't add hid device: -71 [ 55.884543][ T456] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 55.894313][ T456] usb 1-1: USB disconnect, device number 13 [ 55.992853][ T36] audit: type=1400 audit(1756380455.124:297): avc: denied { read } for pid=1464 comm="syz.1.400" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.076220][ T36] audit: type=1400 audit(1756380455.209:298): avc: denied { ioctl } for pid=1468 comm="syz.1.402" path="socket:[8852]" dev="sockfs" ino=8852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.143019][ T36] audit: type=1400 audit(1756380455.265:299): avc: denied { map } for pid=1470 comm="syz.1.403" path="/proc/185/net" dev="proc" ino=8863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.165809][ T36] audit: type=1400 audit(1756380455.265:300): avc: denied { execute } for pid=1470 comm="syz.1.403" path="/proc/185/net" dev="proc" ino=8863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.196893][ T1473] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1473 comm=syz.1.404 [ 56.354892][ T36] audit: type=1400 audit(1756380455.470:301): avc: denied { ioctl } for pid=1477 comm="syz.2.407" path="socket:[8889]" dev="sockfs" ino=8889 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.394477][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.401874][ T1476] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.409146][ T1476] bridge_slave_0: entered allmulticast mode [ 56.415430][ T1476] bridge_slave_0: entered promiscuous mode [ 56.422349][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.429951][ T1476] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.437228][ T1476] bridge_slave_1: entered allmulticast mode [ 56.444138][ T1476] bridge_slave_1: entered promiscuous mode [ 56.545669][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.553032][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.560470][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.568054][ T1476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.603744][ T1521] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 56.604891][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.626762][ T1525] overlayfs: failed to clone upperpath [ 56.634789][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.658843][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.666365][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.683760][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.691657][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.725348][ T1538] netlink: 104 bytes leftover after parsing attributes in process `syz.2.427'. [ 56.730301][ T1476] veth0_vlan: entered promiscuous mode [ 56.750143][ T1476] veth1_macvtap: entered promiscuous mode [ 56.774321][ T36] audit: type=1400 audit(1756380455.854:302): avc: denied { mounton } for pid=1476 comm="syz-executor" path="/root/syzkaller.zIk5zZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.819577][ T1545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.430'. [ 56.848018][ T1548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 56.890959][ T36] audit: type=1400 audit(1756380455.966:303): avc: denied { map } for pid=1561 comm="syz.2.435" path="pipe:[1704]" dev="pipefs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 56.930860][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 56.969543][ T36] audit: type=1400 audit(1756380456.041:304): avc: denied { block_suspend } for pid=1561 comm="syz.2.435" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.092572][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.102854][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.112534][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 57.122574][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 57.131355][ T31] usb 1-1: SerialNumber: syz [ 57.355600][ T31] usb 1-1: 0:2 : does not exist [ 57.371807][ T31] usb 1-1: USB disconnect, device number 14 [ 57.424262][ T1600] 9pnet_fd: Insufficient options for proto=fd [ 57.572427][ T36] audit: type=1400 audit(1756380456.602:305): avc: denied { map } for pid=1601 comm="syz.3.449" path="socket:[9069]" dev="sockfs" ino=9069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.811210][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.819187][ T1617] Bluetooth: hci0: Frame reassembly failed (-90) [ 57.927960][ T1620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=1620 comm=syz.0.455 [ 58.693719][ T1631] fuse: Unknown parameter '017777777777777777777770x0000000000000005' [ 58.971915][ T1636] x_tables: unsorted entry at hook 2 [ 59.381291][ T1673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 59.398358][ T1676] netlink: 'syz.3.477': attribute type 28 has an invalid length. [ 59.406692][ T1675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.477'. [ 59.475943][ T364] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 59.614959][ T364] usb 1-1: device descriptor read/64, error -71 [ 59.871615][ T364] usb 1-1: device descriptor read/64, error -71 [ 59.961240][ T1679] tipc: Enabling of bearer rejected, failed to enable media [ 59.978536][ T1681] overlayfs: failed to clone upperpath [ 59.978890][ T1682] overlayfs: failed to clone upperpath [ 59.989624][ T981] Bluetooth: hci0: command 0x1003 tx timeout [ 59.995841][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.138973][ T364] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 60.277994][ T364] usb 1-1: device descriptor read/64, error -71 [ 60.337463][ T1698] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 60.347769][ T1698] SELinux: failed to load policy [ 60.521219][ T1705] overlayfs: failed to clone upperpath [ 60.545325][ T364] usb 1-1: device descriptor read/64, error -71 [ 60.569181][ T1707] overlayfs: failed to clone lowerpath [ 60.663041][ T364] usb usb1-port1: attempt power cycle [ 61.037235][ T364] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 61.059755][ T364] usb 1-1: device descriptor read/8, error -71 [ 61.198701][ T364] usb 1-1: device descriptor read/8, error -71 [ 61.282982][ T1726] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 61.292034][ T1726] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 61.403532][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 61.403548][ T36] audit: type=1326 audit(1756380460.183:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1727 comm="syz.1.496" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f589e38ebe9 code=0x0 [ 61.454333][ T364] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 61.477171][ T364] usb 1-1: device descriptor read/8, error -71 [ 61.563329][ T1731] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 61.626525][ T364] usb 1-1: device descriptor read/8, error -71 [ 61.743152][ T364] usb usb1-port1: unable to enumerate USB device [ 62.470562][ T1758] binder: Unknown parameter 'dont_appraise' [ 62.473716][ T36] audit: type=1400 audit(1756380461.184:315): avc: denied { mounton } for pid=1757 comm="syz.0.507" path="/83/file0" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 62.523667][ T1763] rust_binder: Failed copying into alloc: EFAULT [ 62.523691][ T1763] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 62.530548][ T1763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 62.539353][ T1763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:240 [ 62.550155][ T1764] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.683187][ T1775] netlink: 'syz.1.512': attribute type 4 has an invalid length. [ 62.701008][ T1779] overlayfs: failed to resolve './file1': -2 [ 62.716339][ T1778] overlayfs: failed to resolve './file1': -2 [ 62.727472][ T1775] overlay: ./file0 is not a directory [ 62.812373][ T36] audit: type=1326 audit(1756380461.502:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1785 comm="syz.2.515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f8c4f98ebe9 code=0x0 [ 62.913615][ T1800] 9pnet_virtio: no channels available for device syz [ 62.944060][ T1800] 9pnet: Could not find request transport: xen [ 63.035708][ T36] audit: type=1400 audit(1756380461.708:317): avc: denied { unlink } for pid=1806 comm="syz.1.523" name="#1" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.035863][ T1807] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 63.078303][ T1809] fuse: Bad value for 'rootmode' [ 63.083876][ T36] audit: type=1400 audit(1756380461.764:318): avc: denied { ioctl } for pid=1808 comm="syz.0.522" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 63.120058][ T36] audit: type=1400 audit(1756380461.792:319): avc: denied { unmount } for pid=1476 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 63.258784][ T1818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.400571][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 63.507496][ T63] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 63.571700][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 63.578200][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.588645][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 63.597706][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 63.607108][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.615888][ T31] usb 1-1: config 0 descriptor?? [ 63.679092][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 63.685511][ T63] usb 2-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 63.694837][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.703785][ T63] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 63.712742][ T63] usb 2-1: no configuration chosen from 1 choice [ 64.283879][ T36] audit: type=1400 audit(1756380462.877:320): avc: denied { create } for pid=1844 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 64.435562][ T36] audit: type=1400 audit(1756380463.017:321): avc: denied { accept } for pid=1879 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.588633][ T36] audit: type=1400 audit(1756380463.166:322): avc: denied { getopt } for pid=1814 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.613136][ T36] audit: type=1400 audit(1756380463.185:323): avc: denied { read } for pid=1814 comm="syz.0.533" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.106901][ T1910] devtmpfs: Unknown parameter 'fuse' [ 65.115833][ T1910] devtmpfs: Unknown parameter 'fuse' [ 65.121435][ T1910] devtmpfs: Unknown parameter 'fuse' [ 66.278324][ T1946] overlayfs: failed to clone upperpath [ 66.368728][ T31] usb 1-1: USB disconnect, device number 19 [ 66.480703][ T10] usb 2-1: USB disconnect, device number 13 [ 66.492390][ T1965] netlink: 124 bytes leftover after parsing attributes in process `syz.0.580'. [ 66.534306][ T1973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.630310][ T1986] overlayfs: failed to resolve './file0': -2 [ 66.982981][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 67.154076][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 67.160669][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.171400][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 67.180873][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 67.190177][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.199744][ T10] usb 2-1: config 0 descriptor?? [ 67.496317][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 67.617811][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 67.617828][ T36] audit: type=1400 audit(1756380466.000:328): avc: denied { accept } for pid=2004 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.656694][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 67.663247][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 67.672619][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.684696][ T10] usb 1-1: config 0 descriptor?? [ 67.692647][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 67.787199][ T2011] 9pnet_fd: Insufficient options for proto=fd [ 67.864378][ T2019] tipc: Enabling of bearer rejected, failed to enable media [ 67.891836][ T36] audit: type=1400 audit(1756380466.243:329): avc: denied { create } for pid=2022 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.911842][ T10] usb 1-1: Detected FT232B [ 68.127561][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 68.370477][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 68.384343][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 68.396281][ T10] usb 1-1: USB disconnect, device number 20 [ 68.403631][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 68.414337][ T10] ftdi_sio 1-1:0.0: device disconnected [ 68.513210][ T2040] rust_binder: Failed copying into alloc: EFAULT [ 68.513234][ T2040] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 68.519767][ T2040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 68.528286][ T2040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:275 [ 68.644106][ T36] audit: type=1400 audit(1756380466.954:330): avc: denied { open } for pid=2042 comm="syz.0.608" path="/97/bus/file2" dev="overlay" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.677517][ T36] audit: type=1400 audit(1756380466.963:331): avc: denied { ioctl } for pid=2042 comm="syz.0.608" path="/97/bus/file2" dev="overlay" ino=543 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.982729][ T10] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 69.099013][ T2063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 69.154975][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.166525][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.176556][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.190282][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 69.199734][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 69.208225][ T10] usb 1-1: SerialNumber: syz [ 69.213319][ T10] usb 1-1: config 0 descriptor?? [ 69.651667][ T36] audit: type=1400 audit(1756380467.898:332): avc: denied { mount } for pid=2044 comm="syz.0.609" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.674311][ T36] audit: type=1400 audit(1756380467.898:333): avc: denied { remount } for pid=2044 comm="syz.0.609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.709255][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 69.718920][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 69.728033][ T10] usb 1-1: USB disconnect, device number 21 [ 69.871731][ T63] usb 2-1: USB disconnect, device number 14 [ 69.925634][ T2078] syz.2.621 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.023273][ T2088] overlayfs: failed to clone upperpath [ 70.048902][ T2096] GUP no longer grows the stack in syz.3.628 (2096): 200000005000-200000008000 (200000004000) [ 70.059814][ T2096] CPU: 0 UID: 0 PID: 2096 Comm: syz.3.628 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 70.059852][ T2096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.059872][ T2096] Call Trace: [ 70.059878][ T2096] [ 70.059886][ T2096] __dump_stack+0x21/0x30 [ 70.059929][ T2096] dump_stack_lvl+0x10c/0x190 [ 70.059957][ T2096] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.059983][ T2096] ? futex_lock_pi_atomic+0xdd/0xc70 [ 70.060010][ T2096] dump_stack+0x19/0x20 [ 70.060048][ T2096] fixup_user_fault+0x63d/0x6d0 [ 70.060074][ T2096] fault_in_user_writeable+0x76/0xe0 [ 70.060095][ T2096] futex_lock_pi+0x258/0xa10 [ 70.060117][ T2096] ? futex_unqueue+0x136/0x160 [ 70.060137][ T2096] ? __cfi_futex_lock_pi+0x10/0x10 [ 70.060162][ T2096] ? __cfi_futex_wake_mark+0x10/0x10 [ 70.060186][ T2096] ? futex_setup_timer+0xb4/0xd0 [ 70.060205][ T2096] ? __cfi_futex_wake_mark+0x10/0x10 [ 70.060228][ T2096] ? __kasan_check_write+0x18/0x20 [ 70.060261][ T2096] do_futex+0x25c/0x500 [ 70.060278][ T2096] ? __cfi_do_futex+0x10/0x10 [ 70.060299][ T2096] __se_sys_futex+0x28f/0x300 [ 70.060319][ T2096] ? __x64_sys_futex+0x110/0x110 [ 70.060340][ T2096] ? __kasan_check_write+0x18/0x20 [ 70.060367][ T2096] __x64_sys_futex+0xe9/0x110 [ 70.060387][ T2096] x64_sys_call+0x227f/0x2ee0 [ 70.060420][ T2096] do_syscall_64+0x58/0xf0 [ 70.060456][ T2096] ? clear_bhb_loop+0x50/0xa0 [ 70.060478][ T2096] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.060499][ T2096] RIP: 0033:0x7f6a4d58ebe9 [ 70.060520][ T2096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.060538][ T2096] RSP: 002b:00007f6a4e33b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 70.060564][ T2096] RAX: ffffffffffffffda RBX: 00007f6a4d7b5fa0 RCX: 00007f6a4d58ebe9 [ 70.060580][ T2096] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 70.060594][ T2096] RBP: 00007f6a4d611e19 R08: 0000000000000000 R09: 0000000000000001 [ 70.060608][ T2096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.060622][ T2096] R13: 00007f6a4d7b6038 R14: 00007f6a4d7b5fa0 R15: 00007fff77acc458 [ 70.060640][ T2096] [ 70.118859][ T2097] netlink: 388 bytes leftover after parsing attributes in process `syz.3.628'. [ 70.287364][ T36] audit: type=1400 audit(1756380468.487:334): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.341341][ T2101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 70.374897][ T36] audit: type=1400 audit(1756380468.581:335): avc: denied { read } for pid=2103 comm="syz.1.631" path="socket:[12494]" dev="sockfs" ino=12494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.579584][ T36] audit: type=1326 audit(1756380468.768:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2116 comm="syz.2.636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c4f98ebe9 code=0x0 [ 70.680385][ T36] audit: type=1400 audit(1756380468.861:337): avc: denied { getopt } for pid=2123 comm="syz.2.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.700089][ T31] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 70.866027][ T31] usb 2-1: No LPM exit latency info found, disabling LPM. [ 70.874538][ T31] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 70.884754][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.982453][ T364] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 71.142873][ T364] usb 1-1: Using ep0 maxpacket: 16 [ 71.149491][ T364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.160127][ T364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.170685][ T364] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.180240][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.188291][ T364] usb 1-1: Product: syz [ 71.192557][ T364] usb 1-1: Manufacturer: syz [ 71.197799][ T364] usb 1-1: SerialNumber: syz [ 71.284704][ T2135] netlink: 'syz.2.641': attribute type 4 has an invalid length. [ 71.292447][ T2135] netlink: 'syz.2.641': attribute type 21 has an invalid length. [ 71.300366][ T2135] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.641'. [ 71.439372][ T364] usb 1-1: 0:2 : does not exist [ 71.451453][ T364] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 71.466015][ T364] usb 1-1: USB disconnect, device number 22 [ 71.488448][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.521473][ T2147] rust_binder: Error while translating object. [ 71.521514][ T2147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 71.527948][ T2147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:298 [ 71.631660][ T2152] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 71.655620][ T2152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:303 [ 71.876814][ T2158] fuseblk: Unknown parameter ': ^fcw$;8!]^E1 ˗A/fL `Q' [ 71.987672][ T364] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 72.148069][ T364] usb 1-1: Using ep0 maxpacket: 8 [ 72.155206][ T364] usb 1-1: config 1 interface 0 altsetting 25 bulk endpoint 0x1 has invalid maxpacket 16 [ 72.165593][ T364] usb 1-1: config 1 interface 0 altsetting 25 bulk endpoint 0x82 has invalid maxpacket 1023 [ 72.176259][ T364] usb 1-1: config 1 interface 0 has no altsetting 0 [ 72.184987][ T364] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 72.194596][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.202809][ T364] usb 1-1: Product: 瑓䕗‾옔ᐠ㩩쎊袍Б૕ꨦ銫䮱ὲﵙ牟뽷햔㲊璘Ì蠤귰索㑈摁艘仢㫻疺浘஠敱Ḭ⟛⹙컒늤㛛氐칓鱔㖏䶞Ð역缸맫粪늄ʼ箩⽧⢈뢱㣰ﾂ蔢ꭱƠ뤭搱⩲伬ᦙ㘉믾荁鶠㒣䇿磑 [ 72.228978][ T364] usb 1-1: Manufacturer: 《 [ 72.234105][ T364] usb 1-1: SerialNumber: ы [ 72.239734][ T2156] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.246999][ T2156] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.472663][ T364] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 25 proto 1 vid 0x0525 pid 0xA4A8 [ 72.486839][ T364] usb 1-1: USB disconnect, device number 23 [ 72.495301][ T364] usblp0: removed [ 73.129344][ T2227] overlayfs: failed to clone lowerpath [ 73.361611][ T2283] overlayfs: failed to clone upperpath [ 73.593101][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.613052][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.625753][ T31] usb 2-1: can't set config #1, error -71 [ 73.634945][ T31] usb 2-1: USB disconnect, device number 15 [ 73.671844][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 73.671861][ T36] audit: type=1400 audit(1756380471.657:342): avc: denied { create } for pid=2290 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.698596][ T2291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.698'. [ 73.761295][ T2297] 9pnet_fd: p9_fd_create_unix (2297): problem connecting socket: ./file0: -111 [ 73.889739][ T36] audit: type=1400 audit(1756380471.854:343): avc: denied { setopt } for pid=2305 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.009615][ T36] audit: type=1400 audit(1756380471.975:344): avc: denied { bind } for pid=2317 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.029741][ T36] audit: type=1400 audit(1756380471.975:345): avc: denied { name_bind } for pid=2317 comm="syz.1.708" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 74.051807][ T36] audit: type=1400 audit(1756380471.975:346): avc: denied { node_bind } for pid=2317 comm="syz.1.708" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 74.125209][ T2335] netlink: 'syz.1.712': attribute type 25 has an invalid length. [ 74.137728][ T2335] rust_binder: Error while translating object. [ 74.137753][ T2335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 74.143964][ T2335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:135 [ 74.207078][ T36] audit: type=1400 audit(1756380472.153:347): avc: denied { setattr } for pid=2338 comm="syz.1.714" name="" dev="pipefs" ino=12909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 74.502799][ T2351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 74.512124][ T36] audit: type=1400 audit(1756380472.452:348): avc: denied { bind } for pid=2350 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.648277][ T2367] SELinux: Context system_u:object_r:sshd_var_run_t:s0 is not valid (left unmapped). [ 74.658783][ T36] audit: type=1400 audit(1756380472.583:349): avc: denied { relabelto } for pid=2366 comm="syz.2.725" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sshd_var_run_t:s0" [ 74.688574][ T36] audit: type=1400 audit(1756380472.583:350): avc: denied { associate } for pid=2366 comm="syz.2.725" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=23 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sshd_var_run_t:s0" [ 74.898892][ T2376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:148 [ 74.916557][ T2382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.937873][ T2382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.009524][ T2391] cgroup: fork rejected by pids controller in /syz3 [ 75.464392][ T2539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.739'. [ 75.780159][ T36] audit: type=1400 audit(1756380473.630:351): avc: denied { shutdown } for pid=2541 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.190354][ T63] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 76.243856][ T981] Bluetooth: hci0: command 0x1003 tx timeout [ 76.243858][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.350772][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 76.357246][ T63] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.367921][ T63] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 76.379397][ T2562] rust_binder: Write failure EINVAL in pid:323 [ 76.379824][ T2564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.383071][ T63] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 76.402012][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.411569][ T63] usb 2-1: Product: syz [ 76.416434][ T63] usb 2-1: Manufacturer: syz [ 76.421250][ T63] usb 2-1: SerialNumber: syz [ 76.427395][ T63] usb 2-1: config 0 descriptor?? [ 76.509741][ T2585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 76.661519][ T63] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 76.672113][ T63] asix 2-1:0.0: probe with driver asix failed with error -71 [ 76.680878][ T63] usb 2-1: USB disconnect, device number 16 [ 76.735750][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 76.897357][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.912083][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 76.921221][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 76.929509][ T9] usb 1-1: Product: syz [ 76.933664][ T9] usb 1-1: Manufacturer: syz [ 76.938269][ T9] usb 1-1: SerialNumber: syz [ 77.160159][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 77.174451][ T2623] ip6gre0: entered allmulticast mode [ 77.361738][ T2649] 9pnet_fd: Insufficient options for proto=fd [ 77.644683][ T63] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 77.816888][ T63] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 77.831729][ T63] usb 2-1: config 0 has no interface number 0 [ 77.849297][ T63] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 77.865285][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.884282][ T63] usb 2-1: Product: syz [ 77.891949][ T63] usb 2-1: Manufacturer: syz [ 77.899387][ T63] usb 2-1: SerialNumber: syz [ 77.910051][ T63] usb 2-1: config 0 descriptor?? [ 77.963009][ T9] usb 1-1: USB disconnect, device number 24 [ 77.975235][ T9] usblp0: removed [ 78.013048][ T2654] rust_binder: Fixups oob 164 166 363 196 [ 78.013097][ T2654] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 78.019327][ T2654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.027975][ T2654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:330 [ 78.137309][ T63] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 78.155980][ T63] usb 2-1: No valid video chain found. [ 78.176511][ T63] usb 2-1: USB disconnect, device number 17 [ 78.692738][ T63] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 78.853137][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 78.859991][ T63] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.872114][ T63] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.887378][ T63] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.898641][ T63] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.908110][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.916373][ T63] usb 1-1: Product: syz [ 78.920685][ T63] usb 1-1: Manufacturer: syz [ 78.925293][ T63] usb 1-1: SerialNumber: syz [ 78.994002][ T2698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.115502][ T2707] overlayfs: failed to clone upperpath [ 79.146351][ T2680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.167686][ T2680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.195063][ T63] usb 1-1: skipping empty audio interface (v1) [ 79.210767][ T63] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 79.222483][ T63] usb 1-1: USB disconnect, device number 25 [ 79.237314][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.283938][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 79.283955][ T36] audit: type=1400 audit(1756380476.903:357): avc: denied { map } for pid=2738 comm="syz.3.810" path="socket:[14446]" dev="sockfs" ino=14446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 79.333409][ T2741] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 79.355769][ T36] audit: type=1400 audit(1756380476.969:358): avc: denied { nlmsg_write } for pid=2742 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 79.395361][ T2750] fuse: Invalid rootmode [ 79.765517][ T2752] netlink: 80 bytes leftover after parsing attributes in process `syz.0.815'. [ 79.821444][ T2758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.817'. [ 79.867937][ T36] audit: type=1400 audit(1756380477.446:359): avc: denied { relabelto } for pid=2765 comm="syz.2.820" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 79.897456][ T36] audit: type=1400 audit(1756380477.446:360): avc: denied { associate } for pid=2765 comm="syz.2.820" name=6D656D66643A2F2E2F2F5C2602272A2A dev="tmpfs" ino=29 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 80.093684][ T63] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 80.255766][ T63] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 80.267322][ T63] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.276890][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.284908][ T63] usb 1-1: Product: щ [ 80.289250][ T63] usb 1-1: Manufacturer: 㐉 [ 80.293870][ T63] usb 1-1: SerialNumber: ਂ [ 80.474131][ T2773] overlayfs: failed to clone upperpath [ 80.492976][ T36] audit: type=1400 audit(1756380478.035:361): avc: denied { mount } for pid=2774 comm="syz.2.824" name="/" dev="configfs" ino=1366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 80.516920][ T36] audit: type=1400 audit(1756380478.054:362): avc: denied { write } for pid=2761 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.537237][ T36] audit: type=1400 audit(1756380478.054:363): avc: denied { getopt } for pid=2761 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.557252][ T36] audit: type=1400 audit(1756380478.054:364): avc: denied { search } for pid=2774 comm="syz.2.824" name="/" dev="configfs" ino=1366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.579953][ T36] audit: type=1400 audit(1756380478.054:365): avc: denied { read } for pid=2774 comm="syz.2.824" name="/" dev="configfs" ino=1366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.602702][ T36] audit: type=1400 audit(1756380478.054:366): avc: denied { open } for pid=2774 comm="syz.2.824" path="/" dev="configfs" ino=1366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.055658][ T63] cdc_ncm 1-1:1.0: bind() failure [ 81.076906][ T63] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 81.093137][ T63] cdc_ncm 1-1:1.1: bind() failure [ 81.104770][ T63] usb 1-1: USB disconnect, device number 26 [ 81.124713][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.124743][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.131869][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.138567][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.145346][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.152010][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.158818][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.165567][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.172300][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.179537][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.186505][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.186504][ T2844] rust_binder: 359: no such ref 0 [ 81.186523][ T2844] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 81.193184][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.217243][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.224183][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.231748][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.248543][ T2844] rust_binder: Failed to allocate buffer. len:18446744073709550816, is_oneway:false [ 81.248570][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.254993][ T2844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 81.255017][ T2844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:359 [ 81.280780][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.290208][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.297195][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.303674][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.310260][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.316811][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.323257][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.329952][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.336532][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.343141][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.349844][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.356483][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.363002][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.369578][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.380529][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.387186][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.395327][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.402455][ T2846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.845'. [ 81.417903][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.417928][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.430298][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.436934][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.444510][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.450988][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.457674][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.464726][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.471171][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.477828][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.484532][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.492549][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.499207][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.506230][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.512778][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.519638][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.526131][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.532596][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.539118][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.546013][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.552708][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.559579][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.566201][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.573111][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.579727][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.586268][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.593083][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.599670][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.606129][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.612711][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.619454][ T2842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.664501][ T2873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.671077][ T2873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 82.029212][ T63] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 82.120037][ T2901] fuse: Bad value for 'fd' [ 82.120037][ T2900] fuse: Bad value for 'fd' [ 82.155143][ T2903] overlayfs: failed to clone upperpath [ 82.200267][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 82.206609][ T63] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x2 has an invalid bInterval 253, changing to 11 [ 82.218149][ T63] usb 1-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 82.231352][ T63] usb 1-1: config 1 interface 0 has no altsetting 0 [ 82.245661][ T63] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 82.254968][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.262988][ T63] usb 1-1: Product: ᐌ [ 82.267275][ T63] usb 1-1: Manufacturer: ည [ 82.271980][ T63] usb 1-1: SerialNumber: syz [ 82.276740][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 82.302650][ T2916] raw_sendmsg: syz.3.873 forgot to set AF_INET. Fix it! [ 82.344341][ T2928] tmpfs: Bad value for 'nr_blocks' [ 82.388158][ T2933] netlink: 'syz.3.878': attribute type 21 has an invalid length. [ 82.396102][ T2933] netlink: 388 bytes leftover after parsing attributes in process `syz.3.878'. [ 82.405247][ T2934] netlink: 'syz.3.878': attribute type 21 has an invalid length. [ 82.414030][ T2934] netlink: 388 bytes leftover after parsing attributes in process `syz.3.878'. [ 82.446213][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 82.452600][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 82.463282][ T10] usb 2-1: config 0 has no interface number 0 [ 82.470142][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 82.479713][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 82.489347][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.497434][ T10] usb 2-1: Product: syz [ 82.501732][ T10] usb 2-1: Manufacturer: syz [ 82.513597][ T2944] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 82.513875][ T10] usb 2-1: SerialNumber: syz [ 82.531743][ T10] usb 2-1: config 0 descriptor?? [ 82.539630][ T10] smsc75xx v1.0.0 [ 82.807590][ T2973] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 82.879099][ T63] usbhid 1-1:1.0: can't add hid device: -71 [ 82.893202][ T63] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 82.902398][ T63] usb 1-1: USB disconnect, device number 27 [ 83.497659][ T2997] fuse: Bad value for 'fd' [ 83.609749][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 83.633214][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 83.772272][ T31] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 83.933865][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 83.950981][ T31] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 83.963991][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.973651][ T31] usb 1-1: config 0 descriptor?? [ 83.982986][ T2997] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.211295][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 84.217366][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 84.227637][ T31] usb 1-1: USB disconnect, device number 28 [ 84.285753][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 84.298083][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 84.307857][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 84.317480][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 84.327238][ T10] usb 2-1: USB disconnect, device number 18 [ 84.839638][ T3030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.839663][ T3030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 84.891399][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.902272][ T3042] rust_binder: inc_ref_done called when no active inc_refs [ 84.909215][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.922454][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.929160][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.935623][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.942608][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.949186][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.955784][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.962515][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.969181][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.976539][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.983034][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.989472][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.995997][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.002711][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.009380][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.015963][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.022569][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.029312][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.035903][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.043291][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.049840][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.056400][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.063109][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.069778][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.076432][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.083100][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.089860][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.104049][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.110840][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.117536][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.119708][ T3051] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.124104][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.164488][ T3056] pim6reg1: entered promiscuous mode [ 85.176414][ T3056] pim6reg1: entered allmulticast mode [ 85.209237][ T3063] netlink: 'syz.1.926': attribute type 16 has an invalid length. [ 85.217210][ T3063] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.926'. [ 85.230387][ T36] kauditd_printk_skb: 680 callbacks suppressed [ 85.230404][ T36] audit: type=1400 audit(1756380482.467:1047): avc: denied { append } for pid=3062 comm="syz.1.926" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.272845][ T36] audit: type=1400 audit(1756380482.495:1048): avc: denied { getattr } for pid=3062 comm="syz.1.926" path="cgroup:[4026532297]" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.332310][ T3075] 9pnet_fd: Insufficient options for proto=fd [ 85.502872][ T3089] rust_binder: Error while translating object. [ 85.502915][ T3089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.509485][ T3089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 85.569313][ T2977] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 85.741053][ T2977] usb 1-1: config 4 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.752355][ T2977] usb 1-1: config 4 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.762240][ T2977] usb 1-1: config 4 interface 0 has no altsetting 0 [ 85.769302][ T2977] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 85.779240][ T2977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.816546][ T3096] rust_binder: Failed copying remainder into alloc: EFAULT [ 85.816566][ T3096] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 85.823871][ T3096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 85.832486][ T3096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:239 [ 85.962306][ T3107] tmpfs: Invalid uid '0x00000000ffffffff' [ 86.074330][ T3129] 9pnet_fd: Insufficient options for proto=fd [ 86.095530][ T3133] fuse: Bad value for 'group_id' [ 86.100588][ T3133] fuse: Bad value for 'group_id' [ 86.132617][ T3139] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 86.221396][ T2977] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0 [ 86.229012][ T2977] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x3 [ 86.251919][ T2977] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x3 [ 86.259759][ T2977] holtek_mouse 0003:04D9:A067.0004: item fetching failed at offset 4/8 [ 86.268859][ T2977] holtek_mouse 0003:04D9:A067.0004: hid parse failed: -22 [ 86.279207][ T2977] holtek_mouse 0003:04D9:A067.0004: probe with driver holtek_mouse failed with error -22 [ 86.290408][ T36] audit: type=1400 audit(1756380483.462:1049): avc: denied { read } for pid=3145 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.340893][ T36] audit: type=1400 audit(1756380483.508:1050): avc: denied { append } for pid=3152 comm="syz.1.962" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.689887][ T36] audit: type=1400 audit(1756380483.826:1051): avc: denied { getopt } for pid=3171 comm="syz.1.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.744544][ T3182] rust_binder: Error while translating object. [ 86.744589][ T3182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 86.745524][ T3180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.760886][ T3182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:286 [ 86.801230][ T390] usb 1-1: USB disconnect, device number 29 [ 86.873484][ T36] audit: type=1400 audit(1756380483.995:1052): avc: denied { read write } for pid=3197 comm="syz.0.977" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.944288][ T36] audit: type=1400 audit(1756380483.995:1053): avc: denied { open } for pid=3197 comm="syz.0.977" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.968797][ T36] audit: type=1400 audit(1756380484.041:1054): avc: denied { ioctl } for pid=3197 comm="syz.0.977" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.998192][ T3221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:423 [ 87.004084][ T3223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 87.032007][ T3225] rust_binder: 425: no such ref 0 [ 87.039152][ T3225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:425 [ 87.039195][ T3225] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 87.049046][ T3225] rust_binder: Read failure Err(EFAULT) in pid:425 [ 87.061848][ T3231] 9pnet_fd: Insufficient options for proto=fd [ 87.105750][ T3240] rust_binder: Write failure EFAULT in pid:432 [ 87.214625][ T3259] serio: Serial port ptm0 [ 87.242790][ T3263] No source specified [ 87.247633][ T3263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.997'. [ 87.260057][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.267056][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.286704][ T3266] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 87.286727][ T3266] rust_binder: Error while translating object. [ 87.295570][ T3266] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.301810][ T3266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:452 [ 87.562057][ T3286] netlink: 'syz.0.1002': attribute type 46 has an invalid length. [ 87.643277][ T3292] capability: warning: `syz.2.1008' uses 32-bit capabilities (legacy support in use) [ 88.073757][ T3295] overlayfs: failed to clone upperpath [ 88.702514][ T390] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 88.864076][ T390] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.878968][ T390] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 88.888119][ T390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 88.896247][ T390] usb 1-1: Product: syz [ 88.900591][ T390] usb 1-1: Manufacturer: syz [ 88.905382][ T390] usb 1-1: SerialNumber: syz [ 89.128228][ T390] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 89.419041][ T981] Bluetooth: hci0: command 0x1003 tx timeout [ 89.419329][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.485871][ T3299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.515642][ T3299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.541717][ T740] usb 1-1: USB disconnect, device number 30 [ 89.557067][ T740] usblp0: removed [ 89.696280][ T36] audit: type=1400 audit(1756380486.641:1055): avc: denied { create } for pid=3347 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 89.810900][ T3364] tmpfs: Unknown parameter 'hNjyinMM3_size' [ 89.864670][ T36] audit: type=1400 audit(1756380486.800:1056): avc: denied { setopt } for pid=3370 comm="syz.2.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.970305][ T3383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.097782][ T3402] tipc: Enabling of bearer rejected, failed to enable media [ 90.193602][ T3423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3423 comm=syz.2.1053 [ 90.260074][ T3428] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 235) [ 90.260103][ T3428] rust_binder: Error while translating object. [ 90.270911][ T3428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.278560][ T3428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478 [ 90.332066][ T3434] input: syz1 as /devices/virtual/input/input15 [ 90.352954][ T3434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1058'. [ 90.362934][ T3434] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 90.362961][ T3434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 90.371542][ T3434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:484 [ 90.664467][ T1476] ------------[ cut here ]------------ [ 90.679342][ T1476] WARNING: CPU: 0 PID: 1476 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 90.689127][ T1476] Modules linked in: [ 90.693191][ T1476] CPU: 0 UID: 0 PID: 1476 Comm: syz-executor Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 90.705356][ T1476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.715647][ T1476] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 90.721355][ T1476] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 90.740998][ T1476] RSP: 0018:ffffc90004cffb68 EFLAGS: 00010293 [ 90.747114][ T1476] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff88813837cc00 [ 90.755144][ T1476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.763244][ T1476] RBP: ffffc90004cffb90 R08: ffff88813c96c45f R09: 1ffff1102792d88b [ 90.771427][ T1476] R10: dffffc0000000000 R11: ffffed102792d88c R12: 0000000000000000 [ 90.779793][ T1476] R13: dffffc0000000000 R14: ffff88813c96c3c0 R15: ffff8881130ea660 [ 90.787780][ T1476] FS: 000055555769a500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 90.796781][ T1476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.803406][ T1476] CR2: 00005555576b54a8 CR3: 0000000102ffa000 CR4: 00000000003526b0 [ 90.811512][ T1476] Call Trace: [ 90.814880][ T1476] [ 90.817820][ T1476] ovl_do_remove+0x7b8/0xcf0 [ 90.822540][ T1476] ? ovl_set_redirect+0x780/0x780 [ 90.827772][ T1476] ? down_write+0xe9/0x2a0 [ 90.832247][ T1476] ? __cfi_down_write+0x10/0x10 [ 90.837245][ T1476] ovl_rmdir+0x1e/0x30 [ 90.841330][ T1476] vfs_rmdir+0x3e0/0x560 [ 90.845615][ T1476] incfs_kill_sb+0x109/0x230 [ 90.850328][ T1476] deactivate_locked_super+0xd5/0x2a0 [ 90.855740][ T1476] deactivate_super+0xb8/0xe0 [ 90.860430][ T1476] cleanup_mnt+0x3f1/0x480 [ 90.864906][ T1476] __cleanup_mnt+0x1d/0x40 [ 90.869419][ T1476] task_work_run+0x1e3/0x250 [ 90.874214][ T1476] ? __cfi_task_work_run+0x10/0x10 [ 90.879390][ T1476] ? __x64_sys_umount+0x126/0x170 [ 90.884470][ T1476] ? __cfi___x64_sys_umount+0x10/0x10 [ 90.890089][ T1476] ? __kasan_check_read+0x15/0x20 [ 90.895366][ T1476] resume_user_mode_work+0x36/0x50 [ 90.900579][ T1476] syscall_exit_to_user_mode+0x64/0xb0 [ 90.906082][ T1476] do_syscall_64+0x64/0xf0 [ 90.910578][ T1476] ? clear_bhb_loop+0x50/0xa0 [ 90.915275][ T1476] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.921302][ T1476] RIP: 0033:0x7f589e38ff17 [ 90.925842][ T1476] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 90.945770][ T1476] RSP: 002b:00007ffc5dd7ecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 90.954436][ T1476] RAX: 0000000000000000 RBX: 00007f589e411c05 RCX: 00007f589e38ff17 [ 90.962920][ T1476] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5dd7edb0 [ 90.970996][ T1476] RBP: 00007ffc5dd7edb0 R08: 0000000000000000 R09: 0000000000000000 [ 90.979169][ T1476] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5dd7fe40 [ 90.987438][ T1476] R13: 00007f589e411c05 R14: 0000000000015395 R15: 00007ffc5dd7fe80 [ 90.995526][ T1476] [ 90.998574][ T1476] ---[ end trace 0000000000000000 ]--- [ 91.004807][ T1476] ------------[ cut here ]------------ [ 91.010309][ T1476] WARNING: CPU: 1 PID: 1476 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 91.019754][ T1476] Modules linked in: [ 91.023691][ T1476] CPU: 1 UID: 0 PID: 1476 Comm: syz-executor Tainted: G W syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 91.036934][ T1476] Tainted: [W]=WARN [ 91.040744][ T1476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.051195][ T1476] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 91.057330][ T1476] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 91.077574][ T1476] RSP: 0018:ffffc90004cffb68 EFLAGS: 00010293 [ 91.083740][ T1476] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff88813837cc00 [ 91.092018][ T1476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.100115][ T1476] RBP: ffffc90004cffb90 R08: ffff88813c96c45f R09: 1ffff1102792d88b [ 91.108176][ T1476] R10: dffffc0000000000 R11: ffffed102792d88c R12: 0000000000000000 [ 91.116459][ T1476] R13: dffffc0000000000 R14: ffff88813c96c3c0 R15: ffff8881130ea660 [ 91.124588][ T1476] FS: 000055555769a500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 91.133848][ T1476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.140728][ T1476] CR2: 00007f8c4fb84198 CR3: 0000000102ffa000 CR4: 00000000003526b0 [ 91.148990][ T1476] Call Trace: [ 91.152394][ T1476] [ 91.155415][ T1476] ovl_do_remove+0x7b8/0xcf0 [ 91.160107][ T1476] ? ovl_set_redirect+0x780/0x780 [ 91.165161][ T1476] ? down_write+0xe9/0x2a0 [ 91.169675][ T1476] ? __cfi_down_write+0x10/0x10 [ 91.174779][ T1476] ovl_rmdir+0x1e/0x30 [ 91.179049][ T1476] vfs_rmdir+0x3e0/0x560 [ 91.183761][ T1476] incfs_kill_sb+0x1a0/0x230 [ 91.188464][ T1476] deactivate_locked_super+0xd5/0x2a0 [ 91.193858][ T1476] deactivate_super+0xb8/0xe0 [ 91.198778][ T1476] cleanup_mnt+0x3f1/0x480 [ 91.203325][ T1476] __cleanup_mnt+0x1d/0x40 [ 91.207791][ T1476] task_work_run+0x1e3/0x250 [ 91.212503][ T1476] ? __cfi_task_work_run+0x10/0x10 [ 91.217847][ T1476] ? __x64_sys_umount+0x126/0x170 [ 91.223015][ T1476] ? __cfi___x64_sys_umount+0x10/0x10 [ 91.228426][ T1476] ? __kasan_check_read+0x15/0x20 [ 91.233552][ T1476] resume_user_mode_work+0x36/0x50 [ 91.238695][ T1476] syscall_exit_to_user_mode+0x64/0xb0 [ 91.244252][ T1476] do_syscall_64+0x64/0xf0 [ 91.248819][ T1476] ? clear_bhb_loop+0x50/0xa0 [ 91.253629][ T1476] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.259689][ T1476] RIP: 0033:0x7f589e38ff17 [ 91.264213][ T1476] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 91.284419][ T1476] RSP: 002b:00007ffc5dd7ecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 91.293166][ T1476] RAX: 0000000000000000 RBX: 00007f589e411c05 RCX: 00007f589e38ff17 [ 91.301626][ T1476] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5dd7edb0 [ 91.309694][ T1476] RBP: 00007ffc5dd7edb0 R08: 0000000000000000 R09: 0000000000000000 [ 91.317747][ T1476] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5dd7fe40 [ 91.325966][ T1476] R13: 00007f589e411c05 R14: 0000000000015395 R15: 00007ffc5dd7fe80 [ 91.334012][ T1476] [ 91.337216][ T1476] ---[ end trace 0000000000000000 ]---